Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1244569586B78FBA22BD188209EE71ED9A1EBB587A0C94B828A92E7223D62984/0/323830333a616338303a3a2f33322d3438203d3e20323633313935.roa
File:                     323830333a616338303a3a2f33322d3438203d3e20323633313935.roa (raw, json)
Hash identifier:          goJ+jtnZ1erUlc3I6n+2FrokcQ8et/yiEg5v50aObxI=
Subject key identifier:   D9:1D:70:D8:F9:97:63:B5:C4:11:33:51:EB:39:54:BF:26:27:86:E1
Certificate issuer:       /CN=67C6935F7C38762C3BEE650617B03328B96FF014
Certificate serial:       62AFD6ED600EF39F494948962625C2E24C9380C4
Authority key identifier: 67:C6:93:5F:7C:38:76:2C:3B:EE:65:06:17:B0:33:28:B9:6F:F0:14
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/67C6935F7C38762C3BEE650617B03328B96FF014.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1244569586B78FBA22BD188209EE71ED9A1EBB587A0C94B828A92E7223D62984/0/323830333a616338303a3a2f33322d3438203d3e20323633313935.roa
Signing time:             Tue 04 Feb 2025 18:43:45 +0000
ROA not before:           Tue 04 Feb 2025 18:38:45 +0000
ROA not after:            Tue 03 Feb 2026 18:43:45 +0000
asID:                     263195
IP address blocks:        2803:ac80::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1244569586B78FBA22BD188209EE71ED9A1EBB587A0C94B828A92E7223D62984/0/67C6935F7C38762C3BEE650617B03328B96FF014.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1244569586B78FBA22BD188209EE71ED9A1EBB587A0C94B828A92E7223D62984/0/67C6935F7C38762C3BEE650617B03328B96FF014.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/67C6935F7C38762C3BEE650617B03328B96FF014.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 03:02:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:af:d6:ed:60:0e:f3:9f:49:49:48:96:26:25:c2:e2:4c:93:80:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67C6935F7C38762C3BEE650617B03328B96FF014
        Validity
            Not Before: Feb  4 18:38:45 2025 GMT
            Not After : Feb  3 18:43:45 2026 GMT
        Subject: CN=D91D70D8F99763B5C4113351EB3954BF262786E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:9e:8b:cd:e7:53:d0:80:38:20:e4:f8:ce:26:
                    22:2c:e5:a6:ed:b3:3d:98:a2:54:20:d6:13:f5:98:
                    8b:5d:43:18:c2:b3:13:f2:86:91:2f:cd:0e:fb:61:
                    bb:3f:c1:99:5b:05:3b:70:8e:4a:f0:b6:41:98:af:
                    2e:ed:92:fe:0b:91:79:89:f0:9a:e1:a9:62:23:99:
                    9f:07:92:13:83:7c:8a:6e:89:b5:f3:89:6a:1f:d9:
                    56:84:cf:e6:bd:aa:47:34:54:ef:4a:55:91:bd:75:
                    68:ac:a8:76:15:d3:d1:8a:fe:5e:a9:d3:f4:ec:b0:
                    be:f4:dc:04:45:d0:dc:83:b4:77:ca:23:8d:54:f3:
                    2a:4f:45:a7:67:61:00:ef:46:54:df:45:39:25:04:
                    4d:2f:22:4e:b0:eb:16:80:07:71:db:4f:2f:dc:8d:
                    57:c6:12:57:26:7d:df:96:e8:68:14:73:af:9d:40:
                    39:52:9a:c6:3c:05:aa:f0:a8:ce:ba:e9:c0:d1:ab:
                    33:b9:91:de:14:8f:1c:22:d7:21:b9:81:8c:b3:1f:
                    5e:b3:62:a3:ad:30:b1:79:68:a8:98:95:8e:f6:4c:
                    a8:24:48:ac:3b:8a:b4:c0:14:bf:a3:2d:13:0e:c6:
                    0b:3b:9e:36:4a:5a:ca:83:2b:91:6d:a2:b3:21:57:
                    84:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:1D:70:D8:F9:97:63:B5:C4:11:33:51:EB:39:54:BF:26:27:86:E1
            X509v3 Authority Key Identifier:
                keyid:67:C6:93:5F:7C:38:76:2C:3B:EE:65:06:17:B0:33:28:B9:6F:F0:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1244569586B78FBA22BD188209EE71ED9A1EBB587A0C94B828A92E7223D62984/0/67C6935F7C38762C3BEE650617B03328B96FF014.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/67C6935F7C38762C3BEE650617B03328B96FF014.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1244569586B78FBA22BD188209EE71ED9A1EBB587A0C94B828A92E7223D62984/0/323830333a616338303a3a2f33322d3438203d3e20323633313935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ac80::/32

    Signature Algorithm: sha256WithRSAEncryption
         34:04:7e:27:fb:3b:74:b8:2b:22:08:08:13:5b:07:81:b2:cc:
         4a:80:6d:cc:cc:7f:e3:fd:cb:98:c0:33:32:60:cd:f5:32:05:
         ee:0b:69:37:0a:07:de:13:f6:41:06:3f:a7:69:0e:fe:11:69:
         b2:b1:10:07:3a:64:84:af:b3:44:00:ad:ab:bf:e7:a8:3f:2e:
         59:8f:b6:f8:76:7a:3b:c5:b2:c8:e6:f5:0b:ae:74:c3:99:fa:
         54:f0:a6:2b:19:28:c7:d3:e8:27:ae:d7:f1:87:5b:4c:a7:af:
         33:7c:eb:21:de:e4:16:5b:6d:f7:08:1f:02:20:33:4a:18:ab:
         9c:71:e5:30:1f:ae:b8:f5:4a:8c:7f:49:3a:24:b1:ff:c4:bd:
         cf:ef:34:eb:3d:1c:b8:65:28:0c:bf:e3:73:12:65:1e:c4:dc:
         b8:c4:06:dd:71:b8:63:bf:75:01:eb:b1:98:a5:47:19:bb:70:
         50:43:18:a6:2e:ff:cd:f0:08:b9:74:09:bc:3e:9f:dc:90:6b:
         8a:ff:2e:3f:04:c3:35:89:ab:99:bb:0a:01:43:a8:aa:81:6c:
         d4:56:c2:6c:b9:fb:6f:25:31:1b:d0:ca:e9:c6:45:ed:00:31:
         e1:1f:07:74:9e:89:bf:b2:bf:95:50:fc:bd:66:d4:da:df:17:
         45:c7:ea:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:02:43 2025 by rpki-client