Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/043AB499951B36E16D8E3D104BFD77ABCB7CBE3C9D9DE5A1686B504C3C457ED4/0/323830333a666430303a3a2f33322d3332203d3e2038313633.roa
File:                     323830333a666430303a3a2f33322d3332203d3e2038313633.roa (raw, json)
Hash identifier:          ncFYPvUrL+VlYM8Ez1L0zg450Ib20dwZgEiSDF41tRc=
Subject key identifier:   AF:25:3D:98:5B:3B:65:FF:B0:22:A1:4B:1B:7F:9E:F6:15:6D:45:11
Certificate issuer:       /CN=27020461E106FA1939A7955F19E1F8ED82AE8589
Certificate serial:       6F11328008CD7AD13262FDEA97B2807E9A564E46
Authority key identifier: 27:02:04:61:E1:06:FA:19:39:A7:95:5F:19:E1:F8:ED:82:AE:85:89
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/27020461E106FA1939A7955F19E1F8ED82AE8589.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/043AB499951B36E16D8E3D104BFD77ABCB7CBE3C9D9DE5A1686B504C3C457ED4/0/323830333a666430303a3a2f33322d3332203d3e2038313633.roa
Signing time:             Tue 04 Feb 2025 18:46:48 +0000
ROA not before:           Tue 04 Feb 2025 18:41:48 +0000
ROA not after:            Tue 03 Feb 2026 18:46:48 +0000
asID:                     8163
IP address blocks:        2803:fd00::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/043AB499951B36E16D8E3D104BFD77ABCB7CBE3C9D9DE5A1686B504C3C457ED4/0/27020461E106FA1939A7955F19E1F8ED82AE8589.crl
                          rsync://repository.lacnic.net/rpki/lacnic/043AB499951B36E16D8E3D104BFD77ABCB7CBE3C9D9DE5A1686B504C3C457ED4/0/27020461E106FA1939A7955F19E1F8ED82AE8589.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/27020461E106FA1939A7955F19E1F8ED82AE8589.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 23:52:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:11:32:80:08:cd:7a:d1:32:62:fd:ea:97:b2:80:7e:9a:56:4e:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27020461E106FA1939A7955F19E1F8ED82AE8589
        Validity
            Not Before: Feb  4 18:41:48 2025 GMT
            Not After : Feb  3 18:46:48 2026 GMT
        Subject: CN=AF253D985B3B65FFB022A14B1B7F9EF6156D4511
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:1f:42:a3:3f:8f:da:02:8f:97:56:fd:c9:9e:
                    6b:34:c3:f0:14:cb:3b:04:82:9e:0b:bc:55:9d:2e:
                    c1:92:55:e2:93:d5:e9:3e:9d:55:3e:74:e7:0e:b5:
                    71:01:71:2e:fd:59:f9:84:66:b5:44:5e:d8:9b:c4:
                    69:aa:0e:cc:30:f7:8e:d0:35:d7:0c:31:8a:c3:8b:
                    92:ca:ff:d3:c5:e2:6b:4f:cb:f1:90:c0:ef:f0:d6:
                    69:fd:27:88:e5:0b:0d:9e:be:f7:a9:f8:12:73:c4:
                    7b:ab:3a:e0:9e:27:a0:6f:05:c5:e3:96:fe:be:a8:
                    07:07:3b:83:af:2e:d0:d4:a7:4e:86:10:39:27:75:
                    2b:9a:32:be:a8:85:5f:b7:08:1c:fc:21:f5:f5:d0:
                    78:4d:72:d0:dc:8e:9d:74:4c:c4:10:69:7a:21:29:
                    78:35:f5:71:74:e7:16:76:57:02:8f:16:49:69:35:
                    29:94:60:7d:5e:a1:7e:11:8c:7e:82:6e:29:69:c1:
                    9b:8e:f9:49:e7:51:b0:21:cf:97:97:26:53:65:f8:
                    81:d3:9f:2e:2a:ef:e2:ca:e1:92:9c:af:20:03:27:
                    77:79:e9:e8:5c:a3:17:13:80:32:ca:51:9e:c8:5f:
                    51:e7:f8:14:47:98:20:72:9f:84:41:8f:e1:9d:69:
                    a6:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:25:3D:98:5B:3B:65:FF:B0:22:A1:4B:1B:7F:9E:F6:15:6D:45:11
            X509v3 Authority Key Identifier:
                keyid:27:02:04:61:E1:06:FA:19:39:A7:95:5F:19:E1:F8:ED:82:AE:85:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/043AB499951B36E16D8E3D104BFD77ABCB7CBE3C9D9DE5A1686B504C3C457ED4/0/27020461E106FA1939A7955F19E1F8ED82AE8589.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/27020461E106FA1939A7955F19E1F8ED82AE8589.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/043AB499951B36E16D8E3D104BFD77ABCB7CBE3C9D9DE5A1686B504C3C457ED4/0/323830333a666430303a3a2f33322d3332203d3e2038313633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:fd00::/32

    Signature Algorithm: sha256WithRSAEncryption
         d9:fb:a8:47:d5:59:1d:f5:72:af:e0:b0:88:8d:db:1b:9f:e8:
         c3:ea:de:92:48:ca:c1:44:cf:c8:a9:09:21:9e:c1:3c:7c:ba:
         6c:65:e1:95:3a:98:08:3e:8c:0f:4a:40:6d:bc:94:bc:53:c0:
         c3:1a:d8:6a:2d:d7:5d:1e:ec:c4:0b:62:6b:cf:cf:3f:1e:d5:
         1d:f3:0e:d7:b7:0b:4b:de:ea:00:9c:cf:82:b2:8b:c9:ef:c1:
         45:b8:8b:78:cd:0b:dd:53:bd:c0:69:e5:03:45:61:97:07:5f:
         ec:dd:77:62:dc:03:a6:f5:ef:be:1d:55:b7:13:c4:cd:4d:7d:
         89:32:f1:a4:11:5c:0b:99:0b:64:ac:80:a2:74:42:61:79:55:
         ee:94:41:f4:ab:79:53:07:80:c9:63:a1:d5:9b:da:4f:27:51:
         6e:f3:0e:d7:e2:15:19:64:b5:78:bf:39:ca:af:d0:06:b0:7b:
         12:b7:00:97:2d:03:11:41:76:1b:a5:e1:bd:c6:ed:0c:f3:5b:
         12:f0:65:08:43:bb:20:83:32:09:c3:1e:92:1f:8c:ef:fe:83:
         f9:6c:bf:0d:c5:36:50:7b:56:24:32:f5:e7:eb:7f:c2:a0:6a:
         74:2e:7a:d0:20:0d:62:37:3c:b6:3f:ac:ef:a0:bc:9e:c8:41:
         ca:c5:c1:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:47:03 2025 by rpki-client