Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1133E312FEA2FE97F59A2B4FEFA34CD930F3CE505E7B1163E45A6575076465A2/0/323830333a663461303a3a2f33322d3332203d3e20323636383330.roa
File:                     323830333a663461303a3a2f33322d3332203d3e20323636383330.roa (raw, json)
Hash identifier:          9FuMNR2kSGDxsJpry5cdNsnH1VO1tdKfR5cL2sI/irU=
Subject key identifier:   0A:33:E1:7E:91:D2:03:31:19:31:BD:3B:0B:C6:9F:BE:EA:FE:21:84
Certificate issuer:       /CN=F9EA39151165D2A448DFE339D82161C0BE689819
Certificate serial:       0A553A9F62FC41BCB83D659990587D4B6B4FD21B
Authority key identifier: F9:EA:39:15:11:65:D2:A4:48:DF:E3:39:D8:21:61:C0:BE:68:98:19
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F9EA39151165D2A448DFE339D82161C0BE689819.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1133E312FEA2FE97F59A2B4FEFA34CD930F3CE505E7B1163E45A6575076465A2/0/323830333a663461303a3a2f33322d3332203d3e20323636383330.roa
Signing time:             Tue 04 Feb 2025 18:53:58 +0000
ROA not before:           Tue 04 Feb 2025 18:48:58 +0000
ROA not after:            Tue 03 Feb 2026 18:53:58 +0000
asID:                     266830
IP address blocks:        2803:f4a0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1133E312FEA2FE97F59A2B4FEFA34CD930F3CE505E7B1163E45A6575076465A2/0/F9EA39151165D2A448DFE339D82161C0BE689819.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1133E312FEA2FE97F59A2B4FEFA34CD930F3CE505E7B1163E45A6575076465A2/0/F9EA39151165D2A448DFE339D82161C0BE689819.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F9EA39151165D2A448DFE339D82161C0BE689819.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:55:3a:9f:62:fc:41:bc:b8:3d:65:99:90:58:7d:4b:6b:4f:d2:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9EA39151165D2A448DFE339D82161C0BE689819
        Validity
            Not Before: Feb  4 18:48:58 2025 GMT
            Not After : Feb  3 18:53:58 2026 GMT
        Subject: CN=0A33E17E91D203311931BD3B0BC69FBEEAFE2184
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:8e:77:ab:b9:76:cc:67:88:82:7b:85:20:06:
                    a4:75:70:3b:a5:62:d9:07:a6:e1:c6:03:e8:e7:44:
                    78:ef:9b:f3:d3:88:18:aa:bb:09:92:d9:25:71:52:
                    0b:93:4c:76:e3:db:0d:d9:dc:09:99:e9:59:e2:95:
                    a5:f4:44:64:86:9b:51:96:f1:b1:d0:9b:0c:22:c2:
                    b4:66:fb:e4:93:c0:dd:85:87:46:7f:be:12:a7:8f:
                    bc:a1:60:15:98:59:e4:f5:5b:46:e6:bf:0d:a6:e6:
                    7f:38:e1:b6:e7:a0:c3:ae:40:4c:f3:9f:01:c3:d9:
                    f9:a4:70:87:06:79:bb:c1:94:be:cd:f4:e3:3d:a9:
                    39:ce:21:8a:a9:51:3a:e5:c0:24:11:02:3e:34:17:
                    22:bd:c0:ed:03:64:f2:01:3c:77:42:08:9d:9b:4a:
                    32:0c:4a:d5:15:9c:5c:a2:eb:f8:d5:cf:8f:60:96:
                    f3:63:e1:6a:56:25:bb:97:ad:a8:b5:22:51:61:e1:
                    6f:99:25:2e:15:63:6f:a6:f8:d3:7b:70:93:c0:35:
                    84:ec:46:12:ec:ac:dd:42:ec:3c:d5:ec:22:5d:8e:
                    37:54:7d:51:af:26:6a:24:5e:ef:06:ad:57:99:46:
                    0b:df:15:79:2a:bc:68:09:b6:02:06:05:10:c3:26:
                    27:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:33:E1:7E:91:D2:03:31:19:31:BD:3B:0B:C6:9F:BE:EA:FE:21:84
            X509v3 Authority Key Identifier:
                keyid:F9:EA:39:15:11:65:D2:A4:48:DF:E3:39:D8:21:61:C0:BE:68:98:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1133E312FEA2FE97F59A2B4FEFA34CD930F3CE505E7B1163E45A6575076465A2/0/F9EA39151165D2A448DFE339D82161C0BE689819.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F9EA39151165D2A448DFE339D82161C0BE689819.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1133E312FEA2FE97F59A2B4FEFA34CD930F3CE505E7B1163E45A6575076465A2/0/323830333a663461303a3a2f33322d3332203d3e20323636383330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f4a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         b0:31:54:e9:4d:b4:8d:f1:05:b1:e3:49:62:3a:e4:4d:a1:76:
         9b:25:f6:e7:21:d1:6b:8c:f7:29:f6:39:9a:a1:81:63:15:3d:
         93:da:9c:18:04:3f:93:6f:c1:1b:1c:f8:d8:03:42:41:42:da:
         61:e8:a2:18:76:4c:09:61:6e:b0:71:37:75:f4:b1:04:05:e7:
         58:2e:44:d8:13:8e:d6:8e:ab:02:c3:6a:74:3d:52:a7:0e:58:
         d1:8f:e7:e8:c8:43:9a:72:51:43:ad:2e:e3:8b:4f:5b:50:19:
         4d:11:2c:e6:b7:fe:61:c8:03:fa:e0:c5:dd:24:8a:d9:d5:cc:
         80:3e:84:12:83:a6:7b:5d:0f:f3:23:a8:32:6f:57:98:8d:24:
         63:9d:53:f0:b3:01:bc:54:6e:70:e7:14:39:3b:61:ac:02:50:
         eb:39:88:ba:23:f8:98:4c:bd:ea:f9:05:50:ad:4e:8a:df:78:
         f6:df:22:0c:5f:69:a5:bf:be:9d:9a:36:45:bb:59:19:29:29:
         b3:09:dd:9b:47:53:aa:e9:7a:20:59:36:4a:9c:fd:4f:43:52:
         fe:ca:6a:b3:8d:bf:dc:a4:69:32:3f:5b:a4:63:35:69:02:91:
         13:aa:fe:28:1d:c6:59:d6:53:1d:92:f1:9e:79:4e:05:0c:d2:
         a9:c5:bc:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 13:47:40 2025 by rpki-client