Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/323830333a623065303a383031623a3a2f34382d3438203d3e20323731383033.roa
File:                     323830333a623065303a383031623a3a2f34382d3438203d3e20323731383033.roa (raw, json)
Hash identifier:          4sRRVznzzGFS0F9zXkj0H0FciNwjx7QwZDtlMUiVInc=
Subject key identifier:   00:3C:A6:A3:75:19:FB:69:81:1F:A9:49:E8:CA:27:F8:2C:53:AF:D9
Certificate issuer:       /CN=B9661B0E7FC75ED767D18B56FC749BAED21FC195
Certificate serial:       572E7925FB6331CE5A7DDDEFF7AB467B78CD2E61
Authority key identifier: B9:66:1B:0E:7F:C7:5E:D7:67:D1:8B:56:FC:74:9B:AE:D2:1F:C1:95
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/323830333a623065303a383031623a3a2f34382d3438203d3e20323731383033.roa
Signing time:             Tue 04 Feb 2025 22:08:59 +0000
ROA not before:           Tue 04 Feb 2025 22:03:59 +0000
ROA not after:            Tue 03 Feb 2026 22:08:59 +0000
asID:                     271803
IP address blocks:        2803:b0e0:801b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.crl
                          rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 03:20:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:2e:79:25:fb:63:31:ce:5a:7d:dd:ef:f7:ab:46:7b:78:cd:2e:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9661B0E7FC75ED767D18B56FC749BAED21FC195
        Validity
            Not Before: Feb  4 22:03:59 2025 GMT
            Not After : Feb  3 22:08:59 2026 GMT
        Subject: CN=003CA6A37519FB69811FA949E8CA27F82C53AFD9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:80:d4:83:32:c3:05:52:8f:6e:c7:20:fc:b7:
                    76:5d:52:c0:00:a0:6a:e7:19:bd:ee:23:1a:a2:a1:
                    5f:fd:c2:c8:54:42:d6:af:c2:c4:ed:fb:45:15:4e:
                    ae:b4:99:d4:05:07:83:73:30:4e:44:d1:b9:90:25:
                    8d:38:ba:54:20:45:15:fb:3d:9d:dd:de:05:9d:7f:
                    b3:97:3f:d7:ad:86:8e:b3:61:b2:72:ed:99:54:87:
                    9c:87:dd:ee:35:08:e3:32:61:f0:4c:36:b8:5c:af:
                    04:9c:e3:25:54:43:ae:51:d3:4c:57:c3:bf:c1:c0:
                    fc:93:fc:fa:45:a4:eb:9e:ac:f5:23:3f:ed:da:51:
                    50:05:45:30:0a:4d:fa:39:ad:84:ca:56:a4:dd:68:
                    a9:af:68:5f:53:23:2c:cb:7f:38:ae:f5:84:0a:28:
                    42:46:ff:9c:5c:4e:c9:94:9f:5b:07:d9:fa:12:f6:
                    98:ed:4e:94:d7:39:7a:41:b3:20:7f:8d:50:c4:5a:
                    e4:a2:c3:a6:ba:db:1a:19:ee:f2:c7:c5:e7:1a:17:
                    5d:89:19:3c:2e:ad:9c:64:45:27:58:e5:16:cd:6d:
                    c7:94:20:17:c4:d8:89:86:82:3b:67:e7:d7:a0:a9:
                    df:aa:46:de:8b:5d:21:b8:c1:4f:c5:7e:ab:51:4a:
                    55:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:3C:A6:A3:75:19:FB:69:81:1F:A9:49:E8:CA:27:F8:2C:53:AF:D9
            X509v3 Authority Key Identifier:
                keyid:B9:66:1B:0E:7F:C7:5E:D7:67:D1:8B:56:FC:74:9B:AE:D2:1F:C1:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/323830333a623065303a383031623a3a2f34382d3438203d3e20323731383033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b0e0:801b::/48

    Signature Algorithm: sha256WithRSAEncryption
         2a:ce:90:68:3d:98:7a:3c:6e:fc:06:32:ff:02:e5:f3:62:08:
         d3:92:4b:ff:a5:e3:6e:eb:50:48:3a:70:8a:b4:9f:66:32:c0:
         16:a9:ae:e0:5f:d4:18:da:3f:91:c4:08:42:fa:80:bb:ba:d9:
         8b:4a:a3:54:02:df:bd:bd:83:81:aa:22:a2:50:89:2c:ac:b0:
         19:fd:cc:52:04:91:6c:ab:f8:35:e1:6b:fd:13:6d:07:b2:26:
         39:20:53:67:ff:91:31:ee:b8:6e:96:df:c8:dd:9d:00:5b:07:
         1c:c2:1d:85:f3:c8:97:03:61:76:9a:ad:ca:35:83:ef:91:55:
         55:1f:1c:7b:c4:01:e2:b1:9e:80:21:b9:5e:33:ca:15:29:d9:
         e0:dc:9d:e2:d3:6c:fd:1c:6d:c6:78:58:16:86:ee:0f:84:9d:
         45:d3:a0:be:41:00:b3:e2:70:80:19:3a:91:d2:d9:0a:ef:99:
         cf:8b:a7:e5:26:6e:c4:c8:da:b5:9e:0c:ad:0f:3b:7c:b1:e5:
         b4:06:bb:bf:04:00:51:a8:0f:ae:b1:c7:7e:be:42:04:4b:57:
         55:3e:28:82:db:43:df:0c:ab:1e:a8:4d:a2:bf:3d:6d:26:ab:
         4d:df:c0:4c:15:9c:10:de:76:dc:90:f9:30:94:62:61:27:0f:
         9b:48:1f:c5
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:12:42 2025 by rpki-client