Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D7EC5FC67A92022DABE8B3963D804B8CB36B1042698E73C93081010C65889BE6/0/323830333a313565303a3a2f34302d3430203d3e20323730303337.roa
File:                     323830333a313565303a3a2f34302d3430203d3e20323730303337.roa (raw, json)
Hash identifier:          IRyRSLpR4qRMESciMP0sfVZsgwy1pIfZc+tVH4ebQ9I=
Subject key identifier:   80:56:4A:DF:58:DE:99:C6:C3:F3:C8:8F:DF:85:D5:B6:03:EC:FD:36
Certificate issuer:       /CN=9BC7FB723211AEDC038D47F1F6A375939FD56624
Certificate serial:       57C5F6B1B0E5CB13ABFC5AB84FB7A4B7D09D2E70
Authority key identifier: 9B:C7:FB:72:32:11:AE:DC:03:8D:47:F1:F6:A3:75:93:9F:D5:66:24
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BC7FB723211AEDC038D47F1F6A375939FD56624.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D7EC5FC67A92022DABE8B3963D804B8CB36B1042698E73C93081010C65889BE6/0/323830333a313565303a3a2f34302d3430203d3e20323730303337.roa
Signing time:             Tue 04 Feb 2025 18:04:14 +0000
ROA not before:           Tue 04 Feb 2025 17:59:14 +0000
ROA not after:            Tue 03 Feb 2026 18:04:14 +0000
asID:                     270037
IP address blocks:        2803:15e0::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D7EC5FC67A92022DABE8B3963D804B8CB36B1042698E73C93081010C65889BE6/0/9BC7FB723211AEDC038D47F1F6A375939FD56624.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D7EC5FC67A92022DABE8B3963D804B8CB36B1042698E73C93081010C65889BE6/0/9BC7FB723211AEDC038D47F1F6A375939FD56624.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BC7FB723211AEDC038D47F1F6A375939FD56624.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:c5:f6:b1:b0:e5:cb:13:ab:fc:5a:b8:4f:b7:a4:b7:d0:9d:2e:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BC7FB723211AEDC038D47F1F6A375939FD56624
        Validity
            Not Before: Feb  4 17:59:14 2025 GMT
            Not After : Feb  3 18:04:14 2026 GMT
        Subject: CN=80564ADF58DE99C6C3F3C88FDF85D5B603ECFD36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:3f:77:38:24:bb:49:d3:29:78:d0:ce:ce:f2:
                    33:c6:57:93:67:71:da:e7:40:1f:2b:7d:94:ff:1a:
                    db:f9:45:81:c1:0c:8d:e2:4c:33:a5:50:d9:cf:06:
                    68:17:57:e9:59:a9:98:36:09:38:4e:f0:8e:e1:5d:
                    3e:bc:fb:90:d2:ba:ac:45:d7:69:6d:d8:e5:1f:61:
                    0b:b2:b6:7a:7d:1d:94:32:40:4e:55:7f:b1:9d:a2:
                    75:c2:eb:15:14:d3:e3:58:bb:e3:70:20:7c:d9:2d:
                    53:bd:f9:a8:1d:5f:04:79:49:2f:ad:24:6d:c2:81:
                    64:18:5b:e2:d1:07:01:b6:8b:36:52:ee:91:65:53:
                    f6:34:7b:f8:57:c7:23:4f:27:f1:1e:a4:b7:00:9f:
                    32:5e:40:ab:99:77:46:c0:0b:e1:9c:3d:b8:0a:ba:
                    4b:8b:4d:0a:c4:da:4e:03:4f:93:17:de:ab:d2:ab:
                    63:31:93:bc:c4:83:30:ff:e9:86:b3:c1:e3:d3:2d:
                    cb:74:7b:37:98:0d:7f:d6:b4:cc:57:05:5c:27:e9:
                    1a:c7:31:be:c7:cf:80:6d:5d:47:7c:f6:af:ea:8d:
                    54:be:2c:1d:f2:e8:ef:b6:d6:e3:4c:33:3a:d8:eb:
                    ff:ac:3f:be:26:97:37:c1:c6:9a:aa:d5:5b:6c:71:
                    1c:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:56:4A:DF:58:DE:99:C6:C3:F3:C8:8F:DF:85:D5:B6:03:EC:FD:36
            X509v3 Authority Key Identifier:
                keyid:9B:C7:FB:72:32:11:AE:DC:03:8D:47:F1:F6:A3:75:93:9F:D5:66:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D7EC5FC67A92022DABE8B3963D804B8CB36B1042698E73C93081010C65889BE6/0/9BC7FB723211AEDC038D47F1F6A375939FD56624.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BC7FB723211AEDC038D47F1F6A375939FD56624.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D7EC5FC67A92022DABE8B3963D804B8CB36B1042698E73C93081010C65889BE6/0/323830333a313565303a3a2f34302d3430203d3e20323730303337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:15e0::/40

    Signature Algorithm: sha256WithRSAEncryption
         35:d9:be:e2:88:c0:fb:09:96:16:b2:f9:ff:b8:5b:55:5a:b8:
         3f:6f:ab:fd:2a:3b:62:be:6c:ad:83:66:be:6c:10:29:04:ef:
         5c:60:02:8e:9f:9f:fa:68:18:50:c6:50:4c:f9:1f:8e:c5:77:
         28:dc:38:f1:fc:83:e6:ad:2e:a6:3d:ec:2e:58:61:01:d7:f3:
         c1:d3:bc:c1:39:60:85:33:4d:e0:1c:ee:4f:12:5a:44:4a:e9:
         2f:db:3d:b3:60:91:b9:cb:49:2a:2c:ab:32:c5:66:a1:78:ef:
         d2:0c:3b:82:cd:7f:2c:db:8a:da:d6:f9:76:df:6c:ba:fc:0d:
         e3:3e:cc:49:49:a9:17:0d:82:e8:64:48:c8:d6:5d:7b:b6:3a:
         6c:05:68:bd:2f:b4:81:b9:2a:ef:d9:e1:b4:50:ad:4e:e7:0b:
         46:44:cf:c8:f6:00:7b:e0:fe:4a:b9:50:ab:00:61:66:08:78:
         72:ee:b6:ad:a3:68:33:c6:53:34:83:cd:c7:6a:dd:aa:a5:d8:
         86:a4:9c:6d:00:5a:66:ff:d9:e7:d4:79:5f:b5:32:ae:ef:10:
         25:f4:00:1c:b6:48:b2:b0:72:8d:6c:0d:3c:4a:9f:2f:30:c2:
         38:44:10:fd:3f:67:25:68:e9:dd:91:77:c5:35:2c:cf:1f:1d:
         4c:ac:69:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:00:14 2025 by rpki-client