Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/08EF647D2439353922204F65B46993477E686A9D733C958F71AC1332B72080AC/0/323830333a3739303a373030303a3a2f33362d3634203d3e20323733313134.roa
File:                     323830333a3739303a373030303a3a2f33362d3634203d3e20323733313134.roa (raw, json)
Hash identifier:          8UW7u8EVzALT/QcFxnSeB4luKAJ4ARKLzxt098HJKj0=
Subject key identifier:   AE:2A:3F:C6:2E:71:9D:0C:8E:E2:21:D7:C6:34:B7:58:12:96:68:FD
Certificate issuer:       /CN=9CBAEFDC63E74F3F1826B3BBA5DFB41D44A97BAA
Certificate serial:       525BFBE750763305B1279F9901A7FB8BA45C5CC7
Authority key identifier: 9C:BA:EF:DC:63:E7:4F:3F:18:26:B3:BB:A5:DF:B4:1D:44:A9:7B:AA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9CBAEFDC63E74F3F1826B3BBA5DFB41D44A97BAA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/08EF647D2439353922204F65B46993477E686A9D733C958F71AC1332B72080AC/0/323830333a3739303a373030303a3a2f33362d3634203d3e20323733313134.roa
Signing time:             Tue 04 Feb 2025 18:30:09 +0000
ROA not before:           Tue 04 Feb 2025 18:25:09 +0000
ROA not after:            Tue 03 Feb 2026 18:30:09 +0000
asID:                     273114
IP address blocks:        2803:790:7000::/36 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/08EF647D2439353922204F65B46993477E686A9D733C958F71AC1332B72080AC/0/9CBAEFDC63E74F3F1826B3BBA5DFB41D44A97BAA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/08EF647D2439353922204F65B46993477E686A9D733C958F71AC1332B72080AC/0/9CBAEFDC63E74F3F1826B3BBA5DFB41D44A97BAA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9CBAEFDC63E74F3F1826B3BBA5DFB41D44A97BAA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:5b:fb:e7:50:76:33:05:b1:27:9f:99:01:a7:fb:8b:a4:5c:5c:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CBAEFDC63E74F3F1826B3BBA5DFB41D44A97BAA
        Validity
            Not Before: Feb  4 18:25:09 2025 GMT
            Not After : Feb  3 18:30:09 2026 GMT
        Subject: CN=AE2A3FC62E719D0C8EE221D7C634B758129668FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:cf:84:56:0d:09:86:8f:b9:16:99:37:30:6d:
                    ed:17:07:af:1d:75:03:35:86:94:ff:d2:8d:a2:35:
                    79:6d:f5:42:0e:3b:42:d6:e4:f4:4b:5a:d4:04:d8:
                    82:eb:b4:88:bd:d2:e2:c5:61:e8:ad:61:83:7c:75:
                    f5:52:00:83:3b:61:83:7b:2b:a1:b0:b0:be:5b:98:
                    a8:71:7d:a8:c4:1c:b1:f9:20:dc:26:c1:71:22:57:
                    3f:17:4f:21:aa:1d:95:7e:68:8d:22:6a:62:4e:8f:
                    ac:c9:c9:9b:21:86:21:ee:c1:93:3a:4a:a9:6e:81:
                    8d:f8:7e:a1:9e:13:46:78:fc:c3:7c:c3:ec:b1:ba:
                    64:31:76:ff:3c:89:5d:d7:ed:76:00:fa:8f:21:b6:
                    8f:16:54:27:c3:43:1f:bb:ef:6b:63:a8:14:9c:9b:
                    94:fb:ee:31:0e:dc:86:b9:12:8d:63:e6:41:1d:e8:
                    b4:3a:9b:eb:e5:8c:05:9d:58:e1:d2:0c:ee:2f:64:
                    58:bb:3e:b7:78:31:6a:0c:c2:79:e6:70:cf:e9:5e:
                    09:37:d7:fb:29:e6:f0:92:ee:70:2b:71:f1:95:a4:
                    0b:94:84:86:88:d7:ff:74:bb:46:f6:3b:0d:9d:5b:
                    57:5f:48:6c:5f:41:de:3a:91:68:76:a5:84:44:b1:
                    44:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:2A:3F:C6:2E:71:9D:0C:8E:E2:21:D7:C6:34:B7:58:12:96:68:FD
            X509v3 Authority Key Identifier:
                keyid:9C:BA:EF:DC:63:E7:4F:3F:18:26:B3:BB:A5:DF:B4:1D:44:A9:7B:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/08EF647D2439353922204F65B46993477E686A9D733C958F71AC1332B72080AC/0/9CBAEFDC63E74F3F1826B3BBA5DFB41D44A97BAA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9CBAEFDC63E74F3F1826B3BBA5DFB41D44A97BAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/08EF647D2439353922204F65B46993477E686A9D733C958F71AC1332B72080AC/0/323830333a3739303a373030303a3a2f33362d3634203d3e20323733313134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:790:7000::/36

    Signature Algorithm: sha256WithRSAEncryption
         be:96:79:10:27:d4:98:3f:a1:21:32:c2:1c:46:d1:6a:b8:86:
         b1:18:ec:25:73:8d:e9:46:b9:a8:35:81:89:fb:aa:f7:79:d8:
         6c:4c:2f:00:91:ce:4b:cc:7d:d3:c3:ec:7e:f3:87:c9:ae:4d:
         21:d2:b0:31:1b:da:8c:8a:9e:a9:28:48:5f:00:a6:e6:04:99:
         9a:af:d0:03:ba:8b:e9:64:ae:0e:de:11:72:f8:77:68:23:c8:
         7a:7f:fa:98:d7:4d:4a:06:05:fd:04:21:cc:de:26:01:4e:6d:
         89:22:6b:ac:73:f7:2a:a3:00:13:a2:e6:ef:ce:a6:a8:3c:b9:
         43:3f:f4:8e:9d:9d:0c:34:f4:3b:7e:70:24:50:07:93:23:5f:
         71:1f:69:e3:c1:be:f9:a2:28:60:44:84:36:39:7c:31:52:87:
         77:91:76:df:71:67:22:d0:98:e0:b0:92:df:12:36:5b:0c:08:
         e6:04:d1:ae:1b:89:58:99:a2:67:e0:30:b0:84:df:33:7f:82:
         92:56:dd:c6:bc:ab:ec:02:89:68:43:98:a0:d0:d6:9b:0f:a5:
         a1:06:8c:27:30:fd:c7:19:72:9a:da:f7:4c:28:1c:ad:09:b1:
         ea:ef:2c:01:10:d2:32:2c:d7:60:21:ed:93:a9:23:b3:a4:02:
         0d:23:dc:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 14:47:26 2025 by rpki-client