Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/14CB370010DE6D85153F1C51BFF7A0D15EEE00AE2DE4C16398C1B30E930DFF07/0/323830333a626634303a3a2f33322d3438203d3e20323634373634.roa
File:                     323830333a626634303a3a2f33322d3438203d3e20323634373634.roa (raw, json)
Hash identifier:          qs4SkKTXTwY20AnfMcnRHigvFc8wVVxOLdpXtbHgTyE=
Subject key identifier:   6A:78:BC:39:A2:97:3F:E2:7B:5A:66:06:82:AE:FD:0E:BD:15:71:C3
Certificate issuer:       /CN=95116A890D205119BAB4C1812515C4DD5B11AEFF
Certificate serial:       70EAE14099ECF43C1C48E629CEEC0CF380F354EF
Authority key identifier: 95:11:6A:89:0D:20:51:19:BA:B4:C1:81:25:15:C4:DD:5B:11:AE:FF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/95116A890D205119BAB4C1812515C4DD5B11AEFF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/14CB370010DE6D85153F1C51BFF7A0D15EEE00AE2DE4C16398C1B30E930DFF07/0/323830333a626634303a3a2f33322d3438203d3e20323634373634.roa
Signing time:             Tue 18 Feb 2025 13:40:00 +0000
ROA not before:           Tue 18 Feb 2025 13:35:00 +0000
ROA not after:            Tue 17 Feb 2026 13:40:00 +0000
asID:                     264764
IP address blocks:        2803:bf40::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/14CB370010DE6D85153F1C51BFF7A0D15EEE00AE2DE4C16398C1B30E930DFF07/0/95116A890D205119BAB4C1812515C4DD5B11AEFF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/14CB370010DE6D85153F1C51BFF7A0D15EEE00AE2DE4C16398C1B30E930DFF07/0/95116A890D205119BAB4C1812515C4DD5B11AEFF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/95116A890D205119BAB4C1812515C4DD5B11AEFF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:ea:e1:40:99:ec:f4:3c:1c:48:e6:29:ce:ec:0c:f3:80:f3:54:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95116A890D205119BAB4C1812515C4DD5B11AEFF
        Validity
            Not Before: Feb 18 13:35:00 2025 GMT
            Not After : Feb 17 13:40:00 2026 GMT
        Subject: CN=6A78BC39A2973FE27B5A660682AEFD0EBD1571C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:67:1a:9a:37:8a:83:c6:d4:21:c8:65:e7:42:
                    99:93:b9:20:0c:26:3d:ac:af:ca:ab:5b:16:b2:13:
                    44:de:3d:de:2e:e2:5c:f2:6a:6a:8e:ca:a8:93:40:
                    5c:c9:21:0e:d0:ae:2f:51:7c:bc:9a:88:c0:b8:ff:
                    61:e8:24:9a:81:04:d0:a0:9e:22:9e:22:e8:bb:1a:
                    85:31:ee:a4:d6:92:e0:38:2f:6b:fe:12:df:3d:73:
                    2a:47:75:50:d7:ae:56:bd:ce:c1:82:d8:ae:1e:37:
                    22:0e:af:7b:ff:a3:05:4c:e9:ea:af:40:02:0b:5a:
                    66:c8:26:88:b7:c5:cc:40:3f:ca:73:a5:dc:39:1b:
                    2c:10:2a:c6:76:60:44:e8:d1:b0:e8:27:35:73:0c:
                    50:d2:b1:02:34:0f:72:0f:0a:fe:4e:1d:b7:f9:ef:
                    86:2b:c5:d6:ce:80:a3:ff:48:4c:da:bd:4b:af:69:
                    9e:f5:45:5c:10:e5:09:ad:fd:d9:06:5c:c1:36:39:
                    96:b3:94:ae:58:b5:71:ff:04:7c:cd:75:5f:26:aa:
                    11:71:58:a5:ea:67:14:c8:bc:fb:97:f5:7b:5a:e6:
                    c6:5f:85:ef:c1:9c:05:97:0d:b0:d5:92:1e:c4:4d:
                    ff:6b:a0:d3:e0:4f:34:e1:cb:8a:9d:ea:53:c5:a8:
                    42:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:78:BC:39:A2:97:3F:E2:7B:5A:66:06:82:AE:FD:0E:BD:15:71:C3
            X509v3 Authority Key Identifier:
                keyid:95:11:6A:89:0D:20:51:19:BA:B4:C1:81:25:15:C4:DD:5B:11:AE:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/14CB370010DE6D85153F1C51BFF7A0D15EEE00AE2DE4C16398C1B30E930DFF07/0/95116A890D205119BAB4C1812515C4DD5B11AEFF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/95116A890D205119BAB4C1812515C4DD5B11AEFF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/14CB370010DE6D85153F1C51BFF7A0D15EEE00AE2DE4C16398C1B30E930DFF07/0/323830333a626634303a3a2f33322d3438203d3e20323634373634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:bf40::/32

    Signature Algorithm: sha256WithRSAEncryption
         66:1b:f3:b7:59:79:91:80:73:db:b0:c7:76:14:46:36:65:bb:
         da:36:96:f6:22:49:ec:cb:36:ca:89:cf:9a:3d:b4:28:74:4b:
         57:bf:3a:01:90:d4:5d:42:7f:d0:33:e0:62:4c:a0:3a:f4:27:
         3a:50:5e:47:e2:1e:a5:5c:35:66:79:ad:a6:1a:e5:bb:c2:d9:
         82:3f:7e:cf:f8:7d:cb:23:52:74:bc:8e:4e:5b:10:f8:79:b6:
         d9:5d:f1:48:1e:83:ad:c8:a3:23:10:57:e2:e4:6e:c7:f0:1f:
         fe:9d:6d:3d:bb:20:7d:7c:9f:ae:e6:f1:5a:27:81:c6:17:77:
         8d:10:41:62:bc:5b:65:7f:8a:6e:00:0a:f2:9f:b3:7e:76:c7:
         65:60:f2:38:6f:85:7b:c8:be:39:93:7f:f0:79:59:7d:72:b4:
         92:8c:d3:75:f8:7f:e1:ea:13:c1:00:c4:27:8e:1b:41:c3:e9:
         49:da:7b:65:d1:d2:de:1a:c4:ae:88:7e:e2:0d:f3:1e:6b:0a:
         62:39:ef:4c:f5:df:26:d7:03:59:0e:be:73:34:d3:ac:59:45:
         aa:6d:0f:f7:92:59:11:87:96:42:63:fb:7e:be:fe:3a:26:45:
         08:cb:89:66:9c:bc:16:d7:0f:41:5c:c4:28:64:bd:cc:3f:c3:
         eb:31:4b:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:00:03 2025 by rpki-client