Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9EBBE1579ABCBF2E8AC49DC7AD3D4D932EFFEF6A1824B416F289A8AF88097301/0/323830333a376563303a313030303a3a2f33362d3336203d3e20323635363731.roa
File:                     323830333a376563303a313030303a3a2f33362d3336203d3e20323635363731.roa (raw, json)
Hash identifier:          R+D/e1zC2kL6O2F7kFVdV/U8G4XxHI5T6JWn1RzieCw=
Subject key identifier:   C8:B8:49:56:1E:A9:C8:4C:CB:DC:4E:42:22:BC:D8:42:E9:B5:0F:32
Certificate issuer:       /CN=4CA91FFA6AE8A06F96A7F21B170F2E116200F977
Certificate serial:       2C9FCD8EE6597D716B13A351F2B4A03BC5FAC8B3
Authority key identifier: 4C:A9:1F:FA:6A:E8:A0:6F:96:A7:F2:1B:17:0F:2E:11:62:00:F9:77
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CA91FFA6AE8A06F96A7F21B170F2E116200F977.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9EBBE1579ABCBF2E8AC49DC7AD3D4D932EFFEF6A1824B416F289A8AF88097301/0/323830333a376563303a313030303a3a2f33362d3336203d3e20323635363731.roa
Signing time:             Tue 04 Feb 2025 20:01:31 +0000
ROA not before:           Tue 04 Feb 2025 19:56:31 +0000
ROA not after:            Tue 03 Feb 2026 20:01:31 +0000
asID:                     265671
IP address blocks:        2803:7ec0:1000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9EBBE1579ABCBF2E8AC49DC7AD3D4D932EFFEF6A1824B416F289A8AF88097301/0/4CA91FFA6AE8A06F96A7F21B170F2E116200F977.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9EBBE1579ABCBF2E8AC49DC7AD3D4D932EFFEF6A1824B416F289A8AF88097301/0/4CA91FFA6AE8A06F96A7F21B170F2E116200F977.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CA91FFA6AE8A06F96A7F21B170F2E116200F977.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:9f:cd:8e:e6:59:7d:71:6b:13:a3:51:f2:b4:a0:3b:c5:fa:c8:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4CA91FFA6AE8A06F96A7F21B170F2E116200F977
        Validity
            Not Before: Feb  4 19:56:31 2025 GMT
            Not After : Feb  3 20:01:31 2026 GMT
        Subject: CN=C8B849561EA9C84CCBDC4E4222BCD842E9B50F32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:5b:6a:0f:23:e0:bb:b7:df:be:f5:f6:fd:9f:
                    63:7e:4f:b5:31:d1:54:8c:38:ce:2e:2c:62:56:dc:
                    b1:7e:e3:e4:01:e6:41:69:d1:90:e1:ca:7a:49:c5:
                    c1:a0:08:b4:91:6f:5d:d5:85:71:73:a5:9a:af:e1:
                    94:8e:82:44:e8:33:ab:04:e6:cd:5a:d7:08:6d:a6:
                    ce:de:27:a2:9c:45:3e:d7:6e:ed:7e:e8:6a:5f:e5:
                    e5:9d:19:01:35:07:c5:73:12:47:06:0e:87:84:29:
                    ea:fe:4e:80:0c:f5:18:38:94:1e:d1:53:14:81:79:
                    b8:74:f3:8a:b6:ed:f6:3b:b3:de:46:90:ac:28:1f:
                    72:61:b4:44:f1:bc:62:82:f0:91:4a:48:7c:c5:fd:
                    63:55:6f:61:ce:c5:ae:0c:f4:c6:49:e8:59:89:8b:
                    dc:dd:6b:de:df:55:dc:83:ac:47:e5:51:a7:e3:f8:
                    c0:62:f0:5b:a9:9c:0c:32:43:d9:2a:e8:85:95:95:
                    6c:25:c6:42:20:dd:6d:24:d7:4b:78:17:e1:46:e7:
                    f9:d4:ea:4f:d4:ce:84:80:e2:c0:76:a8:2b:98:a7:
                    93:fc:7f:90:e4:f5:c9:57:75:8c:45:bd:39:fa:f5:
                    45:36:90:1f:87:12:9e:2c:37:97:ce:33:ae:67:bf:
                    c2:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:B8:49:56:1E:A9:C8:4C:CB:DC:4E:42:22:BC:D8:42:E9:B5:0F:32
            X509v3 Authority Key Identifier:
                keyid:4C:A9:1F:FA:6A:E8:A0:6F:96:A7:F2:1B:17:0F:2E:11:62:00:F9:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9EBBE1579ABCBF2E8AC49DC7AD3D4D932EFFEF6A1824B416F289A8AF88097301/0/4CA91FFA6AE8A06F96A7F21B170F2E116200F977.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CA91FFA6AE8A06F96A7F21B170F2E116200F977.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9EBBE1579ABCBF2E8AC49DC7AD3D4D932EFFEF6A1824B416F289A8AF88097301/0/323830333a376563303a313030303a3a2f33362d3336203d3e20323635363731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7ec0:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         04:84:ea:cb:e7:93:3f:54:c5:26:0d:ea:68:91:03:92:38:82:
         24:c2:23:1f:18:b5:c8:ea:cd:d4:2d:48:f8:8c:8b:d5:a8:dc:
         f5:93:7b:fa:72:7c:9b:08:9d:2b:ba:ed:3b:97:26:cd:ef:af:
         1c:d3:8a:bc:44:17:ea:29:e7:53:00:27:53:f8:8c:c4:64:2a:
         d5:da:d2:9c:3b:c7:5c:bc:41:12:bc:e9:6e:7c:17:4b:27:7e:
         cb:cf:bb:d8:cb:29:2b:c2:b6:38:28:fe:7f:5b:6f:08:b1:07:
         49:2c:0c:c1:aa:46:3b:0b:6e:5f:aa:c5:2a:ba:ee:d1:b8:7f:
         7c:56:74:4e:58:14:3b:32:21:28:e2:29:4c:ce:11:45:2f:42:
         6d:a7:e3:63:ab:fb:50:f8:dd:48:a5:c7:a3:a5:fb:fc:ed:fb:
         23:a6:a7:f5:2b:1e:12:00:f2:a4:4f:3d:93:42:95:05:35:8f:
         8c:fa:8d:88:7e:70:02:c5:ca:80:2d:31:da:e9:dc:b3:e6:32:
         e8:5f:4e:ef:31:b4:04:bf:2e:7d:c9:06:91:bb:98:dd:a5:71:
         97:df:d3:2a:4c:12:3c:e6:ff:e4:75:e3:a6:73:8e:34:c4:ba:
         00:0f:f0:ed:5a:ab:61:1d:4c:06:fb:ff:ac:40:bd:c2:e0:9e:
         99:22:7e:9b
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 5 07:14:48 2025 by rpki-client