Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/00AA6E6C39BB0A5EA5CF7180A4654907636FBC09537D9E7891CC5E98D8B6B8AF/0/323830333a326236303a3a2f33322d3332203d3e20323639383032.roa
File:                     323830333a326236303a3a2f33322d3332203d3e20323639383032.roa (raw, json)
Hash identifier:          qX5lujXvQCH5PgIndyDTFnJlgFA39rkvsbTXJSYHHTw=
Subject key identifier:   6F:AF:07:26:6E:E0:14:11:72:2F:4C:60:4E:A5:DB:6D:58:68:95:B1
Certificate issuer:       /CN=12EAB871531A1CD1B15330264A27410F2408296F
Certificate serial:       46BE5F085F7537C23DBCE9C070335C858DE771B6
Authority key identifier: 12:EA:B8:71:53:1A:1C:D1:B1:53:30:26:4A:27:41:0F:24:08:29:6F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/12EAB871531A1CD1B15330264A27410F2408296F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/00AA6E6C39BB0A5EA5CF7180A4654907636FBC09537D9E7891CC5E98D8B6B8AF/0/323830333a326236303a3a2f33322d3332203d3e20323639383032.roa
Signing time:             Tue 04 Feb 2025 18:34:26 +0000
ROA not before:           Tue 04 Feb 2025 18:29:26 +0000
ROA not after:            Tue 03 Feb 2026 18:34:26 +0000
asID:                     269802
IP address blocks:        2803:2b60::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/00AA6E6C39BB0A5EA5CF7180A4654907636FBC09537D9E7891CC5E98D8B6B8AF/0/12EAB871531A1CD1B15330264A27410F2408296F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/00AA6E6C39BB0A5EA5CF7180A4654907636FBC09537D9E7891CC5E98D8B6B8AF/0/12EAB871531A1CD1B15330264A27410F2408296F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/12EAB871531A1CD1B15330264A27410F2408296F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 16 Apr 2025 10:50:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:be:5f:08:5f:75:37:c2:3d:bc:e9:c0:70:33:5c:85:8d:e7:71:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12EAB871531A1CD1B15330264A27410F2408296F
        Validity
            Not Before: Feb  4 18:29:26 2025 GMT
            Not After : Feb  3 18:34:26 2026 GMT
        Subject: CN=6FAF07266EE01411722F4C604EA5DB6D586895B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:39:0d:07:d5:61:62:7e:c6:72:b8:cb:b5:90:
                    e1:51:7a:d9:03:99:0f:98:86:d9:dc:8a:bd:ec:f2:
                    10:ac:91:7d:aa:e6:67:21:00:df:71:79:63:6a:ad:
                    01:67:cd:63:ac:9d:81:67:59:4e:0d:5c:fa:e5:ac:
                    c6:9f:8b:f3:23:b1:1e:e5:d1:f6:ce:3b:42:13:47:
                    74:fe:31:87:89:7e:6b:77:d6:23:2e:c2:73:db:47:
                    4e:8e:98:86:db:d7:7f:9f:1d:92:c4:10:9d:ee:a9:
                    95:e1:cf:d8:a1:41:d1:5a:74:62:20:0e:f1:34:bb:
                    06:3f:5a:45:44:ca:83:f1:69:fb:f5:f1:e6:b5:4d:
                    a1:4e:e6:9e:65:ef:05:4f:79:64:f7:9c:a2:27:d0:
                    4e:50:1f:4d:4a:8c:63:4f:0d:5a:0d:51:01:3f:6c:
                    ee:cf:f4:a8:a2:f9:07:62:3d:73:ef:79:28:63:2e:
                    b9:77:16:13:65:bb:77:f4:dd:57:c2:17:07:51:a0:
                    f2:dc:7b:e1:f5:cc:aa:4d:74:5d:71:af:75:c1:09:
                    28:9f:06:79:1a:be:a3:91:da:68:ab:35:f3:ba:6a:
                    ed:d4:75:d7:5a:06:9d:1e:1f:8a:80:9f:f7:5b:ae:
                    22:5c:e2:1c:df:fc:a0:e1:5c:bf:66:88:f0:5a:09:
                    14:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:AF:07:26:6E:E0:14:11:72:2F:4C:60:4E:A5:DB:6D:58:68:95:B1
            X509v3 Authority Key Identifier:
                keyid:12:EA:B8:71:53:1A:1C:D1:B1:53:30:26:4A:27:41:0F:24:08:29:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/00AA6E6C39BB0A5EA5CF7180A4654907636FBC09537D9E7891CC5E98D8B6B8AF/0/12EAB871531A1CD1B15330264A27410F2408296F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/12EAB871531A1CD1B15330264A27410F2408296F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/00AA6E6C39BB0A5EA5CF7180A4654907636FBC09537D9E7891CC5E98D8B6B8AF/0/323830333a326236303a3a2f33322d3332203d3e20323639383032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2b60::/32

    Signature Algorithm: sha256WithRSAEncryption
         11:12:f6:ed:c1:29:ed:c7:09:fe:b1:5e:4a:7f:47:6b:96:0c:
         61:d2:1c:e2:b9:a3:55:63:4a:fc:4e:a3:63:a4:09:5c:89:4c:
         d5:95:39:58:c1:54:21:56:3c:f8:94:02:ff:df:5b:5b:1e:53:
         89:e9:05:cc:fb:ff:4b:48:63:6e:23:c2:7e:af:5d:d6:09:56:
         58:36:df:a7:7d:eb:dd:33:a2:00:aa:54:a5:10:ad:b4:bf:05:
         07:2e:23:be:c4:c4:24:37:5b:ba:10:b8:52:fe:c3:b4:be:ad:
         63:8e:b2:2d:63:5a:b3:3d:da:76:bc:7b:f2:31:16:1d:b2:40:
         6d:4d:39:e7:62:93:22:06:1b:93:22:f3:02:9b:d7:c4:7d:eb:
         f8:d5:4d:32:c9:f4:8b:19:94:94:a6:33:aa:25:b7:74:e3:ef:
         c8:7d:e6:80:bf:43:c5:3d:49:f8:36:05:e7:ee:24:cd:20:f7:
         76:db:e0:38:b1:b2:d2:45:a1:43:fa:65:10:a9:0f:71:bf:f2:
         75:4c:99:8f:bd:45:5c:d4:46:60:d1:31:45:9f:b3:29:3c:aa:
         5c:60:82:c7:fb:ce:d3:0a:0f:98:76:a2:35:da:21:af:62:43:
         4a:3e:f6:b8:7c:26:74:c9:d4:d3:fc:cf:3f:83:01:6f:45:da:
         5d:46:16:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 11:09:17 2025 by rpki-client