Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9B094CDDDCD1B6914057184EE2367A2035454F2E72C40369C8F3F3CED59D10E7/0/323830333a373832303a3a2f33322d3438203d3e20323637373038.roa
File:                     323830333a373832303a3a2f33322d3438203d3e20323637373038.roa (raw, json)
Hash identifier:          dXCwn/JAbtZmQJpq7/4dfBRWwAC+m/ULCpZncXKkm88=
Subject key identifier:   C1:81:7E:1E:A8:82:3D:16:CB:D5:EF:8B:5A:F9:E0:3D:21:B1:0E:27
Certificate issuer:       /CN=472A97D26294E0079CE932F327B2410A8EBD5829
Certificate serial:       75B0F1F6B132BFD42ACABC0ACB9B83DE87D9EACC
Authority key identifier: 47:2A:97:D2:62:94:E0:07:9C:E9:32:F3:27:B2:41:0A:8E:BD:58:29
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/472A97D26294E0079CE932F327B2410A8EBD5829.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9B094CDDDCD1B6914057184EE2367A2035454F2E72C40369C8F3F3CED59D10E7/0/323830333a373832303a3a2f33322d3438203d3e20323637373038.roa
Signing time:             Tue 04 Feb 2025 18:50:26 +0000
ROA not before:           Tue 04 Feb 2025 18:45:26 +0000
ROA not after:            Tue 03 Feb 2026 18:50:26 +0000
asID:                     267708
IP address blocks:        2803:7820::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9B094CDDDCD1B6914057184EE2367A2035454F2E72C40369C8F3F3CED59D10E7/0/472A97D26294E0079CE932F327B2410A8EBD5829.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9B094CDDDCD1B6914057184EE2367A2035454F2E72C40369C8F3F3CED59D10E7/0/472A97D26294E0079CE932F327B2410A8EBD5829.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/472A97D26294E0079CE932F327B2410A8EBD5829.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 17:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:b0:f1:f6:b1:32:bf:d4:2a:ca:bc:0a:cb:9b:83:de:87:d9:ea:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=472A97D26294E0079CE932F327B2410A8EBD5829
        Validity
            Not Before: Feb  4 18:45:26 2025 GMT
            Not After : Feb  3 18:50:26 2026 GMT
        Subject: CN=C1817E1EA8823D16CBD5EF8B5AF9E03D21B10E27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:1a:43:fc:72:91:ff:d3:1c:d7:63:2e:bf:44:
                    22:08:8f:dc:fb:9d:0a:ac:d6:f0:db:38:10:6d:b3:
                    36:89:1b:77:a8:62:9a:74:1c:b7:72:64:52:2d:35:
                    35:58:d1:06:7a:ab:50:07:c2:7b:db:24:a3:0b:a6:
                    95:f1:08:f3:5e:e0:3f:7a:d3:c6:9c:cd:42:3b:31:
                    9e:81:5c:eb:e2:fe:cc:3b:98:e8:ab:be:68:a9:db:
                    68:43:df:0d:91:58:ed:8e:03:a9:06:a8:9b:dc:e5:
                    68:1c:14:af:d8:a1:6b:20:22:f2:67:d2:30:2c:8e:
                    1a:ea:d4:aa:3a:fd:bd:c7:4b:dc:58:39:ed:b5:cd:
                    cb:90:97:3c:3e:e4:a7:26:e6:be:9d:ec:d0:8d:97:
                    ed:42:e0:f7:a5:97:cf:8c:28:75:df:b1:6e:3c:83:
                    1b:24:fb:95:02:83:e0:9c:df:39:12:66:0c:bc:53:
                    3b:7d:75:ae:28:56:32:e2:e8:fb:79:47:41:20:4a:
                    c6:32:51:8d:d9:1e:b7:c2:4d:61:f8:a1:fa:fe:5d:
                    a6:f6:8e:b7:be:86:a8:49:8a:6d:ab:b9:4e:53:dd:
                    45:36:6c:e0:16:14:39:22:7a:94:12:b2:53:1e:95:
                    38:c7:73:30:95:48:7d:25:ed:36:ec:a5:fb:06:73:
                    ac:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:81:7E:1E:A8:82:3D:16:CB:D5:EF:8B:5A:F9:E0:3D:21:B1:0E:27
            X509v3 Authority Key Identifier:
                keyid:47:2A:97:D2:62:94:E0:07:9C:E9:32:F3:27:B2:41:0A:8E:BD:58:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9B094CDDDCD1B6914057184EE2367A2035454F2E72C40369C8F3F3CED59D10E7/0/472A97D26294E0079CE932F327B2410A8EBD5829.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/472A97D26294E0079CE932F327B2410A8EBD5829.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9B094CDDDCD1B6914057184EE2367A2035454F2E72C40369C8F3F3CED59D10E7/0/323830333a373832303a3a2f33322d3438203d3e20323637373038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7820::/32

    Signature Algorithm: sha256WithRSAEncryption
         11:e5:33:71:3e:d3:51:23:2c:fb:41:fc:64:43:87:db:15:13:
         18:2a:13:e4:55:0e:2a:76:bd:22:32:f2:b3:6d:12:3f:af:9c:
         d0:c5:02:71:61:55:ca:72:e2:c9:2c:80:d0:4b:7a:89:66:74:
         b0:17:e9:c8:07:f2:48:ae:f8:05:dd:8d:0e:9d:4b:67:02:8f:
         75:57:cb:2e:3f:92:0d:56:39:af:33:bd:e5:5a:0d:bc:f6:fe:
         c8:fc:cb:d3:86:9f:84:99:13:0f:df:b3:5e:00:c7:87:d0:c2:
         6a:a8:35:c7:14:0b:3f:9b:ae:6e:bf:2a:92:b5:87:36:33:5d:
         5c:f1:97:12:45:af:09:68:b2:ff:2e:44:09:b0:44:1f:ae:14:
         44:0d:a4:f3:52:36:c2:87:ec:be:8f:73:96:5b:d7:97:28:03:
         4c:ba:27:c5:66:f5:1c:51:db:02:a5:75:68:8d:0a:7a:2b:79:
         33:4a:9a:a4:75:98:ae:e1:4a:59:ec:e2:9a:ae:f2:24:65:49:
         40:2b:c3:af:c6:c7:c1:05:e3:6b:e3:f6:d5:54:2a:bc:52:34:
         55:e4:7e:9d:3d:60:0a:36:4a:dd:a8:24:a8:d7:9d:6b:f9:ac:
         c3:a7:8c:4b:cf:bd:7f:77:41:d6:b8:fa:01:64:9c:6a:cb:b7:
         6e:f8:c0:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 18:47:36 2025 by rpki-client