Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9E6D5EDC7439E792A9040DDFC82E4A399D892BD161C0686DFEDC7C30A00FC225/0/323830333a633731303a3a2f33322d3438203d3e20323732303937.roa
File:                     323830333a633731303a3a2f33322d3438203d3e20323732303937.roa (raw, json)
Hash identifier:          G0BebRbCMQwz5JmQI45KQq7usDiHpo7rctjcsb/5YS0=
Subject key identifier:   1B:E5:6C:9E:50:48:27:E8:58:14:26:92:02:16:B4:93:C3:6F:2F:84
Certificate issuer:       /CN=D68970D6F2A2898E8ADE58866C1E8D1B48015A9F
Certificate serial:       754E76BF4900BAB22EF1627AB2F61D4D603D7683
Authority key identifier: D6:89:70:D6:F2:A2:89:8E:8A:DE:58:86:6C:1E:8D:1B:48:01:5A:9F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D68970D6F2A2898E8ADE58866C1E8D1B48015A9F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9E6D5EDC7439E792A9040DDFC82E4A399D892BD161C0686DFEDC7C30A00FC225/0/323830333a633731303a3a2f33322d3438203d3e20323732303937.roa
Signing time:             Mon 28 Apr 2025 22:17:02 +0000
ROA not before:           Mon 28 Apr 2025 22:12:02 +0000
ROA not after:            Mon 27 Apr 2026 22:17:02 +0000
asID:                     272097
IP address blocks:        2803:c710::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9E6D5EDC7439E792A9040DDFC82E4A399D892BD161C0686DFEDC7C30A00FC225/0/D68970D6F2A2898E8ADE58866C1E8D1B48015A9F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9E6D5EDC7439E792A9040DDFC82E4A399D892BD161C0686DFEDC7C30A00FC225/0/D68970D6F2A2898E8ADE58866C1E8D1B48015A9F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D68970D6F2A2898E8ADE58866C1E8D1B48015A9F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 08:22:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:4e:76:bf:49:00:ba:b2:2e:f1:62:7a:b2:f6:1d:4d:60:3d:76:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D68970D6F2A2898E8ADE58866C1E8D1B48015A9F
        Validity
            Not Before: Apr 28 22:12:02 2025 GMT
            Not After : Apr 27 22:17:02 2026 GMT
        Subject: CN=1BE56C9E504827E8581426920216B493C36F2F84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:2d:ff:ef:02:c7:9b:df:ed:01:c2:d9:e6:e2:
                    43:0d:ef:d7:86:60:43:81:f9:5c:73:72:82:95:87:
                    ef:0d:cb:04:d1:e1:08:80:2e:a5:47:eb:58:13:4a:
                    b5:af:25:4e:19:67:9a:45:62:52:3b:82:0b:86:64:
                    7e:85:d1:c3:29:9f:3e:0c:b7:85:a9:25:16:bb:de:
                    f3:1a:d0:c5:db:f9:b6:b3:9d:4b:1e:74:6b:b0:8f:
                    b9:6b:de:90:79:66:54:9d:c0:a0:5a:c0:6e:15:a5:
                    92:88:54:3a:6a:d1:79:0a:a2:09:e5:5e:ff:a1:7c:
                    df:f3:d8:db:ca:86:94:bd:ea:cd:d3:74:7a:55:f8:
                    67:16:11:c3:7c:65:48:f5:bf:86:5c:a6:60:6f:de:
                    4a:21:d1:4d:96:31:59:43:af:1f:d1:55:6e:b0:cc:
                    81:e4:dd:bc:15:08:c1:39:0a:55:42:24:78:3a:b8:
                    76:34:c8:f7:0c:86:42:88:0b:62:6d:81:36:93:0a:
                    17:44:1e:06:d7:39:0c:01:f3:b0:df:17:3d:63:cd:
                    b7:2e:fe:e1:2d:7e:b1:6f:05:90:f6:67:c4:17:9f:
                    5b:6e:48:64:cb:86:12:15:53:3b:f5:64:fe:f8:2e:
                    08:65:3c:c0:4f:31:b7:de:b4:a5:8b:65:c7:b6:fd:
                    bc:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:E5:6C:9E:50:48:27:E8:58:14:26:92:02:16:B4:93:C3:6F:2F:84
            X509v3 Authority Key Identifier:
                keyid:D6:89:70:D6:F2:A2:89:8E:8A:DE:58:86:6C:1E:8D:1B:48:01:5A:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9E6D5EDC7439E792A9040DDFC82E4A399D892BD161C0686DFEDC7C30A00FC225/0/D68970D6F2A2898E8ADE58866C1E8D1B48015A9F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D68970D6F2A2898E8ADE58866C1E8D1B48015A9F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9E6D5EDC7439E792A9040DDFC82E4A399D892BD161C0686DFEDC7C30A00FC225/0/323830333a633731303a3a2f33322d3438203d3e20323732303937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c710::/32

    Signature Algorithm: sha256WithRSAEncryption
         a9:5e:7e:b8:2b:22:c3:2b:79:8d:02:0e:2e:15:53:ee:a4:23:
         e5:34:13:02:8d:eb:ac:fc:dd:2f:ca:3f:43:80:af:75:9a:dd:
         b9:2f:53:39:2c:11:01:44:1e:04:fb:b8:cc:a3:1f:7c:57:4e:
         d0:76:a4:20:a3:41:18:26:8e:13:9e:3a:11:5f:68:3d:dd:6a:
         35:af:ea:49:4f:00:d5:84:97:17:2c:09:b8:22:9f:30:f4:19:
         1e:b1:db:3b:e5:91:4e:c9:79:3b:66:18:78:73:e5:9d:42:00:
         1a:8f:94:e4:aa:ce:bd:af:23:82:7f:3b:be:49:46:19:dd:16:
         66:c3:a5:fa:cd:46:63:dc:8e:f1:ef:ca:32:5d:3b:98:5b:c2:
         59:ea:cc:23:e8:c2:58:d4:8c:b7:45:d4:1f:58:b8:41:ad:c4:
         f6:dc:4b:a9:5e:72:25:5d:cf:db:33:64:9b:c6:9c:4a:96:35:
         41:2a:b9:e2:2f:0f:63:b7:3e:56:d9:89:5d:82:db:26:17:6d:
         14:d7:6c:a7:b5:87:80:15:e6:21:34:85:19:be:5b:2c:d6:42:
         47:ca:20:5b:3c:c7:09:f0:f0:e0:fc:45:cb:06:2c:02:5d:9d:
         fe:18:a0:a4:08:84:de:e8:66:6f:d1:0f:33:60:20:45:26:c6:
         b4:f0:21:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 20:21:02 2025 by rpki-client