Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/133EF50A79B0938E55BA32D12DE23B91A1D2C72F227F4248346FD02785C24A87/0/323830333a613065303a3a2f33322d3332203d3e20323639393131.roa
File:                     323830333a613065303a3a2f33322d3332203d3e20323639393131.roa (raw, json)
Hash identifier:          czmjKJMijgcKcFxG66379lDfcnANxdsAiUVYYZ1Snbs=
Subject key identifier:   B1:EF:C6:17:55:0D:35:36:E4:6D:5A:92:57:08:97:0F:58:F0:CA:2E
Certificate issuer:       /CN=9C3198E65C783AF99D6A743D993E0C3770B76EE2
Certificate serial:       361033D2D87E505F1AA306E859C6893C89DA3148
Authority key identifier: 9C:31:98:E6:5C:78:3A:F9:9D:6A:74:3D:99:3E:0C:37:70:B7:6E:E2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9C3198E65C783AF99D6A743D993E0C3770B76EE2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/133EF50A79B0938E55BA32D12DE23B91A1D2C72F227F4248346FD02785C24A87/0/323830333a613065303a3a2f33322d3332203d3e20323639393131.roa
Signing time:             Tue 04 Feb 2025 19:57:10 +0000
ROA not before:           Tue 04 Feb 2025 19:52:10 +0000
ROA not after:            Tue 03 Feb 2026 19:57:10 +0000
asID:                     269911
IP address blocks:        2803:a0e0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/133EF50A79B0938E55BA32D12DE23B91A1D2C72F227F4248346FD02785C24A87/0/9C3198E65C783AF99D6A743D993E0C3770B76EE2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/133EF50A79B0938E55BA32D12DE23B91A1D2C72F227F4248346FD02785C24A87/0/9C3198E65C783AF99D6A743D993E0C3770B76EE2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9C3198E65C783AF99D6A743D993E0C3770B76EE2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Apr 2025 11:56:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:10:33:d2:d8:7e:50:5f:1a:a3:06:e8:59:c6:89:3c:89:da:31:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C3198E65C783AF99D6A743D993E0C3770B76EE2
        Validity
            Not Before: Feb  4 19:52:10 2025 GMT
            Not After : Feb  3 19:57:10 2026 GMT
        Subject: CN=B1EFC617550D3536E46D5A925708970F58F0CA2E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:b5:61:9d:93:e4:4d:4a:8d:b2:68:8c:41:1e:
                    96:4c:9b:17:69:50:8b:8c:d6:9e:20:ac:da:a4:35:
                    b1:d4:27:1b:9c:2c:5a:33:24:37:98:1c:18:e6:94:
                    bd:f7:86:37:7a:f9:e5:18:2e:67:f4:b3:78:c0:e9:
                    57:99:4b:28:68:d4:9e:ce:7a:cc:b6:da:1c:6c:3f:
                    7f:97:0e:ce:f6:c9:19:e0:75:2c:0a:e1:f3:83:6c:
                    37:5b:44:49:fe:69:aa:7d:21:40:0e:44:6c:46:db:
                    a6:b8:33:d4:6e:60:ed:79:af:40:18:50:f3:a3:73:
                    8e:ce:98:b7:b4:3a:16:a0:ff:e1:50:49:9c:da:e5:
                    f4:8d:78:37:3b:01:ff:68:47:a1:11:2f:4b:1c:26:
                    3a:62:1c:a4:c9:2a:d1:45:93:e7:ec:b6:c1:d4:a6:
                    77:8d:ae:5e:e3:6a:28:a4:2a:c7:12:f0:9b:d1:fc:
                    30:80:4b:9f:a2:f7:b2:59:c8:08:5a:1c:cb:0a:cc:
                    ab:d1:08:e7:54:66:5f:37:b6:ff:e2:47:2f:88:48:
                    19:5a:69:79:0d:c6:e8:15:93:af:f0:1d:b7:60:8b:
                    a6:ba:21:e5:cb:4d:94:53:17:01:4e:b6:62:f2:0b:
                    a3:70:5b:39:29:31:a2:56:d8:f1:7f:98:84:0f:28:
                    86:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:EF:C6:17:55:0D:35:36:E4:6D:5A:92:57:08:97:0F:58:F0:CA:2E
            X509v3 Authority Key Identifier:
                keyid:9C:31:98:E6:5C:78:3A:F9:9D:6A:74:3D:99:3E:0C:37:70:B7:6E:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/133EF50A79B0938E55BA32D12DE23B91A1D2C72F227F4248346FD02785C24A87/0/9C3198E65C783AF99D6A743D993E0C3770B76EE2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9C3198E65C783AF99D6A743D993E0C3770B76EE2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/133EF50A79B0938E55BA32D12DE23B91A1D2C72F227F4248346FD02785C24A87/0/323830333a613065303a3a2f33322d3332203d3e20323639393131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:a0e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         4a:be:9b:a7:e3:7b:95:8e:4a:0b:f2:21:38:73:9b:59:32:c0:
         14:da:0a:20:3e:76:36:02:35:97:b0:03:34:1f:7f:eb:54:08:
         6b:36:8f:01:7f:e9:59:ef:d4:77:1c:b6:4f:9a:2d:b0:2d:14:
         7a:95:ae:a1:4f:77:25:7d:1f:09:c4:a6:80:ec:93:c4:c3:21:
         dd:7b:6f:34:45:53:74:f3:a7:a4:74:75:9b:62:b0:ef:62:a6:
         46:1c:6c:c3:72:b7:0d:af:d8:d0:dc:f7:3a:f5:10:32:b9:13:
         1b:10:70:43:dc:1d:a0:29:8d:e1:e7:69:ef:f7:a6:76:60:b7:
         ed:c5:83:a3:a2:0e:80:32:99:65:00:64:1c:6d:f4:2f:e2:0e:
         d2:1d:76:a9:bb:30:d3:c1:dc:6d:3e:cc:62:71:4a:72:c4:ed:
         3e:7b:48:b0:5e:a1:2b:26:f9:b9:5d:a1:c3:ba:35:be:43:be:
         5f:46:88:4f:56:a7:db:c1:2a:3b:9b:98:37:ff:18:9e:04:61:
         4d:02:e0:63:69:f4:4d:4e:15:91:70:6f:c2:d0:d0:fc:d3:f4:
         96:c0:b2:f3:6d:db:bb:ec:6f:28:49:b5:ac:a8:42:4f:4a:2d:
         fb:c5:c5:82:80:7d:a2:4d:49:df:4c:30:73:e7:f8:04:31:07:
         d1:70:e3:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:49:40 2025 by rpki-client