Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/323830333a646438303a3a2f33322d3332203d3e20323639393138.roa
File:                     323830333a646438303a3a2f33322d3332203d3e20323639393138.roa (raw, json)
Hash identifier:          fxRH9zAETQ964KSD0Apm78rTQmPPFFfrcpZuc4DSP+g=
Subject key identifier:   6A:36:AC:91:0D:B4:DD:24:E4:4F:35:F1:05:31:9D:4D:4B:5F:99:3E
Certificate issuer:       /CN=D439ACC51BC8AE7294E3E68A83FB67E034B93F54
Certificate serial:       18E4CD66BA00BB414ADFCCD4566D94D68BEA0847
Authority key identifier: D4:39:AC:C5:1B:C8:AE:72:94:E3:E6:8A:83:FB:67:E0:34:B9:3F:54
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D439ACC51BC8AE7294E3E68A83FB67E034B93F54.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/323830333a646438303a3a2f33322d3332203d3e20323639393138.roa
Signing time:             Tue 01 Apr 2025 16:15:01 +0000
ROA not before:           Tue 01 Apr 2025 16:10:01 +0000
ROA not after:            Tue 31 Mar 2026 16:15:01 +0000
asID:                     269918
IP address blocks:        2803:dd80::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/D439ACC51BC8AE7294E3E68A83FB67E034B93F54.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/D439ACC51BC8AE7294E3E68A83FB67E034B93F54.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D439ACC51BC8AE7294E3E68A83FB67E034B93F54.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 04:25:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:e4:cd:66:ba:00:bb:41:4a:df:cc:d4:56:6d:94:d6:8b:ea:08:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D439ACC51BC8AE7294E3E68A83FB67E034B93F54
        Validity
            Not Before: Apr  1 16:10:01 2025 GMT
            Not After : Mar 31 16:15:01 2026 GMT
        Subject: CN=6A36AC910DB4DD24E44F35F105319D4D4B5F993E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:b6:ad:30:42:90:31:99:fb:9e:e7:50:b1:23:
                    5f:eb:ec:86:c9:01:87:ba:49:b4:4e:99:b9:9e:a6:
                    cf:ee:2c:9b:40:de:03:09:be:4f:37:e0:58:da:96:
                    03:27:79:8e:83:6d:69:7d:e5:d7:26:30:48:ee:d5:
                    e5:e9:a7:a4:60:1c:4f:d6:c1:36:5b:89:1b:31:29:
                    78:a8:b0:2d:8c:fe:d4:e4:bb:e9:c4:6b:b8:73:b2:
                    9f:e6:28:43:df:11:23:7d:14:92:29:44:0f:b4:d6:
                    25:0a:47:89:4a:d6:dc:12:01:5e:35:e4:3e:da:0c:
                    b2:8d:8e:70:2a:99:f8:e8:c8:83:d7:9c:61:b3:15:
                    c6:39:f9:1a:15:f2:19:f8:96:b4:8c:99:20:51:eb:
                    83:9a:a9:eb:a0:6e:6e:74:e4:0d:46:e3:66:ae:69:
                    46:c4:48:74:9b:22:06:c7:7b:b0:49:ba:23:e2:eb:
                    af:d2:ef:b9:b1:8b:d9:ae:37:a4:f8:a4:c5:5b:3b:
                    6b:a9:7d:88:fe:42:50:f6:84:33:01:b6:1e:97:bf:
                    f5:63:8b:94:4d:f8:f6:ff:ee:b8:45:d0:4d:2f:ab:
                    86:62:f3:e8:68:a2:d9:6d:24:66:33:92:4e:d3:3e:
                    4f:18:32:25:f6:02:c1:75:fb:b8:84:0e:f2:b3:77:
                    93:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:36:AC:91:0D:B4:DD:24:E4:4F:35:F1:05:31:9D:4D:4B:5F:99:3E
            X509v3 Authority Key Identifier:
                keyid:D4:39:AC:C5:1B:C8:AE:72:94:E3:E6:8A:83:FB:67:E0:34:B9:3F:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/D439ACC51BC8AE7294E3E68A83FB67E034B93F54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D439ACC51BC8AE7294E3E68A83FB67E034B93F54.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/323830333a646438303a3a2f33322d3332203d3e20323639393138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:dd80::/32

    Signature Algorithm: sha256WithRSAEncryption
         a8:f6:30:bc:ce:33:71:5d:6e:76:60:51:73:bb:32:d3:3b:32:
         6a:cd:af:a9:72:dd:e2:46:ee:1a:81:32:17:f3:12:f6:7e:7c:
         9c:71:d3:d6:54:e3:77:91:21:7e:3d:fc:a9:77:3b:2a:c7:fb:
         b2:25:6a:ab:ba:af:56:e8:e9:92:13:07:f1:7d:8d:0f:d6:2a:
         30:37:74:ec:39:c6:4b:79:9e:67:98:17:52:8a:14:a5:52:44:
         2e:3b:43:5f:2f:e0:a6:46:20:1a:91:f0:b2:f5:81:9f:81:13:
         f9:ca:31:af:53:1d:4e:95:97:03:59:77:15:a4:83:1c:f3:b1:
         4c:b5:b0:84:53:14:f1:1a:21:cd:99:73:12:e1:45:2d:86:20:
         a5:ae:76:92:bb:59:04:82:3c:d3:56:6f:aa:1d:d3:2e:2f:86:
         84:d7:58:62:e2:35:60:f3:dd:d8:35:11:7b:65:b6:59:1b:7c:
         09:7f:f7:ca:8e:d1:9c:b4:fe:50:ef:10:27:b5:e3:96:6a:b7:
         ca:d6:3d:b6:86:f3:5b:31:7b:ff:09:0f:a4:32:0c:09:85:f8:
         6c:97:a0:58:bf:81:50:22:05:71:af:01:66:94:50:78:52:19:
         ca:18:3a:65:1c:9d:8f:fb:d9:14:3d:5a:ec:d1:47:db:ed:23:
         15:aa:02:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:53:00 2025 by rpki-client