Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/71952FE7B18CE27775B13403874A6EB99BF4C577597262CDF1E6E30104F69FAB/0/323830333a666530303a3a2f33322d3634203d3e203237363530.roa
File:                     323830333a666530303a3a2f33322d3634203d3e203237363530.roa (raw, json)
Hash identifier:          qyumqJk4OsRKHQJckwcYtbzKZp4qExW5EQzsgqt8WeI=
Subject key identifier:   6A:32:31:88:50:F0:2A:0B:BE:7E:46:F3:1F:6B:B6:11:99:F1:E6:64
Certificate issuer:       /CN=9B09522889B28F5D8574B9F59BD3C8CD01400081
Certificate serial:       593CB8328DEC01693CDF1D383B060A86BA79FD69
Authority key identifier: 9B:09:52:28:89:B2:8F:5D:85:74:B9:F5:9B:D3:C8:CD:01:40:00:81
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9B09522889B28F5D8574B9F59BD3C8CD01400081.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/71952FE7B18CE27775B13403874A6EB99BF4C577597262CDF1E6E30104F69FAB/0/323830333a666530303a3a2f33322d3634203d3e203237363530.roa
Signing time:             Tue 04 Feb 2025 18:50:38 +0000
ROA not before:           Tue 04 Feb 2025 18:45:38 +0000
ROA not after:            Tue 03 Feb 2026 18:50:38 +0000
asID:                     27650
IP address blocks:        2803:fe00::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/71952FE7B18CE27775B13403874A6EB99BF4C577597262CDF1E6E30104F69FAB/0/9B09522889B28F5D8574B9F59BD3C8CD01400081.crl
                          rsync://repository.lacnic.net/rpki/lacnic/71952FE7B18CE27775B13403874A6EB99BF4C577597262CDF1E6E30104F69FAB/0/9B09522889B28F5D8574B9F59BD3C8CD01400081.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9B09522889B28F5D8574B9F59BD3C8CD01400081.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 20:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:3c:b8:32:8d:ec:01:69:3c:df:1d:38:3b:06:0a:86:ba:79:fd:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B09522889B28F5D8574B9F59BD3C8CD01400081
        Validity
            Not Before: Feb  4 18:45:38 2025 GMT
            Not After : Feb  3 18:50:38 2026 GMT
        Subject: CN=6A32318850F02A0BBE7E46F31F6BB61199F1E664
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ab:b4:dc:84:b3:69:0e:b0:04:c0:25:1e:ff:
                    a6:84:95:31:77:f1:88:9b:1c:7c:87:dd:24:72:f1:
                    7a:65:a7:65:5c:7e:3c:90:f5:2c:c2:bd:07:40:7b:
                    5d:ef:1c:e1:32:fc:5e:b4:35:33:41:6c:9f:5b:f8:
                    35:3a:9f:09:67:b0:c9:45:45:c0:9b:ac:b6:01:3b:
                    ec:fb:61:78:3b:df:0b:db:4d:39:79:01:2f:49:db:
                    bc:f5:33:23:0f:a6:46:f6:f4:b3:82:a7:f2:79:19:
                    a8:53:51:e5:21:13:34:30:b4:98:cc:aa:34:11:f2:
                    ae:97:c3:c2:15:06:d3:63:5d:d7:e5:f5:13:52:12:
                    74:9d:2b:53:ec:49:e5:fa:87:cf:52:e4:7f:c3:04:
                    5a:32:af:22:8b:76:6e:7a:9b:52:6d:de:cd:e6:21:
                    26:da:1b:ad:6e:2b:84:82:7f:56:6a:d4:3d:94:4e:
                    b2:b7:2b:fb:df:95:84:9a:fd:d0:36:a4:93:d1:d6:
                    75:de:94:a3:c4:9d:f1:f4:85:51:b0:4a:79:30:d1:
                    c2:85:74:dc:da:58:bb:b2:ec:7e:54:2a:c2:f3:c7:
                    02:fb:42:a5:7a:43:83:eb:d7:7d:58:d7:78:c3:b6:
                    64:20:84:4d:ab:7d:34:fa:ca:df:57:78:ea:09:9c:
                    16:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:32:31:88:50:F0:2A:0B:BE:7E:46:F3:1F:6B:B6:11:99:F1:E6:64
            X509v3 Authority Key Identifier:
                keyid:9B:09:52:28:89:B2:8F:5D:85:74:B9:F5:9B:D3:C8:CD:01:40:00:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/71952FE7B18CE27775B13403874A6EB99BF4C577597262CDF1E6E30104F69FAB/0/9B09522889B28F5D8574B9F59BD3C8CD01400081.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9B09522889B28F5D8574B9F59BD3C8CD01400081.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/71952FE7B18CE27775B13403874A6EB99BF4C577597262CDF1E6E30104F69FAB/0/323830333a666530303a3a2f33322d3634203d3e203237363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:fe00::/32

    Signature Algorithm: sha256WithRSAEncryption
         90:dc:19:72:cf:e8:00:3c:11:66:68:42:d9:db:53:87:a0:42:
         91:e5:c8:b2:ec:e1:bb:4c:b8:2a:c6:77:93:f1:c7:37:9a:41:
         c4:7a:f0:0e:03:45:4f:b5:4a:f6:1f:63:b1:ba:d8:db:0b:5b:
         49:7d:f6:a8:98:95:3b:9e:9a:04:dd:f2:dd:30:cb:4b:bd:bf:
         98:0c:4c:27:ba:8b:4a:52:05:08:d7:4c:d7:4d:5d:17:ec:70:
         95:6f:56:7c:4c:a2:3b:9e:ae:90:0d:bc:e7:05:ff:cd:9d:8c:
         53:e8:6a:c3:8b:44:59:86:40:69:d3:68:cc:bc:af:bb:af:c0:
         fa:d4:05:de:9f:65:36:bc:0f:b8:57:22:47:d8:c2:b5:f2:b2:
         97:c8:e1:ee:91:56:7b:6d:a1:4f:a4:29:6b:dc:b1:6b:46:2a:
         ce:e9:e0:21:8f:db:7d:ac:4f:56:5f:33:ae:bd:1a:e9:39:5e:
         70:bd:c5:5f:b7:4e:2f:13:2f:e8:55:37:2f:15:f4:bf:75:11:
         59:c3:b6:36:d1:a8:f0:96:e3:fb:9b:6b:27:8b:38:df:06:98:
         bb:74:46:a3:3f:e6:c3:f0:8a:f6:b4:2c:ef:61:c8:33:1f:7c:
         9d:88:6a:c4:57:1b:db:28:1a:9f:f0:ee:3f:65:0a:60:53:f4:
         27:14:a2:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 21:06:13 2025 by rpki-client