Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7F4152A59784624CF228AF49EA43DD0BA3CD8108953E071DA1BD3307EE1DBB9C/0/323830333a3635303a3230303a3a2f34302d3430203d3e20323733313932.roa
File:                     323830333a3635303a3230303a3a2f34302d3430203d3e20323733313932.roa (raw, json)
Hash identifier:          tFScejvv4vFrtrz1xgS0I5XQPhHwWOvqKe7IAkEFE3I=
Subject key identifier:   CA:A1:8A:5E:A2:E1:60:D2:3D:7F:D3:E6:B3:B6:FD:89:B6:22:68:81
Certificate issuer:       /CN=96E6C96FEA4FC5C17A5104F06884C50C6AF015A0
Certificate serial:       1367EB90623E7B0862F7980463D4A46D0983BDD4
Authority key identifier: 96:E6:C9:6F:EA:4F:C5:C1:7A:51:04:F0:68:84:C5:0C:6A:F0:15:A0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96E6C96FEA4FC5C17A5104F06884C50C6AF015A0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7F4152A59784624CF228AF49EA43DD0BA3CD8108953E071DA1BD3307EE1DBB9C/0/323830333a3635303a3230303a3a2f34302d3430203d3e20323733313932.roa
Signing time:             Tue 01 Apr 2025 05:13:32 +0000
ROA not before:           Tue 01 Apr 2025 05:08:32 +0000
ROA not after:            Tue 31 Mar 2026 05:13:32 +0000
asID:                     273192
IP address blocks:        2803:650:200::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7F4152A59784624CF228AF49EA43DD0BA3CD8108953E071DA1BD3307EE1DBB9C/0/96E6C96FEA4FC5C17A5104F06884C50C6AF015A0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7F4152A59784624CF228AF49EA43DD0BA3CD8108953E071DA1BD3307EE1DBB9C/0/96E6C96FEA4FC5C17A5104F06884C50C6AF015A0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96E6C96FEA4FC5C17A5104F06884C50C6AF015A0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Apr 2025 11:56:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:67:eb:90:62:3e:7b:08:62:f7:98:04:63:d4:a4:6d:09:83:bd:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96E6C96FEA4FC5C17A5104F06884C50C6AF015A0
        Validity
            Not Before: Apr  1 05:08:32 2025 GMT
            Not After : Mar 31 05:13:32 2026 GMT
        Subject: CN=CAA18A5EA2E160D23D7FD3E6B3B6FD89B6226881
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:ce:e7:a0:1d:7e:f2:cd:2e:88:1c:79:1f:a0:
                    df:3f:36:d6:15:e3:9e:54:f1:2d:e1:70:67:ec:48:
                    6c:79:30:bf:43:01:d3:a3:c3:31:62:1e:20:2b:de:
                    ed:3c:50:de:90:df:19:01:43:29:bc:36:b1:d0:55:
                    de:e7:30:4f:05:e3:da:a6:a2:f9:db:27:98:a0:be:
                    d0:76:a6:3a:7b:50:62:e2:cb:a2:fc:f9:29:57:bf:
                    a4:da:d6:59:4b:99:8c:b8:35:fb:c6:b8:46:da:72:
                    88:37:a4:9c:40:a2:66:f7:05:39:0c:94:06:cc:67:
                    73:4d:50:4f:8a:c5:7f:0c:62:bc:ee:e2:07:d6:ef:
                    1c:cf:e3:2f:d7:aa:47:8c:60:60:62:8f:22:9e:63:
                    35:d3:86:d9:07:67:f7:cb:67:02:c2:12:23:ed:08:
                    4a:17:19:c9:a1:04:fb:32:2f:07:cb:5a:49:4d:9e:
                    c6:f1:5f:ab:25:f9:71:e1:d2:d1:a8:56:9d:3c:e6:
                    b8:0c:00:51:f7:99:db:ba:58:9d:31:22:64:0a:52:
                    c2:7a:dc:2a:c1:1a:d5:7f:5c:ce:e3:94:1b:ff:2f:
                    3f:8a:4e:c8:c0:0e:56:b1:bf:5f:a6:e0:a1:49:78:
                    d3:b3:60:32:f2:27:08:00:b7:e9:5e:d2:ef:d4:6e:
                    32:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:A1:8A:5E:A2:E1:60:D2:3D:7F:D3:E6:B3:B6:FD:89:B6:22:68:81
            X509v3 Authority Key Identifier:
                keyid:96:E6:C9:6F:EA:4F:C5:C1:7A:51:04:F0:68:84:C5:0C:6A:F0:15:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7F4152A59784624CF228AF49EA43DD0BA3CD8108953E071DA1BD3307EE1DBB9C/0/96E6C96FEA4FC5C17A5104F06884C50C6AF015A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96E6C96FEA4FC5C17A5104F06884C50C6AF015A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7F4152A59784624CF228AF49EA43DD0BA3CD8108953E071DA1BD3307EE1DBB9C/0/323830333a3635303a3230303a3a2f34302d3430203d3e20323733313932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:650:200::/40

    Signature Algorithm: sha256WithRSAEncryption
         e2:ae:d9:14:68:15:aa:c2:0d:fe:5e:b2:71:7b:f4:4a:f2:27:
         1a:4d:fc:b0:0a:28:43:7a:e9:9f:d2:06:d3:9e:d8:ae:16:63:
         27:eb:dc:73:63:8d:e7:e5:73:0c:03:b0:48:f1:c7:11:3b:4d:
         be:56:63:16:16:bc:fc:d5:d2:fd:42:5f:31:46:bb:d1:90:7e:
         25:1b:96:ac:38:bb:62:0c:81:ac:24:7c:a3:4b:a9:e4:c7:d0:
         28:98:05:fd:08:c2:18:f3:cc:d9:b6:f8:67:48:6f:1d:eb:02:
         9c:d2:39:03:86:41:c1:c1:ef:a1:6f:0f:00:88:6b:90:ca:eb:
         47:4b:db:3b:a4:90:ab:9e:66:cc:0e:3b:58:27:62:b5:32:25:
         5e:0e:88:27:01:60:01:50:af:0d:5c:a8:16:36:b6:16:97:74:
         a2:a2:6c:c0:14:f2:20:1a:04:3c:e7:cb:12:c2:d9:76:cc:e2:
         79:41:b6:c2:40:ee:ea:05:af:bc:cd:92:22:1d:db:03:44:24:
         25:d2:c3:7a:90:ae:a9:e5:f0:d3:54:a6:fb:5c:66:c2:37:3e:
         84:01:95:c3:9c:14:2d:f8:8e:97:c3:ad:04:b1:b8:b5:90:ec:
         cc:77:26:cb:34:9f:34:d4:38:c4:3a:d4:ea:be:bd:a6:37:d3:
         fe:ae:1a:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:10:28 2025 by rpki-client