Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7149D67F42F4530203CB8205A0CD95B7F7412D5F2608F416707418C2F5EE1F71/0/323830333a376131303a3a2f33322d3332203d3e20323731393335.roa
File:                     323830333a376131303a3a2f33322d3332203d3e20323731393335.roa (raw, json)
Hash identifier:          9BDOrspb4rr5sybb0FSIENKU9OkQ295bIlX20CsOpxM=
Subject key identifier:   9E:85:E1:07:0A:4D:DC:BD:C3:95:58:22:C3:A1:C0:35:E2:94:C3:56
Certificate issuer:       /CN=9713B9074EC835F3B2C98A3390BFC31D779B7096
Certificate serial:       73F14255079A1968B617C2C8627E4C5A9E3151AC
Authority key identifier: 97:13:B9:07:4E:C8:35:F3:B2:C9:8A:33:90:BF:C3:1D:77:9B:70:96
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9713B9074EC835F3B2C98A3390BFC31D779B7096.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7149D67F42F4530203CB8205A0CD95B7F7412D5F2608F416707418C2F5EE1F71/0/323830333a376131303a3a2f33322d3332203d3e20323731393335.roa
Signing time:             Tue 04 Feb 2025 18:11:38 +0000
ROA not before:           Tue 04 Feb 2025 18:06:38 +0000
ROA not after:            Tue 03 Feb 2026 18:11:38 +0000
asID:                     271935
IP address blocks:        2803:7a10::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7149D67F42F4530203CB8205A0CD95B7F7412D5F2608F416707418C2F5EE1F71/0/9713B9074EC835F3B2C98A3390BFC31D779B7096.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7149D67F42F4530203CB8205A0CD95B7F7412D5F2608F416707418C2F5EE1F71/0/9713B9074EC835F3B2C98A3390BFC31D779B7096.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9713B9074EC835F3B2C98A3390BFC31D779B7096.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 11 Apr 2025 11:30:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:f1:42:55:07:9a:19:68:b6:17:c2:c8:62:7e:4c:5a:9e:31:51:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9713B9074EC835F3B2C98A3390BFC31D779B7096
        Validity
            Not Before: Feb  4 18:06:38 2025 GMT
            Not After : Feb  3 18:11:38 2026 GMT
        Subject: CN=9E85E1070A4DDCBDC3955822C3A1C035E294C356
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:99:ef:e3:ad:1d:e3:bb:7a:ff:68:ac:bc:8b:
                    ca:0c:8a:27:20:c3:db:be:1b:e0:2b:6c:8c:06:b8:
                    68:c1:95:69:f5:c2:1c:05:64:7b:14:75:94:90:18:
                    b4:a9:f0:80:ac:c0:3c:9e:68:fe:bf:f2:ab:89:01:
                    fb:6d:ff:a4:d3:35:2f:b2:ec:1e:ad:08:37:be:c7:
                    50:af:02:a0:81:2c:64:2e:99:73:74:5f:85:24:3f:
                    85:ac:82:5f:03:ae:c3:28:b4:2a:17:d3:0f:b0:aa:
                    ab:b1:e9:61:82:07:4d:8d:19:ad:b1:4b:fe:36:a4:
                    d3:fa:5c:75:08:31:25:a2:e7:b9:d9:e6:73:5c:8f:
                    e2:3a:a6:07:8b:c2:ee:92:38:22:72:13:4e:f8:56:
                    9b:0a:a0:f7:85:c5:65:e6:df:98:cf:68:36:1d:34:
                    f3:8f:0f:46:67:85:ec:e5:e3:3a:e7:58:13:33:4a:
                    6c:38:1c:24:e3:d3:77:10:67:1a:26:e3:2a:aa:58:
                    d1:df:e1:6a:de:a0:87:c0:56:a9:15:f7:7c:6b:6a:
                    a0:07:15:7f:e2:5c:19:95:d9:17:c0:9e:bc:70:5e:
                    88:82:20:21:84:22:09:80:a7:cc:bd:bf:ef:78:5d:
                    d0:cd:6f:4f:c3:7e:78:47:ee:11:24:6c:11:cc:24:
                    b9:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:85:E1:07:0A:4D:DC:BD:C3:95:58:22:C3:A1:C0:35:E2:94:C3:56
            X509v3 Authority Key Identifier:
                keyid:97:13:B9:07:4E:C8:35:F3:B2:C9:8A:33:90:BF:C3:1D:77:9B:70:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7149D67F42F4530203CB8205A0CD95B7F7412D5F2608F416707418C2F5EE1F71/0/9713B9074EC835F3B2C98A3390BFC31D779B7096.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9713B9074EC835F3B2C98A3390BFC31D779B7096.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7149D67F42F4530203CB8205A0CD95B7F7412D5F2608F416707418C2F5EE1F71/0/323830333a376131303a3a2f33322d3332203d3e20323731393335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7a10::/32

    Signature Algorithm: sha256WithRSAEncryption
         b7:e0:f3:fe:a9:ed:6d:0c:e3:ad:3a:33:18:95:6f:84:32:f5:
         b0:ba:e4:93:15:d5:c5:09:b2:6e:f9:af:e2:45:b1:bf:c8:2e:
         05:cf:15:73:b9:f4:f4:7c:6b:d3:ae:d2:1f:e9:12:27:5a:ed:
         a6:3b:c8:e3:db:67:ca:b7:fa:e3:32:af:f5:b7:a2:7d:35:04:
         bf:6d:43:21:05:a2:7f:d4:5b:69:c3:99:72:43:8e:8b:00:32:
         6c:13:78:7b:f3:80:ce:df:bb:0d:b0:ff:0b:8a:4b:d4:1f:67:
         a0:d3:2e:c3:ac:21:53:4c:b0:54:05:9f:c1:24:01:e3:27:18:
         99:b5:fb:1e:7a:bc:a9:04:9b:2d:cd:eb:d4:78:cb:9d:e6:e0:
         41:fb:7e:5c:eb:33:78:61:f3:9f:0d:70:fc:1b:70:f5:a4:a1:
         a0:67:32:4f:bc:5e:a1:c9:85:03:b9:7e:4c:d8:f7:45:87:b1:
         02:68:7b:05:98:af:da:99:ac:86:cb:c7:0a:f8:dc:09:dc:da:
         45:0b:38:55:e7:10:af:17:93:82:4b:f1:aa:ad:ed:de:3e:cb:
         8e:09:82:02:c0:67:d2:77:69:ba:26:3c:26:c4:e1:79:cc:f6:
         31:66:28:e5:d9:0a:af:ad:a7:28:a0:94:fd:b8:1e:fb:70:3d:
         96:dc:00:2c
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUc/FCVQeaGWi2F8LIYn5MWp4xUawwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTcxM0I5MDc0RUM4MzVGM0IyQzk4QTMzOTBCRkMzMUQ3
NzlCNzA5NjAeFw0yNTAyMDQxODA2MzhaFw0yNjAyMDMxODExMzhaMDMxMTAvBgNV
BAMTKDlFODVFMTA3MEE0RERDQkRDMzk1NTgyMkMzQTFDMDM1RTI5NEMzNTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5me/jrR3ju3r/aKy8i8oMiicg
w9u+G+ArbIwGuGjBlWn1whwFZHsUdZSQGLSp8ICswDyeaP6/8quJAftt/6TTNS+y
7B6tCDe+x1CvAqCBLGQumXN0X4UkP4Wsgl8DrsMotCoX0w+wqqux6WGCB02NGa2x
S/42pNP6XHUIMSWi57nZ5nNcj+I6pgeLwu6SOCJyE074VpsKoPeFxWXm35jPaDYd
NPOPD0Znhezl4zrnWBMzSmw4HCTj03cQZxom4yqqWNHf4WreoIfAVqkV93xraqAH
FX/iXBmV2RfAnrxwXoiCICGEIgmAp8y9v+94XdDNb0/DfnhH7hEkbBHMJLndAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUnoXhBwpN3L3DlVgiw6HANeKUw1YwHwYDVR0j
BBgwFoAUlxO5B07INfOyyYozkL/DHXebcJYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83MTQ5RDY3RjQyRjQ1MzAyMDNDQjgyMDVBMENEOTVCN0Y3
NDEyRDVGMjYwOEY0MTY3MDc0MThDMkY1RUUxRjcxLzAvOTcxM0I5MDc0RUM4MzVG
M0IyQzk4QTMzOTBCRkMzMUQ3NzlCNzA5Ni5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85NzEzQjkwNzRFQzgzNUYzQjJD
OThBMzM5MEJGQzMxRDc3OUI3MDk2LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNzE0OUQ2N0Y0MkY0NTMwMjAzQ0I4MjA1QTBDRDk1QjdGNzQxMkQ1RjI2
MDhGNDE2NzA3NDE4QzJGNUVFMUY3MS8wLzMyMzgzMDMzM2EzNzYxMzEzMDNhM2Ey
ZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzczMTM5MzMzNS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDehAw
DQYJKoZIhvcNAQELBQADggEBALfg8/6p7W0M4606MxiVb4Qy9bC65JMV1cUJsm75
r+JFsb/ILgXPFXO59PR8a9Ou0h/pEida7aY7yOPbZ8q3+uMyr/W3on01BL9tQyEF
on/UW2nDmXJDjosAMmwTeHvzgM7fuw2w/wuKS9QfZ6DTLsOsIVNMsFQFn8EkAeMn
GJm1+x56vKkEmy3N69R4y53m4EH7flzrM3hh858NcPwbcPWkoaBnMk+8XqHJhQO5
fkzY90WHsQJoewWYr9qZrIbLxwr43Anc2kULOFXnEK8Xk4JL8aqt7d4+y44JggLA
Z9J3abomPCbE4XnM9jFmKOXZCq+tpyiglP24HvtwPZbcACw=
-----END CERTIFICATE-----
Generated at Mon Apr 7 20:47:48 2025 by rpki-client