Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/272467CD58545DB3C91B9FD59703A48BA0F1BACF3D5C56AA7C90CBE691CC6F44/0/323830333a663234303a373030303a3a2f33362d3336203d3e203631353038.roa
File:                     323830333a663234303a373030303a3a2f33362d3336203d3e203631353038.roa (raw, json)
Hash identifier:          VsMcb9QmaHnRieRV7zbs8rzWRatB1QyKJibcgh1ZUkY=
Subject key identifier:   25:FD:25:6B:7B:AE:5F:AE:68:7C:E4:8E:99:CD:BC:14:90:84:27:39
Certificate issuer:       /CN=818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD
Certificate serial:       458748A863AB551425DC829C0169B321717E90C3
Authority key identifier: 81:8F:5B:44:DD:81:3B:A4:BC:8A:04:C7:D2:55:04:2F:1A:E4:B2:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/272467CD58545DB3C91B9FD59703A48BA0F1BACF3D5C56AA7C90CBE691CC6F44/0/323830333a663234303a373030303a3a2f33362d3336203d3e203631353038.roa
Signing time:             Tue 04 Feb 2025 18:28:55 +0000
ROA not before:           Tue 04 Feb 2025 18:23:55 +0000
ROA not after:            Tue 03 Feb 2026 18:28:55 +0000
asID:                     61508
IP address blocks:        2803:f240:7000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/272467CD58545DB3C91B9FD59703A48BA0F1BACF3D5C56AA7C90CBE691CC6F44/0/818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/272467CD58545DB3C91B9FD59703A48BA0F1BACF3D5C56AA7C90CBE691CC6F44/0/818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 04:59:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:87:48:a8:63:ab:55:14:25:dc:82:9c:01:69:b3:21:71:7e:90:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD
        Validity
            Not Before: Feb  4 18:23:55 2025 GMT
            Not After : Feb  3 18:28:55 2026 GMT
        Subject: CN=25FD256B7BAE5FAE687CE48E99CDBC1490842739
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:77:44:82:59:6a:7a:01:b6:11:69:c0:2e:33:
                    53:24:29:17:4c:b8:64:cc:00:ec:61:93:e7:7a:15:
                    91:d5:64:db:6b:5f:84:d2:ba:6c:5e:02:5b:7b:eb:
                    b2:ef:18:b3:6f:6f:c6:1b:4c:bd:49:d5:2b:6e:a0:
                    5e:df:42:01:41:95:e8:9d:95:f4:44:e4:8b:b0:61:
                    42:15:03:98:c0:21:64:4e:95:7d:6e:1b:2d:0f:4c:
                    26:56:98:e5:9d:09:01:2a:23:29:de:da:74:f2:15:
                    f4:56:aa:f7:53:50:85:d3:1e:b5:48:fc:ba:45:69:
                    2f:c3:e4:3d:e4:89:0e:26:06:a2:b0:67:cd:23:d7:
                    69:7f:ec:cd:3d:13:4b:3c:a4:2c:a2:1c:cb:3c:ad:
                    4d:ca:00:2f:b4:d8:66:9e:1f:31:33:83:dd:7f:ee:
                    e5:84:27:e0:35:df:21:13:54:71:d2:58:a0:7b:6a:
                    c3:3e:6e:a6:f8:14:98:f4:f1:d8:5f:05:3a:1d:fe:
                    17:fc:33:59:75:80:2a:62:27:13:84:53:e5:3f:29:
                    ea:b7:e2:c9:63:b5:ac:79:54:24:48:9b:43:7b:a2:
                    a7:96:92:e8:14:f7:56:87:a1:3a:59:27:dc:e0:8e:
                    af:4b:fe:0a:a3:73:c2:8a:a5:ed:0b:59:53:ea:02:
                    df:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:FD:25:6B:7B:AE:5F:AE:68:7C:E4:8E:99:CD:BC:14:90:84:27:39
            X509v3 Authority Key Identifier:
                keyid:81:8F:5B:44:DD:81:3B:A4:BC:8A:04:C7:D2:55:04:2F:1A:E4:B2:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/272467CD58545DB3C91B9FD59703A48BA0F1BACF3D5C56AA7C90CBE691CC6F44/0/818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/272467CD58545DB3C91B9FD59703A48BA0F1BACF3D5C56AA7C90CBE691CC6F44/0/323830333a663234303a373030303a3a2f33362d3336203d3e203631353038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f240:7000::/36

    Signature Algorithm: sha256WithRSAEncryption
         70:1f:e1:0e:9e:a5:23:5f:6e:1a:01:f2:3d:e9:4c:93:9c:d6:
         a0:d6:07:48:d8:91:f7:99:ff:24:92:78:a2:dc:76:22:3a:a1:
         59:87:5a:5d:14:1a:60:9a:d9:ba:94:6d:6f:dd:84:b3:00:6a:
         85:76:e2:5b:57:61:5b:1c:0a:01:2f:69:25:e5:23:21:fc:3d:
         17:bb:36:15:ca:4a:a7:f9:78:80:43:75:c5:9c:ff:c7:09:f5:
         cd:a3:ff:a3:2a:ee:e3:35:7e:52:20:3e:6f:49:38:96:14:ef:
         a8:50:7a:66:e7:8f:4b:26:01:0b:c1:8b:6c:2f:74:9a:f8:9b:
         d6:ae:ed:cd:1e:94:df:e9:6a:d6:03:ed:01:1a:64:c9:6b:01:
         5f:cf:91:e2:c2:8c:a2:bc:42:28:58:84:04:c2:31:62:f9:b4:
         4b:88:cd:97:7d:85:5c:4f:bd:ea:09:89:af:a2:4f:88:7c:7e:
         76:a4:4e:72:1a:73:fb:c6:4c:0e:51:41:f1:36:c4:87:2e:fa:
         19:c4:53:62:62:5b:66:6a:33:17:0d:34:61:93:73:30:f7:82:
         08:7c:5a:92:2b:df:91:d7:b4:66:e1:06:6c:92:1a:5e:35:53:
         20:89:39:fd:44:57:ca:90:1c:c1:af:9f:08:64:d3:ab:dd:f3:
         00:0c:67:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:08:48 2025 by rpki-client