Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7F4152A59784624CF228AF49EA43DD0BA3CD8108953E071DA1BD3307EE1DBB9C/0/323830333a3635303a6130303a3a2f34302d3430203d3e20323733313932.roa
File:                     323830333a3635303a6130303a3a2f34302d3430203d3e20323733313932.roa (raw, json)
Hash identifier:          Kmrfyp0LsOyxJVUzfAEKqVu+yU15Fg6l3bvMf8q0B2U=
Subject key identifier:   24:F2:15:23:2C:02:5E:BD:F7:66:4B:CD:C3:E2:D7:50:F2:5A:D5:80
Certificate issuer:       /CN=96E6C96FEA4FC5C17A5104F06884C50C6AF015A0
Certificate serial:       51C7627AA875D214BF1A38CFB140053A8FF7605E
Authority key identifier: 96:E6:C9:6F:EA:4F:C5:C1:7A:51:04:F0:68:84:C5:0C:6A:F0:15:A0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96E6C96FEA4FC5C17A5104F06884C50C6AF015A0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7F4152A59784624CF228AF49EA43DD0BA3CD8108953E071DA1BD3307EE1DBB9C/0/323830333a3635303a6130303a3a2f34302d3430203d3e20323733313932.roa
Signing time:             Tue 01 Apr 2025 05:13:30 +0000
ROA not before:           Tue 01 Apr 2025 05:08:30 +0000
ROA not after:            Tue 31 Mar 2026 05:13:30 +0000
asID:                     273192
IP address blocks:        2803:650:a00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7F4152A59784624CF228AF49EA43DD0BA3CD8108953E071DA1BD3307EE1DBB9C/0/96E6C96FEA4FC5C17A5104F06884C50C6AF015A0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7F4152A59784624CF228AF49EA43DD0BA3CD8108953E071DA1BD3307EE1DBB9C/0/96E6C96FEA4FC5C17A5104F06884C50C6AF015A0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96E6C96FEA4FC5C17A5104F06884C50C6AF015A0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Apr 2025 11:56:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:c7:62:7a:a8:75:d2:14:bf:1a:38:cf:b1:40:05:3a:8f:f7:60:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96E6C96FEA4FC5C17A5104F06884C50C6AF015A0
        Validity
            Not Before: Apr  1 05:08:30 2025 GMT
            Not After : Mar 31 05:13:30 2026 GMT
        Subject: CN=24F215232C025EBDF7664BCDC3E2D750F25AD580
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:dc:4e:1f:9c:79:5b:6e:c7:03:42:fa:47:ce:
                    82:26:5d:cb:06:da:87:54:e6:7c:b9:fc:17:d4:cf:
                    5c:16:44:72:d6:eb:7a:ae:ca:f0:a3:b2:a0:5f:89:
                    ee:0b:5f:d7:8e:79:50:5e:72:2e:30:d3:77:17:e1:
                    3f:4a:a4:a9:26:47:b6:c4:1f:fd:8c:7a:d1:d3:19:
                    88:6a:8e:b3:79:49:de:6b:a5:3d:6a:a5:16:94:46:
                    58:83:3e:c5:68:1e:5a:32:37:35:10:27:d6:b6:70:
                    b0:a4:b3:50:cf:bf:3b:41:00:3e:ed:8e:a9:c5:1f:
                    52:a7:27:94:7d:94:5c:c9:d5:42:3e:08:b0:9c:14:
                    77:f5:bb:26:4e:f3:e5:9d:2c:e7:be:bb:d1:28:56:
                    f6:61:a2:aa:6b:d6:d0:0a:06:b0:f9:fd:d8:26:c8:
                    92:91:2b:bf:f2:5d:0e:9c:67:fa:9c:e9:d1:5a:92:
                    ae:b7:7e:ec:5e:65:06:e9:9a:06:fe:df:08:06:92:
                    2a:1d:7b:43:58:76:1f:ad:5c:0b:cd:5a:a2:e2:cc:
                    64:85:62:35:d3:8c:b2:62:de:d5:89:f9:60:05:c6:
                    c9:f6:35:dc:88:a9:c7:55:70:bc:3f:66:58:fa:a1:
                    84:ef:58:60:dc:10:55:3e:de:cc:0b:f8:b6:ee:8d:
                    48:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:F2:15:23:2C:02:5E:BD:F7:66:4B:CD:C3:E2:D7:50:F2:5A:D5:80
            X509v3 Authority Key Identifier:
                keyid:96:E6:C9:6F:EA:4F:C5:C1:7A:51:04:F0:68:84:C5:0C:6A:F0:15:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7F4152A59784624CF228AF49EA43DD0BA3CD8108953E071DA1BD3307EE1DBB9C/0/96E6C96FEA4FC5C17A5104F06884C50C6AF015A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96E6C96FEA4FC5C17A5104F06884C50C6AF015A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7F4152A59784624CF228AF49EA43DD0BA3CD8108953E071DA1BD3307EE1DBB9C/0/323830333a3635303a6130303a3a2f34302d3430203d3e20323733313932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:650:a00::/40

    Signature Algorithm: sha256WithRSAEncryption
         e6:86:b7:e6:ce:cc:36:7c:46:31:22:f9:b1:1d:8a:58:d0:1e:
         94:14:75:45:e8:ee:91:3f:f5:90:63:74:0f:07:78:a8:2b:cc:
         90:b7:e2:36:e8:d5:00:08:33:1b:88:58:7c:c8:49:7b:67:ad:
         d3:31:ae:77:8b:3b:70:dd:2b:bc:2a:33:81:69:cb:2e:bd:0b:
         64:bd:d9:47:15:bb:7a:bb:b5:ea:65:f8:35:a2:69:67:e2:a4:
         33:16:0e:b1:e7:1f:a0:43:a8:d4:9b:04:7f:e3:ac:00:a8:b9:
         04:47:6e:81:94:3f:7b:bc:20:43:7b:e3:80:94:dd:6b:aa:c5:
         99:22:c9:84:2f:30:46:b3:f2:1b:3f:64:d3:5c:38:b6:5c:93:
         0b:34:1d:98:65:dd:1e:88:70:f0:f1:fe:97:9c:cc:02:2e:dc:
         2d:37:59:94:7c:10:54:d9:f3:4f:0d:3a:e5:92:54:80:ef:6e:
         14:21:c4:fb:06:e2:87:a0:9e:d8:f6:7d:c3:c1:b9:b5:b1:37:
         99:bd:2f:9e:66:dd:de:82:11:ec:ac:0f:c6:4e:0b:99:d7:41:
         4d:e1:69:3d:ed:81:c0:54:1c:f3:03:43:78:2a:f7:09:c4:e3:
         72:78:a8:58:91:c8:8f:0c:e5:8d:3a:a8:59:0a:8f:68:ff:16:
         0d:5a:e9:cc
-----BEGIN CERTIFICATE-----
MIIFxjCCBK6gAwIBAgIUUcdieqh10hS/GjjPsUAFOo/3YF4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTZFNkM5NkZFQTRGQzVDMTdBNTEwNEYwNjg4NEM1MEM2
QUYwMTVBMDAeFw0yNTA0MDEwNTA4MzBaFw0yNjAzMzEwNTEzMzBaMDMxMTAvBgNV
BAMTKDI0RjIxNTIzMkMwMjVFQkRGNzY2NEJDREMzRTJENzUwRjI1QUQ1ODAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy3E4fnHlbbscDQvpHzoImXcsG
2odU5ny5/BfUz1wWRHLW63quyvCjsqBfie4LX9eOeVBeci4w03cX4T9KpKkmR7bE
H/2MetHTGYhqjrN5Sd5rpT1qpRaURliDPsVoHloyNzUQJ9a2cLCks1DPvztBAD7t
jqnFH1KnJ5R9lFzJ1UI+CLCcFHf1uyZO8+WdLOe+u9EoVvZhoqpr1tAKBrD5/dgm
yJKRK7/yXQ6cZ/qc6dFakq63fuxeZQbpmgb+3wgGkiode0NYdh+tXAvNWqLizGSF
YjXTjLJi3tWJ+WAFxsn2NdyIqcdVcLw/Zlj6oYTvWGDcEFU+3swL+LbujUipAgMB
AAGjggLQMIICzDAdBgNVHQ4EFgQUJPIVIywCXr33ZkvNw+LXUPJa1YAwHwYDVR0j
BBgwFoAUlubJb+pPxcF6UQTwaITFDGrwFaAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83RjQxNTJBNTk3ODQ2MjRDRjIyOEFGNDlFQTQzREQwQkEz
Q0Q4MTA4OTUzRTA3MURBMUJEMzMwN0VFMURCQjlDLzAvOTZFNkM5NkZFQTRGQzVD
MTdBNTEwNEYwNjg4NEM1MEM2QUYwMTVBMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85NkU2Qzk2RkVBNEZDNUMxN0E1
MTA0RjA2ODg0QzUwQzZBRjAxNUEwLmNlcjCBzQYIKwYBBQUHAQsEgcAwgb0wgboG
CCsGAQUFBzALhoGtcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvN0Y0MTUyQTU5Nzg0NjI0Q0YyMjhBRjQ5RUE0M0REMEJBM0NEODEwODk1
M0UwNzFEQTFCRDMzMDdFRTFEQkI5Qy8wLzMyMzgzMDMzM2EzNjM1MzAzYTYxMzAz
MDNhM2EyZjM0MzAyZDM0MzAyMDNkM2UyMDMyMzczMzMxMzkzMi5yb2EwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMG
ACgDBlAKMA0GCSqGSIb3DQEBCwUAA4IBAQDmhrfmzsw2fEYxIvmxHYpY0B6UFHVF
6O6RP/WQY3QPB3ioK8yQt+I26NUACDMbiFh8yEl7Z63TMa53iztw3Su8KjOBacsu
vQtkvdlHFbt6u7XqZfg1omln4qQzFg6x5x+gQ6jUmwR/46wAqLkER26BlD97vCBD
e+OAlN1rqsWZIsmELzBGs/IbP2TTXDi2XJMLNB2YZd0eiHDw8f6XnMwCLtwtN1mU
fBBU2fNPDTrlklSA724UIcT7BuKHoJ7Y9n3Dwbm1sTeZvS+eZt3eghHsrA/GTguZ
10FN4Wk97YHAVBzzA0N4KvcJxONyeKhYkciPDOWNOqhZCo9o/xYNWunM
-----END CERTIFICATE-----
Generated at Thu Apr 17 23:10:55 2025 by rpki-client