Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7149D67F42F4530203CB8205A0CD95B7F7412D5F2608F416707418C2F5EE1F71/0/323830333a376131303a613a3a2f34382d3438203d3e20323731393335.roa
File:                     323830333a376131303a613a3a2f34382d3438203d3e20323731393335.roa (raw, json)
Hash identifier:          3grww3LjzlLc0GPWsxdfMh9EHhxWl1lxEREBecJdOh8=
Subject key identifier:   85:EF:EA:D7:B8:07:FD:61:89:B0:32:DB:02:44:FA:B0:2F:C2:A7:57
Certificate issuer:       /CN=9713B9074EC835F3B2C98A3390BFC31D779B7096
Certificate serial:       31F8501CE7023954377D2251C9055C471E6C64E4
Authority key identifier: 97:13:B9:07:4E:C8:35:F3:B2:C9:8A:33:90:BF:C3:1D:77:9B:70:96
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9713B9074EC835F3B2C98A3390BFC31D779B7096.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7149D67F42F4530203CB8205A0CD95B7F7412D5F2608F416707418C2F5EE1F71/0/323830333a376131303a613a3a2f34382d3438203d3e20323731393335.roa
Signing time:             Tue 04 Feb 2025 18:11:36 +0000
ROA not before:           Tue 04 Feb 2025 18:06:36 +0000
ROA not after:            Tue 03 Feb 2026 18:11:36 +0000
asID:                     271935
IP address blocks:        2803:7a10:a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7149D67F42F4530203CB8205A0CD95B7F7412D5F2608F416707418C2F5EE1F71/0/9713B9074EC835F3B2C98A3390BFC31D779B7096.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7149D67F42F4530203CB8205A0CD95B7F7412D5F2608F416707418C2F5EE1F71/0/9713B9074EC835F3B2C98A3390BFC31D779B7096.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9713B9074EC835F3B2C98A3390BFC31D779B7096.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 11 Apr 2025 11:30:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:f8:50:1c:e7:02:39:54:37:7d:22:51:c9:05:5c:47:1e:6c:64:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9713B9074EC835F3B2C98A3390BFC31D779B7096
        Validity
            Not Before: Feb  4 18:06:36 2025 GMT
            Not After : Feb  3 18:11:36 2026 GMT
        Subject: CN=85EFEAD7B807FD6189B032DB0244FAB02FC2A757
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:fc:af:b2:6a:da:51:5f:ab:a2:81:cb:1f:2f:
                    f1:3a:35:ee:86:5c:6c:57:ea:e0:de:d5:29:8b:a9:
                    eb:1a:14:8f:ae:43:cb:65:2c:d1:6b:9d:66:33:53:
                    b7:e5:90:71:a5:8b:f5:eb:92:16:59:f6:57:a0:e6:
                    1d:be:8d:8b:fe:36:7d:b0:aa:13:49:12:aa:c1:d4:
                    aa:44:af:ee:60:29:d1:19:51:a3:7d:2e:1e:58:45:
                    99:ee:59:0e:87:60:66:e8:d5:29:75:e5:4b:52:5c:
                    08:62:41:0f:d2:0b:86:76:cd:e4:9a:3e:0a:b7:49:
                    06:e6:bf:38:9a:3d:55:fa:ed:db:42:69:f8:7f:0e:
                    53:b1:9d:73:a9:12:5a:83:27:27:6b:8a:9a:ef:46:
                    9f:25:ad:d0:0a:19:a2:93:70:da:ef:cd:a1:44:23:
                    58:cf:17:32:7d:a1:bf:7a:45:89:7d:51:df:19:91:
                    c1:2b:fa:31:77:96:ca:7e:6c:47:05:7a:39:e2:27:
                    1e:e2:bb:48:a6:b5:d5:ad:bf:8c:8f:bc:de:1d:cb:
                    3f:bc:eb:ba:8d:65:ba:5a:83:7d:4a:94:f9:84:f7:
                    7f:dd:8b:45:2e:5b:9b:65:54:f9:b2:b7:02:87:29:
                    4c:1e:d5:5e:7e:c0:f0:84:94:f3:27:e6:03:0e:e1:
                    5d:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:EF:EA:D7:B8:07:FD:61:89:B0:32:DB:02:44:FA:B0:2F:C2:A7:57
            X509v3 Authority Key Identifier:
                keyid:97:13:B9:07:4E:C8:35:F3:B2:C9:8A:33:90:BF:C3:1D:77:9B:70:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7149D67F42F4530203CB8205A0CD95B7F7412D5F2608F416707418C2F5EE1F71/0/9713B9074EC835F3B2C98A3390BFC31D779B7096.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9713B9074EC835F3B2C98A3390BFC31D779B7096.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7149D67F42F4530203CB8205A0CD95B7F7412D5F2608F416707418C2F5EE1F71/0/323830333a376131303a613a3a2f34382d3438203d3e20323731393335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7a10:a::/48

    Signature Algorithm: sha256WithRSAEncryption
         cd:80:45:fc:31:54:5a:0e:a6:ac:48:17:de:a2:b4:8b:b1:7d:
         b8:74:c3:74:d5:73:7c:42:a2:8e:85:eb:7c:de:6d:f7:d6:6f:
         e1:ce:ca:04:36:67:ae:5e:30:65:10:9d:10:53:68:1b:3b:47:
         71:d4:33:87:42:65:75:75:92:cb:f8:5a:a3:9f:5b:50:0e:14:
         f2:1a:3f:b2:9f:af:51:db:fb:e6:36:db:54:fc:fc:51:17:16:
         08:09:59:90:77:01:e1:75:c2:7d:b1:ca:d0:37:35:bd:df:5d:
         b5:79:1a:7a:af:9f:64:aa:44:20:36:87:78:1a:43:e0:5f:95:
         ab:46:30:6d:c2:d6:a8:ea:b8:cd:fd:5e:4b:a5:1c:9f:16:cd:
         00:6f:30:23:ff:20:9a:5b:c1:b7:ae:b4:25:35:3f:cf:76:83:
         f3:3c:6a:2d:72:c0:20:2c:e3:d8:0f:d9:27:0f:b0:87:e3:5b:
         82:48:d2:3d:a0:63:7c:25:1e:42:c5:a9:20:6c:cc:8d:be:58:
         17:dc:d6:3b:07:bc:1f:ae:be:c1:a0:1c:18:30:89:70:65:3f:
         94:f4:86:b6:c0:d6:ca:4f:40:b9:5d:d1:5d:d2:6d:27:6e:e5:
         7a:86:a7:c1:84:3d:4f:37:7d:f5:89:b9:17:16:03:23:00:42:
         e6:ee:7b:d6
-----BEGIN CERTIFICATE-----
MIIFxTCCBK2gAwIBAgIUMfhQHOcCOVQ3fSJRyQVcRx5sZOQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTcxM0I5MDc0RUM4MzVGM0IyQzk4QTMzOTBCRkMzMUQ3
NzlCNzA5NjAeFw0yNTAyMDQxODA2MzZaFw0yNjAyMDMxODExMzZaMDMxMTAvBgNV
BAMTKDg1RUZFQUQ3QjgwN0ZENjE4OUIwMzJEQjAyNDRGQUIwMkZDMkE3NTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDP/K+yatpRX6uigcsfL/E6Ne6G
XGxX6uDe1SmLqesaFI+uQ8tlLNFrnWYzU7flkHGli/XrkhZZ9leg5h2+jYv+Nn2w
qhNJEqrB1KpEr+5gKdEZUaN9Lh5YRZnuWQ6HYGbo1Sl15UtSXAhiQQ/SC4Z2zeSa
Pgq3SQbmvziaPVX67dtCafh/DlOxnXOpElqDJydriprvRp8lrdAKGaKTcNrvzaFE
I1jPFzJ9ob96RYl9Ud8ZkcEr+jF3lsp+bEcFejniJx7iu0imtdWtv4yPvN4dyz+8
67qNZbpag31KlPmE93/di0UuW5tlVPmytwKHKUwe1V5+wPCElPMn5gMO4V1pAgMB
AAGjggLPMIICyzAdBgNVHQ4EFgQUhe/q17gH/WGJsDLbAkT6sC/Cp1cwHwYDVR0j
BBgwFoAUlxO5B07INfOyyYozkL/DHXebcJYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83MTQ5RDY3RjQyRjQ1MzAyMDNDQjgyMDVBMENEOTVCN0Y3
NDEyRDVGMjYwOEY0MTY3MDc0MThDMkY1RUUxRjcxLzAvOTcxM0I5MDc0RUM4MzVG
M0IyQzk4QTMzOTBCRkMzMUQ3NzlCNzA5Ni5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85NzEzQjkwNzRFQzgzNUYzQjJD
OThBMzM5MEJGQzMxRDc3OUI3MDk2LmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNzE0OUQ2N0Y0MkY0NTMwMjAzQ0I4MjA1QTBDRDk1QjdGNzQxMkQ1RjI2
MDhGNDE2NzA3NDE4QzJGNUVFMUY3MS8wLzMyMzgzMDMzM2EzNzYxMzEzMDNhNjEz
YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjM3MzEzOTMzMzUucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAo
A3oQAAowDQYJKoZIhvcNAQELBQADggEBAM2ARfwxVFoOpqxIF96itIuxfbh0w3TV
c3xCoo6F63zebffWb+HOygQ2Z65eMGUQnRBTaBs7R3HUM4dCZXV1ksv4WqOfW1AO
FPIaP7Kfr1Hb++Y221T8/FEXFggJWZB3AeF1wn2xytA3Nb3fXbV5Gnqvn2SqRCA2
h3gaQ+BflatGMG3C1qjquM39XkulHJ8WzQBvMCP/IJpbwbeutCU1P892g/M8ai1y
wCAs49gP2ScPsIfjW4JI0j2gY3wlHkLFqSBszI2+WBfc1jsHvB+uvsGgHBgwiXBl
P5T0hrbA1spPQLld0V3SbSdu5XqGp8GEPU83ffWJuRcWAyMAQubue9Y=
-----END CERTIFICATE-----
Generated at Tue Apr 8 00:38:38 2025 by rpki-client