Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/272467CD58545DB3C91B9FD59703A48BA0F1BACF3D5C56AA7C90CBE691CC6F44/0/323830333a663234303a393030303a3a2f33362d3336203d3e203631353038.roa
File:                     323830333a663234303a393030303a3a2f33362d3336203d3e203631353038.roa (raw, json)
Hash identifier:          XroQA2Hbm6Yx1nK3DM7sEzvjIUCQHliSGzSKrZyfMzs=
Subject key identifier:   9A:75:4E:6E:3D:9D:AF:FA:11:A7:17:65:51:27:A0:B4:3C:94:C8:CC
Certificate issuer:       /CN=818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD
Certificate serial:       37114594E2EEEFD027499D8EC6750272B98A758C
Authority key identifier: 81:8F:5B:44:DD:81:3B:A4:BC:8A:04:C7:D2:55:04:2F:1A:E4:B2:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/272467CD58545DB3C91B9FD59703A48BA0F1BACF3D5C56AA7C90CBE691CC6F44/0/323830333a663234303a393030303a3a2f33362d3336203d3e203631353038.roa
Signing time:             Tue 04 Feb 2025 18:28:51 +0000
ROA not before:           Tue 04 Feb 2025 18:23:51 +0000
ROA not after:            Tue 03 Feb 2026 18:28:51 +0000
asID:                     61508
IP address blocks:        2803:f240:9000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/272467CD58545DB3C91B9FD59703A48BA0F1BACF3D5C56AA7C90CBE691CC6F44/0/818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/272467CD58545DB3C91B9FD59703A48BA0F1BACF3D5C56AA7C90CBE691CC6F44/0/818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 04:59:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:11:45:94:e2:ee:ef:d0:27:49:9d:8e:c6:75:02:72:b9:8a:75:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD
        Validity
            Not Before: Feb  4 18:23:51 2025 GMT
            Not After : Feb  3 18:28:51 2026 GMT
        Subject: CN=9A754E6E3D9DAFFA11A717655127A0B43C94C8CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:af:24:2f:61:0a:17:a3:7b:e9:98:ca:8c:78:
                    1a:56:37:c1:9d:a0:4e:85:c1:b6:34:94:c6:94:fe:
                    da:fc:3e:8c:15:2b:4c:d9:0f:99:8f:cc:66:44:71:
                    81:a4:64:c6:4d:96:64:20:d7:d5:38:f8:05:c6:54:
                    b2:bf:4e:2e:6b:a5:bf:ff:74:84:8c:f3:d2:50:12:
                    21:b4:ac:8f:78:61:c7:f6:19:d0:6b:1a:81:d1:fc:
                    9e:ab:5a:be:1f:83:26:90:81:eb:2c:7c:17:12:c1:
                    a1:22:15:22:53:a0:b3:6d:40:3e:2f:e6:19:23:bd:
                    b3:83:ca:3d:f4:1f:bf:fc:f5:60:29:25:ca:36:e1:
                    6f:09:dc:d4:58:92:9d:f2:b3:89:88:b1:2a:c5:ff:
                    57:bd:c1:8e:fc:f7:4d:62:88:78:f7:37:78:14:d5:
                    e7:02:e5:34:e5:e2:94:bb:10:18:66:5a:29:5b:7e:
                    69:3b:35:7c:31:ed:46:2e:c6:d3:19:45:73:f9:49:
                    78:3c:7f:ad:02:f9:33:b3:45:80:dc:14:c9:74:a7:
                    23:f8:b6:96:15:cd:f8:9f:f3:b0:a6:65:4a:9d:7a:
                    08:26:54:ea:2a:f9:f1:ac:a7:10:f5:0b:27:fc:f7:
                    88:03:0b:f4:b1:b3:8e:29:92:7e:98:8a:43:f6:d3:
                    3c:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:75:4E:6E:3D:9D:AF:FA:11:A7:17:65:51:27:A0:B4:3C:94:C8:CC
            X509v3 Authority Key Identifier:
                keyid:81:8F:5B:44:DD:81:3B:A4:BC:8A:04:C7:D2:55:04:2F:1A:E4:B2:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/272467CD58545DB3C91B9FD59703A48BA0F1BACF3D5C56AA7C90CBE691CC6F44/0/818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/272467CD58545DB3C91B9FD59703A48BA0F1BACF3D5C56AA7C90CBE691CC6F44/0/323830333a663234303a393030303a3a2f33362d3336203d3e203631353038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f240:9000::/36

    Signature Algorithm: sha256WithRSAEncryption
         3b:a6:23:d8:9a:6f:68:bd:cc:2f:96:50:ca:01:c3:94:82:25:
         a9:07:5b:dd:bd:72:04:41:c9:ee:e7:ac:81:3b:0c:ca:6c:8f:
         0b:1d:a9:02:e0:44:2e:ac:0a:42:2d:7b:4c:9d:1a:53:0c:24:
         4d:b1:3b:a3:4c:ec:cc:d2:dc:19:00:25:55:a0:1c:62:fc:14:
         61:6a:35:e6:2a:f5:ae:fa:b3:16:ad:73:9a:51:63:c8:e5:68:
         79:c8:ce:2c:96:5d:cf:93:2a:bf:6e:a6:a6:96:b2:8a:da:f7:
         fd:6b:a8:3b:f9:38:8c:0d:02:2f:2b:5a:4d:e0:56:f3:53:a8:
         d7:30:1c:9e:f2:0d:fa:b1:15:cb:2f:61:98:6e:9a:ad:cd:be:
         66:7b:48:d7:ea:21:d4:ee:54:85:e4:b9:00:4f:94:ac:79:f3:
         c8:67:e5:2e:6f:82:b7:c4:b8:42:15:78:2a:c8:82:9e:3f:b5:
         d7:e5:bd:eb:3e:52:de:b1:4a:14:31:9f:bb:99:bb:33:ca:5d:
         8a:6f:17:34:f9:ca:3e:f8:1a:5b:12:a5:8e:13:c4:57:bb:cc:
         db:74:30:fd:cc:20:d2:b8:31:2b:cb:0f:ce:93:41:2b:03:7e:
         80:4c:d1:b7:bf:bc:4f:b6:e0:f6:c0:81:df:09:66:1f:7f:2f:
         b8:d2:05:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:32:54 2025 by rpki-client