Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7F4152A59784624CF228AF49EA43DD0BA3CD8108953E071DA1BD3307EE1DBB9C/0/323830333a3635303a3130303a3a2f34302d3430203d3e20323733313932.roa
File:                     323830333a3635303a3130303a3a2f34302d3430203d3e20323733313932.roa (raw, json)
Hash identifier:          /Y/B38Sp1uLuRKDbp5UYeFZy4sBpt0SfFmf2Omh4kBM=
Subject key identifier:   1B:59:A0:28:C7:88:E8:89:32:C6:11:FA:F5:03:A6:4A:95:8C:24:EC
Certificate issuer:       /CN=96E6C96FEA4FC5C17A5104F06884C50C6AF015A0
Certificate serial:       356CF8EBA79787A14F62722267BD8A53790750B5
Authority key identifier: 96:E6:C9:6F:EA:4F:C5:C1:7A:51:04:F0:68:84:C5:0C:6A:F0:15:A0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96E6C96FEA4FC5C17A5104F06884C50C6AF015A0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7F4152A59784624CF228AF49EA43DD0BA3CD8108953E071DA1BD3307EE1DBB9C/0/323830333a3635303a3130303a3a2f34302d3430203d3e20323733313932.roa
Signing time:             Tue 01 Apr 2025 05:13:32 +0000
ROA not before:           Tue 01 Apr 2025 05:08:32 +0000
ROA not after:            Tue 31 Mar 2026 05:13:32 +0000
asID:                     273192
IP address blocks:        2803:650:100::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7F4152A59784624CF228AF49EA43DD0BA3CD8108953E071DA1BD3307EE1DBB9C/0/96E6C96FEA4FC5C17A5104F06884C50C6AF015A0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7F4152A59784624CF228AF49EA43DD0BA3CD8108953E071DA1BD3307EE1DBB9C/0/96E6C96FEA4FC5C17A5104F06884C50C6AF015A0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96E6C96FEA4FC5C17A5104F06884C50C6AF015A0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 03:59:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:6c:f8:eb:a7:97:87:a1:4f:62:72:22:67:bd:8a:53:79:07:50:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96E6C96FEA4FC5C17A5104F06884C50C6AF015A0
        Validity
            Not Before: Apr  1 05:08:32 2025 GMT
            Not After : Mar 31 05:13:32 2026 GMT
        Subject: CN=1B59A028C788E88932C611FAF503A64A958C24EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:48:da:ca:8d:27:13:b8:af:9f:9c:28:b5:b6:
                    93:f3:8e:a5:c7:f0:e2:c6:59:56:09:b3:33:a1:5a:
                    b9:05:69:a6:24:67:a2:5a:15:64:7a:e5:09:d5:d7:
                    40:51:a6:10:78:71:57:f5:df:96:de:31:df:99:ff:
                    e6:d3:4e:c4:17:33:4f:00:45:ce:96:20:2c:72:4f:
                    49:ce:2d:22:b9:05:9d:db:1f:fe:99:7a:e8:a9:6a:
                    01:c5:cb:7c:68:5c:a5:ed:9a:65:79:72:a4:3c:3c:
                    1a:7c:cb:e4:2e:65:15:b4:2e:b4:ab:91:99:13:a4:
                    0f:08:19:f5:70:6f:35:c7:63:21:7b:bb:08:30:b7:
                    28:7c:f2:cf:b5:bc:a3:99:de:c0:fc:da:25:80:95:
                    02:89:a7:83:3b:38:1f:b8:49:9b:bc:be:d4:87:3c:
                    57:ad:b0:e8:ad:1b:40:5e:9e:2e:01:92:30:c0:88:
                    c5:77:db:62:6b:51:b1:6e:d6:a1:1f:1d:d8:7d:15:
                    dd:f3:b9:bd:a9:70:9e:df:cb:b4:8a:5f:8e:d0:2c:
                    f5:75:c4:ad:14:02:5d:a2:73:28:3e:3e:e1:c0:fb:
                    54:35:de:15:7f:03:75:fd:f1:18:c9:81:d2:1e:ca:
                    90:fa:74:da:cb:66:b7:1a:4b:76:69:2b:cb:ca:71:
                    f2:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:59:A0:28:C7:88:E8:89:32:C6:11:FA:F5:03:A6:4A:95:8C:24:EC
            X509v3 Authority Key Identifier:
                keyid:96:E6:C9:6F:EA:4F:C5:C1:7A:51:04:F0:68:84:C5:0C:6A:F0:15:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7F4152A59784624CF228AF49EA43DD0BA3CD8108953E071DA1BD3307EE1DBB9C/0/96E6C96FEA4FC5C17A5104F06884C50C6AF015A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96E6C96FEA4FC5C17A5104F06884C50C6AF015A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7F4152A59784624CF228AF49EA43DD0BA3CD8108953E071DA1BD3307EE1DBB9C/0/323830333a3635303a3130303a3a2f34302d3430203d3e20323733313932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:650:100::/40

    Signature Algorithm: sha256WithRSAEncryption
         5b:50:1c:e1:0e:b2:96:48:b3:e1:1d:1a:15:b8:2e:5d:70:00:
         88:2a:34:c3:ad:90:ba:b2:4b:a9:c4:a1:9d:b7:c2:42:b5:28:
         06:1e:f8:a5:4d:5b:04:34:f3:f1:a2:6d:e6:9a:34:49:f7:dd:
         ef:f4:47:26:8a:dc:36:f0:d4:f0:32:7c:8d:bb:3f:76:62:74:
         e4:e7:ec:f7:4a:2f:ed:05:c6:65:8c:df:6b:a7:00:be:5e:e4:
         db:b3:41:ee:f4:56:03:3d:74:b9:44:a6:d6:28:6f:5e:35:bf:
         a3:9b:60:9e:f0:55:db:7b:4b:ac:fe:1f:5d:fd:37:43:3e:12:
         c1:e4:11:35:0f:94:80:e4:a2:c0:e5:1b:4a:0b:27:fc:14:c4:
         43:ed:96:fa:9b:1d:1c:d9:d7:69:f6:96:c9:a0:99:d5:ec:14:
         ed:1e:88:a2:66:aa:8d:1d:7b:6e:f5:ec:9e:f9:4b:48:cb:03:
         9d:d6:60:16:db:7c:a3:94:a6:e6:83:d6:80:55:77:2f:6f:39:
         60:55:07:7b:cc:6b:44:5d:43:68:a1:1b:41:c9:3c:af:46:65:
         02:41:bc:0c:71:9a:90:30:c0:11:17:7b:64:70:7a:4a:0c:bf:
         df:c9:95:24:d9:38:59:65:67:e9:4d:2d:6a:40:23:c4:1b:1b:
         7e:55:fa:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 13:49:40 2025 by rpki-client