Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/70B388EE5D2733DB331DEE1C412F33B9FF13193D63DA673F426FBB776368D1DF/0/323830333a336265303a3a2f33322d3438203d3e20323730303836.roa
File:                     323830333a336265303a3a2f33322d3438203d3e20323730303836.roa (raw, json)
Hash identifier:          yN33/FU2UbiXFx8E63CtXMWzv16N/jCVblhx2aFTFHQ=
Subject key identifier:   07:3A:A0:08:5D:34:21:73:E2:83:6E:10:21:82:37:62:27:20:E4:05
Certificate issuer:       /CN=107E18F14C8F32AF09764B99DBE7A6F0B39DB6CC
Certificate serial:       7CD4C78A8AC3653F065A9D7AE444990B412B37D8
Authority key identifier: 10:7E:18:F1:4C:8F:32:AF:09:76:4B:99:DB:E7:A6:F0:B3:9D:B6:CC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/107E18F14C8F32AF09764B99DBE7A6F0B39DB6CC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/70B388EE5D2733DB331DEE1C412F33B9FF13193D63DA673F426FBB776368D1DF/0/323830333a336265303a3a2f33322d3438203d3e20323730303836.roa
Signing time:             Tue 18 Mar 2025 19:20:00 +0000
ROA not before:           Tue 18 Mar 2025 19:15:00 +0000
ROA not after:            Tue 17 Mar 2026 19:20:00 +0000
asID:                     270086
IP address blocks:        2803:3be0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/70B388EE5D2733DB331DEE1C412F33B9FF13193D63DA673F426FBB776368D1DF/0/107E18F14C8F32AF09764B99DBE7A6F0B39DB6CC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/70B388EE5D2733DB331DEE1C412F33B9FF13193D63DA673F426FBB776368D1DF/0/107E18F14C8F32AF09764B99DBE7A6F0B39DB6CC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/107E18F14C8F32AF09764B99DBE7A6F0B39DB6CC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:d4:c7:8a:8a:c3:65:3f:06:5a:9d:7a:e4:44:99:0b:41:2b:37:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=107E18F14C8F32AF09764B99DBE7A6F0B39DB6CC
        Validity
            Not Before: Mar 18 19:15:00 2025 GMT
            Not After : Mar 17 19:20:00 2026 GMT
        Subject: CN=073AA0085D342173E2836E10218237622720E405
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:3c:03:8b:ba:63:fd:8f:f0:f1:ea:c8:63:34:
                    2c:36:72:72:4e:1f:f3:cc:a3:7a:20:53:8f:f4:96:
                    82:4e:2d:7b:17:54:bc:50:bc:62:03:33:1a:ad:ec:
                    18:d1:f3:7c:dc:fa:04:4f:c1:bd:eb:4c:42:54:d6:
                    1a:d1:a4:43:20:8d:4d:e3:e8:35:40:62:05:67:f3:
                    83:f2:99:e1:3a:4f:1c:ff:29:79:a6:4a:cc:42:67:
                    ec:e9:94:cf:9f:2b:1a:73:96:12:61:02:29:6f:93:
                    92:33:b5:8b:3e:26:2b:6a:46:e2:05:d5:7b:62:68:
                    5e:6a:5d:57:15:23:47:43:50:9d:85:54:61:cf:9e:
                    0f:a9:a8:43:d7:5b:8e:07:e1:7a:db:10:6c:1a:b3:
                    31:4a:43:48:83:95:d8:4f:83:8f:33:e0:cc:fa:9c:
                    0d:95:50:5a:90:4c:56:19:f6:9e:03:38:ac:17:e4:
                    97:bf:da:a7:74:81:f5:90:24:de:15:71:0d:93:36:
                    bd:03:69:cc:de:6d:b7:e6:b4:8e:4a:4a:ea:de:cf:
                    e0:a9:d5:29:7e:21:f0:1c:4e:34:e8:3d:13:00:70:
                    19:54:b3:4f:98:01:e0:df:d2:0f:d8:11:01:0b:41:
                    8c:a5:b6:ca:51:45:3e:c7:22:be:3a:d5:fe:66:40:
                    c4:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:3A:A0:08:5D:34:21:73:E2:83:6E:10:21:82:37:62:27:20:E4:05
            X509v3 Authority Key Identifier:
                keyid:10:7E:18:F1:4C:8F:32:AF:09:76:4B:99:DB:E7:A6:F0:B3:9D:B6:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/70B388EE5D2733DB331DEE1C412F33B9FF13193D63DA673F426FBB776368D1DF/0/107E18F14C8F32AF09764B99DBE7A6F0B39DB6CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/107E18F14C8F32AF09764B99DBE7A6F0B39DB6CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/70B388EE5D2733DB331DEE1C412F33B9FF13193D63DA673F426FBB776368D1DF/0/323830333a336265303a3a2f33322d3438203d3e20323730303836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3be0::/32

    Signature Algorithm: sha256WithRSAEncryption
         ac:eb:0f:44:9b:45:9d:55:de:60:99:e6:90:fb:71:2c:04:09:
         cb:5f:ba:53:ae:4f:cc:33:ee:77:e6:ae:4f:8f:05:b8:bb:16:
         4b:92:5e:d0:3e:f4:36:26:8c:28:88:d3:e6:6c:15:c0:ef:d6:
         ce:8e:ef:7d:b2:2b:65:2b:ff:fa:72:8c:62:24:45:6e:13:ba:
         6a:6f:35:cc:37:f6:5b:43:62:a7:c8:0c:80:42:55:ef:09:6c:
         c7:c4:74:22:46:de:0e:ff:7a:13:7e:ed:49:d6:b5:a0:5d:0a:
         f6:32:be:c7:3f:51:1f:24:9e:3f:c0:45:e5:9b:0d:33:92:af:
         67:db:80:7d:b4:05:2c:0b:c9:c8:01:90:b3:3d:c9:45:d0:c4:
         e6:4b:f2:c6:f4:ec:ce:07:a8:78:56:bc:bd:7b:b8:21:f4:32:
         06:d9:9f:01:ef:20:dd:d9:9b:c1:5e:8d:e9:e9:e9:cb:90:dc:
         78:5e:59:36:73:3a:81:e1:57:6d:c7:96:e5:32:48:ef:8f:d1:
         3d:76:d0:01:b0:bc:d9:ba:22:d9:21:da:a6:67:95:c9:e5:6c:
         23:b3:46:71:9d:c0:8c:f3:a7:2f:bd:02:8c:a2:cb:df:f9:49:
         1f:a4:31:4e:f8:04:b9:50:bd:cf:3d:7a:6a:04:d1:81:ea:07:
         34:67:70:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 07:39:20 2025 by rpki-client