Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0AA76D2199AA0688AAAA74E580ADFB77C4D420EBD679DECC43120565068289EC/0/323830333a313561303a3a2f33322d3332203d3e203237393236.roa
File:                     323830333a313561303a3a2f33322d3332203d3e203237393236.roa (raw, json)
Hash identifier:          xgpVcjcIZ9+UHftgknu7ov4x0OcAPl5KbyfQDnXTLqI=
Subject key identifier:   D2:76:CB:93:F8:F4:DA:2F:2C:70:43:B0:DF:5F:64:11:49:C7:6C:16
Certificate issuer:       /CN=6A21829DC42250CC0D3DD3594FF6FB4A3A8D704F
Certificate serial:       7922F506841A8FB927E7F669D62DB31E5D9BFF1B
Authority key identifier: 6A:21:82:9D:C4:22:50:CC:0D:3D:D3:59:4F:F6:FB:4A:3A:8D:70:4F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A21829DC42250CC0D3DD3594FF6FB4A3A8D704F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0AA76D2199AA0688AAAA74E580ADFB77C4D420EBD679DECC43120565068289EC/0/323830333a313561303a3a2f33322d3332203d3e203237393236.roa
Signing time:             Tue 04 Feb 2025 18:01:56 +0000
ROA not before:           Tue 04 Feb 2025 17:56:56 +0000
ROA not after:            Tue 03 Feb 2026 18:01:56 +0000
asID:                     27926
IP address blocks:        2803:15a0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0AA76D2199AA0688AAAA74E580ADFB77C4D420EBD679DECC43120565068289EC/0/6A21829DC42250CC0D3DD3594FF6FB4A3A8D704F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0AA76D2199AA0688AAAA74E580ADFB77C4D420EBD679DECC43120565068289EC/0/6A21829DC42250CC0D3DD3594FF6FB4A3A8D704F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A21829DC42250CC0D3DD3594FF6FB4A3A8D704F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 18:53:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:22:f5:06:84:1a:8f:b9:27:e7:f6:69:d6:2d:b3:1e:5d:9b:ff:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A21829DC42250CC0D3DD3594FF6FB4A3A8D704F
        Validity
            Not Before: Feb  4 17:56:56 2025 GMT
            Not After : Feb  3 18:01:56 2026 GMT
        Subject: CN=D276CB93F8F4DA2F2C7043B0DF5F641149C76C16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:c9:76:34:36:62:56:e3:49:61:3b:e0:39:c3:
                    a7:a1:99:b5:2c:67:35:d6:9a:e2:88:bb:a6:b2:9b:
                    eb:45:d7:75:21:02:fd:a0:9b:96:d7:cc:d2:bc:ac:
                    73:e2:3e:94:36:f3:9a:b7:7a:3d:4c:d9:69:d1:4e:
                    d8:e3:5c:26:8f:a3:38:8b:65:91:1a:2b:55:02:2a:
                    f8:0a:de:37:6b:d3:3f:d7:a9:99:69:c1:c9:49:bd:
                    d2:c1:34:02:1e:49:f1:cc:dc:93:9b:06:4a:c2:d3:
                    0e:b2:ac:84:36:60:56:6c:da:5c:da:3d:3e:4b:0c:
                    73:61:a7:4a:f4:ae:78:65:97:e7:d7:3c:e2:5f:a8:
                    b3:7a:38:44:1b:b1:09:9e:ce:b8:12:11:c3:78:27:
                    51:ed:54:5c:7d:02:69:de:57:2f:ee:c7:5d:dd:06:
                    c7:65:87:54:40:01:18:83:73:74:7a:62:8e:5f:41:
                    7f:1b:a8:c1:73:89:82:72:0d:4b:b7:39:b1:34:71:
                    ae:84:a7:41:8a:1a:ce:23:29:b5:1b:ec:7b:36:2f:
                    c4:8e:72:a5:89:81:93:73:38:05:06:88:9e:12:39:
                    1b:9f:03:59:0e:ea:5d:30:29:27:b1:cd:64:56:13:
                    f2:c2:86:60:ce:33:45:80:7b:60:11:81:b2:04:4c:
                    ac:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:76:CB:93:F8:F4:DA:2F:2C:70:43:B0:DF:5F:64:11:49:C7:6C:16
            X509v3 Authority Key Identifier:
                keyid:6A:21:82:9D:C4:22:50:CC:0D:3D:D3:59:4F:F6:FB:4A:3A:8D:70:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0AA76D2199AA0688AAAA74E580ADFB77C4D420EBD679DECC43120565068289EC/0/6A21829DC42250CC0D3DD3594FF6FB4A3A8D704F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A21829DC42250CC0D3DD3594FF6FB4A3A8D704F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0AA76D2199AA0688AAAA74E580ADFB77C4D420EBD679DECC43120565068289EC/0/323830333a313561303a3a2f33322d3332203d3e203237393236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:15a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         7e:c2:46:10:5e:eb:91:06:bf:d4:fd:98:b3:e4:33:79:0b:5a:
         88:98:d3:5f:96:a4:ae:06:03:2d:bc:a0:26:3a:a6:cd:0c:2e:
         c7:13:10:fc:4b:4a:c4:64:9f:c8:57:1a:a5:4c:46:c9:4e:e6:
         71:1d:cf:a4:a6:9c:f3:38:12:84:4f:29:42:1b:d7:62:26:f0:
         91:15:92:7e:3a:9d:68:0b:56:53:d4:0b:d9:33:f4:0e:1a:4e:
         da:37:56:33:e4:5c:73:df:99:29:73:b7:d0:e4:a6:21:3d:e9:
         78:01:e1:5f:5b:eb:ac:fd:1e:b6:72:4c:64:6d:5b:70:e6:36:
         df:5c:7d:b2:58:a4:4d:03:a8:57:ab:e6:7d:dc:fe:d2:d1:82:
         c4:fa:6b:a9:95:02:f9:51:5d:64:ba:66:56:0c:9b:4e:43:2e:
         a7:e4:43:94:38:4c:ad:f7:bf:ed:3c:45:36:d5:56:5e:49:84:
         36:11:c2:a6:5a:99:97:e5:02:32:93:44:95:41:1b:b5:11:f0:
         22:85:81:4e:4b:91:70:6a:f7:df:2c:80:fd:91:4d:f5:9b:a1:
         d1:bf:88:d6:76:59:b1:a3:29:9d:cd:e0:5d:7d:ed:18:e0:2f:
         c5:fa:f2:fc:f9:ca:20:07:0f:34:c7:87:cc:25:d6:31:d0:9c:
         7a:ea:ba:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:50:41 2025 by rpki-client