Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/161544911E615BEC6414C0E613BE6E218E42C94FB4EF3A31B6F70B6000F89B05/0/323830333a626331303a3a2f33322d3332203d3e20323731383833.roa
File:                     323830333a626331303a3a2f33322d3332203d3e20323731383833.roa (raw, json)
Hash identifier:          TDT0EM+y0efyoRma/01SoHPFpnovMIuKaEtjyyxANKk=
Subject key identifier:   67:F6:49:06:B0:95:51:75:4E:57:CE:6D:C0:A9:88:1D:0D:73:C1:73
Certificate issuer:       /CN=18D025E888C932E35F9B22015B58FC7C9AFD50A5
Certificate serial:       03C7573DC21E37317D2E0731AD26C1D18EF29664
Authority key identifier: 18:D0:25:E8:88:C9:32:E3:5F:9B:22:01:5B:58:FC:7C:9A:FD:50:A5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/18D025E888C932E35F9B22015B58FC7C9AFD50A5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/161544911E615BEC6414C0E613BE6E218E42C94FB4EF3A31B6F70B6000F89B05/0/323830333a626331303a3a2f33322d3332203d3e20323731383833.roa
Signing time:             Tue 04 Feb 2025 20:01:10 +0000
ROA not before:           Tue 04 Feb 2025 19:56:10 +0000
ROA not after:            Tue 03 Feb 2026 20:01:10 +0000
asID:                     271883
IP address blocks:        2803:bc10::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/161544911E615BEC6414C0E613BE6E218E42C94FB4EF3A31B6F70B6000F89B05/0/18D025E888C932E35F9B22015B58FC7C9AFD50A5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/161544911E615BEC6414C0E613BE6E218E42C94FB4EF3A31B6F70B6000F89B05/0/18D025E888C932E35F9B22015B58FC7C9AFD50A5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/18D025E888C932E35F9B22015B58FC7C9AFD50A5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:c7:57:3d:c2:1e:37:31:7d:2e:07:31:ad:26:c1:d1:8e:f2:96:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18D025E888C932E35F9B22015B58FC7C9AFD50A5
        Validity
            Not Before: Feb  4 19:56:10 2025 GMT
            Not After : Feb  3 20:01:10 2026 GMT
        Subject: CN=67F64906B09551754E57CE6DC0A9881D0D73C173
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:4a:46:a8:95:a8:66:77:05:89:4a:fc:19:75:
                    52:8d:85:1f:a6:d8:4b:05:da:e1:62:05:db:1a:2e:
                    51:2b:c1:30:cd:68:15:9b:3a:36:78:26:e2:93:9d:
                    41:94:5f:9f:f8:b7:27:f1:a6:14:0b:f7:59:a0:7f:
                    5f:d9:50:7f:d9:c0:fc:53:58:26:ac:62:bf:4e:d5:
                    53:81:3a:f7:ad:58:67:23:bf:8b:44:c4:d3:50:97:
                    f5:65:4c:cb:24:5a:92:59:cc:3d:9c:f6:b4:9e:b6:
                    27:ff:6f:d3:b7:9a:b0:c7:90:48:15:38:78:e7:12:
                    f8:de:2b:65:e7:8b:09:c2:48:7a:a5:22:b1:f8:a2:
                    10:25:bc:1e:a9:b7:20:6c:a1:99:2b:c5:c4:a8:5f:
                    73:f9:01:35:b1:c3:4a:9e:ff:a1:4e:22:62:24:b1:
                    9d:f4:11:d1:10:8f:b5:9d:7c:dc:d0:c7:bc:91:16:
                    7c:ae:68:34:e6:20:9a:82:b2:06:25:b4:72:36:ae:
                    ee:69:8d:94:3d:d8:17:a0:a3:fe:b3:b1:b4:17:de:
                    97:37:26:0d:3b:b4:a5:bb:5c:5b:58:ba:70:45:f4:
                    a3:e8:6f:dc:7d:e4:ea:da:de:a7:17:ca:f8:f9:fa:
                    6b:b4:d7:2e:b3:de:04:fb:30:c6:6a:90:7d:b8:5d:
                    1f:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:F6:49:06:B0:95:51:75:4E:57:CE:6D:C0:A9:88:1D:0D:73:C1:73
            X509v3 Authority Key Identifier:
                keyid:18:D0:25:E8:88:C9:32:E3:5F:9B:22:01:5B:58:FC:7C:9A:FD:50:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/161544911E615BEC6414C0E613BE6E218E42C94FB4EF3A31B6F70B6000F89B05/0/18D025E888C932E35F9B22015B58FC7C9AFD50A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/18D025E888C932E35F9B22015B58FC7C9AFD50A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/161544911E615BEC6414C0E613BE6E218E42C94FB4EF3A31B6F70B6000F89B05/0/323830333a626331303a3a2f33322d3332203d3e20323731383833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:bc10::/32

    Signature Algorithm: sha256WithRSAEncryption
         b4:b8:43:ae:f8:ea:d8:33:54:7f:16:14:0a:48:b2:46:96:05:
         31:bf:79:a8:1c:96:37:e3:f4:96:37:6b:a6:8e:b0:71:e0:b4:
         5c:28:0e:5d:f7:34:5b:7f:ec:8d:7f:07:5c:5e:26:57:f2:96:
         0a:97:61:77:f0:ac:b8:45:7e:e9:ee:22:18:14:6b:ea:3b:44:
         80:ec:2b:7c:b3:ce:94:a1:28:e7:a9:92:b3:bf:17:92:ff:9a:
         ca:97:2e:f6:08:13:df:60:91:63:25:67:2d:96:54:8d:3f:26:
         ff:77:88:12:21:91:24:39:96:10:90:7f:6f:a3:6a:45:31:6c:
         e4:b1:66:2e:f7:de:fa:33:3c:08:1b:af:91:74:21:dc:e7:af:
         07:9b:72:9e:60:f3:98:a1:ca:05:f7:a5:09:02:64:2b:4e:3d:
         2f:74:41:fb:9f:f2:16:f1:68:04:49:42:d4:c9:8c:47:69:6d:
         6e:24:ce:8b:8c:90:18:61:9c:51:fd:06:86:51:c7:47:b9:f5:
         65:2d:c4:21:ec:ad:ac:66:64:69:bc:ab:6f:12:c7:57:69:70:
         0b:36:1d:47:0a:d3:c1:58:b0:93:cb:04:4e:6f:46:67:7f:40:
         d8:32:3c:94:bc:47:b0:71:1f:31:ae:26:a9:ea:42:f4:1c:de:
         27:5f:93:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:00:13 2025 by rpki-client