Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1BF0FD508359E4862226854E2221A15A462D3B1BC654472302E7D4FD5BB35D27/0/323830333a336561303a3a2f33322d3334203d3e20323637363835.roa
File:                     323830333a336561303a3a2f33322d3334203d3e20323637363835.roa (raw, json)
Hash identifier:          AQnSEboSb/4/6hd0V6i0QYViHtEWoIe2LPRxbDl49uQ=
Subject key identifier:   FF:E4:E5:88:17:72:F5:D9:D5:A5:3C:86:5C:C3:DF:38:8B:B9:DF:1A
Certificate issuer:       /CN=24CF67069E9BB589E3A34EDAE398737367CE3473
Certificate serial:       4A7ED261642CB2EECF19F036B6068D4119DC94EF
Authority key identifier: 24:CF:67:06:9E:9B:B5:89:E3:A3:4E:DA:E3:98:73:73:67:CE:34:73
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24CF67069E9BB589E3A34EDAE398737367CE3473.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1BF0FD508359E4862226854E2221A15A462D3B1BC654472302E7D4FD5BB35D27/0/323830333a336561303a3a2f33322d3334203d3e20323637363835.roa
Signing time:             Tue 04 Feb 2025 18:48:51 +0000
ROA not before:           Tue 04 Feb 2025 18:43:51 +0000
ROA not after:            Tue 03 Feb 2026 18:48:51 +0000
asID:                     267685
IP address blocks:        2803:3ea0::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1BF0FD508359E4862226854E2221A15A462D3B1BC654472302E7D4FD5BB35D27/0/24CF67069E9BB589E3A34EDAE398737367CE3473.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1BF0FD508359E4862226854E2221A15A462D3B1BC654472302E7D4FD5BB35D27/0/24CF67069E9BB589E3A34EDAE398737367CE3473.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24CF67069E9BB589E3A34EDAE398737367CE3473.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 23:19:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:7e:d2:61:64:2c:b2:ee:cf:19:f0:36:b6:06:8d:41:19:dc:94:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24CF67069E9BB589E3A34EDAE398737367CE3473
        Validity
            Not Before: Feb  4 18:43:51 2025 GMT
            Not After : Feb  3 18:48:51 2026 GMT
        Subject: CN=FFE4E5881772F5D9D5A53C865CC3DF388BB9DF1A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:4e:a6:da:58:db:49:ef:c3:1b:d0:8d:73:3d:
                    ef:4e:b4:9b:af:b2:c7:3b:4a:76:a2:1f:3f:96:95:
                    87:71:76:3c:6e:37:63:a8:20:b8:86:21:dd:d7:fa:
                    0b:b5:45:58:91:8a:18:e7:29:1a:83:e4:93:1b:69:
                    01:d1:39:15:b8:b2:80:0a:4f:21:fe:c4:d3:d4:4d:
                    1a:56:37:e2:fa:a9:a6:4e:f7:d1:e4:34:a1:00:e5:
                    23:91:cf:a6:c6:9c:b1:3d:d8:4a:0e:64:02:fe:a8:
                    c5:e2:ba:ab:dd:ff:7f:04:b6:d9:21:16:55:17:a3:
                    73:ea:d6:b4:f3:cb:00:87:d7:03:50:d3:66:e0:30:
                    01:df:67:7d:a4:eb:9a:ff:56:77:1a:b2:66:ac:50:
                    c7:78:5a:b4:e9:bd:e5:84:ca:77:0b:55:58:74:3c:
                    82:77:ef:50:56:51:7f:82:11:a0:07:8a:c5:74:c4:
                    0e:f8:3d:77:1d:77:45:46:37:d2:79:f8:07:dc:ab:
                    0c:be:dc:15:d2:0d:7c:c0:06:8e:ed:e8:ac:38:92:
                    30:87:71:86:e7:89:bd:dc:3e:d0:e5:4e:c7:df:2f:
                    42:34:7c:cc:46:fb:df:9b:cc:5e:12:80:58:4a:fd:
                    7c:4f:e5:c8:c3:ac:f3:a5:a8:b4:82:ef:7c:81:5d:
                    54:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:E4:E5:88:17:72:F5:D9:D5:A5:3C:86:5C:C3:DF:38:8B:B9:DF:1A
            X509v3 Authority Key Identifier:
                keyid:24:CF:67:06:9E:9B:B5:89:E3:A3:4E:DA:E3:98:73:73:67:CE:34:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1BF0FD508359E4862226854E2221A15A462D3B1BC654472302E7D4FD5BB35D27/0/24CF67069E9BB589E3A34EDAE398737367CE3473.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24CF67069E9BB589E3A34EDAE398737367CE3473.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1BF0FD508359E4862226854E2221A15A462D3B1BC654472302E7D4FD5BB35D27/0/323830333a336561303a3a2f33322d3334203d3e20323637363835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3ea0::/32

    Signature Algorithm: sha256WithRSAEncryption
         11:90:55:22:e4:72:b7:3d:7f:e2:ca:4a:07:99:e3:15:78:53:
         27:5d:c9:6d:16:6e:4d:92:a2:67:0c:6c:16:57:b7:47:cb:1f:
         22:74:c6:8a:b4:4c:57:fc:ec:44:20:ea:68:04:e8:31:72:4f:
         fa:8e:e7:0e:4f:28:aa:68:5a:b2:c9:68:c3:cc:85:b5:b0:59:
         10:8b:8e:3a:56:30:77:3e:6b:87:35:a7:07:bb:b5:88:14:48:
         7c:bc:6b:12:d4:0f:55:50:8f:d9:13:b0:57:9a:b9:7f:32:a1:
         c9:b3:8f:b2:44:97:85:e3:ca:86:40:98:c9:7c:3a:7b:52:35:
         37:5a:d9:4c:85:21:44:7b:b3:aa:18:53:c0:a7:00:4d:e5:af:
         96:8f:b1:a6:5b:86:7e:25:06:43:e7:88:c7:6b:86:5e:92:83:
         51:8c:2e:2d:8f:26:2a:f9:45:36:07:43:47:14:33:08:7b:c2:
         ae:4d:45:83:26:d9:3f:97:8a:ba:13:8f:e1:00:d2:f8:5a:97:
         20:85:a4:10:e7:a6:9e:0a:f3:bd:f6:ac:91:5f:a0:39:e7:81:
         9b:46:37:73:64:fc:7e:24:a3:95:ad:3d:6b:39:de:72:cf:83:
         8b:c7:0f:55:cf:9e:e4:f8:83:d8:dd:b8:19:1e:f1:87:78:d4:
         96:4e:a9:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:00:04 2025 by rpki-client