Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/323830333a623065303a383031353a3a2f34382d3438203d3e20323732393739.roa
File:                     323830333a623065303a383031353a3a2f34382d3438203d3e20323732393739.roa (raw, json)
Hash identifier:          OyaaEPqtcLcVIx0zstLY4lecxZD1hzjvGis5KC3SsQo=
Subject key identifier:   17:F5:86:D2:88:20:AF:46:C5:0F:DB:C9:3F:2B:5F:70:80:9A:09:DB
Certificate issuer:       /CN=B9661B0E7FC75ED767D18B56FC749BAED21FC195
Certificate serial:       3EE253E4F8890A87209DC4334D97D7D2A8285830
Authority key identifier: B9:66:1B:0E:7F:C7:5E:D7:67:D1:8B:56:FC:74:9B:AE:D2:1F:C1:95
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/323830333a623065303a383031353a3a2f34382d3438203d3e20323732393739.roa
Signing time:             Mon 28 Apr 2025 21:17:00 +0000
ROA not before:           Mon 28 Apr 2025 21:12:00 +0000
ROA not after:            Mon 27 Apr 2026 21:17:00 +0000
asID:                     272979
IP address blocks:        2803:b0e0:8015::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.crl
                          rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 21 May 2025 23:46:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:e2:53:e4:f8:89:0a:87:20:9d:c4:33:4d:97:d7:d2:a8:28:58:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9661B0E7FC75ED767D18B56FC749BAED21FC195
        Validity
            Not Before: Apr 28 21:12:00 2025 GMT
            Not After : Apr 27 21:17:00 2026 GMT
        Subject: CN=17F586D28820AF46C50FDBC93F2B5F70809A09DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:ff:f4:04:a9:9c:24:4b:58:70:c2:fa:bf:d5:
                    44:06:f4:a1:0d:2f:b0:09:2c:f3:19:e0:d4:75:8e:
                    d7:6f:61:84:ca:c2:d1:62:34:05:44:00:d1:5e:63:
                    64:82:90:53:89:fe:43:11:7a:55:b4:a5:3a:24:92:
                    18:f2:49:33:30:54:c6:0e:07:7c:de:86:8d:4c:26:
                    92:bc:f4:2c:cf:58:06:ee:89:c9:72:5e:25:8f:93:
                    a0:72:d7:ba:7f:91:c4:ee:fd:27:ef:4e:2a:72:ec:
                    bc:2a:61:29:00:ac:2e:4a:cb:c5:be:6b:c3:2c:cf:
                    3e:43:da:b9:c7:b3:68:ab:c2:e7:0b:15:fd:4b:fe:
                    39:d7:f2:cf:b2:45:84:c3:d0:37:28:33:88:eb:e0:
                    fe:cb:05:18:cf:c4:bd:d7:bf:83:d8:60:59:ac:78:
                    70:e7:60:5c:69:c0:15:35:fa:35:e2:1a:5f:4d:f5:
                    34:27:a7:19:d4:f2:7c:40:18:80:31:fb:98:2c:11:
                    26:6a:c8:15:92:23:15:80:b1:2f:aa:77:5c:d6:de:
                    ce:76:df:00:d1:1a:85:6b:d9:9e:2e:da:4a:22:47:
                    c1:71:8e:2d:0d:11:06:b9:b9:79:51:1e:1a:e2:64:
                    06:7c:5a:29:20:1c:fa:b0:7e:52:7c:f6:37:98:b1:
                    0d:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:F5:86:D2:88:20:AF:46:C5:0F:DB:C9:3F:2B:5F:70:80:9A:09:DB
            X509v3 Authority Key Identifier:
                keyid:B9:66:1B:0E:7F:C7:5E:D7:67:D1:8B:56:FC:74:9B:AE:D2:1F:C1:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/323830333a623065303a383031353a3a2f34382d3438203d3e20323732393739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b0e0:8015::/48

    Signature Algorithm: sha256WithRSAEncryption
         01:89:04:5a:7c:56:25:d5:4c:7f:da:4f:70:6d:6f:e9:b1:f1:
         bb:9a:c5:da:ac:d9:15:15:fe:b4:7a:28:19:2e:3c:2d:3e:b6:
         be:a3:44:da:33:2e:33:19:f3:3f:a8:61:34:5f:17:56:85:b8:
         f3:01:1b:5f:9d:c6:33:39:8d:a4:a5:31:90:b7:bb:d9:59:9a:
         c6:61:66:00:fe:02:57:c4:95:3e:7f:2c:a5:cb:29:c2:0e:72:
         79:09:a5:95:39:53:8b:30:7d:cf:a4:39:32:af:4a:70:db:a3:
         16:59:4e:e9:f2:41:d6:12:b3:1b:75:0d:56:6b:8a:a7:19:42:
         85:8d:45:0f:c2:9f:8b:e5:30:c9:e9:00:3f:92:14:f2:36:b1:
         af:43:aa:47:d0:7d:55:ee:bf:dd:18:ad:68:ee:08:27:92:1f:
         9f:82:a5:df:e2:dd:d0:13:5a:f6:d9:1f:83:e1:c7:14:69:ba:
         77:5e:a1:0c:89:d1:cd:d5:bd:21:98:a9:ef:4d:37:55:ff:1a:
         41:6c:bb:7d:58:84:37:8d:17:ab:58:f9:3a:84:23:fb:11:c2:
         4d:78:67:dd:5a:ca:fb:95:12:5d:90:84:9d:9e:20:3b:d3:e0:
         c1:96:5b:5d:01:4f:43:8c:95:b8:09:b9:6f:fa:2a:10:69:a2:
         26:1d:48:f4
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun May 18 05:09:09 2025 by rpki-client