Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ECDB73FCF1E6BD002DCB06BD6052691D622ED0910A7F2F051AEC692DDE984AEF/0/323830333a653563303a31303a3a2f34382d3438203d3e20323636373235.roa
File:                     323830333a653563303a31303a3a2f34382d3438203d3e20323636373235.roa (raw, json)
Hash identifier:          EODZ6Tsyxo4NKvh3OjDlcOGxKWrh29S8JoUjUoorGCs=
Subject key identifier:   2F:AC:F5:DB:57:38:1A:6A:FD:65:9D:9E:B9:19:88:31:77:4E:0E:29
Certificate issuer:       /CN=9BE1895C8F64AEC52209EA2FDE7D308AED2DA640
Certificate serial:       4FD99D489C39745B47F3D58D1FD3D4D649AEED92
Authority key identifier: 9B:E1:89:5C:8F:64:AE:C5:22:09:EA:2F:DE:7D:30:8A:ED:2D:A6:40
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BE1895C8F64AEC52209EA2FDE7D308AED2DA640.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ECDB73FCF1E6BD002DCB06BD6052691D622ED0910A7F2F051AEC692DDE984AEF/0/323830333a653563303a31303a3a2f34382d3438203d3e20323636373235.roa
Signing time:             Tue 04 Feb 2025 18:28:13 +0000
ROA not before:           Tue 04 Feb 2025 18:23:13 +0000
ROA not after:            Tue 03 Feb 2026 18:28:13 +0000
asID:                     266725
IP address blocks:        2803:e5c0:10::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/ECDB73FCF1E6BD002DCB06BD6052691D622ED0910A7F2F051AEC692DDE984AEF/0/9BE1895C8F64AEC52209EA2FDE7D308AED2DA640.crl
                          rsync://repository.lacnic.net/rpki/lacnic/ECDB73FCF1E6BD002DCB06BD6052691D622ED0910A7F2F051AEC692DDE984AEF/0/9BE1895C8F64AEC52209EA2FDE7D308AED2DA640.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BE1895C8F64AEC52209EA2FDE7D308AED2DA640.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 01:56:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:d9:9d:48:9c:39:74:5b:47:f3:d5:8d:1f:d3:d4:d6:49:ae:ed:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BE1895C8F64AEC52209EA2FDE7D308AED2DA640
        Validity
            Not Before: Feb  4 18:23:13 2025 GMT
            Not After : Feb  3 18:28:13 2026 GMT
        Subject: CN=2FACF5DB57381A6AFD659D9EB9198831774E0E29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:55:f7:ff:ba:4c:14:38:17:7c:3d:dc:25:d9:
                    00:7f:3b:fb:fd:0d:14:44:4c:d2:ef:c9:a5:12:5e:
                    12:b0:04:0d:ad:0d:47:bf:4d:e1:b2:f8:49:6d:47:
                    55:3f:86:bc:89:81:8d:06:fd:c5:b3:89:09:45:e1:
                    b3:01:55:03:51:0a:58:7d:60:37:b6:20:26:55:36:
                    be:bd:3b:b4:a5:19:71:99:9c:7c:59:e2:9d:82:e8:
                    b7:24:67:e5:d9:00:2d:e7:cf:51:ae:cf:30:8e:62:
                    94:de:9a:22:36:c0:4c:d1:4e:85:23:dd:fc:74:8c:
                    04:4e:ca:26:90:61:d9:df:6d:30:72:1e:f8:a9:22:
                    0b:a1:eb:38:44:74:d9:bf:a0:5d:98:c1:3d:d0:15:
                    dd:f7:43:e8:49:e4:b1:70:6f:f8:39:42:fd:dc:83:
                    d4:09:1c:e2:64:5f:40:2a:ba:24:3e:7c:c9:36:0d:
                    ff:87:31:8c:e2:29:87:65:f1:67:21:4d:0f:b0:98:
                    e6:7c:b6:96:0e:d1:6e:0d:c7:1b:85:ea:ad:5a:93:
                    79:4f:f6:43:bf:1e:c1:a8:44:18:a7:fd:06:2e:9e:
                    c4:4f:35:49:ac:84:24:cc:72:13:13:94:30:10:20:
                    3b:da:d0:e1:57:95:b3:44:e0:90:71:2f:c1:2f:cf:
                    fb:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:AC:F5:DB:57:38:1A:6A:FD:65:9D:9E:B9:19:88:31:77:4E:0E:29
            X509v3 Authority Key Identifier:
                keyid:9B:E1:89:5C:8F:64:AE:C5:22:09:EA:2F:DE:7D:30:8A:ED:2D:A6:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ECDB73FCF1E6BD002DCB06BD6052691D622ED0910A7F2F051AEC692DDE984AEF/0/9BE1895C8F64AEC52209EA2FDE7D308AED2DA640.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BE1895C8F64AEC52209EA2FDE7D308AED2DA640.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ECDB73FCF1E6BD002DCB06BD6052691D622ED0910A7F2F051AEC692DDE984AEF/0/323830333a653563303a31303a3a2f34382d3438203d3e20323636373235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e5c0:10::/48

    Signature Algorithm: sha256WithRSAEncryption
         85:2e:22:6c:1d:de:2e:72:23:74:1e:f0:68:9d:6a:92:7d:a5:
         7e:d8:1d:ea:e6:e0:bd:b3:96:f3:5d:38:a0:49:b6:5b:b2:f8:
         b8:8e:4f:86:a6:f3:c4:2d:08:74:fd:2e:37:90:46:c5:df:3a:
         c7:1f:ca:d8:9b:9d:ae:9b:a2:65:95:77:d0:7a:d6:d3:0c:27:
         82:dc:fb:54:37:66:bf:a9:3e:3a:fe:f7:74:cb:ff:df:c6:57:
         b4:94:4a:4f:dc:49:b6:26:df:eb:d6:ac:fa:30:7c:61:3c:29:
         2e:27:28:82:55:ee:e8:fe:c6:82:90:83:35:57:c4:fc:98:23:
         ee:53:f5:9e:0d:67:64:0f:3e:18:72:39:a9:38:14:21:89:6e:
         1a:32:d8:72:52:4c:cd:29:66:62:a5:c2:57:c9:42:23:8a:3c:
         80:e5:e5:ca:e9:be:97:11:9d:29:b9:21:4f:0c:6b:2a:2c:d2:
         96:e9:38:da:8b:42:c2:22:0a:2c:93:ff:1a:92:1e:d7:60:4f:
         89:5e:7e:8f:9c:8a:2a:0d:b2:87:80:68:40:88:38:5c:59:0c:
         e7:58:69:84:b7:da:a9:9c:a8:be:11:bb:1c:1d:1c:df:0b:12:
         aa:3d:d4:a2:00:80:ec:d2:9f:43:0b:11:98:64:cf:02:6f:1b:
         69:42:e0:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 16:41:32 2025 by rpki-client