Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9C2EFE806A65539A61B5CB585D59755541AF7340034B26152E4D0D36C4C10FFD/0/323830333a623931303a3a2f33322d3432203d3e20323732303133.roa
File:                     323830333a623931303a3a2f33322d3432203d3e20323732303133.roa (raw, json)
Hash identifier:          JEw6AZNjdUZ6QSu9w+ZVneAb84nnJOyw5pmx+GVwqK4=
Subject key identifier:   6A:89:66:62:28:1E:04:D1:F1:29:45:04:73:3F:DF:E0:AC:41:B7:C2
Certificate issuer:       /CN=BD04BDB4E0486F1A4A8D257AF7BB8384F561F30C
Certificate serial:       022604EE6A52685C1A347B185D9B357547CDD66B
Authority key identifier: BD:04:BD:B4:E0:48:6F:1A:4A:8D:25:7A:F7:BB:83:84:F5:61:F3:0C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD04BDB4E0486F1A4A8D257AF7BB8384F561F30C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9C2EFE806A65539A61B5CB585D59755541AF7340034B26152E4D0D36C4C10FFD/0/323830333a623931303a3a2f33322d3432203d3e20323732303133.roa
Signing time:             Tue 04 Feb 2025 18:05:52 +0000
ROA not before:           Tue 04 Feb 2025 18:00:52 +0000
ROA not after:            Tue 03 Feb 2026 18:05:52 +0000
asID:                     272013
IP address blocks:        2803:b910::/32 maxlen: 42
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9C2EFE806A65539A61B5CB585D59755541AF7340034B26152E4D0D36C4C10FFD/0/BD04BDB4E0486F1A4A8D257AF7BB8384F561F30C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9C2EFE806A65539A61B5CB585D59755541AF7340034B26152E4D0D36C4C10FFD/0/BD04BDB4E0486F1A4A8D257AF7BB8384F561F30C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD04BDB4E0486F1A4A8D257AF7BB8384F561F30C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:26:04:ee:6a:52:68:5c:1a:34:7b:18:5d:9b:35:75:47:cd:d6:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD04BDB4E0486F1A4A8D257AF7BB8384F561F30C
        Validity
            Not Before: Feb  4 18:00:52 2025 GMT
            Not After : Feb  3 18:05:52 2026 GMT
        Subject: CN=6A896662281E04D1F1294504733FDFE0AC41B7C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:86:72:38:9d:8f:0f:83:99:81:4a:cc:09:d2:
                    0a:37:6d:85:cf:5f:03:28:e4:be:82:4c:25:cc:f0:
                    84:1b:09:14:6c:db:3d:ed:d1:40:ed:34:d1:5d:54:
                    69:d4:44:a1:a5:39:07:57:3b:64:41:81:6c:5d:65:
                    0b:11:d6:6d:ab:a9:61:21:09:b2:c2:c2:9d:57:d7:
                    e7:06:60:37:7c:92:0e:24:82:d9:04:5a:5f:6d:e0:
                    a0:16:3a:45:74:42:39:2e:28:7e:aa:1c:5e:62:dc:
                    18:0e:65:62:66:b9:4e:71:26:6d:99:b1:3d:14:99:
                    d1:ad:ea:c3:03:67:56:4b:63:4f:1c:01:c2:3b:3f:
                    60:63:8e:ce:db:dc:6d:44:6a:7c:76:f6:1b:17:28:
                    71:d6:49:06:18:3c:95:f8:6e:30:cc:56:04:b6:e7:
                    7e:a4:ed:d6:e5:f3:55:1d:b5:34:f3:e7:b1:3d:14:
                    14:8b:4f:37:75:01:3c:98:4d:bb:7e:2f:70:c5:91:
                    77:58:1e:71:ea:fa:05:4e:38:90:3a:1a:2b:7f:d3:
                    03:3c:b1:74:66:68:61:0e:31:e2:e3:02:bf:18:02:
                    94:d1:ff:32:fa:e8:61:04:87:de:89:2a:f6:cc:59:
                    15:95:d0:f8:a5:d8:3b:97:7c:5f:c9:01:65:27:6a:
                    7f:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:89:66:62:28:1E:04:D1:F1:29:45:04:73:3F:DF:E0:AC:41:B7:C2
            X509v3 Authority Key Identifier:
                keyid:BD:04:BD:B4:E0:48:6F:1A:4A:8D:25:7A:F7:BB:83:84:F5:61:F3:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9C2EFE806A65539A61B5CB585D59755541AF7340034B26152E4D0D36C4C10FFD/0/BD04BDB4E0486F1A4A8D257AF7BB8384F561F30C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD04BDB4E0486F1A4A8D257AF7BB8384F561F30C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9C2EFE806A65539A61B5CB585D59755541AF7340034B26152E4D0D36C4C10FFD/0/323830333a623931303a3a2f33322d3432203d3e20323732303133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b910::/32

    Signature Algorithm: sha256WithRSAEncryption
         2f:27:dd:2f:2c:cf:73:05:d6:8f:fe:fb:e9:19:d6:8c:c8:85:
         21:bd:f0:ef:e0:4a:99:78:39:2c:5b:6d:b7:e7:ed:4c:1a:f4:
         ac:ea:4e:01:c9:b9:dd:e4:e1:38:02:5f:e1:08:98:75:2f:ab:
         1d:3c:43:86:b0:05:12:67:69:4d:89:ac:5d:bd:0d:49:56:ea:
         13:dd:17:04:b9:aa:05:d0:da:69:02:b8:0d:64:fe:37:90:e0:
         f4:73:f8:39:c0:c9:32:4f:44:af:a3:54:1f:da:dc:43:03:8b:
         78:28:fb:ec:10:e7:95:43:06:ed:12:b8:78:b9:9b:ef:50:0f:
         f1:5a:a2:fb:24:8c:3b:9d:a2:2b:a2:9b:22:af:5f:a3:4e:e3:
         09:85:0d:db:1b:c6:99:7a:81:60:2b:2b:08:7b:cc:98:7b:8e:
         48:7b:59:a9:b5:3c:34:d9:34:07:02:33:55:84:69:e0:83:1d:
         b2:b7:75:2f:a6:99:5e:d2:8e:55:ab:58:3d:0d:1a:ba:ae:ac:
         8d:63:96:84:38:3f:b5:96:62:c3:8e:2f:b3:4e:00:00:84:3d:
         7f:69:05:95:72:d4:e4:0f:10:c8:98:27:70:00:d3:b4:cb:99:
         6e:52:6a:44:a6:41:4d:ad:94:4f:0d:dd:f0:69:d3:58:12:fc:
         b5:cc:55:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:01:11 2025 by rpki-client