Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0B7093FC2E6776D1257B2529C57A27EB68C700B2032E52F44023E172B5E81F8C/0/323830333a623139303a3a2f34302d3430203d3e20323732393339.roa
File:                     323830333a623139303a3a2f34302d3430203d3e20323732393339.roa (raw, json)
Hash identifier:          KbDYwwctE4BrpS5bqGSxGvqKVAHpADSiYxSQYvn5xZc=
Subject key identifier:   09:93:F8:43:78:4D:42:68:95:DB:60:C1:9D:AD:C2:24:11:D6:A2:B4
Certificate issuer:       /CN=E5B3F4032FD68EC9C05FADBA437C3459E3C7A2A8
Certificate serial:       0A98A63B2B70966A875759450CDC682C2DCAAC22
Authority key identifier: E5:B3:F4:03:2F:D6:8E:C9:C0:5F:AD:BA:43:7C:34:59:E3:C7:A2:A8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5B3F4032FD68EC9C05FADBA437C3459E3C7A2A8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0B7093FC2E6776D1257B2529C57A27EB68C700B2032E52F44023E172B5E81F8C/0/323830333a623139303a3a2f34302d3430203d3e20323732393339.roa
Signing time:             Tue 04 Feb 2025 18:14:18 +0000
ROA not before:           Tue 04 Feb 2025 18:09:18 +0000
ROA not after:            Tue 03 Feb 2026 18:14:18 +0000
asID:                     272939
IP address blocks:        2803:b190::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0B7093FC2E6776D1257B2529C57A27EB68C700B2032E52F44023E172B5E81F8C/0/E5B3F4032FD68EC9C05FADBA437C3459E3C7A2A8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0B7093FC2E6776D1257B2529C57A27EB68C700B2032E52F44023E172B5E81F8C/0/E5B3F4032FD68EC9C05FADBA437C3459E3C7A2A8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5B3F4032FD68EC9C05FADBA437C3459E3C7A2A8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:98:a6:3b:2b:70:96:6a:87:57:59:45:0c:dc:68:2c:2d:ca:ac:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5B3F4032FD68EC9C05FADBA437C3459E3C7A2A8
        Validity
            Not Before: Feb  4 18:09:18 2025 GMT
            Not After : Feb  3 18:14:18 2026 GMT
        Subject: CN=0993F843784D426895DB60C19DADC22411D6A2B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:e0:ad:f6:f2:15:1f:c4:63:11:c0:5b:64:a6:
                    05:45:c6:59:28:31:07:9a:4e:bb:2b:10:5d:91:58:
                    44:ae:a1:b3:42:95:59:6a:00:a4:53:7b:0a:c6:5a:
                    a2:ae:1c:74:21:81:ab:2e:dc:49:dd:8e:ca:89:e9:
                    30:6c:b9:93:9a:c2:e0:6e:f7:02:88:75:37:ad:5b:
                    3e:b1:ae:76:a1:28:44:f5:e4:73:97:ed:c8:ac:fa:
                    0c:4e:ba:91:fa:22:15:98:47:1b:93:c0:5f:1f:4e:
                    45:81:eb:d1:cb:12:10:44:a9:61:39:11:d2:40:b7:
                    10:d2:4c:1a:63:b3:95:d2:8b:aa:8f:cb:bd:68:93:
                    02:65:5f:17:c2:df:a4:d2:9f:31:57:b7:3e:e1:f4:
                    07:c3:c4:b5:97:bb:96:fa:11:8b:c1:ab:db:8a:f6:
                    a2:1e:06:dd:98:5b:a1:76:6a:1f:48:da:2e:79:a7:
                    a6:14:1f:d0:95:dc:2f:bb:1d:ac:23:0d:dc:13:aa:
                    79:ff:e4:22:73:35:ad:d4:e9:36:3e:6c:19:d7:85:
                    c2:d4:92:92:32:85:0c:6c:c3:69:ef:70:91:d5:b5:
                    82:2d:e3:d3:6c:29:82:53:47:64:07:8c:c8:65:47:
                    f6:c2:38:5c:51:d6:ce:3b:c0:19:2d:36:39:60:e3:
                    6a:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:93:F8:43:78:4D:42:68:95:DB:60:C1:9D:AD:C2:24:11:D6:A2:B4
            X509v3 Authority Key Identifier:
                keyid:E5:B3:F4:03:2F:D6:8E:C9:C0:5F:AD:BA:43:7C:34:59:E3:C7:A2:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0B7093FC2E6776D1257B2529C57A27EB68C700B2032E52F44023E172B5E81F8C/0/E5B3F4032FD68EC9C05FADBA437C3459E3C7A2A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5B3F4032FD68EC9C05FADBA437C3459E3C7A2A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0B7093FC2E6776D1257B2529C57A27EB68C700B2032E52F44023E172B5E81F8C/0/323830333a623139303a3a2f34302d3430203d3e20323732393339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b190::/40

    Signature Algorithm: sha256WithRSAEncryption
         d3:7c:ac:06:43:8c:6a:9d:ca:fe:89:0f:95:44:c7:48:78:48:
         eb:9f:27:61:5d:00:68:20:78:36:7a:71:9c:20:41:6b:e1:03:
         26:cc:49:d5:24:7e:c1:c8:6b:4a:8d:98:d1:24:60:f7:89:0a:
         7d:9c:c4:5e:52:ba:ac:be:7a:e1:00:a2:e8:2c:89:3f:fb:ea:
         22:06:e6:69:ca:20:64:0b:dc:28:f6:83:99:9e:cf:52:4e:81:
         1f:1a:56:6b:aa:13:6d:1a:44:0f:53:7b:83:99:48:53:b9:e9:
         2e:3e:ad:4b:d5:d2:2c:20:9e:b5:30:10:54:fb:0b:eb:ab:61:
         b6:5d:a4:bb:b8:24:2f:6b:a9:30:b6:f8:5a:15:7f:a1:b1:01:
         9c:9c:99:db:ac:e8:71:43:eb:6f:03:3d:af:1a:ac:5b:55:20:
         12:c2:5a:bf:10:e7:79:66:67:c5:99:46:f7:1b:ad:3a:33:81:
         c0:0c:c9:e6:fd:31:40:83:55:fa:f9:c2:d5:9a:8d:34:9f:cb:
         c5:bb:9d:cf:ea:54:bc:87:c5:c8:cc:dc:d5:31:2a:fc:44:70:
         61:d6:5c:cc:cb:aa:df:24:3e:68:e9:3b:ed:f0:6f:18:58:db:
         ff:52:2c:f2:d7:8a:03:e8:85:56:e5:14:3b:b3:4b:55:94:7e:
         d7:68:e9:7a
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUCpimOytwlmqHV1lFDNxoLC3KrCIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTVCM0Y0MDMyRkQ2OEVDOUMwNUZBREJBNDM3QzM0NTlF
M0M3QTJBODAeFw0yNTAyMDQxODA5MThaFw0yNjAyMDMxODE0MThaMDMxMTAvBgNV
BAMTKDA5OTNGODQzNzg0RDQyNjg5NURCNjBDMTlEQURDMjI0MTFENkEyQjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn4K328hUfxGMRwFtkpgVFxlko
MQeaTrsrEF2RWESuobNClVlqAKRTewrGWqKuHHQhgasu3EndjsqJ6TBsuZOawuBu
9wKIdTetWz6xrnahKET15HOX7cis+gxOupH6IhWYRxuTwF8fTkWB69HLEhBEqWE5
EdJAtxDSTBpjs5XSi6qPy71okwJlXxfC36TSnzFXtz7h9AfDxLWXu5b6EYvBq9uK
9qIeBt2YW6F2ah9I2i55p6YUH9CV3C+7HawjDdwTqnn/5CJzNa3U6TY+bBnXhcLU
kpIyhQxsw2nvcJHVtYIt49NsKYJTR2QHjMhlR/bCOFxR1s47wBktNjlg42qdAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUCZP4Q3hNQmiV22DBna3CJBHWorQwHwYDVR0j
BBgwFoAU5bP0Ay/WjsnAX626Q3w0WePHoqgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wQjcwOTNGQzJFNjc3NkQxMjU3QjI1MjlDNTdBMjdFQjY4
QzcwMEIyMDMyRTUyRjQ0MDIzRTE3MkI1RTgxRjhDLzAvRTVCM0Y0MDMyRkQ2OEVD
OUMwNUZBREJBNDM3QzM0NTlFM0M3QTJBOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FNUIzRjQwMzJGRDY4RUM5QzA1
RkFEQkE0MzdDMzQ1OUUzQzdBMkE4LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMEI3MDkzRkMyRTY3NzZEMTI1N0IyNTI5QzU3QTI3RUI2OEM3MDBCMjAz
MkU1MkY0NDAyM0UxNzJCNUU4MUY4Qy8wLzMyMzgzMDMzM2E2MjMxMzkzMDNhM2Ey
ZjM0MzAyZDM0MzAyMDNkM2UyMDMyMzczMjM5MzMzOS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACgDsZAA
MA0GCSqGSIb3DQEBCwUAA4IBAQDTfKwGQ4xqncr+iQ+VRMdIeEjrnydhXQBoIHg2
enGcIEFr4QMmzEnVJH7ByGtKjZjRJGD3iQp9nMReUrqsvnrhAKLoLIk/++oiBuZp
yiBkC9wo9oOZns9SToEfGlZrqhNtGkQPU3uDmUhTuekuPq1L1dIsIJ61MBBU+wvr
q2G2XaS7uCQva6kwtvhaFX+hsQGcnJnbrOhxQ+tvAz2vGqxbVSASwlq/EOd5ZmfF
mUb3G606M4HADMnm/TFAg1X6+cLVmo00n8vFu53P6lS8h8XIzNzVMSr8RHBh1lzM
y6rfJD5o6Tvt8G8YWNv/Uizy14oD6IVW5RQ7s0tVlH7XaOl6
-----END CERTIFICATE-----
Generated at Sat Apr 5 19:45:11 2025 by rpki-client