Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0D66001E7DE8844AED0AB420C5E09E69C547C86AB3AD69ADB24326A536315EA3/0/323830333a6536303a3a2f33322d3334203d3e20323637393133.roa
File:                     323830333a6536303a3a2f33322d3334203d3e20323637393133.roa (raw, json)
Hash identifier:          xyhIbBm1Scl4Ie2YrMseYRUKB+amZy8InWEd6XSWnhU=
Subject key identifier:   D7:EA:4A:C8:E4:95:22:DD:75:E8:D9:85:BF:E7:96:13:14:A3:BC:B2
Certificate issuer:       /CN=4AAC30C2DBC31ACDC2E24555F5031C3CF6BA0DEE
Certificate serial:       548B6C08410935DD36D3ED324E8926AFD06459BA
Authority key identifier: 4A:AC:30:C2:DB:C3:1A:CD:C2:E2:45:55:F5:03:1C:3C:F6:BA:0D:EE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4AAC30C2DBC31ACDC2E24555F5031C3CF6BA0DEE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0D66001E7DE8844AED0AB420C5E09E69C547C86AB3AD69ADB24326A536315EA3/0/323830333a6536303a3a2f33322d3334203d3e20323637393133.roa
Signing time:             Tue 04 Feb 2025 18:10:13 +0000
ROA not before:           Tue 04 Feb 2025 18:05:13 +0000
ROA not after:            Tue 03 Feb 2026 18:10:13 +0000
asID:                     267913
IP address blocks:        2803:e60::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0D66001E7DE8844AED0AB420C5E09E69C547C86AB3AD69ADB24326A536315EA3/0/4AAC30C2DBC31ACDC2E24555F5031C3CF6BA0DEE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0D66001E7DE8844AED0AB420C5E09E69C547C86AB3AD69ADB24326A536315EA3/0/4AAC30C2DBC31ACDC2E24555F5031C3CF6BA0DEE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4AAC30C2DBC31ACDC2E24555F5031C3CF6BA0DEE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 17 Apr 2025 12:16:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:8b:6c:08:41:09:35:dd:36:d3:ed:32:4e:89:26:af:d0:64:59:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4AAC30C2DBC31ACDC2E24555F5031C3CF6BA0DEE
        Validity
            Not Before: Feb  4 18:05:13 2025 GMT
            Not After : Feb  3 18:10:13 2026 GMT
        Subject: CN=D7EA4AC8E49522DD75E8D985BFE7961314A3BCB2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:c7:04:1e:fc:5f:c0:79:50:2b:76:27:8a:61:
                    6c:b2:23:02:f0:37:51:5a:ca:7a:4c:b8:c4:b6:2e:
                    07:01:8f:d4:e2:a3:c5:5a:8a:bb:5c:04:2b:c3:bc:
                    0f:ee:d5:04:6b:f2:b6:91:27:ac:b4:9f:92:71:99:
                    90:b2:23:b4:38:1c:3d:d2:d7:64:31:f0:20:c4:58:
                    b2:17:a4:70:31:f5:e4:d0:98:42:f5:8d:98:cc:88:
                    2e:eb:bb:79:b5:57:e8:7a:7d:e8:71:a1:7d:43:6e:
                    fb:67:c9:01:d1:b0:75:2a:08:99:a6:dd:8f:f3:b2:
                    ea:ad:d9:1a:a5:8c:6c:e1:9a:64:e6:c1:b9:56:8f:
                    6e:ad:0a:a8:1f:2a:80:34:08:76:fb:81:9d:73:5f:
                    2c:2a:d0:6b:9c:96:3c:db:67:c5:d4:a0:e0:5a:41:
                    51:b6:a8:46:72:48:4c:06:88:11:9f:2e:79:68:1e:
                    0f:59:85:03:81:58:0f:84:48:f4:cb:33:47:82:f0:
                    e8:58:8e:a7:46:34:b5:dd:7f:2c:e5:74:9d:0b:2e:
                    fe:33:1e:ef:75:97:f1:c4:67:1a:65:d1:66:a5:bf:
                    54:b0:89:b4:0b:58:46:8f:4a:86:01:76:db:a8:a0:
                    a5:62:f8:e4:79:ac:13:92:c9:be:85:8a:7d:fc:ff:
                    7d:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:EA:4A:C8:E4:95:22:DD:75:E8:D9:85:BF:E7:96:13:14:A3:BC:B2
            X509v3 Authority Key Identifier:
                keyid:4A:AC:30:C2:DB:C3:1A:CD:C2:E2:45:55:F5:03:1C:3C:F6:BA:0D:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0D66001E7DE8844AED0AB420C5E09E69C547C86AB3AD69ADB24326A536315EA3/0/4AAC30C2DBC31ACDC2E24555F5031C3CF6BA0DEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4AAC30C2DBC31ACDC2E24555F5031C3CF6BA0DEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0D66001E7DE8844AED0AB420C5E09E69C547C86AB3AD69ADB24326A536315EA3/0/323830333a6536303a3a2f33322d3334203d3e20323637393133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e60::/32

    Signature Algorithm: sha256WithRSAEncryption
         43:8e:bc:89:04:99:61:65:5a:fb:c8:2d:d9:cf:2a:fe:61:db:
         64:d7:b1:c3:92:2d:9f:aa:9c:45:7f:44:ca:38:85:e5:a3:13:
         bf:65:7f:d4:07:04:c1:de:2a:e2:16:fa:80:7f:5e:2c:8c:74:
         4f:51:3a:93:80:6d:88:fa:b8:77:03:fd:91:0a:5c:5a:45:c6:
         f9:cb:ec:d6:78:61:94:92:6c:85:5a:0d:22:a7:f7:75:1c:62:
         d2:5f:4e:51:a9:78:a3:69:02:b8:72:a7:07:da:e4:df:39:86:
         e2:3f:d3:e5:29:ed:3e:51:2e:b6:a5:76:43:45:97:5b:3d:8e:
         b5:29:68:35:35:54:27:03:66:3f:4f:01:fb:9e:53:23:e9:be:
         38:65:34:dc:5b:12:29:50:f6:38:02:cc:f4:66:73:72:8d:83:
         99:6d:58:9e:5d:59:85:f8:a6:e7:15:55:13:67:de:3a:8c:25:
         36:29:95:4e:90:db:18:b0:74:68:04:3f:c6:e7:b6:9c:c8:5c:
         6e:c1:2a:a9:3f:79:c9:50:a3:50:24:12:38:87:ee:db:4a:63:
         f4:46:26:8f:6d:65:13:96:5a:be:18:5d:7c:aa:6e:57:6e:0a:
         3c:10:23:75:cc:91:4a:03:a5:49:d6:16:25:8b:9e:bc:36:98:
         cc:3c:24:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 10:41:47 2025 by rpki-client