Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/08EF647D2439353922204F65B46993477E686A9D733C958F71AC1332B72080AC/0/323830333a3739303a353030303a3a2f33362d3634203d3e20323733313134.roa
File:                     323830333a3739303a353030303a3a2f33362d3634203d3e20323733313134.roa (raw, json)
Hash identifier:          12+YXDm+9FoxPxZ+nf/yC8NLBainMKh36u4wyxH0lL4=
Subject key identifier:   F1:90:62:BC:63:8B:E5:13:31:C7:DE:C5:B8:BF:D7:F5:9A:E7:96:88
Certificate issuer:       /CN=9CBAEFDC63E74F3F1826B3BBA5DFB41D44A97BAA
Certificate serial:       3875859712CCB60144A263C63E0FEC114C31DD86
Authority key identifier: 9C:BA:EF:DC:63:E7:4F:3F:18:26:B3:BB:A5:DF:B4:1D:44:A9:7B:AA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9CBAEFDC63E74F3F1826B3BBA5DFB41D44A97BAA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/08EF647D2439353922204F65B46993477E686A9D733C958F71AC1332B72080AC/0/323830333a3739303a353030303a3a2f33362d3634203d3e20323733313134.roa
Signing time:             Tue 04 Feb 2025 18:30:07 +0000
ROA not before:           Tue 04 Feb 2025 18:25:07 +0000
ROA not after:            Tue 03 Feb 2026 18:30:07 +0000
asID:                     273114
IP address blocks:        2803:790:5000::/36 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/08EF647D2439353922204F65B46993477E686A9D733C958F71AC1332B72080AC/0/9CBAEFDC63E74F3F1826B3BBA5DFB41D44A97BAA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/08EF647D2439353922204F65B46993477E686A9D733C958F71AC1332B72080AC/0/9CBAEFDC63E74F3F1826B3BBA5DFB41D44A97BAA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9CBAEFDC63E74F3F1826B3BBA5DFB41D44A97BAA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:75:85:97:12:cc:b6:01:44:a2:63:c6:3e:0f:ec:11:4c:31:dd:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CBAEFDC63E74F3F1826B3BBA5DFB41D44A97BAA
        Validity
            Not Before: Feb  4 18:25:07 2025 GMT
            Not After : Feb  3 18:30:07 2026 GMT
        Subject: CN=F19062BC638BE51331C7DEC5B8BFD7F59AE79688
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:43:7e:db:3e:20:38:cd:70:f2:04:01:13:6f:
                    6e:02:f2:66:56:6c:0e:68:cf:0e:85:67:be:a0:00:
                    d7:ab:f9:7a:d4:de:16:3a:90:40:1f:35:62:0e:d0:
                    8c:a3:58:36:85:bf:cd:71:77:15:b7:ea:96:f6:61:
                    26:74:7f:21:03:5a:40:9d:65:1e:f1:31:cb:62:6a:
                    18:ee:05:1a:93:9d:a7:f7:16:20:dc:9d:22:9b:d8:
                    0d:f4:32:5b:b9:04:2e:c8:48:77:19:81:3a:10:b9:
                    5a:28:ae:e6:8b:e1:d1:84:a5:f7:f4:bd:07:c1:fe:
                    7b:c3:50:24:12:95:e8:6c:26:38:bc:59:f5:2e:29:
                    45:11:0f:28:ab:f3:3d:d9:ef:cf:6a:72:e9:fa:25:
                    f4:3d:f3:ec:79:30:6a:74:3d:19:fa:b7:3f:a2:58:
                    5e:1d:bc:55:aa:81:6e:9f:11:5f:b2:e0:9f:44:99:
                    dc:03:ba:8a:c6:42:e6:b4:95:20:17:80:77:7e:30:
                    54:93:af:e7:e3:a0:98:09:0e:8d:12:80:59:65:d1:
                    d3:c4:79:1e:6e:48:2b:b7:ec:b5:68:c4:e6:a2:31:
                    e9:f0:c9:6f:17:4f:a6:a8:4e:f1:2f:7b:6b:bc:1c:
                    a9:67:4d:01:d8:ad:e4:96:1a:7f:a4:35:3a:46:00:
                    46:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:90:62:BC:63:8B:E5:13:31:C7:DE:C5:B8:BF:D7:F5:9A:E7:96:88
            X509v3 Authority Key Identifier:
                keyid:9C:BA:EF:DC:63:E7:4F:3F:18:26:B3:BB:A5:DF:B4:1D:44:A9:7B:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/08EF647D2439353922204F65B46993477E686A9D733C958F71AC1332B72080AC/0/9CBAEFDC63E74F3F1826B3BBA5DFB41D44A97BAA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9CBAEFDC63E74F3F1826B3BBA5DFB41D44A97BAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/08EF647D2439353922204F65B46993477E686A9D733C958F71AC1332B72080AC/0/323830333a3739303a353030303a3a2f33362d3634203d3e20323733313134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:790:5000::/36

    Signature Algorithm: sha256WithRSAEncryption
         1f:49:b6:f7:7c:69:8c:57:9c:23:41:c8:4d:6e:76:fc:1b:ab:
         45:b8:01:d6:49:5c:f5:91:07:d6:6e:9a:52:88:46:18:de:ea:
         a4:9f:b7:bc:bc:50:e9:e1:3a:f6:0c:68:72:f4:dc:0d:b4:33:
         89:3c:f4:d1:1f:fc:36:e7:f7:10:38:bb:a5:f7:f1:9f:4a:35:
         38:69:0e:97:40:b1:ed:cf:6d:97:f0:4c:11:f4:d5:18:c8:e2:
         70:3a:f2:94:39:95:ff:78:0e:d6:d4:88:5f:d7:db:7e:36:88:
         a7:c0:a9:89:31:72:89:c0:76:cb:70:cb:da:67:2a:3e:6f:68:
         0c:36:e7:44:04:80:32:63:74:8a:ed:ff:39:43:92:78:49:3b:
         91:5f:31:e4:f9:d3:0d:79:21:c4:9a:d6:e0:66:0f:57:2b:fb:
         86:58:1f:9b:46:88:2e:fe:bd:7e:7e:4f:13:ac:f4:f7:9c:9d:
         9d:a3:2c:eb:04:f0:72:4d:09:8c:86:a0:3a:8c:89:9c:be:1e:
         a2:e9:60:d4:a5:39:de:1c:a5:f4:66:73:75:3f:e3:5c:ba:66:
         10:25:0e:0a:b7:7f:cb:6d:33:d6:72:e6:9a:2b:62:b0:77:01:
         43:25:5e:e2:d5:f1:0d:4b:c5:98:ed:c9:13:12:2c:b0:43:14:
         45:87:a8:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 14:45:27 2025 by rpki-client