Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/05D07BF9C9D92B2701051B365E0AB12B0224049391310A1B0589559FA4625BC9/0/323830333a613265303a3a2f33322d3332203d3e20323639393231.roa
File:                     323830333a613265303a3a2f33322d3332203d3e20323639393231.roa (raw, json)
Hash identifier:          mri7qKs0ddiXbozIXiZJp6KIn//Ar/gFWxEDUa6nWck=
Subject key identifier:   AF:E1:21:6B:34:4F:32:9E:34:9C:1D:1A:E7:69:59:42:D2:65:D6:C5
Certificate issuer:       /CN=F63B998D39210D4FE1D650F6A7FBCA43E17D92CD
Certificate serial:       0FE1BF5F012B80B605491FED195C8FFFC819E2DA
Authority key identifier: F6:3B:99:8D:39:21:0D:4F:E1:D6:50:F6:A7:FB:CA:43:E1:7D:92:CD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F63B998D39210D4FE1D650F6A7FBCA43E17D92CD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/05D07BF9C9D92B2701051B365E0AB12B0224049391310A1B0589559FA4625BC9/0/323830333a613265303a3a2f33322d3332203d3e20323639393231.roa
Signing time:             Tue 04 Feb 2025 19:58:36 +0000
ROA not before:           Tue 04 Feb 2025 19:53:36 +0000
ROA not after:            Tue 03 Feb 2026 19:58:36 +0000
asID:                     269921
IP address blocks:        2803:a2e0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/05D07BF9C9D92B2701051B365E0AB12B0224049391310A1B0589559FA4625BC9/0/F63B998D39210D4FE1D650F6A7FBCA43E17D92CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/05D07BF9C9D92B2701051B365E0AB12B0224049391310A1B0589559FA4625BC9/0/F63B998D39210D4FE1D650F6A7FBCA43E17D92CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F63B998D39210D4FE1D650F6A7FBCA43E17D92CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:e1:bf:5f:01:2b:80:b6:05:49:1f:ed:19:5c:8f:ff:c8:19:e2:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F63B998D39210D4FE1D650F6A7FBCA43E17D92CD
        Validity
            Not Before: Feb  4 19:53:36 2025 GMT
            Not After : Feb  3 19:58:36 2026 GMT
        Subject: CN=AFE1216B344F329E349C1D1AE7695942D265D6C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:36:26:b6:9b:6a:20:fa:9f:6d:12:a0:12:62:
                    15:cc:a4:c9:c5:85:b2:ec:40:ee:59:e3:4f:ed:e4:
                    3b:0b:fb:65:37:08:77:c9:66:85:aa:1e:cb:d6:9c:
                    d1:7b:59:26:4d:a6:c9:ca:cb:56:f3:f4:28:6e:82:
                    c1:fa:52:b9:74:46:49:c3:28:80:41:71:34:a7:83:
                    37:b4:fb:fb:94:1f:4e:0f:f6:85:15:45:ee:74:04:
                    4c:15:4c:6e:6e:7e:9d:5e:e5:84:84:5b:6d:66:a8:
                    14:f1:67:45:c5:11:f1:85:fc:c8:21:4c:2b:a0:cf:
                    e9:53:b0:64:30:52:ed:22:ca:de:be:c2:20:35:c5:
                    45:89:34:be:e3:4d:09:c5:e0:9b:d6:be:bb:1c:53:
                    d1:7e:9d:c3:1a:3c:7a:c0:17:e4:5f:bf:ca:bb:22:
                    cd:56:c4:99:0d:de:1d:aa:77:78:08:fa:3e:1c:7e:
                    76:99:25:c3:72:6f:c3:9a:0f:55:fd:52:78:43:73:
                    d0:fd:63:2b:f6:78:97:c4:69:92:60:ed:37:c5:ad:
                    aa:14:5a:39:9c:53:5b:4a:ab:d5:a7:6f:af:1c:dc:
                    fb:c3:36:ac:cd:b7:0c:10:a5:d7:60:bb:77:23:3a:
                    7f:cb:b1:7e:d6:ee:ee:ce:82:01:4f:4b:f9:4c:25:
                    62:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:E1:21:6B:34:4F:32:9E:34:9C:1D:1A:E7:69:59:42:D2:65:D6:C5
            X509v3 Authority Key Identifier:
                keyid:F6:3B:99:8D:39:21:0D:4F:E1:D6:50:F6:A7:FB:CA:43:E1:7D:92:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/05D07BF9C9D92B2701051B365E0AB12B0224049391310A1B0589559FA4625BC9/0/F63B998D39210D4FE1D650F6A7FBCA43E17D92CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F63B998D39210D4FE1D650F6A7FBCA43E17D92CD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/05D07BF9C9D92B2701051B365E0AB12B0224049391310A1B0589559FA4625BC9/0/323830333a613265303a3a2f33322d3332203d3e20323639393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:a2e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         40:a0:c9:86:8b:84:d6:fc:3e:b9:b9:3d:f2:e9:a5:4f:a0:17:
         32:bd:48:48:e6:36:89:02:c9:7c:9b:f0:79:10:3a:72:41:cc:
         66:59:2b:70:07:6c:1b:89:28:1c:ec:56:74:8a:55:9e:9d:43:
         c2:3f:92:da:6c:c0:8b:b2:c3:4b:77:7a:c3:c1:12:c5:7c:be:
         04:8d:2a:8e:d5:63:64:6b:2f:6d:61:69:32:e5:a9:22:ae:1d:
         5f:cf:77:25:2c:39:85:cc:0a:17:67:fb:e4:36:81:dd:17:33:
         13:be:91:bf:a9:e0:6e:e1:c1:0b:94:cd:90:4c:c3:35:4e:0f:
         ed:a3:b8:0f:98:61:e1:d9:5b:4b:bb:34:70:1b:ee:bc:e9:a5:
         d9:1a:0d:e0:e6:ae:37:d4:de:69:13:78:2e:f4:dc:2e:b6:42:
         ac:0f:b2:ea:64:f2:a6:76:ec:ff:ee:d2:04:c2:8e:90:6c:31:
         0f:1e:a1:57:81:10:38:33:30:bb:bc:b3:88:12:37:2c:27:24:
         a7:e3:93:68:ff:49:25:89:83:e7:1b:b1:be:d4:c4:8f:9e:cb:
         55:79:2f:17:ac:67:d0:7c:54:45:d3:f7:d4:6c:14:6b:cc:29:
         c7:73:c4:53:b7:77:1c:7b:c7:57:74:c4:91:29:83:a9:c7:51:
         be:c8:57:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:27:57 2025 by rpki-client