Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7149D67F42F4530203CB8205A0CD95B7F7412D5F2608F416707418C2F5EE1F71/0/323830333a376131303a623a3a2f34382d3438203d3e20323731393335.roa
File:                     323830333a376131303a623a3a2f34382d3438203d3e20323731393335.roa (raw, json)
Hash identifier:          uGZt2RvD5r2k8Im1uCS2KdrMFWzTXS4fJpkIvllTbCQ=
Subject key identifier:   6F:60:02:8A:61:2D:63:11:82:57:25:65:E3:28:E7:9C:34:FD:B9:F3
Certificate issuer:       /CN=9713B9074EC835F3B2C98A3390BFC31D779B7096
Certificate serial:       4226A1EFB8343F08B5CB7F5019F7996866AC4EF5
Authority key identifier: 97:13:B9:07:4E:C8:35:F3:B2:C9:8A:33:90:BF:C3:1D:77:9B:70:96
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9713B9074EC835F3B2C98A3390BFC31D779B7096.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7149D67F42F4530203CB8205A0CD95B7F7412D5F2608F416707418C2F5EE1F71/0/323830333a376131303a623a3a2f34382d3438203d3e20323731393335.roa
Signing time:             Tue 04 Feb 2025 18:11:34 +0000
ROA not before:           Tue 04 Feb 2025 18:06:34 +0000
ROA not after:            Tue 03 Feb 2026 18:11:34 +0000
asID:                     271935
IP address blocks:        2803:7a10:b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7149D67F42F4530203CB8205A0CD95B7F7412D5F2608F416707418C2F5EE1F71/0/9713B9074EC835F3B2C98A3390BFC31D779B7096.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7149D67F42F4530203CB8205A0CD95B7F7412D5F2608F416707418C2F5EE1F71/0/9713B9074EC835F3B2C98A3390BFC31D779B7096.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9713B9074EC835F3B2C98A3390BFC31D779B7096.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 11 Apr 2025 11:30:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:26:a1:ef:b8:34:3f:08:b5:cb:7f:50:19:f7:99:68:66:ac:4e:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9713B9074EC835F3B2C98A3390BFC31D779B7096
        Validity
            Not Before: Feb  4 18:06:34 2025 GMT
            Not After : Feb  3 18:11:34 2026 GMT
        Subject: CN=6F60028A612D631182572565E328E79C34FDB9F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:2b:78:a5:21:1b:de:c8:f4:df:8e:e2:01:89:
                    a3:c0:ee:e1:eb:0e:09:e8:59:ce:23:a2:b9:b7:60:
                    85:07:e6:b3:ce:3c:50:65:79:f9:98:5a:75:2c:dc:
                    5f:50:63:61:33:48:52:44:9a:a0:17:49:dd:b0:c0:
                    59:05:56:fc:cd:a1:4d:9f:91:1d:94:6a:ba:7b:49:
                    8d:6c:4b:da:28:9c:1b:6a:ac:0c:6f:e8:e0:ab:ea:
                    aa:c3:3b:ad:c1:94:13:33:1b:7d:28:3b:1c:b2:aa:
                    4b:53:d0:cd:71:09:2d:00:e3:c6:94:30:20:38:e3:
                    6d:19:d4:fe:d6:1f:04:93:74:c5:66:3b:db:35:11:
                    fb:25:0f:72:1c:d2:21:4e:04:e4:ce:03:8b:cc:aa:
                    c9:0b:01:0f:e5:07:4e:84:98:83:10:1d:0e:4c:72:
                    5a:b8:88:c1:fa:d2:d3:6e:74:f4:51:38:80:7f:24:
                    8c:a4:cc:7b:b8:fd:08:a0:26:b7:fa:50:70:30:95:
                    f1:7d:e7:f2:aa:d8:d0:32:ad:90:7b:d3:a6:43:14:
                    e2:dd:93:c0:5e:24:81:4d:94:db:3f:e8:5f:91:9b:
                    ca:60:32:01:44:8b:9d:66:13:4c:2c:85:e1:33:83:
                    0d:cb:7c:2a:dc:be:73:c0:7d:ae:57:3e:03:6f:29:
                    36:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:60:02:8A:61:2D:63:11:82:57:25:65:E3:28:E7:9C:34:FD:B9:F3
            X509v3 Authority Key Identifier:
                keyid:97:13:B9:07:4E:C8:35:F3:B2:C9:8A:33:90:BF:C3:1D:77:9B:70:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7149D67F42F4530203CB8205A0CD95B7F7412D5F2608F416707418C2F5EE1F71/0/9713B9074EC835F3B2C98A3390BFC31D779B7096.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9713B9074EC835F3B2C98A3390BFC31D779B7096.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7149D67F42F4530203CB8205A0CD95B7F7412D5F2608F416707418C2F5EE1F71/0/323830333a376131303a623a3a2f34382d3438203d3e20323731393335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7a10:b::/48

    Signature Algorithm: sha256WithRSAEncryption
         33:cd:ac:f0:4d:4c:59:48:a6:49:d5:ae:4c:f6:51:31:b4:58:
         77:1d:1c:f3:6c:31:89:68:40:5a:b6:ea:a5:f6:9d:68:f0:26:
         f2:2d:38:a3:f1:09:f3:f0:de:7b:c8:45:53:b3:b4:28:f0:3e:
         0e:eb:2e:e9:82:e1:4b:99:2f:20:99:03:d7:44:53:bc:4f:c4:
         91:4f:fa:3d:6e:f0:1f:79:f0:9c:d7:06:08:83:17:3f:5b:ab:
         1f:86:e5:06:36:bb:01:60:ba:27:ab:39:d2:ce:be:7a:d5:02:
         11:3d:3a:0b:b0:f8:f5:2c:52:aa:0a:d6:d2:9d:7f:ae:11:94:
         e9:ac:1a:ef:31:71:3f:5b:de:4c:79:36:d9:61:8a:a2:fb:29:
         c3:15:d2:c8:d7:de:ff:54:a8:db:c3:12:f9:d7:3d:70:f2:6a:
         3f:5b:ce:c6:b3:5b:62:a4:22:92:c9:d4:6d:a9:c7:4c:2b:a6:
         1b:14:45:eb:a0:62:aa:74:48:7a:b9:aa:e9:72:1e:b0:8d:0c:
         48:80:2c:07:f8:15:ef:1b:68:b4:35:a0:1a:7d:02:c1:dc:05:
         df:76:47:f3:40:b6:93:b5:c2:e2:66:72:99:35:cf:c8:4f:02:
         7e:3b:3d:c0:58:cf:85:fb:a0:35:e8:cb:6d:5c:e8:8a:f1:19:
         ea:ef:18:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:39:34 2025 by rpki-client