Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0DD292B211724DECDC303751DB85B62ACD69B3210F8A70B4BD72E6FD73412E0A/0/323830333a376536303a3a2f33322d3332203d3e20323637393239.roa
File:                     323830333a376536303a3a2f33322d3332203d3e20323637393239.roa (raw, json)
Hash identifier:          FxvXhFAFP8FJN2oQHpGj0pwwafAYHKh0q5z2v+d8waM=
Subject key identifier:   17:84:9F:F2:C7:73:F3:50:23:79:BC:2B:9F:71:D2:AB:76:C7:96:9E
Certificate issuer:       /CN=B3B26F6DCE0D551DF8808E116531308AEF126A54
Certificate serial:       622DC3E2EF2EA3A5DE40A5BD1577BDCD8C8AE122
Authority key identifier: B3:B2:6F:6D:CE:0D:55:1D:F8:80:8E:11:65:31:30:8A:EF:12:6A:54
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3B26F6DCE0D551DF8808E116531308AEF126A54.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0DD292B211724DECDC303751DB85B62ACD69B3210F8A70B4BD72E6FD73412E0A/0/323830333a376536303a3a2f33322d3332203d3e20323637393239.roa
Signing time:             Tue 04 Feb 2025 18:29:21 +0000
ROA not before:           Tue 04 Feb 2025 18:24:21 +0000
ROA not after:            Tue 03 Feb 2026 18:29:21 +0000
asID:                     267929
IP address blocks:        2803:7e60::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0DD292B211724DECDC303751DB85B62ACD69B3210F8A70B4BD72E6FD73412E0A/0/B3B26F6DCE0D551DF8808E116531308AEF126A54.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0DD292B211724DECDC303751DB85B62ACD69B3210F8A70B4BD72E6FD73412E0A/0/B3B26F6DCE0D551DF8808E116531308AEF126A54.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3B26F6DCE0D551DF8808E116531308AEF126A54.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 20 Feb 2025 16:11:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:2d:c3:e2:ef:2e:a3:a5:de:40:a5:bd:15:77:bd:cd:8c:8a:e1:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3B26F6DCE0D551DF8808E116531308AEF126A54
        Validity
            Not Before: Feb  4 18:24:21 2025 GMT
            Not After : Feb  3 18:29:21 2026 GMT
        Subject: CN=17849FF2C773F3502379BC2B9F71D2AB76C7969E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:09:a3:2f:8f:01:9b:04:18:1e:0c:77:ab:f6:
                    46:81:fd:b4:13:fd:a5:c2:7a:12:f5:b9:ce:56:18:
                    52:6a:31:b3:1d:c2:bf:22:11:60:93:8a:f9:5d:fc:
                    54:15:63:0a:c5:ae:43:dc:e2:37:32:d9:4f:e0:bc:
                    e6:e7:a3:41:9b:58:ec:a7:0e:fd:4b:a7:7c:a8:48:
                    eb:fb:60:f0:90:b2:da:d1:e3:3b:75:20:31:d0:c3:
                    96:35:67:d4:17:f1:18:59:5f:51:4e:6a:a2:e1:e8:
                    b3:e7:39:e1:ab:48:82:3a:c6:7d:5c:a9:45:b5:be:
                    ea:eb:d5:38:ef:f2:82:aa:17:9c:08:03:f9:a4:52:
                    88:b6:8d:fe:46:4e:f3:ca:6f:79:63:fa:83:6d:3c:
                    1a:45:3f:3a:3a:a0:ae:4d:9d:01:ea:77:a3:44:d3:
                    cd:59:59:0a:5f:e8:be:08:46:2d:f8:11:a9:cb:bc:
                    25:c6:b5:db:d2:f1:ea:a7:ac:ca:36:e3:53:fb:06:
                    0b:81:5b:0e:8b:b1:13:77:50:88:49:28:81:99:e6:
                    65:f7:aa:27:68:ef:9d:cb:53:85:d1:f9:5a:81:fb:
                    aa:30:57:b7:8f:45:ea:4d:4a:5b:d6:5f:f8:9f:05:
                    5e:72:ea:2e:dd:0c:dd:ee:57:e9:ee:92:dc:52:61:
                    e4:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:84:9F:F2:C7:73:F3:50:23:79:BC:2B:9F:71:D2:AB:76:C7:96:9E
            X509v3 Authority Key Identifier:
                keyid:B3:B2:6F:6D:CE:0D:55:1D:F8:80:8E:11:65:31:30:8A:EF:12:6A:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0DD292B211724DECDC303751DB85B62ACD69B3210F8A70B4BD72E6FD73412E0A/0/B3B26F6DCE0D551DF8808E116531308AEF126A54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3B26F6DCE0D551DF8808E116531308AEF126A54.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0DD292B211724DECDC303751DB85B62ACD69B3210F8A70B4BD72E6FD73412E0A/0/323830333a376536303a3a2f33322d3332203d3e20323637393239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7e60::/32

    Signature Algorithm: sha256WithRSAEncryption
         42:d6:d8:60:e1:10:6a:b2:5f:44:29:9e:1e:4f:d8:ea:32:7f:
         cd:7c:94:eb:1c:9f:02:a9:4d:e1:ea:48:4f:2a:5d:f7:40:45:
         2b:72:20:92:5b:44:f6:e9:b9:0e:0c:4e:d1:b3:07:0a:90:f1:
         1f:cf:1f:49:81:ca:d9:2a:f2:bd:b3:df:84:ac:98:fe:2f:0d:
         44:78:c5:4b:b8:9a:b2:fc:82:bf:e1:af:6d:e3:f3:58:87:df:
         cb:62:c2:bd:95:4e:93:47:e6:30:91:86:e4:9c:50:da:19:29:
         ab:d6:f0:cc:61:39:fc:1c:02:14:d6:6e:99:da:e5:cf:ff:8f:
         38:09:97:5d:cc:5b:03:40:0e:42:4d:5d:8f:d1:ab:0c:35:5b:
         21:5c:fb:56:9a:97:da:b3:b6:4a:47:73:33:d4:90:44:50:56:
         89:2c:24:67:9e:3d:bd:31:c4:3c:50:49:47:22:1c:ea:e8:50:
         39:03:7a:45:a3:53:6e:8c:35:8a:8f:1b:37:51:8b:b4:b5:de:
         c6:e4:33:a4:72:97:e7:39:56:ee:aa:2f:ad:e8:a4:33:23:ef:
         e4:1e:b7:62:c2:2d:05:3f:d6:e2:7b:75:0f:1e:8f:09:94:61:
         0c:04:10:fb:c4:34:b4:78:40:d6:4c:7e:f4:80:6f:41:82:d9:
         36:66:22:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:38:52 2025 by rpki-client