Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/323830333a623065303a373030323a3a2f34382d3438203d3e20323732393739.roa
File:                     323830333a623065303a373030323a3a2f34382d3438203d3e20323732393739.roa (raw, json)
Hash identifier:          zU499ioZ+KgN0gvNLDbWi5EQqgLqt293yPcSrcfUcbE=
Subject key identifier:   52:E1:F5:E1:99:1C:F3:54:E7:DE:D7:D7:E1:C4:61:78:DC:7D:71:A5
Certificate issuer:       /CN=B9661B0E7FC75ED767D18B56FC749BAED21FC195
Certificate serial:       7A30C66590DBFC4B67132F2EB040A6AC83049D04
Authority key identifier: B9:66:1B:0E:7F:C7:5E:D7:67:D1:8B:56:FC:74:9B:AE:D2:1F:C1:95
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/323830333a623065303a373030323a3a2f34382d3438203d3e20323732393739.roa
Signing time:             Tue 29 Apr 2025 21:17:13 +0000
ROA not before:           Tue 29 Apr 2025 21:12:13 +0000
ROA not after:            Tue 28 Apr 2026 21:17:13 +0000
asID:                     272979
IP address blocks:        2803:b0e0:7002::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.crl
                          rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 10 May 2025 01:54:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:30:c6:65:90:db:fc:4b:67:13:2f:2e:b0:40:a6:ac:83:04:9d:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9661B0E7FC75ED767D18B56FC749BAED21FC195
        Validity
            Not Before: Apr 29 21:12:13 2025 GMT
            Not After : Apr 28 21:17:13 2026 GMT
        Subject: CN=52E1F5E1991CF354E7DED7D7E1C46178DC7D71A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:73:1b:51:31:17:4a:4e:61:c9:45:ad:0a:a6:
                    e0:b2:2c:73:e6:74:68:40:1f:fc:48:0e:8a:73:2c:
                    90:e9:a6:82:fd:49:fc:80:e8:00:8a:2d:75:51:73:
                    99:36:32:5e:2b:c9:73:cd:a9:ec:f8:8a:30:03:1c:
                    10:05:c1:42:ae:a2:6d:df:46:6c:82:c0:b5:a6:4d:
                    8f:63:fe:a5:15:fa:91:34:e2:b0:47:ca:46:ed:26:
                    7d:1d:bb:d6:20:96:77:3b:b9:e7:7c:a0:a7:5b:ac:
                    aa:1a:5e:fa:c5:de:df:40:b2:d0:9a:9c:52:7a:e2:
                    c4:d9:23:0a:58:ff:fa:7e:a0:bb:45:02:78:04:f0:
                    c7:0a:d5:0a:5f:d0:59:e3:9a:db:13:0b:56:bc:cb:
                    78:7c:32:d3:d7:59:59:af:0d:2f:ea:62:b8:43:78:
                    1b:d3:4b:20:4d:9b:3e:be:b6:49:fe:c4:8a:d6:e0:
                    59:0f:f1:1b:36:f5:9c:ed:53:c5:6d:a7:9c:e2:6f:
                    26:9c:7a:73:e8:77:3d:9b:f3:5f:a5:bd:d6:5a:97:
                    a0:a6:bf:69:2f:d2:83:c2:62:9a:1b:19:a9:5c:12:
                    56:e6:4d:f6:46:01:ef:53:02:fc:05:f2:c6:0a:f4:
                    4b:d6:24:5d:36:77:10:de:67:20:e4:42:dc:48:0f:
                    b7:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:E1:F5:E1:99:1C:F3:54:E7:DE:D7:D7:E1:C4:61:78:DC:7D:71:A5
            X509v3 Authority Key Identifier:
                keyid:B9:66:1B:0E:7F:C7:5E:D7:67:D1:8B:56:FC:74:9B:AE:D2:1F:C1:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/323830333a623065303a373030323a3a2f34382d3438203d3e20323732393739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b0e0:7002::/48

    Signature Algorithm: sha256WithRSAEncryption
         14:8e:1c:c4:e7:b6:ed:59:a9:8a:10:a6:4e:14:0c:8e:3d:fc:
         cf:45:79:f4:a1:d4:ce:5a:80:f2:37:b6:05:80:c3:cb:a1:9d:
         94:ae:54:a9:07:cb:28:00:22:33:66:9a:81:f5:42:42:fc:c8:
         69:26:b5:82:e2:76:dd:7c:2a:64:2d:b5:f1:88:e9:21:9d:a4:
         f6:4b:24:a2:67:e6:c3:8c:ca:7b:77:38:f9:51:b6:ab:be:01:
         67:78:05:41:3d:44:22:f6:23:ff:ad:74:c5:cf:fc:2b:8f:f8:
         13:f3:9b:13:08:93:d5:00:81:8f:33:a1:3c:5c:fb:8c:71:88:
         2e:61:af:65:51:cb:78:d0:7b:5e:b0:28:3f:7a:91:e6:1e:52:
         85:39:27:8d:01:94:b3:16:70:39:9e:ba:0c:98:07:6c:2e:5c:
         f8:a5:5d:2d:5b:c7:79:32:16:9d:31:f7:5c:88:f5:34:11:a3:
         ae:26:0e:9a:be:03:43:30:47:79:9a:cb:e6:bf:38:86:86:f4:
         e8:94:09:fb:a4:59:0b:09:ba:39:7c:02:6a:89:85:2b:eb:8d:
         41:07:30:fb:99:2d:f3:3b:9e:e1:37:99:af:37:f2:01:f6:28:
         ca:d7:b0:b0:cc:56:ea:aa:78:d9:bf:95:ae:21:a0:0c:56:ba:
         b3:50:c5:fd
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue May 6 21:39:09 2025 by rpki-client