Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/00E169E1C6AB56A5AC7B724970AF735AB4BDC073882415E4C274D52483C791B1/0/323830333a346638303a3a2f33322d3332203d3e20323633373239.roa
File:                     323830333a346638303a3a2f33322d3332203d3e20323633373239.roa (raw, json)
Hash identifier:          OGZc4oup4sjwt9otIFc1zeLacSFmBWVANymTSxLX7Ng=
Subject key identifier:   D7:68:24:5C:4D:8A:F2:DE:0C:2C:EF:A3:75:BC:08:EB:5E:41:DC:CA
Certificate issuer:       /CN=AB6BAD4E48CA90BBC6E4CE22675DDE5882BB73D5
Certificate serial:       198EF6C81674A3AA8DCF705B9EA263AB65A21D24
Authority key identifier: AB:6B:AD:4E:48:CA:90:BB:C6:E4:CE:22:67:5D:DE:58:82:BB:73:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AB6BAD4E48CA90BBC6E4CE22675DDE5882BB73D5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/00E169E1C6AB56A5AC7B724970AF735AB4BDC073882415E4C274D52483C791B1/0/323830333a346638303a3a2f33322d3332203d3e20323633373239.roa
Signing time:             Tue 04 Feb 2025 20:04:59 +0000
ROA not before:           Tue 04 Feb 2025 19:59:59 +0000
ROA not after:            Tue 03 Feb 2026 20:04:59 +0000
asID:                     263729
IP address blocks:        2803:4f80::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/00E169E1C6AB56A5AC7B724970AF735AB4BDC073882415E4C274D52483C791B1/0/AB6BAD4E48CA90BBC6E4CE22675DDE5882BB73D5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/00E169E1C6AB56A5AC7B724970AF735AB4BDC073882415E4C274D52483C791B1/0/AB6BAD4E48CA90BBC6E4CE22675DDE5882BB73D5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AB6BAD4E48CA90BBC6E4CE22675DDE5882BB73D5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 02:56:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:8e:f6:c8:16:74:a3:aa:8d:cf:70:5b:9e:a2:63:ab:65:a2:1d:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AB6BAD4E48CA90BBC6E4CE22675DDE5882BB73D5
        Validity
            Not Before: Feb  4 19:59:59 2025 GMT
            Not After : Feb  3 20:04:59 2026 GMT
        Subject: CN=D768245C4D8AF2DE0C2CEFA375BC08EB5E41DCCA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:49:be:90:7a:41:04:c1:d6:e4:8b:63:51:72:
                    07:c4:58:4b:03:12:5c:e7:9a:b5:2e:42:f2:28:3e:
                    52:89:20:a2:8b:6f:8c:c0:4b:e2:c7:a1:70:f3:69:
                    70:e5:26:29:98:d9:58:17:86:c2:26:3a:b7:cf:d4:
                    98:90:ed:f8:87:17:59:1d:a2:b1:12:5a:58:fe:4a:
                    6e:96:f7:bc:9d:f0:6b:33:5b:bb:a6:0f:05:17:9e:
                    91:b7:fb:5e:eb:cd:02:f4:1d:5e:41:c7:45:3e:6f:
                    90:11:d7:13:1e:fa:5d:ad:8f:e9:ee:8b:5a:37:cf:
                    4c:36:e2:25:12:7f:60:6d:cb:46:25:25:13:52:5d:
                    89:d5:79:33:37:70:a5:42:cb:01:54:ad:85:c5:e1:
                    12:1c:03:57:0a:d8:55:4c:e4:bc:62:19:4f:89:ea:
                    43:8d:96:1f:38:ae:8c:49:ff:60:ac:29:8f:85:11:
                    92:fe:7d:73:34:a8:8f:ac:17:d3:ed:3b:e0:0d:c5:
                    6d:57:84:cf:37:4e:a1:87:b5:4e:4c:1a:2c:d2:eb:
                    a0:60:f4:fc:24:64:f3:c7:0c:e6:67:d1:53:09:3d:
                    75:74:cb:40:fd:b3:03:76:91:9a:ca:54:0d:fb:3c:
                    42:53:e9:02:7d:33:34:72:72:b3:ff:61:5b:92:09:
                    38:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:68:24:5C:4D:8A:F2:DE:0C:2C:EF:A3:75:BC:08:EB:5E:41:DC:CA
            X509v3 Authority Key Identifier:
                keyid:AB:6B:AD:4E:48:CA:90:BB:C6:E4:CE:22:67:5D:DE:58:82:BB:73:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/00E169E1C6AB56A5AC7B724970AF735AB4BDC073882415E4C274D52483C791B1/0/AB6BAD4E48CA90BBC6E4CE22675DDE5882BB73D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AB6BAD4E48CA90BBC6E4CE22675DDE5882BB73D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/00E169E1C6AB56A5AC7B724970AF735AB4BDC073882415E4C274D52483C791B1/0/323830333a346638303a3a2f33322d3332203d3e20323633373239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4f80::/32

    Signature Algorithm: sha256WithRSAEncryption
         8a:6f:1d:44:9c:ce:45:2c:17:6f:54:d8:7e:d9:e8:ac:ee:a3:
         54:98:54:5a:7f:dc:2e:19:c9:4f:51:a3:5c:20:95:e0:b2:46:
         60:80:b5:f8:d6:ee:e4:5f:78:26:29:1f:00:6d:a4:9e:2b:13:
         be:12:77:8c:59:be:e6:f5:73:7c:52:73:ee:de:4c:4e:1c:36:
         8c:13:a8:6b:e4:4f:52:24:1a:fa:61:d5:35:06:dc:65:ca:d6:
         90:7b:38:a5:7f:69:7a:a7:42:f3:95:00:ea:8d:ae:0d:b1:ef:
         df:5b:d6:61:94:72:5e:61:7b:c8:62:30:c8:53:9f:7f:42:e6:
         8f:c8:2a:2a:2b:65:3d:3f:54:e2:57:f4:46:06:ee:09:f9:ae:
         5c:b4:8d:b6:8b:6b:f3:18:39:55:c6:ba:9e:1c:61:d0:56:f4:
         0f:2d:49:2c:e3:3b:df:26:2c:cf:45:07:eb:66:90:b8:d4:36:
         e4:9b:fc:7e:08:49:e9:2f:00:49:a4:d7:c5:9c:45:0f:d9:f1:
         27:06:34:c6:94:1c:5c:37:70:f0:98:21:21:a8:95:ce:46:c5:
         95:99:b4:04:28:59:c3:b5:85:3f:4f:dd:6b:41:46:11:31:53:
         ef:8a:8b:0a:88:9d:e9:e6:2c:1c:43:2d:77:4a:34:bd:ba:f5:
         de:0f:90:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:22:32 2025 by rpki-client