Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/272467CD58545DB3C91B9FD59703A48BA0F1BACF3D5C56AA7C90CBE691CC6F44/0/323830333a663234303a343030303a3a2f33362d3336203d3e203631353038.roa
File:                     323830333a663234303a343030303a3a2f33362d3336203d3e203631353038.roa (raw, json)
Hash identifier:          Jqfx9UPHIrLeiATIQ2HvADK64X4bmvM6U5zI3tYHQ18=
Subject key identifier:   29:AF:6E:5F:11:70:30:05:A3:B6:0A:54:0E:5C:71:E3:2D:9C:86:A8
Certificate issuer:       /CN=818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD
Certificate serial:       2724E905B4834F574C3061BDEAD5323F0794EE87
Authority key identifier: 81:8F:5B:44:DD:81:3B:A4:BC:8A:04:C7:D2:55:04:2F:1A:E4:B2:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/272467CD58545DB3C91B9FD59703A48BA0F1BACF3D5C56AA7C90CBE691CC6F44/0/323830333a663234303a343030303a3a2f33362d3336203d3e203631353038.roa
Signing time:             Tue 04 Feb 2025 18:28:55 +0000
ROA not before:           Tue 04 Feb 2025 18:23:55 +0000
ROA not after:            Tue 03 Feb 2026 18:28:55 +0000
asID:                     61508
IP address blocks:        2803:f240:4000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/272467CD58545DB3C91B9FD59703A48BA0F1BACF3D5C56AA7C90CBE691CC6F44/0/818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/272467CD58545DB3C91B9FD59703A48BA0F1BACF3D5C56AA7C90CBE691CC6F44/0/818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 01:52:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:24:e9:05:b4:83:4f:57:4c:30:61:bd:ea:d5:32:3f:07:94:ee:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD
        Validity
            Not Before: Feb  4 18:23:55 2025 GMT
            Not After : Feb  3 18:28:55 2026 GMT
        Subject: CN=29AF6E5F11703005A3B60A540E5C71E32D9C86A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ad:b5:23:63:98:54:a7:c7:4b:b5:8b:30:40:
                    c4:3a:ed:aa:1d:ef:5f:cf:8c:09:da:8d:e2:2d:82:
                    81:c9:c8:78:e0:3a:f1:b5:c4:1c:a1:f9:4f:fd:cb:
                    97:77:45:86:98:ae:8e:1e:ec:17:ee:b4:cf:82:2a:
                    d3:a5:6e:71:86:2d:6c:11:0d:a4:ab:8f:36:48:64:
                    16:b6:e2:76:d8:21:ed:94:74:6e:be:a3:03:eb:ac:
                    52:3b:e2:b5:7c:89:4f:64:23:aa:90:9c:5e:5c:52:
                    97:8e:66:27:9d:16:07:a6:26:a8:2e:c0:5e:ba:ee:
                    b0:83:73:2a:33:73:b8:7f:76:4f:ee:4a:fb:b9:13:
                    cb:7b:65:e2:b5:cc:d1:7d:aa:d7:ed:f6:00:01:ca:
                    70:db:58:df:f5:5d:93:8c:9c:e1:99:3b:3b:36:26:
                    c2:ea:45:3b:04:0c:2d:fb:c3:cc:66:b8:7b:fe:02:
                    6d:60:91:d8:7d:13:e5:db:f1:f7:c3:2c:e8:b7:f0:
                    d5:9a:6b:f4:97:47:61:03:49:f1:2e:5f:9e:e4:41:
                    b4:3b:bf:04:fd:58:25:be:c6:b0:a8:cc:07:41:10:
                    e9:33:4f:43:e9:f8:32:24:dd:9d:8a:c3:bd:80:b9:
                    db:95:d0:38:1e:87:78:5b:58:11:e2:28:d6:47:27:
                    44:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:AF:6E:5F:11:70:30:05:A3:B6:0A:54:0E:5C:71:E3:2D:9C:86:A8
            X509v3 Authority Key Identifier:
                keyid:81:8F:5B:44:DD:81:3B:A4:BC:8A:04:C7:D2:55:04:2F:1A:E4:B2:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/272467CD58545DB3C91B9FD59703A48BA0F1BACF3D5C56AA7C90CBE691CC6F44/0/818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/272467CD58545DB3C91B9FD59703A48BA0F1BACF3D5C56AA7C90CBE691CC6F44/0/323830333a663234303a343030303a3a2f33362d3336203d3e203631353038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f240:4000::/36

    Signature Algorithm: sha256WithRSAEncryption
         6e:f0:21:20:f4:5d:a7:ed:09:24:92:31:b0:99:ad:ce:44:f4:
         75:61:a5:df:be:c3:7d:56:a3:e7:9c:17:63:72:d6:6c:fb:3c:
         c8:a0:62:53:cc:88:79:a8:15:fb:ac:d0:6a:a0:33:bb:53:f1:
         30:29:d4:e8:ff:e9:92:7c:23:0b:c1:7f:3c:a9:f6:25:cf:74:
         01:ce:e1:6a:21:fd:de:82:c1:aa:74:7e:7d:07:94:39:82:26:
         ff:6f:34:d8:a7:4d:56:be:db:a0:b5:ca:18:2f:c2:04:51:fb:
         e1:12:b7:9b:0c:cd:7b:8d:67:1b:e3:8e:45:8e:6c:ef:d2:a5:
         bf:cc:bc:55:04:3c:7f:60:95:c7:6d:fc:05:52:41:52:58:68:
         14:c7:a9:9d:30:fa:2b:1f:e2:7c:1e:dc:6a:20:49:bb:dc:cd:
         c1:a6:7c:9d:30:af:e3:ef:a0:03:19:27:7d:e7:94:96:17:ba:
         a8:62:79:48:5a:7c:f6:a8:8b:c5:e2:b5:95:a7:43:c6:f1:12:
         a6:82:36:4b:ec:08:9f:1b:ae:7e:b3:16:6f:53:3a:3c:75:a8:
         a4:3c:b6:cf:c9:68:bf:8a:7f:c8:b4:f3:a7:dc:69:17:3b:4c:
         b6:d4:b4:2e:15:15:02:04:69:52:d4:34:18:d0:f8:21:4e:62:
         ad:fe:b7:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 09:09:52 2025 by rpki-client