Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F0BAB4FDC49B7DFE1D89ACB49F8C8A9225FB645AFBF6A00D832DC9DC3F39B253/0/323830333a346131303a613030303a3a2f33362d3336203d3e20323731393136.roa
File:                     323830333a346131303a613030303a3a2f33362d3336203d3e20323731393136.roa (raw, json)
Hash identifier:          HBvcUgj+zW54YAf9xfXra1OwSIAUkqjk12+ERmnpoa4=
Subject key identifier:   1B:AA:E7:30:BB:A5:D3:E8:32:89:E5:1C:AF:EE:5B:CB:72:77:B0:70
Certificate issuer:       /CN=E45215C1ABF0099BEFF5D5807A415849759B9467
Certificate serial:       0D98BD9782C9F3ED2C576C0D92B0BA7D12F6380B
Authority key identifier: E4:52:15:C1:AB:F0:09:9B:EF:F5:D5:80:7A:41:58:49:75:9B:94:67
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E45215C1ABF0099BEFF5D5807A415849759B9467.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F0BAB4FDC49B7DFE1D89ACB49F8C8A9225FB645AFBF6A00D832DC9DC3F39B253/0/323830333a346131303a613030303a3a2f33362d3336203d3e20323731393136.roa
Signing time:             Tue 04 Feb 2025 18:21:25 +0000
ROA not before:           Tue 04 Feb 2025 18:16:25 +0000
ROA not after:            Tue 03 Feb 2026 18:21:25 +0000
asID:                     271916
IP address blocks:        2803:4a10:a000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F0BAB4FDC49B7DFE1D89ACB49F8C8A9225FB645AFBF6A00D832DC9DC3F39B253/0/E45215C1ABF0099BEFF5D5807A415849759B9467.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F0BAB4FDC49B7DFE1D89ACB49F8C8A9225FB645AFBF6A00D832DC9DC3F39B253/0/E45215C1ABF0099BEFF5D5807A415849759B9467.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E45215C1ABF0099BEFF5D5807A415849759B9467.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 17:38:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:98:bd:97:82:c9:f3:ed:2c:57:6c:0d:92:b0:ba:7d:12:f6:38:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E45215C1ABF0099BEFF5D5807A415849759B9467
        Validity
            Not Before: Feb  4 18:16:25 2025 GMT
            Not After : Feb  3 18:21:25 2026 GMT
        Subject: CN=1BAAE730BBA5D3E83289E51CAFEE5BCB7277B070
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:78:3a:f5:91:b9:f4:15:e7:7d:cb:ea:1b:49:
                    8b:94:c5:37:69:46:42:34:a6:85:d6:bf:bd:e4:f1:
                    83:1a:20:a1:c1:12:91:c1:be:cd:d5:53:31:a4:c0:
                    9a:35:c5:e7:dc:66:1a:b3:e3:12:c6:70:53:12:49:
                    da:f6:97:aa:87:32:67:d7:0f:f5:5c:da:7f:36:08:
                    ae:bb:a8:e0:b4:ec:e2:36:21:db:20:59:f2:17:ad:
                    65:66:64:71:40:b3:58:24:71:10:28:0c:69:54:69:
                    12:30:71:8b:3b:cd:02:e8:86:f4:28:ea:06:42:9f:
                    b2:51:54:eb:56:50:88:6b:01:20:33:56:84:f0:ff:
                    8e:b8:12:b8:03:d3:ac:58:03:d0:8e:cf:8e:95:b8:
                    ca:8e:c2:ab:8c:8d:eb:01:fb:b0:10:b3:57:b3:1c:
                    22:d7:e7:5a:5d:80:21:f9:0b:cf:c1:f2:aa:ff:23:
                    be:bf:c8:6c:f8:3b:30:c2:11:28:38:63:4b:e1:26:
                    d8:7e:50:4a:ff:9d:1e:88:80:c7:01:d6:66:00:ce:
                    95:eb:7b:ee:45:5c:35:a8:b6:f4:d1:40:45:46:d3:
                    97:f3:d3:bb:8b:cd:a3:d6:ee:a3:9a:03:fa:d3:d3:
                    f7:3f:30:60:7a:68:b5:c8:b9:be:ae:d0:ba:9d:00:
                    99:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:AA:E7:30:BB:A5:D3:E8:32:89:E5:1C:AF:EE:5B:CB:72:77:B0:70
            X509v3 Authority Key Identifier:
                keyid:E4:52:15:C1:AB:F0:09:9B:EF:F5:D5:80:7A:41:58:49:75:9B:94:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F0BAB4FDC49B7DFE1D89ACB49F8C8A9225FB645AFBF6A00D832DC9DC3F39B253/0/E45215C1ABF0099BEFF5D5807A415849759B9467.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E45215C1ABF0099BEFF5D5807A415849759B9467.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F0BAB4FDC49B7DFE1D89ACB49F8C8A9225FB645AFBF6A00D832DC9DC3F39B253/0/323830333a346131303a613030303a3a2f33362d3336203d3e20323731393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4a10:a000::/36

    Signature Algorithm: sha256WithRSAEncryption
         ae:87:4c:97:3b:e5:ff:33:bd:f2:d5:1a:16:3a:5a:3a:ee:6b:
         2d:7d:78:53:5f:f0:4f:c8:14:22:b9:67:bb:34:77:4b:01:a3:
         e0:05:f7:41:3d:33:bb:31:a4:46:1c:a3:cf:34:ee:c4:33:ed:
         f5:52:d8:88:df:d2:a9:02:c8:c3:95:b9:fe:46:68:0f:60:91:
         37:fa:f6:7b:90:e0:fa:6c:cb:ac:c1:75:ed:d6:d0:42:d1:76:
         c9:aa:9d:ac:e4:a2:46:00:12:36:0e:41:e4:d8:0f:eb:a2:4c:
         28:54:ec:1d:94:16:04:16:86:e5:2a:f5:66:b0:22:b3:78:b7:
         b4:c0:25:fb:41:de:8d:44:d0:9b:39:09:f7:f6:2d:11:0f:08:
         20:4d:89:91:00:c9:b2:35:ac:ec:66:97:62:81:b9:37:c6:a3:
         d0:ba:07:1b:c0:6b:c2:36:dd:f3:c5:73:cb:39:0f:27:d3:a7:
         39:d3:d9:33:2b:78:73:b2:7a:f0:b3:82:57:26:5d:87:00:68:
         f4:dd:a3:85:01:2d:3a:68:1e:ef:fd:8b:ff:12:dd:e8:6b:1c:
         bf:08:a9:32:20:ee:83:da:a8:b7:fa:b8:1f:50:04:e9:e1:e1:
         54:bd:61:f9:56:f9:3f:cb:8d:87:cf:f7:15:25:7f:03:1e:5d:
         34:ed:a1:f1
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 5 15:10:06 2025 by rpki-client