Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/323830333a623065303a393963633a3a2f34382d3438203d3e20323732393739.roa
File:                     323830333a623065303a393963633a3a2f34382d3438203d3e20323732393739.roa (raw, json)
Hash identifier:          Tt3cPczbuocrBoMhE54Cu0XAQ1/ULclxFppbaTEJOsE=
Subject key identifier:   F9:62:BF:A1:8E:98:A3:B8:E8:60:88:C6:26:C5:76:14:AC:00:EC:3F
Certificate issuer:       /CN=B9661B0E7FC75ED767D18B56FC749BAED21FC195
Certificate serial:       0DE349447E4E32791285B9647FBEC04EE55976FE
Authority key identifier: B9:66:1B:0E:7F:C7:5E:D7:67:D1:8B:56:FC:74:9B:AE:D2:1F:C1:95
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/323830333a623065303a393963633a3a2f34382d3438203d3e20323732393739.roa
Signing time:             Tue 29 Apr 2025 21:17:12 +0000
ROA not before:           Tue 29 Apr 2025 21:12:12 +0000
ROA not after:            Tue 28 Apr 2026 21:17:12 +0000
asID:                     272979
IP address blocks:        2803:b0e0:99cc::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.crl
                          rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 10 May 2025 01:54:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:e3:49:44:7e:4e:32:79:12:85:b9:64:7f:be:c0:4e:e5:59:76:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9661B0E7FC75ED767D18B56FC749BAED21FC195
        Validity
            Not Before: Apr 29 21:12:12 2025 GMT
            Not After : Apr 28 21:17:12 2026 GMT
        Subject: CN=F962BFA18E98A3B8E86088C626C57614AC00EC3F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:62:9b:cf:b1:85:65:f2:29:9c:ec:de:e6:64:
                    ca:5d:e7:b2:34:9a:5c:e6:58:5a:36:c4:b5:7e:53:
                    9f:e5:c5:e7:2f:2f:b0:44:36:6f:ce:81:d7:db:3c:
                    ec:d0:d3:8c:58:b0:8f:c9:61:e6:69:72:7e:1a:4d:
                    13:ba:47:18:0f:47:25:f1:30:69:b3:63:8f:96:81:
                    46:a9:e4:b9:6a:8e:20:a5:78:65:df:9a:82:f8:34:
                    3a:3c:dd:2a:2a:d0:f8:9f:f2:6b:6b:ef:2b:1c:10:
                    c8:4a:c1:40:81:7c:87:4d:3e:77:46:e7:ed:95:53:
                    08:34:14:89:54:ab:28:10:1b:a6:bd:00:59:76:f1:
                    aa:8b:dd:ef:76:e9:4d:07:7e:7f:e9:db:ea:9c:56:
                    06:b1:15:88:15:f5:d0:72:da:e8:4a:d8:71:ed:bc:
                    f2:de:b0:5b:57:61:92:71:d8:12:29:37:b7:36:93:
                    df:53:23:f1:2f:64:65:63:c2:24:cc:f6:3d:3f:f6:
                    48:0e:1d:fe:c3:dc:ce:57:1f:ac:7c:32:55:f8:79:
                    00:af:f0:3f:65:fe:4b:9e:6e:5c:55:82:97:2d:41:
                    21:61:73:81:2e:2b:27:09:6a:ca:b9:09:08:21:ee:
                    6f:e5:04:af:a0:03:26:e7:5a:44:a2:1f:96:50:49:
                    b5:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:62:BF:A1:8E:98:A3:B8:E8:60:88:C6:26:C5:76:14:AC:00:EC:3F
            X509v3 Authority Key Identifier:
                keyid:B9:66:1B:0E:7F:C7:5E:D7:67:D1:8B:56:FC:74:9B:AE:D2:1F:C1:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/323830333a623065303a393963633a3a2f34382d3438203d3e20323732393739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b0e0:99cc::/48

    Signature Algorithm: sha256WithRSAEncryption
         02:eb:9e:f2:41:5f:c7:3a:9b:3b:11:f6:ef:56:ba:24:25:fb:
         4c:99:3a:2c:ab:9f:6f:ef:04:65:a6:84:01:b7:94:c3:f0:9a:
         d1:1f:b5:f6:1d:2e:c5:38:5b:7a:4c:0a:93:56:56:d3:8e:34:
         e0:94:56:73:60:9f:4c:19:6c:62:ae:98:01:45:48:87:3c:23:
         19:e9:04:c8:67:0e:cf:8d:50:41:2b:07:59:7b:46:92:1e:e0:
         f9:2a:68:64:07:6e:a2:cd:1b:c4:3e:1e:78:6b:b5:bc:ff:4a:
         ef:2a:db:0b:24:2a:77:c7:33:76:7e:de:28:3c:09:5d:0f:bd:
         d0:31:65:6f:72:57:e6:90:78:12:b0:4e:7b:3b:e1:75:dc:02:
         9b:64:6e:84:de:63:9e:9a:a9:36:21:1e:9f:95:32:64:da:d0:
         6f:a3:ea:32:29:cb:d6:4b:ee:22:c8:92:88:98:22:b1:7b:6d:
         9a:4f:78:2f:14:e1:cf:51:5d:40:2a:7f:75:49:14:e0:bb:01:
         48:73:ab:55:eb:05:d5:2d:72:af:61:84:8d:90:3c:da:3e:f3:
         87:ec:16:e3:64:e3:31:12:aa:19:c3:50:0b:b7:d4:1d:5d:89:
         61:27:52:a7:4e:33:ba:01:21:10:e4:29:46:d7:2d:85:1e:f6:
         f4:bf:23:17
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 7 02:13:24 2025 by rpki-client