Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/323830333a623065303a383031333a3a2f34382d3438203d3e20323732393739.roa
File:                     323830333a623065303a383031333a3a2f34382d3438203d3e20323732393739.roa (raw, json)
Hash identifier:          ikI2kAiXXtt8rR7VfqTnpYwNdhdqOPrDsunBpPYpMGk=
Subject key identifier:   15:D6:58:02:D8:10:43:A9:D3:55:3E:9C:F9:14:20:50:E2:0F:FA:E7
Certificate issuer:       /CN=B9661B0E7FC75ED767D18B56FC749BAED21FC195
Certificate serial:       058F720201A51DFB323AB8E24D7AC63185AF6FF3
Authority key identifier: B9:66:1B:0E:7F:C7:5E:D7:67:D1:8B:56:FC:74:9B:AE:D2:1F:C1:95
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/323830333a623065303a383031333a3a2f34382d3438203d3e20323732393739.roa
Signing time:             Tue 04 Feb 2025 18:13:21 +0000
ROA not before:           Tue 04 Feb 2025 18:08:21 +0000
ROA not after:            Tue 03 Feb 2026 18:13:21 +0000
asID:                     272979
IP address blocks:        2803:b0e0:8013::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.crl
                          rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 03:20:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:8f:72:02:01:a5:1d:fb:32:3a:b8:e2:4d:7a:c6:31:85:af:6f:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9661B0E7FC75ED767D18B56FC749BAED21FC195
        Validity
            Not Before: Feb  4 18:08:21 2025 GMT
            Not After : Feb  3 18:13:21 2026 GMT
        Subject: CN=15D65802D81043A9D3553E9CF9142050E20FFAE7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a3:22:ac:9a:be:c4:d0:97:82:e1:97:5a:47:
                    b9:2f:f9:67:95:41:57:05:cb:0b:ad:da:bb:ff:ec:
                    b4:bc:4f:4c:a8:f0:14:79:86:92:6e:62:b3:3d:0a:
                    6f:24:6d:a4:a8:f5:b3:b3:70:ee:ee:1c:5c:fb:c2:
                    18:da:ec:5c:10:d9:cd:4f:08:29:c0:ec:5e:df:c3:
                    08:3a:cf:f7:e5:11:d7:49:80:8c:8f:5a:97:d8:b7:
                    2e:5d:e0:5e:ef:64:99:33:20:ae:7a:08:44:46:00:
                    8c:4c:85:d9:83:54:50:a9:e5:27:7f:a0:f0:bc:e6:
                    ca:dc:a7:55:1a:99:3d:06:0c:78:07:b1:1a:81:b2:
                    f8:b5:d6:99:30:a5:6f:d7:b9:f1:4a:57:15:4d:1b:
                    0d:3f:b0:53:8c:c6:4a:1e:e9:70:96:37:80:0f:b5:
                    1d:2a:03:d0:9e:10:75:13:71:ef:ce:88:9b:ac:ae:
                    f6:34:62:68:49:e2:0e:b8:78:91:66:b4:eb:b5:bc:
                    30:d9:30:de:f6:06:e7:6c:27:77:c6:5b:d8:f0:26:
                    ba:96:06:c3:0f:a2:e2:3c:a1:b3:15:98:8b:78:92:
                    a1:de:4c:78:70:64:8f:97:13:91:fd:98:ce:15:76:
                    87:a9:0f:0a:ce:41:94:a1:fd:64:cf:71:88:a1:53:
                    e5:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:D6:58:02:D8:10:43:A9:D3:55:3E:9C:F9:14:20:50:E2:0F:FA:E7
            X509v3 Authority Key Identifier:
                keyid:B9:66:1B:0E:7F:C7:5E:D7:67:D1:8B:56:FC:74:9B:AE:D2:1F:C1:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/323830333a623065303a383031333a3a2f34382d3438203d3e20323732393739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b0e0:8013::/48

    Signature Algorithm: sha256WithRSAEncryption
         b8:dc:f5:0b:70:55:23:2a:78:90:29:67:4b:ee:7a:60:e3:7f:
         0c:17:21:63:2f:ca:cb:fd:d4:bd:3a:bb:25:f7:f3:c6:a1:c9:
         4e:8d:f3:a2:57:dd:c1:fb:a6:49:e6:fb:a0:84:bd:b7:e7:95:
         6c:87:36:39:60:56:a4:ef:f6:2b:9c:1d:83:1a:c4:1f:2c:bd:
         e7:fc:7b:50:b4:ca:bf:9b:a5:10:68:c4:93:fe:72:71:01:c6:
         de:91:a3:87:80:1d:11:8f:fb:7d:1a:81:60:41:89:81:14:33:
         a1:24:60:e9:9d:ac:5e:0b:02:1e:da:0c:3d:f8:fc:46:b8:3d:
         06:ca:80:e8:6b:b0:05:1b:90:c7:a0:f3:2b:2b:1b:4d:3f:c0:
         74:6f:07:d0:ee:ea:f1:58:35:0d:9f:a8:d4:8c:6d:e3:9c:db:
         bb:ba:7e:06:65:df:49:09:38:ca:4d:24:80:be:af:0f:7d:ba:
         05:16:03:b9:39:08:75:e9:69:2f:b3:0a:8f:f3:56:9d:50:f1:
         9f:1e:fb:9b:db:9a:6f:1c:78:a0:bc:d3:83:66:ac:df:dd:fe:
         6e:68:0b:05:9d:2b:7e:8f:3d:00:7b:b7:2f:85:d7:10:e9:d3:
         8e:b3:9b:10:e5:97:d2:97:ee:36:c6:39:4a:cb:43:df:f1:45:
         ea:74:53:bd
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 5 14:02:28 2025 by rpki-client