Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0584C0A79D263758AD366ABC70AEE595CCAACB41A6F6A9C77347396AA83FBBAF/0/323830333a633465303a653030303a3a2f33362d3336203d3e20323639383039.roa
File:                     323830333a633465303a653030303a3a2f33362d3336203d3e20323639383039.roa (raw, json)
Hash identifier:          V1QvA873xQgDEsakjcvDWoazfKvtfr/V+LrwehKb8NA=
Subject key identifier:   CC:42:C8:49:32:FA:8A:5F:62:24:28:A0:A0:80:7E:C3:9B:6C:07:26
Certificate issuer:       /CN=3D77237A7C9B2196D17146B7FDD8C031BE81DBF4
Certificate serial:       555D9BA210966B351C9425E2CFD39632E56B6D88
Authority key identifier: 3D:77:23:7A:7C:9B:21:96:D1:71:46:B7:FD:D8:C0:31:BE:81:DB:F4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D77237A7C9B2196D17146B7FDD8C031BE81DBF4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0584C0A79D263758AD366ABC70AEE595CCAACB41A6F6A9C77347396AA83FBBAF/0/323830333a633465303a653030303a3a2f33362d3336203d3e20323639383039.roa
Signing time:             Tue 04 Feb 2025 20:02:47 +0000
ROA not before:           Tue 04 Feb 2025 19:57:47 +0000
ROA not after:            Tue 03 Feb 2026 20:02:47 +0000
asID:                     269809
IP address blocks:        2803:c4e0:e000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0584C0A79D263758AD366ABC70AEE595CCAACB41A6F6A9C77347396AA83FBBAF/0/3D77237A7C9B2196D17146B7FDD8C031BE81DBF4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0584C0A79D263758AD366ABC70AEE595CCAACB41A6F6A9C77347396AA83FBBAF/0/3D77237A7C9B2196D17146B7FDD8C031BE81DBF4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D77237A7C9B2196D17146B7FDD8C031BE81DBF4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 20:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:5d:9b:a2:10:96:6b:35:1c:94:25:e2:cf:d3:96:32:e5:6b:6d:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D77237A7C9B2196D17146B7FDD8C031BE81DBF4
        Validity
            Not Before: Feb  4 19:57:47 2025 GMT
            Not After : Feb  3 20:02:47 2026 GMT
        Subject: CN=CC42C84932FA8A5F622428A0A0807EC39B6C0726
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:0a:c8:a7:cf:ad:65:04:d2:36:99:5c:2c:80:
                    90:0b:f5:a2:2a:7f:56:1e:b7:a0:3c:c5:ce:fa:97:
                    20:49:58:d7:b3:0f:1a:b3:1d:b7:bc:92:de:51:10:
                    2c:c7:fb:61:87:bd:ab:4d:d7:3b:3c:8f:8a:f7:40:
                    12:13:d0:d4:bc:0b:a6:c9:17:a8:d5:e9:a4:09:28:
                    67:1f:69:78:dd:d4:71:6a:cd:a9:fa:05:35:dd:25:
                    f4:e1:a6:e3:13:3f:3d:61:ad:4c:26:7a:97:94:0d:
                    f7:43:c3:ec:be:ca:27:e3:db:29:a3:a4:b4:74:f8:
                    c8:cf:08:99:b7:42:06:68:24:d2:8c:08:f4:fc:fd:
                    72:ef:3f:a5:c2:78:6d:f4:fd:1d:52:c3:af:94:fc:
                    8a:f5:b7:0e:e2:c3:12:83:83:1c:69:c8:80:32:9f:
                    02:4a:56:5f:27:f6:d6:1a:34:20:50:70:d9:64:86:
                    54:be:44:90:b9:0a:f4:07:ee:63:25:26:69:c4:47:
                    7f:86:b7:cb:81:56:2f:af:73:22:17:39:e6:32:c8:
                    15:89:07:72:5b:9a:73:0d:e3:e8:a5:ad:48:9c:78:
                    43:84:54:e2:c9:5b:2e:fb:4e:30:9e:77:c9:f8:09:
                    94:7b:6f:0b:51:a4:67:17:50:75:52:92:74:b6:13:
                    49:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:42:C8:49:32:FA:8A:5F:62:24:28:A0:A0:80:7E:C3:9B:6C:07:26
            X509v3 Authority Key Identifier:
                keyid:3D:77:23:7A:7C:9B:21:96:D1:71:46:B7:FD:D8:C0:31:BE:81:DB:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0584C0A79D263758AD366ABC70AEE595CCAACB41A6F6A9C77347396AA83FBBAF/0/3D77237A7C9B2196D17146B7FDD8C031BE81DBF4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D77237A7C9B2196D17146B7FDD8C031BE81DBF4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0584C0A79D263758AD366ABC70AEE595CCAACB41A6F6A9C77347396AA83FBBAF/0/323830333a633465303a653030303a3a2f33362d3336203d3e20323639383039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c4e0:e000::/36

    Signature Algorithm: sha256WithRSAEncryption
         39:00:e4:1f:48:18:fe:bb:70:1d:9f:1b:48:a1:72:5a:39:e2:
         74:a0:8d:74:3d:8d:74:45:93:8a:ac:64:9a:e4:41:93:89:ce:
         32:fe:94:97:d4:fc:7c:16:3e:ac:86:b3:47:79:ce:6b:16:6a:
         e2:c7:dd:8a:f3:bf:d5:84:a5:92:13:80:9e:e1:4c:ed:23:f8:
         1f:fb:df:c9:0e:61:a3:1f:17:10:b9:a5:95:72:3b:df:7b:59:
         d8:40:a7:a5:92:2d:65:6c:74:ef:eb:0a:87:51:8c:05:94:e3:
         46:46:d0:e0:15:31:42:2c:b8:68:13:c1:3c:67:d1:bd:ea:3d:
         35:f6:97:f9:f2:5d:0c:f4:78:b8:bd:a6:03:47:7e:7a:58:4e:
         28:a6:67:bc:71:23:1f:df:f4:ed:d6:68:b0:e1:70:9c:31:72:
         ca:a6:88:79:87:fe:ae:66:93:cb:de:e3:17:d1:96:6e:b4:fa:
         b5:bf:b0:38:74:d7:cf:8e:b8:11:c0:d3:3d:80:1f:57:3b:3c:
         b4:f9:f1:fc:cc:f8:23:33:d9:9f:fd:8f:36:69:87:d5:d7:d1:
         8f:db:0c:37:f0:ee:3c:57:29:ad:59:45:cd:a9:7f:4b:18:4e:
         ff:a9:88:b0:70:d6:1a:d0:33:83:ae:52:eb:9f:a9:3b:00:25:
         2b:63:3b:5f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 18 21:38:31 2025 by rpki-client