Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B71DF8E839AF34312DD7D71FB39907842FD27DE7EC1B331829FF182E1A10C3E9/0/323830333a616539303a3a2f33322d3332203d3e20323733383738.roa
File:                     323830333a616539303a3a2f33322d3332203d3e20323733383738.roa (raw, json)
Hash identifier:          wxJHYpGbk87SQPPDjiOk2mlIBI27IFamTYBiyGMVxsk=
Subject key identifier:   9B:C1:56:6E:BD:FE:C2:71:F7:C6:B9:47:71:00:6C:33:34:E3:DD:E4
Certificate issuer:       /CN=4B167B483874A127B2C4F0C2ACD9F1EFCDB0210A
Certificate serial:       72B31E50D71335E05E74FB56F2DF1912345A6759
Authority key identifier: 4B:16:7B:48:38:74:A1:27:B2:C4:F0:C2:AC:D9:F1:EF:CD:B0:21:0A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4B167B483874A127B2C4F0C2ACD9F1EFCDB0210A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B71DF8E839AF34312DD7D71FB39907842FD27DE7EC1B331829FF182E1A10C3E9/0/323830333a616539303a3a2f33322d3332203d3e20323733383738.roa
Signing time:             Sat 01 Feb 2025 16:45:00 +0000
ROA not before:           Sat 01 Feb 2025 16:40:00 +0000
ROA not after:            Sat 31 Jan 2026 16:45:00 +0000
asID:                     273878
IP address blocks:        2803:ae90::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B71DF8E839AF34312DD7D71FB39907842FD27DE7EC1B331829FF182E1A10C3E9/0/4B167B483874A127B2C4F0C2ACD9F1EFCDB0210A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B71DF8E839AF34312DD7D71FB39907842FD27DE7EC1B331829FF182E1A10C3E9/0/4B167B483874A127B2C4F0C2ACD9F1EFCDB0210A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4B167B483874A127B2C4F0C2ACD9F1EFCDB0210A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:b3:1e:50:d7:13:35:e0:5e:74:fb:56:f2:df:19:12:34:5a:67:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B167B483874A127B2C4F0C2ACD9F1EFCDB0210A
        Validity
            Not Before: Feb  1 16:40:00 2025 GMT
            Not After : Jan 31 16:45:00 2026 GMT
        Subject: CN=9BC1566EBDFEC271F7C6B94771006C3334E3DDE4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:46:e5:65:99:db:c7:de:f6:5c:1f:7f:5a:aa:
                    de:e3:37:ad:a6:e3:df:3a:60:24:f3:bc:bd:3c:fc:
                    5a:d9:1d:54:97:42:65:f9:f4:7b:d8:ba:5a:85:4d:
                    9f:55:2a:06:d9:13:94:e2:ec:ee:6b:52:bb:51:b1:
                    1f:1e:fe:4b:08:11:8d:ba:59:82:a4:02:9d:a9:83:
                    79:2d:68:81:0d:d1:76:35:e0:72:17:cc:0f:ae:58:
                    7c:01:19:e9:25:17:ad:72:c8:2c:3f:63:dc:97:cc:
                    77:d8:83:48:14:59:77:19:5f:1d:6e:15:e8:00:f8:
                    a1:2c:7b:af:b5:be:71:6a:9d:65:c2:03:6f:dc:ed:
                    43:77:c9:14:b9:3f:4a:37:08:eb:6d:bb:42:13:45:
                    9f:24:70:75:4d:e6:b8:63:55:29:20:5a:28:ad:6f:
                    5c:aa:f3:d3:80:6f:68:da:d7:05:e1:36:22:1c:86:
                    ce:67:0a:ac:be:54:2a:b7:fe:bc:70:6c:0e:fd:a1:
                    8c:a4:d1:d3:5a:63:2b:e3:f5:77:67:c6:6f:3c:d1:
                    1e:08:3f:3a:a3:c8:5d:c4:1b:bb:ce:27:be:e5:f0:
                    6b:c7:69:bc:e4:58:9c:87:07:87:2f:1a:a5:67:f0:
                    fd:b2:8b:7f:7a:f0:2c:62:3e:08:99:d0:3b:54:6c:
                    57:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:C1:56:6E:BD:FE:C2:71:F7:C6:B9:47:71:00:6C:33:34:E3:DD:E4
            X509v3 Authority Key Identifier:
                keyid:4B:16:7B:48:38:74:A1:27:B2:C4:F0:C2:AC:D9:F1:EF:CD:B0:21:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B71DF8E839AF34312DD7D71FB39907842FD27DE7EC1B331829FF182E1A10C3E9/0/4B167B483874A127B2C4F0C2ACD9F1EFCDB0210A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4B167B483874A127B2C4F0C2ACD9F1EFCDB0210A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B71DF8E839AF34312DD7D71FB39907842FD27DE7EC1B331829FF182E1A10C3E9/0/323830333a616539303a3a2f33322d3332203d3e20323733383738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ae90::/32

    Signature Algorithm: sha256WithRSAEncryption
         8a:a4:f7:6e:a0:a5:6b:ce:09:c6:6f:46:57:4e:bf:8b:07:0c:
         6e:c3:53:9f:b8:6b:ed:79:7c:1e:23:eb:25:1c:d4:b5:fd:94:
         ff:d6:29:8d:44:d4:af:20:6f:c5:89:3b:ae:a6:49:63:bd:02:
         8c:04:55:47:9c:4d:02:33:60:d4:9e:50:d0:f9:f7:86:ea:c7:
         13:3b:dd:04:25:8c:86:32:0d:34:2c:84:c4:86:13:bb:7a:6e:
         37:31:44:a7:04:bb:c3:dc:41:5c:c8:a0:f8:69:22:51:4e:83:
         de:cf:03:5b:0f:94:31:0c:65:3b:33:27:50:f7:17:04:35:18:
         79:b8:5f:04:99:1e:23:c0:82:1a:37:01:ed:cf:60:0f:f9:e3:
         b1:69:b8:e1:af:9c:39:60:58:b0:26:04:c9:4a:8b:96:e9:db:
         89:be:77:a0:7b:a1:8b:5d:16:38:88:ab:d7:f0:60:0c:2b:d5:
         82:b6:49:99:17:7c:6e:88:9a:a3:a4:67:24:b9:9c:08:6c:38:
         29:ac:81:d2:6b:b2:83:54:97:55:18:21:fb:06:94:51:11:6e:
         e1:1a:a9:5c:eb:7f:62:b0:c2:2a:65:0b:94:17:56:d2:9d:81:
         f9:39:0b:97:5a:e1:c3:d4:21:80:1b:93:14:6d:c7:47:94:6c:
         99:5a:2f:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:57:46 2025 by rpki-client