Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/08EF647D2439353922204F65B46993477E686A9D733C958F71AC1332B72080AC/0/323830333a3739303a3a2f33362d3634203d3e20323733313134.roa
File:                     323830333a3739303a3a2f33362d3634203d3e20323733313134.roa (raw, json)
Hash identifier:          2+EPp5c2qvpOoY2WslC7hfBNkRzDthuTKTCkWvpTUIQ=
Subject key identifier:   59:4E:09:BC:20:6E:92:1B:5E:72:F1:46:77:B6:19:DD:5C:B5:F2:5F
Certificate issuer:       /CN=9CBAEFDC63E74F3F1826B3BBA5DFB41D44A97BAA
Certificate serial:       4BF615438BD976D50ACA9FD305A25B950452F88B
Authority key identifier: 9C:BA:EF:DC:63:E7:4F:3F:18:26:B3:BB:A5:DF:B4:1D:44:A9:7B:AA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9CBAEFDC63E74F3F1826B3BBA5DFB41D44A97BAA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/08EF647D2439353922204F65B46993477E686A9D733C958F71AC1332B72080AC/0/323830333a3739303a3a2f33362d3634203d3e20323733313134.roa
Signing time:             Tue 04 Feb 2025 18:30:08 +0000
ROA not before:           Tue 04 Feb 2025 18:25:08 +0000
ROA not after:            Tue 03 Feb 2026 18:30:08 +0000
asID:                     273114
IP address blocks:        2803:790::/36 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/08EF647D2439353922204F65B46993477E686A9D733C958F71AC1332B72080AC/0/9CBAEFDC63E74F3F1826B3BBA5DFB41D44A97BAA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/08EF647D2439353922204F65B46993477E686A9D733C958F71AC1332B72080AC/0/9CBAEFDC63E74F3F1826B3BBA5DFB41D44A97BAA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9CBAEFDC63E74F3F1826B3BBA5DFB41D44A97BAA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:f6:15:43:8b:d9:76:d5:0a:ca:9f:d3:05:a2:5b:95:04:52:f8:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CBAEFDC63E74F3F1826B3BBA5DFB41D44A97BAA
        Validity
            Not Before: Feb  4 18:25:08 2025 GMT
            Not After : Feb  3 18:30:08 2026 GMT
        Subject: CN=594E09BC206E921B5E72F14677B619DD5CB5F25F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:71:d3:e6:2d:ca:6d:2b:ed:78:fc:6e:1e:3d:
                    e8:f4:0d:a5:82:12:f3:9c:0a:3d:24:2e:7a:1b:c6:
                    6f:71:21:cb:84:db:7e:96:9d:50:1e:34:d3:d6:98:
                    18:36:0c:38:a4:40:49:c9:62:fc:6a:da:2f:37:b9:
                    fd:59:5d:6a:84:72:bb:88:fc:68:6b:ed:1a:a0:3a:
                    1d:dd:c3:01:54:76:50:4a:2b:28:be:bd:0e:30:79:
                    c1:b0:8c:ae:ad:69:89:18:73:77:5d:5b:b4:03:fc:
                    ec:e1:a6:8e:97:0a:42:a5:60:f7:77:e1:03:9d:7c:
                    7f:7f:98:dd:1f:cd:30:6f:46:46:05:6b:f8:c7:1a:
                    29:db:89:b2:b5:bb:f2:e1:3f:44:5a:87:dc:98:1a:
                    2e:b2:d3:86:a8:1f:37:b1:96:0e:02:82:17:96:ef:
                    81:b8:a8:1f:0a:13:fc:1f:75:86:c5:b2:a8:72:61:
                    63:0a:c2:41:80:29:a3:02:77:8b:5d:31:3f:cb:10:
                    c6:e6:24:90:a4:05:ae:35:49:71:a4:6f:61:b7:bc:
                    00:8c:5c:3c:ff:59:7e:12:43:69:aa:f5:3b:36:65:
                    70:ec:56:e9:d7:2b:61:8d:d2:89:e6:aa:db:f1:a5:
                    ac:12:29:cc:bc:72:f5:67:b8:4c:6d:b2:90:e7:a9:
                    b8:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:4E:09:BC:20:6E:92:1B:5E:72:F1:46:77:B6:19:DD:5C:B5:F2:5F
            X509v3 Authority Key Identifier:
                keyid:9C:BA:EF:DC:63:E7:4F:3F:18:26:B3:BB:A5:DF:B4:1D:44:A9:7B:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/08EF647D2439353922204F65B46993477E686A9D733C958F71AC1332B72080AC/0/9CBAEFDC63E74F3F1826B3BBA5DFB41D44A97BAA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9CBAEFDC63E74F3F1826B3BBA5DFB41D44A97BAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/08EF647D2439353922204F65B46993477E686A9D733C958F71AC1332B72080AC/0/323830333a3739303a3a2f33362d3634203d3e20323733313134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:790::/36

    Signature Algorithm: sha256WithRSAEncryption
         db:38:77:42:05:fe:c5:a6:d8:6b:ba:c0:f6:38:c5:e8:e3:6f:
         11:ca:8f:f8:df:39:de:61:13:13:34:bd:9c:fe:28:0c:18:8d:
         eb:47:20:d4:60:83:54:bf:e4:14:a1:7d:05:b4:cb:8f:7c:02:
         65:a3:e9:a4:91:60:97:af:dd:11:9a:43:d4:45:45:89:67:4d:
         5d:5d:76:ba:1e:40:60:f0:a6:86:de:1c:48:48:4a:d7:f3:0f:
         76:d5:df:26:e2:c6:1c:c9:f3:0c:b6:cb:db:fc:9e:8c:d9:7c:
         79:82:02:7e:ab:47:3d:c8:3d:bf:f5:fd:0c:89:d9:63:41:02:
         0a:3b:de:1a:03:6d:dd:1a:29:d4:a5:a2:9f:1e:22:fc:cf:b8:
         93:a1:a9:f2:be:36:a2:a4:df:c4:f4:5e:81:41:69:f7:9c:aa:
         80:fd:63:2c:d7:6c:4c:73:76:ef:19:2c:19:9c:7a:5a:90:af:
         74:c1:9d:fe:ec:95:f6:1b:6e:92:d4:e6:3d:8d:40:12:7d:7b:
         f6:cb:1b:00:5d:a5:ad:03:c6:1f:3f:bd:77:24:c4:ff:6e:4f:
         b0:8f:36:ca:41:81:2a:9f:f4:82:92:48:57:9d:2a:c5:fc:56:
         a6:c8:98:18:0f:d8:c2:ac:ca:60:79:5f:65:23:7d:be:2b:dd:
         5d:2c:58:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 03:20:56 2025 by rpki-client