Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/89718669D1CC436F537EF18104D833AB96D3C03F4AEBD949FE59B2A167707D1A/0/323830333a343634303a3a2f33322d3438203d3e203631353036.roa
File:                     323830333a343634303a3a2f33322d3438203d3e203631353036.roa (raw, json)
Hash identifier:          hgeLOUNpaG6S+tQ/7RGHFZrV3YDg9E545yk3LKCgREc=
Subject key identifier:   F8:50:A6:66:F8:04:27:B0:DE:4A:D2:C9:1F:D9:29:33:7A:5C:31:E2
Certificate issuer:       /CN=30293EE5309A01535DED2E8C83D8043CC3C407D5
Certificate serial:       1F2113FAC412F8937320C44F66990B4E4866E931
Authority key identifier: 30:29:3E:E5:30:9A:01:53:5D:ED:2E:8C:83:D8:04:3C:C3:C4:07:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30293EE5309A01535DED2E8C83D8043CC3C407D5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/89718669D1CC436F537EF18104D833AB96D3C03F4AEBD949FE59B2A167707D1A/0/323830333a343634303a3a2f33322d3438203d3e203631353036.roa
Signing time:             Tue 04 Feb 2025 18:23:16 +0000
ROA not before:           Tue 04 Feb 2025 18:18:16 +0000
ROA not after:            Tue 03 Feb 2026 18:23:16 +0000
asID:                     61506
IP address blocks:        2803:4640::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/89718669D1CC436F537EF18104D833AB96D3C03F4AEBD949FE59B2A167707D1A/0/30293EE5309A01535DED2E8C83D8043CC3C407D5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/89718669D1CC436F537EF18104D833AB96D3C03F4AEBD949FE59B2A167707D1A/0/30293EE5309A01535DED2E8C83D8043CC3C407D5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30293EE5309A01535DED2E8C83D8043CC3C407D5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 22:27:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:21:13:fa:c4:12:f8:93:73:20:c4:4f:66:99:0b:4e:48:66:e9:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30293EE5309A01535DED2E8C83D8043CC3C407D5
        Validity
            Not Before: Feb  4 18:18:16 2025 GMT
            Not After : Feb  3 18:23:16 2026 GMT
        Subject: CN=F850A666F80427B0DE4AD2C91FD929337A5C31E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:2e:ae:6d:42:c3:34:88:e5:a3:a8:83:74:ba:
                    0b:a7:05:f9:2f:3d:5f:b2:85:3d:ef:03:35:79:de:
                    e4:d5:cf:80:56:06:6f:f3:a1:27:b9:80:31:13:cf:
                    21:98:fa:66:45:0d:39:f7:85:bc:eb:2d:6f:eb:f0:
                    bb:70:1b:ca:67:a8:9e:9f:4c:08:c7:67:c1:42:fe:
                    46:1d:8e:48:9c:8e:14:ac:c6:a4:b6:15:dc:4b:19:
                    02:16:c7:e9:b6:9a:17:d1:a8:d8:8f:f7:6a:7f:f7:
                    9b:71:02:28:35:df:a6:9d:8f:29:f5:09:b5:a5:f4:
                    49:fb:41:ac:e4:b7:b7:94:77:a8:3d:94:86:c1:9a:
                    d1:75:43:4d:47:9c:cf:48:9b:e6:7f:15:81:a3:4a:
                    87:ff:76:fb:4d:8e:d0:ab:5f:f5:93:26:49:76:98:
                    dc:37:7c:63:d1:12:f2:fc:99:90:16:3e:7d:14:fa:
                    2c:75:47:20:40:a5:b6:93:37:38:fc:2b:c5:17:a9:
                    dd:6a:fb:71:fa:85:0a:1b:99:98:84:2e:2f:30:d6:
                    db:f2:3e:bd:0c:ba:1c:c0:83:ca:77:72:ec:f2:59:
                    14:22:41:96:76:d2:df:ce:8a:89:c8:94:d9:f9:ec:
                    09:02:39:f2:07:02:2c:8c:38:c4:fc:23:a6:bb:c3:
                    bb:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:50:A6:66:F8:04:27:B0:DE:4A:D2:C9:1F:D9:29:33:7A:5C:31:E2
            X509v3 Authority Key Identifier:
                keyid:30:29:3E:E5:30:9A:01:53:5D:ED:2E:8C:83:D8:04:3C:C3:C4:07:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/89718669D1CC436F537EF18104D833AB96D3C03F4AEBD949FE59B2A167707D1A/0/30293EE5309A01535DED2E8C83D8043CC3C407D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30293EE5309A01535DED2E8C83D8043CC3C407D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/89718669D1CC436F537EF18104D833AB96D3C03F4AEBD949FE59B2A167707D1A/0/323830333a343634303a3a2f33322d3438203d3e203631353036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4640::/32

    Signature Algorithm: sha256WithRSAEncryption
         42:3a:4b:14:14:f1:bb:d2:df:ec:6e:5e:b7:e2:11:38:d1:80:
         ce:5f:66:f1:95:db:44:ec:43:7c:58:95:06:6d:b8:3f:b0:9a:
         7e:d7:a5:5a:06:87:17:d7:c8:9e:c2:df:21:94:41:43:71:17:
         24:c4:a7:d2:d6:57:c4:26:7f:70:82:e6:9e:71:b1:83:7c:a6:
         3c:45:10:3b:3d:a8:bf:55:ee:34:c6:9c:e6:d3:2d:fc:d9:c7:
         98:75:9a:75:ab:30:1a:c2:f9:8e:79:32:fb:bb:b7:08:22:70:
         76:be:78:0d:0f:5e:69:de:ee:fc:53:e7:bf:4d:6e:96:cb:1a:
         cf:6e:50:48:fb:09:70:79:59:13:ac:36:f7:b0:5d:d2:29:a7:
         a7:79:aa:d6:3d:60:6b:32:75:97:bf:05:0a:98:18:4b:fd:f8:
         98:61:00:74:7e:54:d6:b0:67:96:41:76:9f:48:0b:31:9e:3c:
         be:92:a8:eb:6e:1f:86:00:9f:f1:4d:86:ab:bb:8b:e3:b6:d1:
         25:b3:cd:22:98:a7:43:a5:0d:02:27:fb:b7:01:b5:40:e7:a1:
         7c:78:c2:94:8b:b4:80:60:cd:d1:b5:39:60:1f:fa:44:5b:89:
         ff:17:a9:66:5d:32:63:11:44:9f:81:73:37:9d:9a:1f:84:20:
         d6:77:5d:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 15:56:30 2025 by rpki-client