Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7F4152A59784624CF228AF49EA43DD0BA3CD8108953E071DA1BD3307EE1DBB9C/0/323830333a3635303a6530303a3a2f34302d3430203d3e20323733313932.roa
File:                     323830333a3635303a6530303a3a2f34302d3430203d3e20323733313932.roa (raw, json)
Hash identifier:          XdwRQ5EoB/Tr+V290HJ0ebEPQCpuYjxDM1/EBEKyrzE=
Subject key identifier:   5B:86:3C:FC:73:41:F1:61:BD:5B:20:40:78:18:E0:8D:FA:F0:C2:5C
Certificate issuer:       /CN=96E6C96FEA4FC5C17A5104F06884C50C6AF015A0
Certificate serial:       2CCB3516F5218C98B2C114B39C3DD57C545418D3
Authority key identifier: 96:E6:C9:6F:EA:4F:C5:C1:7A:51:04:F0:68:84:C5:0C:6A:F0:15:A0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96E6C96FEA4FC5C17A5104F06884C50C6AF015A0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7F4152A59784624CF228AF49EA43DD0BA3CD8108953E071DA1BD3307EE1DBB9C/0/323830333a3635303a6530303a3a2f34302d3430203d3e20323733313932.roa
Signing time:             Tue 01 Apr 2025 05:13:29 +0000
ROA not before:           Tue 01 Apr 2025 05:08:29 +0000
ROA not after:            Tue 31 Mar 2026 05:13:29 +0000
asID:                     273192
IP address blocks:        2803:650:e00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7F4152A59784624CF228AF49EA43DD0BA3CD8108953E071DA1BD3307EE1DBB9C/0/96E6C96FEA4FC5C17A5104F06884C50C6AF015A0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7F4152A59784624CF228AF49EA43DD0BA3CD8108953E071DA1BD3307EE1DBB9C/0/96E6C96FEA4FC5C17A5104F06884C50C6AF015A0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96E6C96FEA4FC5C17A5104F06884C50C6AF015A0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Apr 2025 11:56:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:cb:35:16:f5:21:8c:98:b2:c1:14:b3:9c:3d:d5:7c:54:54:18:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96E6C96FEA4FC5C17A5104F06884C50C6AF015A0
        Validity
            Not Before: Apr  1 05:08:29 2025 GMT
            Not After : Mar 31 05:13:29 2026 GMT
        Subject: CN=5B863CFC7341F161BD5B20407818E08DFAF0C25C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:9b:af:9e:c0:22:36:88:42:7a:fc:28:dc:c8:
                    41:4a:ad:81:e4:3b:4f:6b:f6:d8:16:b1:82:a9:97:
                    1b:6d:a9:17:13:b5:c7:dc:72:0c:9f:cc:93:66:5c:
                    7c:62:f3:04:78:62:f7:de:bb:38:00:3e:17:cc:e0:
                    98:14:ef:d7:ce:c4:14:77:d0:86:d1:9e:13:f8:1a:
                    09:1e:20:66:09:d5:5c:47:a2:2c:91:e0:3d:77:ed:
                    76:8c:5d:5f:a1:d0:e8:b8:bb:80:6c:ae:5c:7c:c1:
                    2c:c8:31:d0:43:a5:b8:aa:07:12:36:d8:45:9e:90:
                    8a:d8:b1:d0:46:a7:53:09:25:aa:15:81:89:12:2d:
                    30:22:84:7f:c7:43:6c:76:25:46:eb:20:f3:cb:08:
                    2b:a1:5f:4b:c3:76:3f:03:42:61:2c:4b:16:8d:44:
                    03:c1:ed:56:43:5d:1c:de:26:a6:7f:b6:9d:20:fe:
                    61:b6:e7:22:5b:b6:88:7b:00:2c:4e:05:1f:a4:24:
                    6f:77:d3:73:17:b2:75:3e:b3:96:d0:28:ea:4f:d4:
                    8a:c3:24:ac:a8:b5:6a:15:22:66:2b:19:5c:0c:a0:
                    a9:43:37:64:31:88:90:a5:ed:63:5f:64:a6:64:65:
                    79:d6:40:04:f6:03:93:4a:a8:2d:9f:d9:41:14:0b:
                    aa:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:86:3C:FC:73:41:F1:61:BD:5B:20:40:78:18:E0:8D:FA:F0:C2:5C
            X509v3 Authority Key Identifier:
                keyid:96:E6:C9:6F:EA:4F:C5:C1:7A:51:04:F0:68:84:C5:0C:6A:F0:15:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7F4152A59784624CF228AF49EA43DD0BA3CD8108953E071DA1BD3307EE1DBB9C/0/96E6C96FEA4FC5C17A5104F06884C50C6AF015A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96E6C96FEA4FC5C17A5104F06884C50C6AF015A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7F4152A59784624CF228AF49EA43DD0BA3CD8108953E071DA1BD3307EE1DBB9C/0/323830333a3635303a6530303a3a2f34302d3430203d3e20323733313932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:650:e00::/40

    Signature Algorithm: sha256WithRSAEncryption
         b7:6d:ad:3e:66:e9:8e:3d:a9:fc:c4:65:f4:5f:cc:a0:3f:da:
         bf:1f:dc:c3:78:87:0c:3e:54:f8:ef:b5:e4:15:53:dd:04:01:
         bc:0b:a3:51:20:b4:94:ca:92:32:18:ce:f7:6d:bf:f7:c7:5b:
         27:10:18:4a:04:37:65:ac:62:af:01:dc:aa:68:fd:64:22:97:
         ba:52:82:e2:45:f7:80:90:8e:4b:54:46:6a:7b:61:38:3d:37:
         c7:00:51:c9:09:ce:63:ae:aa:1d:46:ac:fb:eb:21:83:c1:dc:
         2a:34:3c:d0:71:98:c5:db:e9:cf:31:68:58:c2:45:9f:00:40:
         cc:d0:e6:66:ff:30:b0:5e:68:e2:50:50:b7:47:bf:a5:96:5e:
         13:a0:dc:60:a8:43:da:dd:f6:d3:7d:fd:ff:d1:e1:0c:ab:6c:
         61:6d:20:ac:7b:90:47:2d:49:b1:87:5a:4f:27:7d:31:88:ae:
         55:3f:4e:36:27:d8:49:40:0f:0d:c0:7f:22:a4:c7:5c:c8:95:
         14:07:80:5a:a6:b3:cc:80:27:ff:61:cf:7c:49:96:7e:e9:6e:
         0e:24:6b:7c:1c:c1:8c:ac:db:fb:6c:69:1b:bf:27:66:27:7e:
         19:81:30:ae:89:3b:cd:ad:d5:66:dd:39:18:d5:54:6f:fd:b7:
         4e:bd:dc:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:10:47 2025 by rpki-client