Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/323830333a646438303a653030303a3a2f34372d3437203d3e20323639393138.roa
File:                     323830333a646438303a653030303a3a2f34372d3437203d3e20323639393138.roa (raw, json)
Hash identifier:          a+ka73r0E80RyduIl2jaK33I7L9UXdfRM9sxQ+GZjUQ=
Subject key identifier:   CF:36:20:16:EB:23:60:E5:CF:78:08:29:B8:2A:F1:18:08:8A:BC:8D
Certificate issuer:       /CN=D439ACC51BC8AE7294E3E68A83FB67E034B93F54
Certificate serial:       75235450EC537BFDEB588FB1F8D47E6907AEF7A1
Authority key identifier: D4:39:AC:C5:1B:C8:AE:72:94:E3:E6:8A:83:FB:67:E0:34:B9:3F:54
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D439ACC51BC8AE7294E3E68A83FB67E034B93F54.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/323830333a646438303a653030303a3a2f34372d3437203d3e20323639393138.roa
Signing time:             Tue 01 Apr 2025 16:15:01 +0000
ROA not before:           Tue 01 Apr 2025 16:10:01 +0000
ROA not after:            Tue 31 Mar 2026 16:15:01 +0000
asID:                     269918
IP address blocks:        2803:dd80:e000::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/D439ACC51BC8AE7294E3E68A83FB67E034B93F54.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/D439ACC51BC8AE7294E3E68A83FB67E034B93F54.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D439ACC51BC8AE7294E3E68A83FB67E034B93F54.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 04:25:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:23:54:50:ec:53:7b:fd:eb:58:8f:b1:f8:d4:7e:69:07:ae:f7:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D439ACC51BC8AE7294E3E68A83FB67E034B93F54
        Validity
            Not Before: Apr  1 16:10:01 2025 GMT
            Not After : Mar 31 16:15:01 2026 GMT
        Subject: CN=CF362016EB2360E5CF780829B82AF118088ABC8D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:75:6f:4f:0b:97:c6:d3:51:3e:3d:60:d2:51:
                    7e:15:df:06:a3:0b:3b:69:81:1c:a5:be:58:e0:3e:
                    98:c5:0c:73:3b:94:80:68:34:48:92:5b:ad:34:90:
                    2f:5f:31:95:2c:88:d4:46:88:37:b2:1e:13:a4:b4:
                    6c:86:e7:5a:e9:eb:f4:d5:90:1d:fb:be:c4:43:de:
                    00:5b:1e:a7:c6:76:b0:3d:3e:8e:fb:c5:00:1e:bf:
                    87:19:8d:6b:95:cf:27:d6:82:63:a1:2d:de:86:bf:
                    d4:22:1b:f4:59:41:1e:71:04:0f:a6:60:27:e1:ef:
                    23:b5:d9:50:85:0e:f3:05:cb:65:02:12:8e:bb:de:
                    b1:b4:d1:d5:79:8a:7a:4d:6a:6e:cd:0d:27:4a:cc:
                    04:45:ff:9f:af:80:b7:0d:1e:ae:fc:37:9e:9c:92:
                    0f:0a:06:7b:89:6f:6a:31:d0:b1:b1:0a:5c:41:48:
                    ae:bc:13:06:7d:78:00:48:05:bc:87:e3:94:71:d0:
                    7c:6b:34:cb:b0:86:7b:e5:8b:52:0a:f8:e8:87:45:
                    84:95:fd:e3:71:e6:5a:84:af:77:88:da:c6:8b:0b:
                    9b:d5:02:56:45:7b:21:d7:6e:c6:a6:93:5f:8f:af:
                    1c:fb:f6:7f:52:6d:3c:47:84:d0:d3:bc:27:34:a8:
                    b8:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:36:20:16:EB:23:60:E5:CF:78:08:29:B8:2A:F1:18:08:8A:BC:8D
            X509v3 Authority Key Identifier:
                keyid:D4:39:AC:C5:1B:C8:AE:72:94:E3:E6:8A:83:FB:67:E0:34:B9:3F:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/D439ACC51BC8AE7294E3E68A83FB67E034B93F54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D439ACC51BC8AE7294E3E68A83FB67E034B93F54.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/323830333a646438303a653030303a3a2f34372d3437203d3e20323639393138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:dd80:e000::/47

    Signature Algorithm: sha256WithRSAEncryption
         a1:e7:04:30:36:0d:07:17:8f:65:46:fe:39:af:1b:e1:24:f7:
         8b:7f:de:dd:e7:42:7a:27:df:60:99:f6:fa:ad:0e:ce:2b:2a:
         65:2d:e3:d3:00:0f:6d:c3:b9:0d:3e:91:1d:db:e8:04:10:73:
         cb:6c:47:a4:9b:11:5e:cc:ab:ca:1f:08:a8:ac:9c:f3:b3:20:
         74:c4:92:c3:5d:cf:ca:cf:1d:86:41:ba:9f:57:4d:79:f2:c3:
         d0:74:82:47:78:2f:37:76:46:55:f0:f6:bb:9d:c5:92:7a:99:
         ce:cf:cc:9f:b6:82:9a:15:56:91:7e:5e:c1:d8:ba:c9:21:4a:
         00:2b:66:bf:e2:2c:7c:27:4a:e5:28:a0:98:a2:35:6e:46:16:
         5b:cd:cb:e9:95:22:f6:20:39:76:4d:2d:00:8a:4c:18:11:4b:
         09:ce:8b:53:98:6d:7e:03:bb:31:0f:6a:f0:95:a9:60:bd:f1:
         84:df:02:d3:ef:e9:74:01:88:c2:29:8b:84:0c:5b:8b:3e:0e:
         3d:db:f4:fc:2a:72:f0:5e:5c:10:d3:bd:ac:ed:a7:3d:15:53:
         0e:85:cd:ba:5b:ce:c2:68:87:1e:2f:c5:9b:8d:17:82:77:05:
         3d:ae:e0:9f:e2:c4:74:15:44:65:38:67:e8:c0:98:5f:a3:36:
         a3:e5:db:15
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 18 23:51:40 2025 by rpki-client