Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/17A9C74DF00F547107AC06B2F7E743243B3EB80301914038D5E7A33AFC3CD0F3/0/323830333a386265303a3a2f33332d3333203d3e20323730303831.roa
File:                     323830333a386265303a3a2f33332d3333203d3e20323730303831.roa (raw, json)
Hash identifier:          GQl5j6SZ+ok5Yvf3U6wrk3aK5fabPBPrnsO/iPCFuwQ=
Subject key identifier:   08:B9:F4:9E:53:CC:AB:F6:46:32:BD:6E:BA:0C:AD:DB:A8:AE:AD:AC
Certificate issuer:       /CN=0B1C628987A31BE87F63D8B3617E91E32E3908C3
Certificate serial:       6F2AD17C511F49A74E6D7994DDD3764217B65250
Authority key identifier: 0B:1C:62:89:87:A3:1B:E8:7F:63:D8:B3:61:7E:91:E3:2E:39:08:C3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0B1C628987A31BE87F63D8B3617E91E32E3908C3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/17A9C74DF00F547107AC06B2F7E743243B3EB80301914038D5E7A33AFC3CD0F3/0/323830333a386265303a3a2f33332d3333203d3e20323730303831.roa
Signing time:             Tue 04 Feb 2025 18:40:33 +0000
ROA not before:           Tue 04 Feb 2025 18:35:33 +0000
ROA not after:            Tue 03 Feb 2026 18:40:33 +0000
asID:                     270081
IP address blocks:        2803:8be0::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/17A9C74DF00F547107AC06B2F7E743243B3EB80301914038D5E7A33AFC3CD0F3/0/0B1C628987A31BE87F63D8B3617E91E32E3908C3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/17A9C74DF00F547107AC06B2F7E743243B3EB80301914038D5E7A33AFC3CD0F3/0/0B1C628987A31BE87F63D8B3617E91E32E3908C3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0B1C628987A31BE87F63D8B3617E91E32E3908C3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:2a:d1:7c:51:1f:49:a7:4e:6d:79:94:dd:d3:76:42:17:b6:52:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B1C628987A31BE87F63D8B3617E91E32E3908C3
        Validity
            Not Before: Feb  4 18:35:33 2025 GMT
            Not After : Feb  3 18:40:33 2026 GMT
        Subject: CN=08B9F49E53CCABF64632BD6EBA0CADDBA8AEADAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:20:07:a5:98:27:13:97:05:3e:8f:b5:12:68:
                    ac:6c:c1:e1:21:2b:da:26:ce:22:17:9b:d7:89:93:
                    a0:6c:2d:75:14:13:6b:ac:06:85:64:44:d0:4e:af:
                    e4:3c:58:33:9b:18:6e:5b:82:13:83:ee:5d:cd:91:
                    02:57:e9:8e:e0:4a:cb:34:e7:08:9c:f5:8c:8c:3a:
                    d3:ce:03:b9:82:62:1e:6c:78:0d:fc:f8:a7:69:47:
                    8c:17:68:39:15:c1:dc:ff:39:00:f5:7e:3e:90:82:
                    55:63:08:36:2a:e6:50:55:b5:1d:6f:1d:c3:b9:02:
                    6f:26:8c:82:68:51:70:54:f7:d5:f7:b1:0a:66:a3:
                    b6:2d:7b:5b:19:40:37:17:05:0c:2e:64:be:5a:e2:
                    e2:36:97:c4:50:ed:57:ac:1f:a5:bb:ac:e4:29:79:
                    ff:0c:4b:51:60:d7:47:57:0c:de:6d:89:9a:04:56:
                    a9:e4:bf:ce:b7:0c:a5:ec:b8:a1:03:8e:80:c8:27:
                    1a:1a:18:2b:c6:c8:cb:10:8a:8e:08:d9:af:20:cf:
                    65:5c:a7:60:b4:7a:39:d9:4e:44:67:8d:ad:9a:43:
                    bb:6e:dc:1f:3a:2a:9a:61:84:b1:36:c4:c7:a2:45:
                    ff:f5:f2:7a:dd:90:b4:e0:fb:64:1c:00:37:13:e4:
                    d2:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:B9:F4:9E:53:CC:AB:F6:46:32:BD:6E:BA:0C:AD:DB:A8:AE:AD:AC
            X509v3 Authority Key Identifier:
                keyid:0B:1C:62:89:87:A3:1B:E8:7F:63:D8:B3:61:7E:91:E3:2E:39:08:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/17A9C74DF00F547107AC06B2F7E743243B3EB80301914038D5E7A33AFC3CD0F3/0/0B1C628987A31BE87F63D8B3617E91E32E3908C3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0B1C628987A31BE87F63D8B3617E91E32E3908C3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/17A9C74DF00F547107AC06B2F7E743243B3EB80301914038D5E7A33AFC3CD0F3/0/323830333a386265303a3a2f33332d3333203d3e20323730303831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8be0::/33

    Signature Algorithm: sha256WithRSAEncryption
         1b:71:52:de:27:4e:3f:1e:66:13:83:1d:0d:42:b6:8a:1b:97:
         fd:e8:93:d0:ff:58:97:0f:25:8e:0c:52:56:a1:60:ce:52:25:
         0c:33:dd:a9:c9:ce:4c:b9:19:5e:6a:92:e6:b2:49:77:61:84:
         7b:c0:df:52:84:47:43:9f:1d:8f:aa:ac:49:67:61:f6:da:82:
         80:96:27:f7:6a:a5:44:dc:f5:3b:75:a8:87:24:15:10:38:42:
         13:e3:f5:08:72:cf:cc:25:16:44:d9:7b:99:a7:e7:f2:89:3c:
         d5:e4:84:65:8f:7c:56:71:32:e0:19:15:03:96:e9:2d:25:ad:
         cb:e7:44:8e:2f:34:17:4a:e3:9b:d6:94:6f:58:1a:b8:f3:b5:
         7d:8d:b3:dd:25:de:f5:62:31:5d:8b:93:8e:7d:4a:6d:51:2e:
         8b:74:2c:cc:6e:5e:10:07:62:7b:04:7f:04:3e:e7:43:3a:49:
         f8:0b:9e:cf:7a:49:c2:89:21:42:fc:7c:1f:04:90:69:40:1a:
         d5:2f:0e:eb:4c:04:37:da:fc:a7:6f:56:4d:c7:84:d9:f0:3b:
         65:8b:d4:6a:39:12:45:d8:8c:67:e8:7e:45:10:5d:dd:09:8d:
         fa:4a:a2:61:10:16:2a:db:26:f6:6c:6d:6d:73:cb:c4:27:1e:
         0b:56:12:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:05:56 2025 by rpki-client