Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/323830333a623065303a383030633a3a2f34382d3438203d3e20323732393738.roa
File:                     323830333a623065303a383030633a3a2f34382d3438203d3e20323732393738.roa (raw, json)
Hash identifier:          MfxSRpRSzoaEuHk/Ds7S/LtQTFT2iXvwtRv1Nq9tFtA=
Subject key identifier:   C4:3A:05:43:10:E7:97:F3:EC:DD:17:E1:AE:EC:2C:99:53:E0:03:72
Certificate issuer:       /CN=B9661B0E7FC75ED767D18B56FC749BAED21FC195
Certificate serial:       59C1E2AA64A1C21CCD841C412BC386CB995BAE2D
Authority key identifier: B9:66:1B:0E:7F:C7:5E:D7:67:D1:8B:56:FC:74:9B:AE:D2:1F:C1:95
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/323830333a623065303a383030633a3a2f34382d3438203d3e20323732393738.roa
Signing time:             Tue 04 Feb 2025 18:13:17 +0000
ROA not before:           Tue 04 Feb 2025 18:08:17 +0000
ROA not after:            Tue 03 Feb 2026 18:13:17 +0000
asID:                     272978
IP address blocks:        2803:b0e0:800c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.crl
                          rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 04:49:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:c1:e2:aa:64:a1:c2:1c:cd:84:1c:41:2b:c3:86:cb:99:5b:ae:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9661B0E7FC75ED767D18B56FC749BAED21FC195
        Validity
            Not Before: Feb  4 18:08:17 2025 GMT
            Not After : Feb  3 18:13:17 2026 GMT
        Subject: CN=C43A054310E797F3ECDD17E1AEEC2C9953E00372
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:a1:22:5f:70:09:6b:39:81:f6:e9:29:21:cd:
                    64:cb:09:2e:9e:f7:5c:da:06:ae:d7:c6:45:2a:57:
                    a6:63:0d:83:63:6d:04:71:79:5a:a3:87:e1:98:6f:
                    d4:ea:ee:89:4b:61:a4:a8:9a:0d:a0:a3:74:10:ae:
                    6f:47:13:a0:c1:bc:04:4a:f2:1b:3d:17:75:46:51:
                    0b:eb:33:e6:b8:40:e8:f4:5f:cc:b6:18:58:6a:d1:
                    12:7c:cb:de:00:5e:bc:4d:73:4f:34:cd:83:5c:d7:
                    ac:1a:00:ec:f3:98:a9:5b:81:39:59:fc:d3:75:c0:
                    87:e1:54:4e:4e:5c:7f:99:74:b3:a9:a4:bc:dd:d8:
                    15:91:06:f7:fa:99:3f:88:54:b8:1a:94:09:7e:01:
                    c7:5f:cd:db:be:5d:de:61:32:50:ab:6f:37:0a:2e:
                    d6:c6:e9:5e:a9:79:7a:20:35:9b:e4:ec:a9:5b:1a:
                    b6:b4:0a:3e:fe:c7:fc:1d:73:8e:9f:bd:be:4f:75:
                    1e:85:3c:e4:68:22:ea:c7:1f:e1:cc:e7:37:37:a1:
                    93:f9:e9:56:87:80:ac:ae:a4:ff:52:78:f7:6c:c1:
                    63:69:70:00:78:45:28:62:be:ec:27:a2:fd:7a:00:
                    0f:cf:f5:79:e6:c0:5f:29:77:54:0e:c4:a7:b6:30:
                    23:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:3A:05:43:10:E7:97:F3:EC:DD:17:E1:AE:EC:2C:99:53:E0:03:72
            X509v3 Authority Key Identifier:
                keyid:B9:66:1B:0E:7F:C7:5E:D7:67:D1:8B:56:FC:74:9B:AE:D2:1F:C1:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/323830333a623065303a383030633a3a2f34382d3438203d3e20323732393738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b0e0:800c::/48

    Signature Algorithm: sha256WithRSAEncryption
         84:96:c3:71:80:fe:4e:e8:9a:87:dd:ee:46:3b:ee:61:7b:92:
         0d:27:f9:15:82:4d:e8:02:d4:05:5c:b6:58:ff:42:5d:3a:71:
         67:fb:62:00:87:ed:7e:a1:ff:3a:02:72:2a:e0:76:85:3b:0a:
         07:b5:42:62:a6:04:cc:be:30:7c:c2:ba:e7:fb:03:ac:41:2c:
         6f:03:fc:4f:d6:e4:35:37:70:33:74:88:99:61:dc:03:f6:dc:
         e0:fb:3c:a0:dd:b4:bb:3e:6e:81:8a:af:06:b0:f6:ce:d1:f6:
         53:71:b5:2e:0f:e9:ab:58:b8:dc:ab:c6:5d:df:91:f9:ad:2e:
         f0:31:0a:fb:7e:c5:f5:0d:68:8d:de:09:fd:a3:0d:1c:ad:04:
         21:6c:5b:f4:b9:1f:14:45:32:ae:1d:0d:b6:54:29:c1:d0:8c:
         21:a4:bf:87:d3:0e:30:cd:4a:ab:fa:e2:39:4a:23:81:f3:d2:
         a6:69:1b:73:38:81:2a:0a:5b:62:3c:8d:03:ed:a5:b9:27:f6:
         f9:34:8d:4a:75:29:c9:7c:8a:e6:8d:19:97:89:cf:cb:3b:d2:
         c7:c4:85:5a:e7:cc:b6:51:b6:98:f5:58:d8:4e:2a:6d:f3:51:
         1d:7f:6e:f7:53:b8:71:5b:b2:90:29:00:5e:50:b1:bd:63:32:
         5c:9a:62:0d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Apr 7 03:24:47 2025 by rpki-client