Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0C15FD84A7B1D129FCDFF7710B48414F7BB19EC348EAC2D29EEFA7C8E9B10D9E/0/323830333a613631303a3a2f33322d3332203d3e20323731393433.roa
File:                     323830333a613631303a3a2f33322d3332203d3e20323731393433.roa (raw, json)
Hash identifier:          zQ+Td3zl8oLlitjQP7jzMzi6Ec5/4qEBv5vO2O1QkP8=
Subject key identifier:   03:B0:3B:88:AF:22:F4:05:22:F6:87:2C:24:7D:76:05:9A:73:65:D9
Certificate issuer:       /CN=1BF98E25D84D87FB5D822B785EC286F20EDF99D7
Certificate serial:       14B4DCBD08799E20120704B13B88FD13409F334F
Authority key identifier: 1B:F9:8E:25:D8:4D:87:FB:5D:82:2B:78:5E:C2:86:F2:0E:DF:99:D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1BF98E25D84D87FB5D822B785EC286F20EDF99D7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0C15FD84A7B1D129FCDFF7710B48414F7BB19EC348EAC2D29EEFA7C8E9B10D9E/0/323830333a613631303a3a2f33322d3332203d3e20323731393433.roa
Signing time:             Tue 04 Feb 2025 18:54:54 +0000
ROA not before:           Tue 04 Feb 2025 18:49:54 +0000
ROA not after:            Tue 03 Feb 2026 18:54:54 +0000
asID:                     271943
IP address blocks:        2803:a610::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0C15FD84A7B1D129FCDFF7710B48414F7BB19EC348EAC2D29EEFA7C8E9B10D9E/0/1BF98E25D84D87FB5D822B785EC286F20EDF99D7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0C15FD84A7B1D129FCDFF7710B48414F7BB19EC348EAC2D29EEFA7C8E9B10D9E/0/1BF98E25D84D87FB5D822B785EC286F20EDF99D7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1BF98E25D84D87FB5D822B785EC286F20EDF99D7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 23:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:b4:dc:bd:08:79:9e:20:12:07:04:b1:3b:88:fd:13:40:9f:33:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BF98E25D84D87FB5D822B785EC286F20EDF99D7
        Validity
            Not Before: Feb  4 18:49:54 2025 GMT
            Not After : Feb  3 18:54:54 2026 GMT
        Subject: CN=03B03B88AF22F40522F6872C247D76059A7365D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ed:0a:a8:97:aa:11:ac:1d:33:0b:16:02:ea:
                    af:3e:91:a8:7c:1a:20:63:f2:0c:7a:34:8c:60:90:
                    45:31:0e:75:5d:6e:83:7f:b8:44:a5:c2:a0:35:54:
                    1a:42:05:fe:46:e7:35:19:a9:e0:ae:b9:5e:a5:2d:
                    eb:57:a4:01:b1:be:13:48:91:31:79:93:93:a7:9f:
                    34:d3:af:1c:41:f9:e9:f0:0d:dd:b8:73:38:50:58:
                    37:0f:e2:51:9a:2b:e9:6e:bc:00:05:92:1d:db:0d:
                    ae:5d:83:7a:08:1e:d1:89:4f:a8:95:f1:b2:11:c9:
                    7f:0c:48:d2:cc:73:7f:70:99:db:ae:17:21:b3:bb:
                    f4:31:9b:fe:5c:0e:e0:98:ff:21:e4:20:08:0c:58:
                    40:eb:6f:55:45:c1:9f:ee:00:af:90:dc:95:2c:ab:
                    98:4b:de:6b:53:e7:2c:42:62:0f:d3:3d:95:2e:93:
                    81:f4:90:59:f6:c5:a9:c1:c5:b4:44:24:a3:0f:3e:
                    06:26:8b:93:0d:b7:4b:2a:28:15:f3:f6:3d:d9:de:
                    b3:f4:42:19:b9:05:78:24:e8:a6:85:5f:84:e0:cb:
                    ea:cb:2a:ef:69:88:e3:ad:ba:57:fd:ea:97:7c:e5:
                    ac:d8:df:b7:83:47:bd:88:a9:e8:ef:8d:5e:29:e9:
                    9e:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:B0:3B:88:AF:22:F4:05:22:F6:87:2C:24:7D:76:05:9A:73:65:D9
            X509v3 Authority Key Identifier:
                keyid:1B:F9:8E:25:D8:4D:87:FB:5D:82:2B:78:5E:C2:86:F2:0E:DF:99:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0C15FD84A7B1D129FCDFF7710B48414F7BB19EC348EAC2D29EEFA7C8E9B10D9E/0/1BF98E25D84D87FB5D822B785EC286F20EDF99D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1BF98E25D84D87FB5D822B785EC286F20EDF99D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0C15FD84A7B1D129FCDFF7710B48414F7BB19EC348EAC2D29EEFA7C8E9B10D9E/0/323830333a613631303a3a2f33322d3332203d3e20323731393433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:a610::/32

    Signature Algorithm: sha256WithRSAEncryption
         91:4d:63:3e:d4:ef:5e:9c:49:bb:4e:7a:73:12:39:ca:2e:9d:
         82:f8:34:3e:82:8c:d5:d3:41:7e:fe:35:79:9b:a4:e5:a2:d4:
         e6:50:e7:72:8b:70:2e:9a:ee:ac:bf:d7:6d:eb:58:9f:c4:ae:
         88:dc:b9:3e:69:09:c6:c0:98:ca:a8:17:d6:68:96:2f:da:d3:
         fb:84:9d:b0:71:47:12:f9:07:8e:b0:1f:c4:3c:38:8c:3b:4c:
         2b:06:a8:97:88:d3:32:e5:40:b2:ff:f7:fb:6a:c3:de:70:5f:
         8b:51:e6:cf:b1:13:11:38:eb:36:d3:08:ef:5a:57:fb:36:e8:
         51:07:ba:58:7c:5a:15:53:d9:7d:7b:c0:34:9c:be:4d:0a:91:
         f7:a7:be:88:52:c1:29:63:73:41:8f:cf:86:fe:b9:60:28:15:
         d1:54:f5:d1:7c:bc:8f:c5:3f:09:dc:e6:ab:bc:ec:9b:21:f7:
         bb:30:4c:1d:de:68:56:45:31:2f:a1:5c:7f:8b:66:d6:26:88:
         6b:5f:1d:a0:8c:fb:7b:2c:fe:2c:ac:35:fe:16:fc:e9:6c:20:
         62:24:ae:e7:8f:62:03:19:34:46:80:61:e7:b4:60:9d:77:33:
         7f:65:54:3f:b4:4a:8f:46:2d:f6:3c:13:e3:11:20:14:c1:bb:
         cf:3c:c0:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 09:43:24 2025 by rpki-client