Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/15C85B6971D8D8902B705C564D1660D37001C140BF3ED675F1B28C2402AD2C87/0/323830333a336138303a3a2f33322d3332203d3e203233333833.roa
File:                     323830333a336138303a3a2f33322d3332203d3e203233333833.roa (raw, json)
Hash identifier:          KtHTPEwSKH4E5ysw3O6x7vh7FU+eqqVKmn1Bb0rObcw=
Subject key identifier:   C4:E5:48:B9:20:38:35:2C:B4:98:0D:5F:23:73:F3:92:D6:14:49:14
Certificate issuer:       /CN=1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8
Certificate serial:       1A1799279AE17B5CCB07541E13FDA877D97B5827
Authority key identifier: 13:47:BD:D7:F6:19:EC:AD:7A:91:CF:DA:27:3E:81:ED:88:36:F7:E8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/15C85B6971D8D8902B705C564D1660D37001C140BF3ED675F1B28C2402AD2C87/0/323830333a336138303a3a2f33322d3332203d3e203233333833.roa
Signing time:             Tue 04 Feb 2025 18:24:08 +0000
ROA not before:           Tue 04 Feb 2025 18:19:08 +0000
ROA not after:            Tue 03 Feb 2026 18:24:08 +0000
asID:                     23383
IP address blocks:        2803:3a80::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/15C85B6971D8D8902B705C564D1660D37001C140BF3ED675F1B28C2402AD2C87/0/1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/15C85B6971D8D8902B705C564D1660D37001C140BF3ED675F1B28C2402AD2C87/0/1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 20 Feb 2025 13:51:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:17:99:27:9a:e1:7b:5c:cb:07:54:1e:13:fd:a8:77:d9:7b:58:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8
        Validity
            Not Before: Feb  4 18:19:08 2025 GMT
            Not After : Feb  3 18:24:08 2026 GMT
        Subject: CN=C4E548B92038352CB4980D5F2373F392D6144914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:1c:dd:6b:f0:17:23:3e:a0:9d:75:79:41:59:
                    40:38:52:5f:47:9e:a3:cc:8c:21:7a:c8:b3:db:0b:
                    73:e9:b9:7d:46:10:6e:26:9f:94:e4:71:b1:a0:8d:
                    be:eb:5d:42:4d:84:12:01:86:c8:ae:3a:46:3e:e3:
                    1c:cb:36:1d:ff:82:c5:0a:8a:4c:a1:72:ec:d6:5c:
                    81:51:3d:02:de:17:21:66:f2:cb:11:69:61:90:95:
                    a8:33:a7:b1:29:57:4e:f0:ac:73:d9:3f:cf:4c:97:
                    3d:db:90:89:19:b4:e4:d3:8d:42:70:02:2c:3b:8e:
                    97:3b:59:b7:fb:4c:de:fc:e0:03:17:d4:11:ac:4f:
                    97:2f:2c:2e:ae:5e:64:20:66:bb:4d:c5:e1:c2:25:
                    69:34:22:67:22:c1:50:60:27:70:5c:37:87:8a:54:
                    b8:58:9a:cc:ed:96:a1:88:0e:38:bf:b7:77:88:de:
                    bf:ad:05:15:83:9c:99:84:11:6c:58:93:13:c8:ae:
                    09:62:a9:ec:52:42:66:ab:91:68:ec:10:77:8c:88:
                    95:35:38:56:d8:b8:f7:bf:66:01:08:47:0a:e0:89:
                    b8:4e:a7:f5:83:f3:ee:bb:fb:86:be:51:89:19:91:
                    b9:6d:fd:fa:c1:67:f3:97:9e:7e:be:14:4c:a3:1b:
                    ee:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:E5:48:B9:20:38:35:2C:B4:98:0D:5F:23:73:F3:92:D6:14:49:14
            X509v3 Authority Key Identifier:
                keyid:13:47:BD:D7:F6:19:EC:AD:7A:91:CF:DA:27:3E:81:ED:88:36:F7:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/15C85B6971D8D8902B705C564D1660D37001C140BF3ED675F1B28C2402AD2C87/0/1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/15C85B6971D8D8902B705C564D1660D37001C140BF3ED675F1B28C2402AD2C87/0/323830333a336138303a3a2f33322d3332203d3e203233333833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3a80::/32

    Signature Algorithm: sha256WithRSAEncryption
         32:ac:e5:a8:16:64:c7:e7:25:6e:8c:59:6a:05:62:2d:45:01:
         94:5c:3c:e1:1b:eb:d3:a1:27:f7:f3:e8:fa:2a:79:7d:fc:2f:
         9a:d3:99:1b:69:66:9b:03:9b:eb:b4:9a:25:de:4d:53:e6:77:
         f3:ee:8c:19:20:77:e5:e7:29:8b:3e:0b:c2:f9:5e:59:5c:90:
         b5:84:86:bc:2d:15:e7:3a:29:70:f6:e3:b1:28:66:00:32:a0:
         8e:93:c1:c5:5f:e9:dd:e2:49:97:43:75:6d:8d:82:f8:a2:7f:
         f0:e1:ee:d7:9b:20:d0:54:74:a0:5d:d6:9c:27:3a:6f:25:c1:
         44:23:d3:91:87:6c:43:2f:34:e0:4e:5a:fd:00:93:ca:d4:72:
         86:8a:47:93:22:12:3c:84:62:20:64:64:70:71:34:fe:f5:70:
         78:cc:84:8e:6b:ec:38:6c:fe:6e:39:e3:0f:8b:0e:37:da:31:
         3f:4c:75:26:cb:d5:98:d2:32:17:84:11:f1:80:f7:60:e9:a7:
         7e:98:2a:fa:4b:17:25:27:b9:ce:07:52:7a:6e:35:fe:cc:96:
         32:53:a6:b6:f5:08:1e:32:a1:fb:f7:8b:f7:85:2f:37:88:d9:
         8a:d2:8c:98:40:43:7f:9f:e4:20:08:33:ed:25:62:3f:ad:bf:
         33:5c:24:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:50:31 2025 by rpki-client