Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7149D67F42F4530203CB8205A0CD95B7F7412D5F2608F416707418C2F5EE1F71/0/323830333a376131303a3a2f34382d3438203d3e20323731393335.roa
File:                     323830333a376131303a3a2f34382d3438203d3e20323731393335.roa (raw, json)
Hash identifier:          hQnqQw3pZLmmxIfPT/awi3wld2KKNdKB0nAEWcv40XE=
Subject key identifier:   13:12:90:E5:CD:C3:7F:E8:2C:20:44:E3:82:38:20:F2:E1:49:94:45
Certificate issuer:       /CN=9713B9074EC835F3B2C98A3390BFC31D779B7096
Certificate serial:       126B87BC87E11943B51BD87B9C722D1DBD63516B
Authority key identifier: 97:13:B9:07:4E:C8:35:F3:B2:C9:8A:33:90:BF:C3:1D:77:9B:70:96
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9713B9074EC835F3B2C98A3390BFC31D779B7096.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7149D67F42F4530203CB8205A0CD95B7F7412D5F2608F416707418C2F5EE1F71/0/323830333a376131303a3a2f34382d3438203d3e20323731393335.roa
Signing time:             Tue 04 Feb 2025 18:11:34 +0000
ROA not before:           Tue 04 Feb 2025 18:06:34 +0000
ROA not after:            Tue 03 Feb 2026 18:11:34 +0000
asID:                     271935
IP address blocks:        2803:7a10::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7149D67F42F4530203CB8205A0CD95B7F7412D5F2608F416707418C2F5EE1F71/0/9713B9074EC835F3B2C98A3390BFC31D779B7096.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7149D67F42F4530203CB8205A0CD95B7F7412D5F2608F416707418C2F5EE1F71/0/9713B9074EC835F3B2C98A3390BFC31D779B7096.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9713B9074EC835F3B2C98A3390BFC31D779B7096.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 17 Apr 2025 14:53:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:6b:87:bc:87:e1:19:43:b5:1b:d8:7b:9c:72:2d:1d:bd:63:51:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9713B9074EC835F3B2C98A3390BFC31D779B7096
        Validity
            Not Before: Feb  4 18:06:34 2025 GMT
            Not After : Feb  3 18:11:34 2026 GMT
        Subject: CN=131290E5CDC37FE82C2044E3823820F2E1499445
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:b7:68:28:30:5c:11:ad:1c:e5:99:2f:39:76:
                    27:a5:e2:7b:10:42:81:96:d3:0d:7e:5f:8d:4b:74:
                    21:38:3b:28:b5:e5:9b:6d:00:c8:55:9e:2d:65:39:
                    7b:b7:d6:cd:f5:de:2d:af:e8:6c:df:ce:ee:a9:ba:
                    bb:d3:f2:9b:bd:92:68:6d:11:b6:08:21:b7:2b:79:
                    d6:79:f0:28:00:85:ab:c6:b5:a7:25:ed:5e:6e:39:
                    c3:0a:85:bf:00:b4:33:97:3b:2c:15:c1:18:a9:da:
                    cb:db:da:29:3d:7e:c1:8f:8b:02:9e:4b:c9:2d:45:
                    3b:fc:61:b4:a4:d9:47:9a:ce:da:e4:1f:7f:c5:4c:
                    ed:19:56:bc:f3:01:43:eb:8d:e0:ed:e6:34:54:f3:
                    68:51:78:80:8d:0b:c1:e7:0e:7e:46:50:ed:65:4b:
                    ad:be:93:7b:7c:29:a6:4a:9d:d1:1e:64:4b:c1:a5:
                    9c:d5:88:95:29:c5:9a:61:20:55:0d:d6:ef:31:65:
                    00:37:83:33:98:5b:ea:44:eb:42:4f:c5:c9:02:2b:
                    0e:69:3c:04:c0:58:43:d5:13:1e:47:f0:d1:0e:dc:
                    98:f0:18:4b:d9:66:5f:c7:39:1a:77:70:c2:bf:3a:
                    82:f7:6e:9f:24:44:c9:7f:e3:59:9d:1c:07:4d:4e:
                    21:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:12:90:E5:CD:C3:7F:E8:2C:20:44:E3:82:38:20:F2:E1:49:94:45
            X509v3 Authority Key Identifier:
                keyid:97:13:B9:07:4E:C8:35:F3:B2:C9:8A:33:90:BF:C3:1D:77:9B:70:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7149D67F42F4530203CB8205A0CD95B7F7412D5F2608F416707418C2F5EE1F71/0/9713B9074EC835F3B2C98A3390BFC31D779B7096.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9713B9074EC835F3B2C98A3390BFC31D779B7096.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7149D67F42F4530203CB8205A0CD95B7F7412D5F2608F416707418C2F5EE1F71/0/323830333a376131303a3a2f34382d3438203d3e20323731393335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7a10::/48

    Signature Algorithm: sha256WithRSAEncryption
         a2:60:01:df:c6:f4:7e:a7:bf:df:af:e6:df:b5:81:61:ca:b5:
         99:04:de:7c:42:28:af:0d:af:14:cd:44:84:42:43:79:7a:12:
         aa:87:00:5b:e1:85:6e:8f:b6:5c:fd:d7:48:73:b0:8e:16:6f:
         50:64:6b:21:ed:6a:c7:48:a1:63:3e:f4:94:dc:ee:10:dd:d0:
         3e:b2:18:42:68:0b:90:f8:1d:5d:4d:f9:85:4a:90:a7:85:83:
         3a:e6:13:d2:b4:84:d7:92:8c:70:f8:04:3a:e6:44:07:c2:c8:
         dd:2c:24:56:e5:84:06:39:af:8a:36:da:a4:ed:2c:d6:b6:c6:
         bc:af:fc:ac:fe:26:ff:ef:c1:60:32:32:76:1b:b5:cb:b0:c5:
         10:63:cb:73:d1:72:09:d2:10:5e:2a:b8:81:e3:6c:78:7e:d8:
         cf:10:af:80:f5:30:7e:5e:c9:45:43:9c:f5:22:3b:79:c7:3f:
         bd:ad:75:30:41:57:ad:eb:c6:77:42:9a:0b:ff:91:33:72:cd:
         9f:86:79:0a:f3:2a:c1:90:00:fe:c6:52:c9:2a:75:66:84:fe:
         e5:c3:e6:d1:18:af:5e:21:5d:fd:cd:e1:00:49:03:51:30:0d:
         1a:68:b5:03:89:5e:33:7d:5a:20:dd:87:32:3b:20:2d:41:36:
         25:b5:9c:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 10:11:07 2025 by rpki-client