Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/08EF647D2439353922204F65B46993477E686A9D733C958F71AC1332B72080AC/0/323830333a3739303a383030303a3a2f33362d3634203d3e20323733313134.roa
File:                     323830333a3739303a383030303a3a2f33362d3634203d3e20323733313134.roa (raw, json)
Hash identifier:          xP3vZz8Ta9JtK95By3efH+7rspAbcqOjYm2p3TF8qE0=
Subject key identifier:   1B:F1:78:FF:2A:3D:AC:E9:DF:43:D1:3F:AD:29:0C:34:B3:EC:FA:4F
Certificate issuer:       /CN=9CBAEFDC63E74F3F1826B3BBA5DFB41D44A97BAA
Certificate serial:       196DC16F73636C826FD41C6549896BF271BC0D5F
Authority key identifier: 9C:BA:EF:DC:63:E7:4F:3F:18:26:B3:BB:A5:DF:B4:1D:44:A9:7B:AA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9CBAEFDC63E74F3F1826B3BBA5DFB41D44A97BAA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/08EF647D2439353922204F65B46993477E686A9D733C958F71AC1332B72080AC/0/323830333a3739303a383030303a3a2f33362d3634203d3e20323733313134.roa
Signing time:             Tue 04 Feb 2025 18:30:09 +0000
ROA not before:           Tue 04 Feb 2025 18:25:09 +0000
ROA not after:            Tue 03 Feb 2026 18:30:09 +0000
asID:                     273114
IP address blocks:        2803:790:8000::/36 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/08EF647D2439353922204F65B46993477E686A9D733C958F71AC1332B72080AC/0/9CBAEFDC63E74F3F1826B3BBA5DFB41D44A97BAA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/08EF647D2439353922204F65B46993477E686A9D733C958F71AC1332B72080AC/0/9CBAEFDC63E74F3F1826B3BBA5DFB41D44A97BAA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9CBAEFDC63E74F3F1826B3BBA5DFB41D44A97BAA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:6d:c1:6f:73:63:6c:82:6f:d4:1c:65:49:89:6b:f2:71:bc:0d:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CBAEFDC63E74F3F1826B3BBA5DFB41D44A97BAA
        Validity
            Not Before: Feb  4 18:25:09 2025 GMT
            Not After : Feb  3 18:30:09 2026 GMT
        Subject: CN=1BF178FF2A3DACE9DF43D13FAD290C34B3ECFA4F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:14:6e:b3:fe:59:81:26:22:75:77:dc:e3:a4:
                    2a:d7:e0:b9:28:98:9b:ad:37:c2:ad:1a:2a:5d:fd:
                    f7:c8:09:0c:62:20:8b:c9:91:c8:aa:bb:ac:1e:ef:
                    3b:3f:68:90:27:56:a1:ba:97:6e:16:66:90:63:8b:
                    c6:d4:a8:4e:e1:dd:8a:0a:fe:52:9e:ac:84:c7:da:
                    5c:9e:87:03:9d:d8:34:98:56:c5:0f:6d:41:eb:c6:
                    e8:09:bf:61:c1:fc:eb:40:a3:3c:77:65:b3:fc:4e:
                    6f:c9:d1:2f:21:9d:c8:5c:c0:84:4c:62:81:7c:ec:
                    4c:91:1d:12:b9:19:bc:99:7f:24:7f:fd:82:b8:99:
                    13:67:dc:e2:a5:b2:32:f0:24:96:d7:5b:3d:81:56:
                    f9:31:cd:0c:2b:cf:b5:6d:ef:d2:86:42:37:f0:ba:
                    65:17:e1:44:d0:be:f8:9f:22:8e:08:a4:ab:01:40:
                    89:07:af:0c:55:70:f1:c8:b4:a0:76:93:1e:eb:aa:
                    28:d0:79:b6:72:e4:9f:8a:fd:75:e6:5c:69:cb:9c:
                    67:44:53:f1:99:35:a9:0a:e9:7b:ad:9a:02:b1:94:
                    b1:e4:9c:fc:2d:50:62:54:8a:63:fc:77:09:86:87:
                    ea:5f:00:c7:b5:cc:cc:9c:89:3d:07:ab:d6:5e:9b:
                    12:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:F1:78:FF:2A:3D:AC:E9:DF:43:D1:3F:AD:29:0C:34:B3:EC:FA:4F
            X509v3 Authority Key Identifier:
                keyid:9C:BA:EF:DC:63:E7:4F:3F:18:26:B3:BB:A5:DF:B4:1D:44:A9:7B:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/08EF647D2439353922204F65B46993477E686A9D733C958F71AC1332B72080AC/0/9CBAEFDC63E74F3F1826B3BBA5DFB41D44A97BAA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9CBAEFDC63E74F3F1826B3BBA5DFB41D44A97BAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/08EF647D2439353922204F65B46993477E686A9D733C958F71AC1332B72080AC/0/323830333a3739303a383030303a3a2f33362d3634203d3e20323733313134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:790:8000::/36

    Signature Algorithm: sha256WithRSAEncryption
         28:b2:d7:06:a8:c1:49:6e:48:f1:ba:34:89:4f:6d:5a:39:2b:
         81:80:e1:98:ba:4c:17:ae:b8:4f:47:e8:2f:e0:71:19:86:7d:
         e5:36:0c:a7:29:af:76:8d:68:ad:b7:7f:5d:86:2a:2f:18:10:
         6e:df:c3:b7:8b:16:09:b8:6c:61:05:c3:31:f6:49:d4:ad:e4:
         ac:a4:b0:b4:50:09:fd:3e:ad:74:26:a1:6d:a0:34:48:83:97:
         32:5c:4f:19:4f:83:1c:8c:3c:f7:ed:27:84:b7:90:a5:d8:6f:
         09:f5:30:33:7e:64:b5:82:b5:53:65:d7:87:e7:6e:88:af:02:
         85:7e:68:0a:a9:31:78:dc:91:64:ea:f6:77:6e:ec:80:e2:d2:
         b8:97:53:23:ac:b7:b0:81:07:96:0b:90:96:ee:2e:5a:62:b9:
         8d:75:06:55:75:61:d5:b8:32:6e:dc:90:86:c5:f3:08:97:81:
         95:4c:4f:b1:1f:03:cc:92:b4:2b:6c:73:a2:d6:2a:d5:f9:c8:
         f0:7f:5d:09:ef:24:51:f3:13:a4:e4:5d:e5:df:04:46:52:5b:
         63:ca:b9:bc:08:b6:65:e8:46:38:1c:45:cf:b3:43:bd:f0:91:
         9e:9c:fc:29:d9:19:e5:9e:33:1f:9a:79:08:8b:35:97:45:08:
         f8:8e:8f:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 00:07:14 2025 by rpki-client