Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7149D67F42F4530203CB8205A0CD95B7F7412D5F2608F416707418C2F5EE1F71/0/323830333a376131303a313a3a2f34382d3438203d3e20323731393335.roa
File:                     323830333a376131303a313a3a2f34382d3438203d3e20323731393335.roa (raw, json)
Hash identifier:          2vngNYl69xW6aA3N0SsV0uGWLrl32oP051IdgYIobSU=
Subject key identifier:   54:F4:57:34:D9:7E:87:9A:D0:07:14:56:B3:0F:DD:C9:75:26:DB:1D
Certificate issuer:       /CN=9713B9074EC835F3B2C98A3390BFC31D779B7096
Certificate serial:       079594E9DDA077A3E421996E3D725E3237E267E2
Authority key identifier: 97:13:B9:07:4E:C8:35:F3:B2:C9:8A:33:90:BF:C3:1D:77:9B:70:96
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9713B9074EC835F3B2C98A3390BFC31D779B7096.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7149D67F42F4530203CB8205A0CD95B7F7412D5F2608F416707418C2F5EE1F71/0/323830333a376131303a313a3a2f34382d3438203d3e20323731393335.roa
Signing time:             Tue 04 Feb 2025 18:11:35 +0000
ROA not before:           Tue 04 Feb 2025 18:06:35 +0000
ROA not after:            Tue 03 Feb 2026 18:11:35 +0000
asID:                     271935
IP address blocks:        2803:7a10:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7149D67F42F4530203CB8205A0CD95B7F7412D5F2608F416707418C2F5EE1F71/0/9713B9074EC835F3B2C98A3390BFC31D779B7096.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7149D67F42F4530203CB8205A0CD95B7F7412D5F2608F416707418C2F5EE1F71/0/9713B9074EC835F3B2C98A3390BFC31D779B7096.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9713B9074EC835F3B2C98A3390BFC31D779B7096.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 11 Apr 2025 11:30:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:95:94:e9:dd:a0:77:a3:e4:21:99:6e:3d:72:5e:32:37:e2:67:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9713B9074EC835F3B2C98A3390BFC31D779B7096
        Validity
            Not Before: Feb  4 18:06:35 2025 GMT
            Not After : Feb  3 18:11:35 2026 GMT
        Subject: CN=54F45734D97E879AD0071456B30FDDC97526DB1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:4a:97:a4:18:aa:da:bf:62:91:1c:2a:fa:26:
                    e0:a9:c4:a3:3b:0c:44:1d:2e:a0:06:b5:8a:00:79:
                    b1:af:b2:e2:75:5b:01:5c:e6:62:de:29:13:0c:af:
                    6a:ec:98:e3:6e:18:81:9c:e5:d1:9c:8e:e0:d9:f8:
                    34:31:ee:2c:e0:d6:d9:0c:42:32:51:1a:d3:7a:23:
                    48:39:1b:45:c3:da:89:e3:73:48:83:ce:a1:10:fc:
                    0e:ea:ac:57:d6:19:14:fc:4b:56:53:1e:f8:f3:eb:
                    6d:7a:02:72:93:00:11:0d:9d:69:be:4d:3a:a8:b2:
                    47:31:92:16:a1:0c:86:40:2d:52:3e:73:5e:43:fd:
                    e4:fd:29:ca:47:44:8d:55:e9:4a:47:2e:2f:b5:84:
                    85:16:47:51:4e:ae:a1:d2:42:13:77:eb:f7:8f:99:
                    52:bb:fb:48:d9:3d:da:52:b8:72:ad:3a:bf:9b:5a:
                    9a:b0:a4:cf:b7:a5:7b:8a:8c:4a:37:01:5a:c7:30:
                    92:79:c3:cb:85:5f:7e:22:54:9b:5f:87:1a:1a:09:
                    d6:ad:95:41:a2:f8:30:bb:90:05:bc:35:85:11:c2:
                    40:f2:ab:09:63:b2:46:be:df:11:db:b3:c6:9e:6c:
                    3e:89:7f:e9:d2:73:f9:8c:06:c4:f5:e2:1c:8c:fd:
                    dc:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:F4:57:34:D9:7E:87:9A:D0:07:14:56:B3:0F:DD:C9:75:26:DB:1D
            X509v3 Authority Key Identifier:
                keyid:97:13:B9:07:4E:C8:35:F3:B2:C9:8A:33:90:BF:C3:1D:77:9B:70:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7149D67F42F4530203CB8205A0CD95B7F7412D5F2608F416707418C2F5EE1F71/0/9713B9074EC835F3B2C98A3390BFC31D779B7096.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9713B9074EC835F3B2C98A3390BFC31D779B7096.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7149D67F42F4530203CB8205A0CD95B7F7412D5F2608F416707418C2F5EE1F71/0/323830333a376131303a313a3a2f34382d3438203d3e20323731393335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7a10:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         7f:0a:7f:aa:e1:3b:22:50:3f:4b:e6:76:38:5f:e7:de:2c:88:
         6f:36:ab:cd:fd:67:1b:e0:69:8e:32:14:f8:7e:46:3f:b0:c9:
         45:ac:cf:d7:d0:2c:27:5f:97:40:ea:68:82:66:21:b4:b2:85:
         64:18:5f:c4:ad:0b:6c:e6:03:06:c0:79:2d:ba:64:45:d5:91:
         cc:f9:64:eb:50:62:f3:1e:66:46:d3:e2:a9:f3:a9:09:3a:3d:
         97:02:01:ac:81:a5:2e:c2:6a:d9:78:e9:c7:e8:3e:d6:9c:70:
         cb:b4:ac:39:fe:62:8f:65:82:78:36:01:a6:39:21:bc:00:7b:
         30:2c:b3:63:5f:6a:7f:65:a1:53:df:05:df:22:4c:9d:0b:77:
         89:5b:3e:0f:cf:82:2e:85:0f:95:aa:66:70:e9:5a:55:b4:77:
         8e:18:17:f6:ed:f8:3c:a1:d4:27:26:9a:36:3f:2b:7d:1d:16:
         45:5c:b8:a9:f0:ed:58:df:56:d6:6f:03:50:7d:73:8b:ce:c2:
         cf:a1:89:a2:75:25:d8:a1:2d:38:9f:40:7c:fb:ab:dc:f5:bb:
         2a:f6:16:02:e0:5f:8e:15:e4:26:58:61:a9:fa:a1:38:e3:0c:
         b0:39:6f:a9:ff:e0:57:23:8f:f3:cf:66:9e:4a:ad:a1:92:90:
         5b:3d:6b:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:39:39 2025 by rpki-client