Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/73EF571464D610EC93C535C3D719F59FA2E8BA44FC226E3313168AD8ABC5479A/0/323830333a626239303a3a2f33322d3438203d3e20323733303530.roa
File:                     323830333a626239303a3a2f33322d3438203d3e20323733303530.roa (raw, json)
Hash identifier:          kj6zPq1xX/JH6maLy91qKz1jZ9Y4Eonix9oqnVgTrTo=
Subject key identifier:   1C:67:87:61:63:1D:42:C8:31:31:95:FC:F9:D7:57:F6:87:7E:4E:17
Certificate issuer:       /CN=F106A85768CEBFFFB53C8EB7621B5F6F19F9F135
Certificate serial:       32E7CD884352035A1EF9A0E1EA9A1383393A8556
Authority key identifier: F1:06:A8:57:68:CE:BF:FF:B5:3C:8E:B7:62:1B:5F:6F:19:F9:F1:35
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F106A85768CEBFFFB53C8EB7621B5F6F19F9F135.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/73EF571464D610EC93C535C3D719F59FA2E8BA44FC226E3313168AD8ABC5479A/0/323830333a626239303a3a2f33322d3438203d3e20323733303530.roa
Signing time:             Wed 29 Jan 2025 12:10:00 +0000
ROA not before:           Wed 29 Jan 2025 12:05:00 +0000
ROA not after:            Wed 28 Jan 2026 12:10:00 +0000
asID:                     273050
IP address blocks:        2803:bb90::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/73EF571464D610EC93C535C3D719F59FA2E8BA44FC226E3313168AD8ABC5479A/0/F106A85768CEBFFFB53C8EB7621B5F6F19F9F135.crl
                          rsync://repository.lacnic.net/rpki/lacnic/73EF571464D610EC93C535C3D719F59FA2E8BA44FC226E3313168AD8ABC5479A/0/F106A85768CEBFFFB53C8EB7621B5F6F19F9F135.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F106A85768CEBFFFB53C8EB7621B5F6F19F9F135.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 30 Apr 2025 05:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:e7:cd:88:43:52:03:5a:1e:f9:a0:e1:ea:9a:13:83:39:3a:85:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F106A85768CEBFFFB53C8EB7621B5F6F19F9F135
        Validity
            Not Before: Jan 29 12:05:00 2025 GMT
            Not After : Jan 28 12:10:00 2026 GMT
        Subject: CN=1C678761631D42C8313195FCF9D757F6877E4E17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:bd:58:81:6e:43:58:c6:af:0f:99:06:28:2c:
                    9a:2d:a8:33:89:16:cb:aa:39:a7:14:49:be:00:8c:
                    76:ba:09:c0:cc:29:64:c8:75:53:7f:e8:73:37:ab:
                    67:f3:be:ff:eb:02:60:a6:f5:f0:01:28:27:f8:06:
                    12:c0:71:5a:e6:e6:54:3d:bf:7c:e8:28:9e:bd:0d:
                    af:57:79:16:26:2c:c5:c9:c5:6f:7b:50:dd:2a:05:
                    5f:5c:41:b0:ef:52:a6:ce:3e:ab:8a:58:94:a1:6f:
                    d1:e3:6c:96:df:d4:19:c8:de:94:1a:bf:a8:9c:52:
                    e3:70:3c:b9:23:78:f8:31:d7:40:3e:1c:5a:09:b3:
                    06:3d:a5:3d:a3:41:72:ea:b3:9f:cf:00:19:e9:9d:
                    f2:39:36:1d:f6:69:24:18:fa:2f:8d:f8:fb:30:ba:
                    0a:ad:ad:ef:70:c7:5b:8e:eb:6e:4a:18:0a:0f:7c:
                    f6:53:35:52:72:d8:71:25:72:cc:25:d7:d2:72:92:
                    36:bd:41:87:9c:94:93:1e:fb:8e:d7:b1:88:3c:4f:
                    24:06:72:10:b0:6a:a9:10:86:a6:16:58:ad:36:97:
                    bb:17:f7:bf:b3:26:e2:fe:a3:66:e5:da:8d:b3:56:
                    a2:fd:28:ec:97:ae:ca:fa:46:c0:1e:fd:36:6e:fc:
                    bd:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:67:87:61:63:1D:42:C8:31:31:95:FC:F9:D7:57:F6:87:7E:4E:17
            X509v3 Authority Key Identifier:
                keyid:F1:06:A8:57:68:CE:BF:FF:B5:3C:8E:B7:62:1B:5F:6F:19:F9:F1:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/73EF571464D610EC93C535C3D719F59FA2E8BA44FC226E3313168AD8ABC5479A/0/F106A85768CEBFFFB53C8EB7621B5F6F19F9F135.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F106A85768CEBFFFB53C8EB7621B5F6F19F9F135.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/73EF571464D610EC93C535C3D719F59FA2E8BA44FC226E3313168AD8ABC5479A/0/323830333a626239303a3a2f33322d3438203d3e20323733303530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:bb90::/32

    Signature Algorithm: sha256WithRSAEncryption
         81:06:70:33:c9:95:7a:db:9e:de:f4:5d:36:a5:b0:a8:ff:16:
         48:df:76:7f:6f:9e:ca:98:2b:aa:f6:56:28:12:0a:65:97:41:
         e1:00:03:fe:d9:da:31:0c:87:6c:00:d0:6a:bc:b5:ee:75:4d:
         4d:af:42:ee:38:0a:35:9a:fa:89:3b:47:6f:8f:28:9d:e9:98:
         5a:bc:1b:32:c5:12:4e:75:b2:57:f4:e9:94:67:b4:66:ec:28:
         6f:03:e2:19:ea:a7:e0:52:ab:6f:eb:02:86:54:63:06:1c:10:
         25:36:4f:00:bb:0c:59:60:14:d4:69:50:2a:c9:8c:d8:34:67:
         e8:54:68:f8:cb:a4:a7:8e:56:de:52:e2:a1:d7:21:94:52:9c:
         da:21:2a:de:d0:68:a9:9a:59:f0:f2:63:f5:f8:27:c8:9f:9a:
         a2:58:e5:54:b1:43:67:30:88:ff:b9:15:47:73:71:85:4a:bf:
         22:e2:ae:54:99:41:66:4f:48:41:2a:63:18:98:23:ce:70:db:
         60:85:57:e2:fd:10:c3:66:c7:b8:07:16:f2:a3:fa:6a:b4:1b:
         35:94:8f:15:d7:a6:b4:0e:c4:f5:a9:31:bc:52:0c:1c:0a:43:
         1f:71:0e:29:45:d0:fc:b0:40:ab:5a:4c:73:02:ab:4f:16:02:
         30:87:1e:30
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUMufNiENSA1oe+aDh6poTgzk6hVYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjEwNkE4NTc2OENFQkZGRkI1M0M4RUI3NjIxQjVGNkYx
OUY5RjEzNTAeFw0yNTAxMjkxMjA1MDBaFw0yNjAxMjgxMjEwMDBaMDMxMTAvBgNV
BAMTKDFDNjc4NzYxNjMxRDQyQzgzMTMxOTVGQ0Y5RDc1N0Y2ODc3RTRFMTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyvViBbkNYxq8PmQYoLJotqDOJ
FsuqOacUSb4AjHa6CcDMKWTIdVN/6HM3q2fzvv/rAmCm9fABKCf4BhLAcVrm5lQ9
v3zoKJ69Da9XeRYmLMXJxW97UN0qBV9cQbDvUqbOPquKWJShb9HjbJbf1BnI3pQa
v6icUuNwPLkjePgx10A+HFoJswY9pT2jQXLqs5/PABnpnfI5Nh32aSQY+i+N+Psw
ugqtre9wx1uO625KGAoPfPZTNVJy2HElcswl19Jykja9QYeclJMe+47XsYg8TyQG
chCwaqkQhqYWWK02l7sX97+zJuL+o2bl2o2zVqL9KOyXrsr6RsAe/TZu/L0dAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUHGeHYWMdQsgxMZX8+ddX9od+ThcwHwYDVR0j
BBgwFoAU8QaoV2jOv/+1PI63Yhtfbxn58TUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83M0VGNTcxNDY0RDYxMEVDOTNDNTM1QzNENzE5RjU5RkEy
RThCQTQ0RkMyMjZFMzMxMzE2OEFEOEFCQzU0NzlBLzAvRjEwNkE4NTc2OENFQkZG
RkI1M0M4RUI3NjIxQjVGNkYxOUY5RjEzNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GMTA2QTg1NzY4Q0VCRkZGQjUz
QzhFQjc2MjFCNUY2RjE5RjlGMTM1LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNzNFRjU3MTQ2NEQ2MTBFQzkzQzUzNUMzRDcxOUY1OUZBMkU4QkE0NEZD
MjI2RTMzMTMxNjhBRDhBQkM1NDc5QS8wLzMyMzgzMDMzM2E2MjYyMzkzMDNhM2Ey
ZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzczMzMwMzUzMC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDu5Aw
DQYJKoZIhvcNAQELBQADggEBAIEGcDPJlXrbnt70XTalsKj/Fkjfdn9vnsqYK6r2
VigSCmWXQeEAA/7Z2jEMh2wA0Gq8te51TU2vQu44CjWa+ok7R2+PKJ3pmFq8GzLF
Ek51slf06ZRntGbsKG8D4hnqp+BSq2/rAoZUYwYcECU2TwC7DFlgFNRpUCrJjNg0
Z+hUaPjLpKeOVt5S4qHXIZRSnNohKt7QaKmaWfDyY/X4J8ifmqJY5VSxQ2cwiP+5
FUdzcYVKvyLirlSZQWZPSEEqYxiYI85w22CFV+L9EMNmx7gHFvKj+mq0GzWUjxXX
prQOxPWpMbxSDBwKQx9xDilF0PywQKtaTHMCq08WAjCHHjA=
-----END CERTIFICATE-----
Generated at Sun Apr 27 01:38:33 2025 by rpki-client