Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1702E1A3DF1D1A79A56BD5C10CAA1F95F3CE7660852C9B5974427E47DF65C9B8/0/323830333a3361303a3a2f33322d3332203d3e203438323532.roa
File:                     323830333a3361303a3a2f33322d3332203d3e203438323532.roa (raw, json)
Hash identifier:          ZFXpjRO+okMPtZTC+rXdlIQIYKFOBaxjsHyUHJ2eR0U=
Subject key identifier:   F7:5A:E6:EA:E0:BE:2C:1E:A6:E1:5B:B3:A2:8F:51:10:51:8B:CF:FC
Certificate issuer:       /CN=23B95CF72FE276BEB53EBBC11D213ED7A3BE995B
Certificate serial:       4418633B18DB7A043B0FCFDE2E9C08396A747129
Authority key identifier: 23:B9:5C:F7:2F:E2:76:BE:B5:3E:BB:C1:1D:21:3E:D7:A3:BE:99:5B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/23B95CF72FE276BEB53EBBC11D213ED7A3BE995B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1702E1A3DF1D1A79A56BD5C10CAA1F95F3CE7660852C9B5974427E47DF65C9B8/0/323830333a3361303a3a2f33322d3332203d3e203438323532.roa
Signing time:             Tue 04 Feb 2025 18:10:08 +0000
ROA not before:           Tue 04 Feb 2025 18:05:08 +0000
ROA not after:            Tue 03 Feb 2026 18:10:08 +0000
asID:                     48252
IP address blocks:        2803:3a0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1702E1A3DF1D1A79A56BD5C10CAA1F95F3CE7660852C9B5974427E47DF65C9B8/0/23B95CF72FE276BEB53EBBC11D213ED7A3BE995B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1702E1A3DF1D1A79A56BD5C10CAA1F95F3CE7660852C9B5974427E47DF65C9B8/0/23B95CF72FE276BEB53EBBC11D213ED7A3BE995B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/23B95CF72FE276BEB53EBBC11D213ED7A3BE995B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 20 Feb 2025 14:37:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:18:63:3b:18:db:7a:04:3b:0f:cf:de:2e:9c:08:39:6a:74:71:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23B95CF72FE276BEB53EBBC11D213ED7A3BE995B
        Validity
            Not Before: Feb  4 18:05:08 2025 GMT
            Not After : Feb  3 18:10:08 2026 GMT
        Subject: CN=F75AE6EAE0BE2C1EA6E15BB3A28F5110518BCFFC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:04:bc:58:cb:23:47:2f:95:6d:ea:35:6e:7e:
                    30:93:c4:34:0f:33:fe:47:32:16:0d:cb:4c:c5:6f:
                    7d:f9:61:d9:36:1d:42:d7:ad:05:69:97:75:d8:ca:
                    fe:bb:d6:46:5a:22:77:34:cc:08:0f:f7:7e:a6:1c:
                    e0:3d:90:71:2c:a7:cf:8f:9a:8c:51:17:ce:9f:a0:
                    53:5d:ea:c6:5c:6c:f8:85:ee:6e:8d:e6:de:50:79:
                    92:c6:f1:96:d7:ba:22:f8:64:b4:62:00:98:02:14:
                    99:d3:22:ac:cc:88:77:44:9f:de:ab:66:46:b4:bd:
                    a1:fd:6f:c3:bd:ee:e0:ca:47:e0:fe:97:1c:ed:39:
                    b8:bc:89:41:12:3c:7f:bb:8c:ec:1c:b4:f5:16:52:
                    e9:40:60:2e:bf:eb:ef:da:38:d8:03:79:07:bb:ea:
                    7f:45:64:80:fd:fe:b1:f0:66:1c:fa:fc:88:a9:46:
                    e9:2c:b4:17:a4:6f:a2:5e:ea:97:d1:20:57:13:cf:
                    96:31:56:9d:45:dd:4d:5f:4c:9b:33:aa:b9:ac:70:
                    93:58:f1:a7:85:39:f2:74:ea:a0:0d:3c:18:31:45:
                    91:42:d6:da:1a:42:e8:85:ab:db:41:42:ec:70:2d:
                    65:2f:9d:21:a2:c2:7e:59:71:02:5f:2e:0f:70:30:
                    a0:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:5A:E6:EA:E0:BE:2C:1E:A6:E1:5B:B3:A2:8F:51:10:51:8B:CF:FC
            X509v3 Authority Key Identifier:
                keyid:23:B9:5C:F7:2F:E2:76:BE:B5:3E:BB:C1:1D:21:3E:D7:A3:BE:99:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1702E1A3DF1D1A79A56BD5C10CAA1F95F3CE7660852C9B5974427E47DF65C9B8/0/23B95CF72FE276BEB53EBBC11D213ED7A3BE995B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/23B95CF72FE276BEB53EBBC11D213ED7A3BE995B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1702E1A3DF1D1A79A56BD5C10CAA1F95F3CE7660852C9B5974427E47DF65C9B8/0/323830333a3361303a3a2f33322d3332203d3e203438323532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         ab:33:ea:c5:3a:45:8e:9b:0e:78:12:d5:a9:2a:1a:05:2c:54:
         8d:60:41:f2:38:c6:7a:db:63:04:6b:94:47:23:ab:23:26:f8:
         c4:03:c1:d0:86:98:b1:15:1a:d8:d6:93:71:79:95:a8:e4:81:
         94:e6:05:15:65:85:c1:52:9f:5e:73:66:a8:d8:3a:8f:9a:4e:
         07:64:97:e1:a0:c4:67:ea:c1:f0:50:e4:35:48:6d:db:d8:da:
         dc:d8:a0:bf:80:3b:5c:b6:3f:ee:3e:24:cd:39:18:a1:fc:3e:
         97:d6:96:3f:3b:c4:b7:e1:96:cf:cb:5d:a1:40:be:8d:38:5e:
         12:de:10:50:94:75:98:02:84:4e:65:6b:0c:fe:f6:2c:24:9f:
         9b:1c:3a:98:9a:b8:bd:11:f2:12:9d:ec:f4:ab:5f:48:0a:e1:
         f6:9d:01:93:aa:eb:30:a5:2a:a1:7b:dc:4d:d0:74:cb:73:2d:
         5c:a0:4a:dd:ac:3c:07:75:a7:80:bb:ce:b6:31:3d:c8:29:b0:
         ae:b5:30:d2:4b:b0:0b:c4:d0:04:2d:4f:42:0a:12:40:10:8b:
         a9:13:27:16:ef:63:55:9d:99:c4:f7:3f:4d:2e:da:f5:5e:ad:
         9d:33:83:0e:54:ba:24:7d:9e:62:13:2c:ed:94:b8:2f:89:b0:
         2a:11:72:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:15:18 2025 by rpki-client