Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5178255AB399D1DA538AD2E09B31292FFBBF4DA76656D398ECBBEE0FCBEF09DE/0/323830333a326335303a613030303a3a2f33362d3438203d3e20323733313432.roa
File:                     323830333a326335303a613030303a3a2f33362d3438203d3e20323733313432.roa (raw, json)
Hash identifier:          bGROmxH0mHbhND6/QrTnUpOgLrUbG2Qw1kdpby/VpUM=
Subject key identifier:   9C:BF:AB:9B:C3:84:DF:5D:02:8A:31:17:8C:35:08:61:35:EC:A3:90
Certificate issuer:       /CN=41B8103DCE88DDDEADBAC30879C4A785F1517EE2
Certificate serial:       57E7242897565C77E46F3B1884C801DA020D2864
Authority key identifier: 41:B8:10:3D:CE:88:DD:DE:AD:BA:C3:08:79:C4:A7:85:F1:51:7E:E2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/41B8103DCE88DDDEADBAC30879C4A785F1517EE2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5178255AB399D1DA538AD2E09B31292FFBBF4DA76656D398ECBBEE0FCBEF09DE/0/323830333a326335303a613030303a3a2f33362d3438203d3e20323733313432.roa
Signing time:             Tue 04 Feb 2025 19:56:38 +0000
ROA not before:           Tue 04 Feb 2025 19:51:38 +0000
ROA not after:            Tue 03 Feb 2026 19:56:38 +0000
asID:                     273142
IP address blocks:        2803:2c50:a000::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5178255AB399D1DA538AD2E09B31292FFBBF4DA76656D398ECBBEE0FCBEF09DE/0/41B8103DCE88DDDEADBAC30879C4A785F1517EE2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5178255AB399D1DA538AD2E09B31292FFBBF4DA76656D398ECBBEE0FCBEF09DE/0/41B8103DCE88DDDEADBAC30879C4A785F1517EE2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/41B8103DCE88DDDEADBAC30879C4A785F1517EE2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:e7:24:28:97:56:5c:77:e4:6f:3b:18:84:c8:01:da:02:0d:28:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41B8103DCE88DDDEADBAC30879C4A785F1517EE2
        Validity
            Not Before: Feb  4 19:51:38 2025 GMT
            Not After : Feb  3 19:56:38 2026 GMT
        Subject: CN=9CBFAB9BC384DF5D028A31178C35086135ECA390
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:97:d7:a2:ec:02:35:49:96:63:c6:8a:11:b5:
                    03:1b:b8:0d:fb:d8:43:90:a4:df:4e:0b:f8:89:cf:
                    d1:5f:46:69:be:9c:9f:12:8f:ba:6a:58:b6:22:52:
                    81:4d:6a:29:a8:3c:c9:26:59:f8:49:7e:29:50:92:
                    30:a9:0d:75:33:bf:6c:2e:3c:5f:40:72:93:3c:a6:
                    a2:85:7a:4f:29:26:46:44:3b:28:0d:3f:3c:fb:76:
                    47:65:19:bb:b1:b4:94:7c:e0:f6:7b:f3:44:f8:7a:
                    47:61:10:cc:6a:10:1c:b5:19:19:e8:f3:6b:fe:ce:
                    5d:b4:49:2d:69:f7:df:02:52:f6:99:0e:09:07:a6:
                    bc:c3:3f:1c:07:c4:7e:43:04:af:bd:c7:61:3f:9a:
                    96:12:1c:8b:88:cc:3f:42:57:e9:42:84:c4:6b:54:
                    aa:ab:be:e8:8b:3b:38:c4:07:4a:e0:cb:f7:eb:8d:
                    98:13:2a:7d:e1:44:03:fd:95:05:9c:2c:11:5d:c7:
                    c4:f5:31:3f:2d:57:cf:91:c4:91:1c:2c:79:41:63:
                    a1:75:c8:81:c9:2c:db:d3:3b:7c:2d:d2:aa:49:7d:
                    12:ae:8e:aa:bb:18:f4:71:69:36:6f:b0:13:8d:74:
                    da:2a:3b:89:b3:79:2b:92:d4:42:b1:45:2a:7d:ef:
                    48:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:BF:AB:9B:C3:84:DF:5D:02:8A:31:17:8C:35:08:61:35:EC:A3:90
            X509v3 Authority Key Identifier:
                keyid:41:B8:10:3D:CE:88:DD:DE:AD:BA:C3:08:79:C4:A7:85:F1:51:7E:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5178255AB399D1DA538AD2E09B31292FFBBF4DA76656D398ECBBEE0FCBEF09DE/0/41B8103DCE88DDDEADBAC30879C4A785F1517EE2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/41B8103DCE88DDDEADBAC30879C4A785F1517EE2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5178255AB399D1DA538AD2E09B31292FFBBF4DA76656D398ECBBEE0FCBEF09DE/0/323830333a326335303a613030303a3a2f33362d3438203d3e20323733313432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2c50:a000::/36

    Signature Algorithm: sha256WithRSAEncryption
         13:85:6f:6c:69:d1:0c:9a:68:35:f9:c8:08:4f:1f:83:b0:c6:
         02:9a:33:6a:4b:83:2c:a1:14:f1:a0:48:b7:41:c0:ce:64:28:
         fd:fd:7c:15:93:94:2c:13:60:cb:e2:e3:d0:72:8f:3e:16:af:
         c6:1c:42:5d:5f:2c:6d:3e:a9:55:24:4c:09:44:3e:5a:dd:90:
         6c:78:ac:14:9d:76:d2:39:75:40:06:39:95:66:da:b3:40:19:
         fd:34:b5:6e:87:d4:4f:24:be:a4:8d:00:1a:a0:31:1e:9f:1f:
         05:e4:0b:5c:ea:d0:5b:9c:da:f5:78:47:64:39:c8:78:c6:e9:
         6b:9e:98:0f:7e:78:60:bf:26:d7:e0:c6:27:e0:9d:cb:b9:d8:
         98:72:c5:df:80:6a:2a:1d:fe:00:1c:a6:c4:29:8c:53:62:e2:
         7f:da:d6:db:e3:63:51:65:f0:f7:82:6a:1f:51:10:d0:62:bb:
         79:10:2d:bb:5f:3d:65:7c:fb:b7:85:90:95:0b:58:3b:63:53:
         e1:63:04:ed:bb:37:06:77:03:6c:28:ef:4d:52:ce:84:23:fe:
         bd:4e:86:35:d0:a7:aa:7d:cc:c4:85:f0:30:cd:90:be:8f:8e:
         d9:1c:5f:33:67:53:7e:91:1d:36:7c:95:94:6e:95:42:6b:b9:
         1d:2e:cf:5b
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:11:55 2025 by rpki-client