Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B931A30E7EBDF56BC20A4F4F5A4090CBF27966EAEB82C680E2B8A818A0AD79B9/0/323830333a343439303a3a2f33322d3438203d3e20323732383134.roa
File:                     323830333a343439303a3a2f33322d3438203d3e20323732383134.roa (raw, json)
Hash identifier:          4BDnZ6ypQ6euAOXSC4tCqR3BP2tNxDYCgpG5CBrJ53Y=
Subject key identifier:   12:E3:F4:C9:B9:70:66:C0:55:F8:6B:BE:D9:0D:FD:0B:91:65:93:92
Certificate issuer:       /CN=9106E77B7B9F4207D5A5ED92F94E91A69096C4D5
Certificate serial:       2225865565617D0E4D9699190B59B02525F9674B
Authority key identifier: 91:06:E7:7B:7B:9F:42:07:D5:A5:ED:92:F9:4E:91:A6:90:96:C4:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9106E77B7B9F4207D5A5ED92F94E91A69096C4D5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B931A30E7EBDF56BC20A4F4F5A4090CBF27966EAEB82C680E2B8A818A0AD79B9/0/323830333a343439303a3a2f33322d3438203d3e20323732383134.roa
Signing time:             Tue 04 Feb 2025 18:26:21 +0000
ROA not before:           Tue 04 Feb 2025 18:21:21 +0000
ROA not after:            Tue 03 Feb 2026 18:26:21 +0000
asID:                     272814
IP address blocks:        2803:4490::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B931A30E7EBDF56BC20A4F4F5A4090CBF27966EAEB82C680E2B8A818A0AD79B9/0/9106E77B7B9F4207D5A5ED92F94E91A69096C4D5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B931A30E7EBDF56BC20A4F4F5A4090CBF27966EAEB82C680E2B8A818A0AD79B9/0/9106E77B7B9F4207D5A5ED92F94E91A69096C4D5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9106E77B7B9F4207D5A5ED92F94E91A69096C4D5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 11:26:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:25:86:55:65:61:7d:0e:4d:96:99:19:0b:59:b0:25:25:f9:67:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9106E77B7B9F4207D5A5ED92F94E91A69096C4D5
        Validity
            Not Before: Feb  4 18:21:21 2025 GMT
            Not After : Feb  3 18:26:21 2026 GMT
        Subject: CN=12E3F4C9B97066C055F86BBED90DFD0B91659392
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:8e:31:5a:f3:f9:eb:41:fc:f2:f6:96:50:71:
                    e1:3f:d0:03:b2:f9:3c:f8:75:7f:7b:9e:b4:61:cf:
                    c6:6a:d3:24:cb:6b:fe:7a:56:20:3c:c9:31:a0:14:
                    04:46:dd:87:fd:41:5f:c7:37:94:90:06:e4:d8:f7:
                    75:64:36:de:89:f9:a2:68:98:69:8d:09:53:99:00:
                    a5:bb:1d:4d:88:74:7c:42:54:a0:46:70:f8:0c:26:
                    41:78:b9:37:0e:77:71:a2:8b:2e:3d:52:45:06:62:
                    5a:c2:f6:54:b6:c7:8d:49:60:de:35:b6:fc:01:6c:
                    1c:95:d8:40:4d:70:69:4f:ba:9e:d0:c4:37:64:67:
                    de:82:8c:2b:4e:4c:18:85:29:c5:2b:1a:1a:57:d9:
                    4c:c0:5d:c0:12:a2:8d:3e:36:2c:0d:2f:24:b7:35:
                    e6:7e:1f:c1:e4:be:1e:c2:f4:0c:c9:bb:53:6f:13:
                    32:7a:8a:34:cd:1f:9c:31:7a:ef:21:95:bf:e7:c0:
                    f3:f0:b5:ee:79:c8:53:4a:f2:d4:7e:1a:c6:8d:2b:
                    2f:de:97:9b:b4:4d:9f:cf:f2:1c:59:9c:1a:2b:fa:
                    c3:e1:ba:a7:2c:cb:f9:7a:6c:d4:fd:01:96:86:5b:
                    f3:45:5a:70:5f:4d:15:c5:bb:07:d6:bc:91:26:9d:
                    53:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:E3:F4:C9:B9:70:66:C0:55:F8:6B:BE:D9:0D:FD:0B:91:65:93:92
            X509v3 Authority Key Identifier:
                keyid:91:06:E7:7B:7B:9F:42:07:D5:A5:ED:92:F9:4E:91:A6:90:96:C4:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B931A30E7EBDF56BC20A4F4F5A4090CBF27966EAEB82C680E2B8A818A0AD79B9/0/9106E77B7B9F4207D5A5ED92F94E91A69096C4D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9106E77B7B9F4207D5A5ED92F94E91A69096C4D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B931A30E7EBDF56BC20A4F4F5A4090CBF27966EAEB82C680E2B8A818A0AD79B9/0/323830333a343439303a3a2f33322d3438203d3e20323732383134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4490::/32

    Signature Algorithm: sha256WithRSAEncryption
         97:ea:5e:bf:47:b2:1a:e3:e7:c5:ff:6c:42:ff:95:2d:59:fd:
         18:f6:e0:96:13:ce:7a:64:11:b7:82:5a:85:b6:aa:0e:e3:5a:
         0c:3b:e3:64:bd:b5:e2:57:87:5d:38:7e:d8:65:82:2e:f3:f5:
         fe:e5:05:d4:d8:9a:26:5c:f1:38:ce:25:ce:0e:d6:73:a3:38:
         6a:b8:f0:f2:6d:e7:7e:d8:c0:5e:15:5d:01:6e:7d:24:53:7a:
         46:5a:a1:67:bd:35:56:ab:1a:4b:06:d4:c0:6d:46:3d:d7:1d:
         e7:f4:22:50:fb:2b:76:e0:29:c4:84:c7:00:dd:fa:51:da:fc:
         13:c2:c0:ee:26:28:17:68:b6:ff:39:86:70:68:b7:79:85:f8:
         d0:fb:c2:cc:ee:54:19:a6:2d:90:d0:a5:9a:12:b2:11:c1:8c:
         b3:4f:fd:48:82:4c:e0:f7:3a:cb:5b:ba:ea:50:c4:8b:ff:cd:
         a9:5c:3f:4a:09:ec:da:32:75:04:05:8f:17:3b:98:84:6c:87:
         da:ef:e1:f5:c8:66:8f:0b:97:41:72:c2:31:85:8d:b8:cd:ab:
         98:35:c6:c2:c6:72:41:81:40:c4:b7:c3:43:ae:66:29:91:00:
         7f:8c:19:18:be:46:5c:6e:98:c1:d6:50:4d:1c:7d:19:50:25:
         83:a3:dc:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:28:33 2025 by rpki-client