Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7F4152A59784624CF228AF49EA43DD0BA3CD8108953E071DA1BD3307EE1DBB9C/0/323830333a3635303a3730303a3a2f34302d3430203d3e20323733313932.roa
File:                     323830333a3635303a3730303a3a2f34302d3430203d3e20323733313932.roa (raw, json)
Hash identifier:          0AZBrRSVyc8mg53EfhPCC3gVApVqOvPlkua2nf0NqvU=
Subject key identifier:   75:C1:6B:E4:39:CB:F5:7C:21:67:23:2E:9E:02:41:CE:75:CA:E7:99
Certificate issuer:       /CN=96E6C96FEA4FC5C17A5104F06884C50C6AF015A0
Certificate serial:       1795021166A417F012F40D3618402B482B595B71
Authority key identifier: 96:E6:C9:6F:EA:4F:C5:C1:7A:51:04:F0:68:84:C5:0C:6A:F0:15:A0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96E6C96FEA4FC5C17A5104F06884C50C6AF015A0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7F4152A59784624CF228AF49EA43DD0BA3CD8108953E071DA1BD3307EE1DBB9C/0/323830333a3635303a3730303a3a2f34302d3430203d3e20323733313932.roa
Signing time:             Tue 01 Apr 2025 05:13:28 +0000
ROA not before:           Tue 01 Apr 2025 05:08:28 +0000
ROA not after:            Tue 31 Mar 2026 05:13:28 +0000
asID:                     273192
IP address blocks:        2803:650:700::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7F4152A59784624CF228AF49EA43DD0BA3CD8108953E071DA1BD3307EE1DBB9C/0/96E6C96FEA4FC5C17A5104F06884C50C6AF015A0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7F4152A59784624CF228AF49EA43DD0BA3CD8108953E071DA1BD3307EE1DBB9C/0/96E6C96FEA4FC5C17A5104F06884C50C6AF015A0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96E6C96FEA4FC5C17A5104F06884C50C6AF015A0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 03:59:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:95:02:11:66:a4:17:f0:12:f4:0d:36:18:40:2b:48:2b:59:5b:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96E6C96FEA4FC5C17A5104F06884C50C6AF015A0
        Validity
            Not Before: Apr  1 05:08:28 2025 GMT
            Not After : Mar 31 05:13:28 2026 GMT
        Subject: CN=75C16BE439CBF57C2167232E9E0241CE75CAE799
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:43:e9:ec:1f:f1:4e:ea:ae:50:b7:78:f4:c3:
                    bf:be:39:30:0d:ed:b5:ef:ca:84:6e:2a:8b:b7:59:
                    ef:ae:e4:33:64:fe:5b:eb:fe:da:01:0b:60:43:59:
                    76:d3:81:58:43:77:07:66:87:ea:8c:94:a5:a4:47:
                    f7:21:1b:9c:6e:79:c5:ef:34:00:cd:22:25:78:ec:
                    e7:d2:10:1b:74:4b:60:e5:41:f0:fd:7b:1c:25:d3:
                    9d:fd:54:32:78:59:11:03:88:7c:e8:f2:db:e5:bc:
                    ae:8c:a3:c7:a2:f5:d7:5a:66:82:73:1a:76:1b:22:
                    12:41:3e:8e:d6:62:34:7c:4b:e5:5b:7e:df:7d:10:
                    0d:9d:f5:93:6f:4b:3a:86:79:6f:c9:26:7d:c3:02:
                    ee:bb:74:8e:37:46:22:6d:34:01:0b:85:44:b2:3d:
                    f7:56:3c:53:52:cf:8a:16:4a:14:d2:6e:da:1e:b5:
                    65:2a:38:46:ba:b7:ba:3b:98:93:97:49:f2:b4:a6:
                    5c:af:c4:c4:ed:a4:33:be:0e:eb:dd:9d:b6:fe:ae:
                    13:f7:d4:1a:53:5e:cd:2f:83:a5:fe:78:c8:4e:23:
                    e5:5d:8b:e7:67:0a:f1:fa:82:3b:57:6d:f1:f7:e1:
                    cc:4f:7c:ea:73:ab:3f:3f:69:7c:b7:bf:e4:71:24:
                    fd:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:C1:6B:E4:39:CB:F5:7C:21:67:23:2E:9E:02:41:CE:75:CA:E7:99
            X509v3 Authority Key Identifier:
                keyid:96:E6:C9:6F:EA:4F:C5:C1:7A:51:04:F0:68:84:C5:0C:6A:F0:15:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7F4152A59784624CF228AF49EA43DD0BA3CD8108953E071DA1BD3307EE1DBB9C/0/96E6C96FEA4FC5C17A5104F06884C50C6AF015A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96E6C96FEA4FC5C17A5104F06884C50C6AF015A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7F4152A59784624CF228AF49EA43DD0BA3CD8108953E071DA1BD3307EE1DBB9C/0/323830333a3635303a3730303a3a2f34302d3430203d3e20323733313932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:650:700::/40

    Signature Algorithm: sha256WithRSAEncryption
         6d:64:6e:71:53:70:6d:75:7f:1e:6a:da:27:5e:8d:4f:07:6b:
         4e:bc:1c:22:f9:3c:8c:8b:44:62:ab:cc:7d:68:ed:85:76:63:
         84:07:cb:66:1e:73:cf:35:15:ec:9f:30:87:67:d5:a6:83:95:
         48:dd:fc:aa:32:8d:60:08:bb:bc:64:41:0b:d5:00:90:ca:39:
         5e:d8:85:d2:63:b3:c1:10:ce:44:83:73:c5:bf:fd:05:03:45:
         f0:81:1e:4b:ae:f8:1b:f9:12:b4:ed:7e:a7:c2:ea:1e:61:cd:
         28:bf:be:79:2b:15:18:86:9c:37:38:37:9c:31:b4:40:9a:15:
         23:92:b7:e2:ec:6c:09:aa:2d:47:0c:8c:04:2e:b1:9d:a9:41:
         fd:91:d3:82:c0:b9:f0:5c:a0:ca:6b:08:23:fd:c9:6e:4e:dc:
         fe:5a:ad:79:1a:41:8a:b9:3c:fc:17:53:2f:1e:af:d1:0a:2c:
         7c:91:8a:f1:7b:dc:4a:b3:83:0d:01:64:5d:91:d7:09:4f:a0:
         50:59:d6:28:cb:98:ec:ff:17:b5:bf:73:de:ce:a3:64:98:4e:
         fe:d9:60:77:d5:d5:40:a8:cb:76:17:53:19:eb:66:9a:2d:32:
         67:87:eb:eb:38:5e:a7:f5:13:30:1e:5c:bd:76:14:8a:d5:f3:
         73:0f:99:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 23:16:44 2025 by rpki-client