Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7149D67F42F4530203CB8205A0CD95B7F7412D5F2608F416707418C2F5EE1F71/0/323830333a376131303a363a3a2f34382d3438203d3e20323731393335.roa
File:                     323830333a376131303a363a3a2f34382d3438203d3e20323731393335.roa (raw, json)
Hash identifier:          tOywUJms35jG/hKiAhrynt5jD607o3/cUY57msZBny0=
Subject key identifier:   57:1E:79:88:E3:4E:37:06:63:42:54:6E:0C:8A:93:09:F5:81:EB:B0
Certificate issuer:       /CN=9713B9074EC835F3B2C98A3390BFC31D779B7096
Certificate serial:       6E166859BBE8C0DD68C493AB9DE747D5AC345A0B
Authority key identifier: 97:13:B9:07:4E:C8:35:F3:B2:C9:8A:33:90:BF:C3:1D:77:9B:70:96
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9713B9074EC835F3B2C98A3390BFC31D779B7096.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7149D67F42F4530203CB8205A0CD95B7F7412D5F2608F416707418C2F5EE1F71/0/323830333a376131303a363a3a2f34382d3438203d3e20323731393335.roa
Signing time:             Tue 04 Feb 2025 18:11:36 +0000
ROA not before:           Tue 04 Feb 2025 18:06:36 +0000
ROA not after:            Tue 03 Feb 2026 18:11:36 +0000
asID:                     271935
IP address blocks:        2803:7a10:6::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7149D67F42F4530203CB8205A0CD95B7F7412D5F2608F416707418C2F5EE1F71/0/9713B9074EC835F3B2C98A3390BFC31D779B7096.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7149D67F42F4530203CB8205A0CD95B7F7412D5F2608F416707418C2F5EE1F71/0/9713B9074EC835F3B2C98A3390BFC31D779B7096.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9713B9074EC835F3B2C98A3390BFC31D779B7096.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 14:41:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:16:68:59:bb:e8:c0:dd:68:c4:93:ab:9d:e7:47:d5:ac:34:5a:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9713B9074EC835F3B2C98A3390BFC31D779B7096
        Validity
            Not Before: Feb  4 18:06:36 2025 GMT
            Not After : Feb  3 18:11:36 2026 GMT
        Subject: CN=571E7988E34E37066342546E0C8A9309F581EBB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:98:b1:48:cf:20:f0:2e:92:58:3e:1c:8d:02:
                    e2:a3:cf:ad:e9:2d:63:28:03:05:c8:85:d7:d6:99:
                    5f:80:b4:10:fc:5a:0a:0f:f0:59:9a:66:dd:42:f7:
                    2a:f0:aa:69:76:5f:18:8b:81:be:79:da:5a:0a:10:
                    9e:0e:5f:c7:15:2c:f4:c1:bc:41:b2:24:21:37:94:
                    0e:8d:74:c9:92:c3:a3:9a:da:ac:4d:cf:bf:c7:86:
                    fd:ae:ba:77:5c:fb:65:78:f8:c5:30:02:a9:d6:2e:
                    53:92:32:6c:d7:71:80:a5:b8:94:c0:58:ad:1f:16:
                    32:45:94:2b:e6:a0:1f:36:aa:75:f4:89:1c:72:36:
                    fb:24:26:20:6d:fe:29:06:9f:f0:36:8c:e3:11:63:
                    6c:3b:c6:25:19:3d:a4:7c:a4:10:5c:1c:16:55:18:
                    ba:7c:f4:08:29:03:af:4d:ee:91:13:e7:ac:70:b0:
                    14:60:21:a3:ff:c6:dc:e2:d0:73:8b:45:e1:6e:87:
                    4c:9e:f9:9a:14:3d:c0:c2:6e:dc:29:91:23:e9:f9:
                    fb:05:92:b7:60:8c:5c:01:89:89:a3:42:06:52:22:
                    c1:2a:66:64:6a:80:59:e8:4d:7f:de:62:a4:3e:ce:
                    2d:2e:0e:b8:6a:c7:a6:f0:98:59:41:a2:9d:1d:01:
                    31:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:1E:79:88:E3:4E:37:06:63:42:54:6E:0C:8A:93:09:F5:81:EB:B0
            X509v3 Authority Key Identifier:
                keyid:97:13:B9:07:4E:C8:35:F3:B2:C9:8A:33:90:BF:C3:1D:77:9B:70:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7149D67F42F4530203CB8205A0CD95B7F7412D5F2608F416707418C2F5EE1F71/0/9713B9074EC835F3B2C98A3390BFC31D779B7096.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9713B9074EC835F3B2C98A3390BFC31D779B7096.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7149D67F42F4530203CB8205A0CD95B7F7412D5F2608F416707418C2F5EE1F71/0/323830333a376131303a363a3a2f34382d3438203d3e20323731393335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7a10:6::/48

    Signature Algorithm: sha256WithRSAEncryption
         49:5a:3f:be:6e:b6:e2:a8:db:66:e3:1a:c0:82:2b:29:4a:41:
         41:7c:2f:5e:05:36:4e:d9:1b:ff:da:24:36:5c:1f:f4:cb:4d:
         a2:c0:69:16:bb:2f:a1:23:c0:64:93:3e:39:00:50:51:f4:4e:
         de:a9:11:b6:9c:4f:5f:b4:30:d3:7d:2d:a5:d7:80:06:22:31:
         ef:26:10:0f:06:33:6b:2d:4c:ac:5d:75:3a:cb:6e:64:52:5f:
         01:34:38:fa:3c:4d:14:6a:55:a4:46:db:5b:3f:af:5e:5c:0e:
         03:fc:f5:58:35:c3:74:e0:0f:33:d2:bc:4d:71:2b:6a:44:90:
         f5:44:a8:46:90:96:3e:cc:67:d4:74:b5:55:af:5e:2b:44:83:
         0e:ab:a8:b9:c3:7e:93:28:d9:48:59:7b:04:23:ee:f1:79:46:
         38:f6:d7:52:1d:38:6e:7b:97:a1:5a:a3:c3:f4:c2:23:63:e7:
         c8:1e:e2:0c:d3:24:49:3b:83:77:b6:32:a4:a5:e4:3b:ee:e9:
         30:54:d5:20:bd:8e:a3:9a:da:16:83:e6:81:81:bd:75:24:48:
         e8:02:e7:41:f2:9c:d1:8e:b9:fd:66:c4:0d:90:31:6d:a0:f2:
         c5:0b:4d:98:53:8b:5c:68:26:d0:e7:b9:bb:8b:6b:6d:81:74:
         33:8e:46:b1
-----BEGIN CERTIFICATE-----
MIIFxTCCBK2gAwIBAgIUbhZoWbvowN1oxJOrnedH1aw0WgswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTcxM0I5MDc0RUM4MzVGM0IyQzk4QTMzOTBCRkMzMUQ3
NzlCNzA5NjAeFw0yNTAyMDQxODA2MzZaFw0yNjAyMDMxODExMzZaMDMxMTAvBgNV
BAMTKDU3MUU3OTg4RTM0RTM3MDY2MzQyNTQ2RTBDOEE5MzA5RjU4MUVCQjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdmLFIzyDwLpJYPhyNAuKjz63p
LWMoAwXIhdfWmV+AtBD8WgoP8FmaZt1C9yrwqml2XxiLgb552loKEJ4OX8cVLPTB
vEGyJCE3lA6NdMmSw6Oa2qxNz7/Hhv2uundc+2V4+MUwAqnWLlOSMmzXcYCluJTA
WK0fFjJFlCvmoB82qnX0iRxyNvskJiBt/ikGn/A2jOMRY2w7xiUZPaR8pBBcHBZV
GLp89AgpA69N7pET56xwsBRgIaP/xtzi0HOLReFuh0ye+ZoUPcDCbtwpkSPp+fsF
krdgjFwBiYmjQgZSIsEqZmRqgFnoTX/eYqQ+zi0uDrhqx6bwmFlBop0dATHJAgMB
AAGjggLPMIICyzAdBgNVHQ4EFgQUVx55iONONwZjQlRuDIqTCfWB67AwHwYDVR0j
BBgwFoAUlxO5B07INfOyyYozkL/DHXebcJYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83MTQ5RDY3RjQyRjQ1MzAyMDNDQjgyMDVBMENEOTVCN0Y3
NDEyRDVGMjYwOEY0MTY3MDc0MThDMkY1RUUxRjcxLzAvOTcxM0I5MDc0RUM4MzVG
M0IyQzk4QTMzOTBCRkMzMUQ3NzlCNzA5Ni5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85NzEzQjkwNzRFQzgzNUYzQjJD
OThBMzM5MEJGQzMxRDc3OUI3MDk2LmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNzE0OUQ2N0Y0MkY0NTMwMjAzQ0I4MjA1QTBDRDk1QjdGNzQxMkQ1RjI2
MDhGNDE2NzA3NDE4QzJGNUVFMUY3MS8wLzMyMzgzMDMzM2EzNzYxMzEzMDNhMzYz
YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjM3MzEzOTMzMzUucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAo
A3oQAAYwDQYJKoZIhvcNAQELBQADggEBAElaP75utuKo22bjGsCCKylKQUF8L14F
Nk7ZG//aJDZcH/TLTaLAaRa7L6EjwGSTPjkAUFH0Tt6pEbacT1+0MNN9LaXXgAYi
Me8mEA8GM2stTKxddTrLbmRSXwE0OPo8TRRqVaRG21s/r15cDgP89Vg1w3TgDzPS
vE1xK2pEkPVEqEaQlj7MZ9R0tVWvXitEgw6rqLnDfpMo2UhZewQj7vF5Rjj211Id
OG57l6Fao8P0wiNj58ge4gzTJEk7g3e2MqSl5Dvu6TBU1SC9jqOa2haD5oGBvXUk
SOgC50HynNGOuf1mxA2QMW2g8sULTZhTi1xoJtDnubuLa22BdDOORrE=
-----END CERTIFICATE-----
Generated at Mon Apr 7 14:00:35 2025 by rpki-client