Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D98DDB83A54B8DFAB2436C1F255BDC31F0B1C00440F63181C67BCA817A9E7D7D/0/323830333a333439303a3a2f33322d3438203d3e20323733313637.roa
File:                     323830333a333439303a3a2f33322d3438203d3e20323733313637.roa (raw, json)
Hash identifier:          9p0TB0H/imePJZKDlEX1f+00kQD245eVgBLKgJxrboE=
Subject key identifier:   13:9C:76:1F:FA:31:68:9A:5E:8C:46:D1:4B:D6:4C:B1:0D:22:91:B0
Certificate issuer:       /CN=1885136D6D9034E94CC9D7CA10F8A05BDBE89FE0
Certificate serial:       409B220224DA565CD2F7F2ACAD891480709F8BD4
Authority key identifier: 18:85:13:6D:6D:90:34:E9:4C:C9:D7:CA:10:F8:A0:5B:DB:E8:9F:E0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1885136D6D9034E94CC9D7CA10F8A05BDBE89FE0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D98DDB83A54B8DFAB2436C1F255BDC31F0B1C00440F63181C67BCA817A9E7D7D/0/323830333a333439303a3a2f33322d3438203d3e20323733313637.roa
Signing time:             Tue 11 Mar 2025 05:15:00 +0000
ROA not before:           Tue 11 Mar 2025 05:10:00 +0000
ROA not after:            Tue 10 Mar 2026 05:15:00 +0000
asID:                     273167
IP address blocks:        2803:3490::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D98DDB83A54B8DFAB2436C1F255BDC31F0B1C00440F63181C67BCA817A9E7D7D/0/1885136D6D9034E94CC9D7CA10F8A05BDBE89FE0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D98DDB83A54B8DFAB2436C1F255BDC31F0B1C00440F63181C67BCA817A9E7D7D/0/1885136D6D9034E94CC9D7CA10F8A05BDBE89FE0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1885136D6D9034E94CC9D7CA10F8A05BDBE89FE0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 09:40:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:9b:22:02:24:da:56:5c:d2:f7:f2:ac:ad:89:14:80:70:9f:8b:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1885136D6D9034E94CC9D7CA10F8A05BDBE89FE0
        Validity
            Not Before: Mar 11 05:10:00 2025 GMT
            Not After : Mar 10 05:15:00 2026 GMT
        Subject: CN=139C761FFA31689A5E8C46D14BD64CB10D2291B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:19:8c:e4:97:8c:8f:0e:ad:4e:c9:56:d1:4f:
                    0d:71:49:52:21:69:0f:dd:64:2b:ac:0b:46:53:f1:
                    84:0e:8d:5d:aa:fe:cd:24:a8:e3:1b:ad:5f:b3:3d:
                    2a:04:18:8d:c1:fc:d4:b7:a7:46:e9:23:b3:0c:e9:
                    f7:6e:60:b7:3f:20:fc:85:6f:f4:a4:c0:29:b3:c2:
                    5c:5d:52:af:09:39:eb:ef:0b:74:fc:18:a8:e9:40:
                    3d:53:95:89:db:36:97:b5:e7:e4:e5:0e:b7:84:11:
                    3e:05:dd:c1:1b:fc:1e:b2:91:77:98:cb:4f:2c:03:
                    0e:d5:a3:10:8e:d7:ea:7a:15:dc:9b:67:f7:e8:d9:
                    89:6a:24:51:65:bf:19:4f:27:b5:62:4c:e7:ea:21:
                    c3:cd:49:5e:06:9c:6c:33:05:70:89:be:30:a4:04:
                    40:dc:2a:2d:f3:90:07:e7:bd:e7:80:24:3c:aa:82:
                    47:8e:62:92:62:0f:bf:9a:1e:e4:88:52:51:c8:bd:
                    a2:c9:7f:8a:be:91:ad:b8:56:d2:97:70:ac:93:67:
                    24:1a:c5:ad:f1:22:3e:17:6c:2f:6a:c3:92:eb:37:
                    9d:fd:9f:e3:07:ae:44:42:e5:e2:7d:e0:50:65:23:
                    f2:e9:6d:b6:4a:26:01:71:94:ad:29:e7:64:0f:80:
                    da:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:9C:76:1F:FA:31:68:9A:5E:8C:46:D1:4B:D6:4C:B1:0D:22:91:B0
            X509v3 Authority Key Identifier:
                keyid:18:85:13:6D:6D:90:34:E9:4C:C9:D7:CA:10:F8:A0:5B:DB:E8:9F:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D98DDB83A54B8DFAB2436C1F255BDC31F0B1C00440F63181C67BCA817A9E7D7D/0/1885136D6D9034E94CC9D7CA10F8A05BDBE89FE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1885136D6D9034E94CC9D7CA10F8A05BDBE89FE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D98DDB83A54B8DFAB2436C1F255BDC31F0B1C00440F63181C67BCA817A9E7D7D/0/323830333a333439303a3a2f33322d3438203d3e20323733313637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3490::/32

    Signature Algorithm: sha256WithRSAEncryption
         6b:ef:d9:a1:ff:04:3c:4d:51:c6:24:04:2c:42:a0:18:6e:9c:
         60:0f:e1:68:17:32:ea:72:b0:34:61:76:c0:04:0b:f3:a5:3c:
         f8:d5:dc:e9:d1:89:de:4c:34:fd:8c:3e:a8:59:36:5e:41:1e:
         0d:ed:06:5c:d7:32:d6:8a:a0:59:d3:04:c1:ae:a0:e0:6f:cb:
         d9:a5:7d:a1:40:c2:cd:b6:b7:86:18:10:27:f4:9b:c0:7d:64:
         7a:84:da:b1:9b:92:f2:7a:45:e1:ba:24:7e:b8:c8:6f:22:f3:
         42:21:c0:48:90:bd:21:04:19:a7:81:4f:fe:a3:40:47:00:0a:
         91:78:31:4e:99:f0:95:9c:44:0f:94:21:60:d6:e0:7b:25:a0:
         e0:df:1b:87:7a:12:25:d1:3b:b7:30:e6:3c:21:6f:5e:a2:3c:
         fe:31:f3:0d:2e:7f:71:4b:56:b8:10:ae:86:f4:3f:e2:a7:90:
         f3:58:37:9c:6d:e4:f7:f1:3a:c9:b5:6e:8e:91:4e:da:55:aa:
         2f:0a:95:cc:aa:44:9a:65:00:65:81:96:f8:cb:41:55:11:45:
         a3:16:be:1b:95:56:5a:48:3f:75:de:b6:29:19:35:14:5b:25:
         d1:65:0c:cb:82:62:1a:01:05:3b:f2:52:1f:3a:45:9f:93:1b:
         a1:49:90:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 17:35:35 2025 by rpki-client