Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1D4E961A231CD13A76EEB28F44BD4C7BE9C86B64213124A12BAD2CDD7DC61586/0/323830333a616336303a32303a3a2f34382d3438203d3e20323637383439.roa
File:                     323830333a616336303a32303a3a2f34382d3438203d3e20323637383439.roa (raw, json)
Hash identifier:          fNhuVR5LGuhgqJEEIZn0eOa+IqqfIPxYu033cmVeCOg=
Subject key identifier:   3F:61:17:C6:A6:DF:A3:9A:0A:66:A7:E1:AE:41:AC:9B:CB:48:32:1B
Certificate issuer:       /CN=7DA5922CAF9214C6E4545724FFE93FC180331E96
Certificate serial:       0DE25F511427E297F3FFF81A927AA2FF06D85A19
Authority key identifier: 7D:A5:92:2C:AF:92:14:C6:E4:54:57:24:FF:E9:3F:C1:80:33:1E:96
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7DA5922CAF9214C6E4545724FFE93FC180331E96.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1D4E961A231CD13A76EEB28F44BD4C7BE9C86B64213124A12BAD2CDD7DC61586/0/323830333a616336303a32303a3a2f34382d3438203d3e20323637383439.roa
Signing time:             Tue 04 Feb 2025 18:43:39 +0000
ROA not before:           Tue 04 Feb 2025 18:38:39 +0000
ROA not after:            Tue 03 Feb 2026 18:43:39 +0000
asID:                     267849
IP address blocks:        2803:ac60:20::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1D4E961A231CD13A76EEB28F44BD4C7BE9C86B64213124A12BAD2CDD7DC61586/0/7DA5922CAF9214C6E4545724FFE93FC180331E96.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1D4E961A231CD13A76EEB28F44BD4C7BE9C86B64213124A12BAD2CDD7DC61586/0/7DA5922CAF9214C6E4545724FFE93FC180331E96.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7DA5922CAF9214C6E4545724FFE93FC180331E96.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 20:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:e2:5f:51:14:27:e2:97:f3:ff:f8:1a:92:7a:a2:ff:06:d8:5a:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7DA5922CAF9214C6E4545724FFE93FC180331E96
        Validity
            Not Before: Feb  4 18:38:39 2025 GMT
            Not After : Feb  3 18:43:39 2026 GMT
        Subject: CN=3F6117C6A6DFA39A0A66A7E1AE41AC9BCB48321B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e6:11:3f:c9:94:02:1a:32:08:3f:19:63:b9:
                    d7:5b:78:8f:00:7c:ae:96:01:7a:f4:f3:30:25:b8:
                    6e:fe:a7:cc:b9:27:64:b8:32:7d:76:e8:82:1c:35:
                    b3:e4:90:75:40:4f:22:59:fd:8e:08:9d:27:e4:98:
                    48:88:d3:f8:cb:5f:18:20:2f:84:01:f5:4a:d0:69:
                    8b:fc:ac:04:70:03:29:4a:4d:74:d1:cd:95:16:27:
                    a2:74:70:72:c5:5f:0b:6e:74:1d:ef:75:8b:9a:80:
                    d8:7b:b5:6a:3f:00:3b:24:a8:1e:6e:35:08:01:1a:
                    01:f2:a2:2c:77:be:ae:aa:60:1c:eb:e2:d9:d6:00:
                    c4:af:1c:df:9f:c7:dc:87:6f:cc:36:cf:2c:34:64:
                    5e:3c:d6:e7:8b:83:f6:d7:bf:64:59:fb:2e:3b:05:
                    b9:9b:73:af:2d:81:fe:bd:ec:ef:b9:6e:49:bb:a5:
                    6f:ef:57:0a:4c:48:89:ba:05:08:45:a5:c2:09:b1:
                    59:04:cd:62:eb:6d:91:3d:de:88:56:03:4e:c4:99:
                    9d:4b:02:26:a9:d3:b0:ab:9a:12:fa:86:2e:62:64:
                    cd:d7:7b:2a:2e:d4:ab:f7:2e:cc:ec:4a:30:e7:65:
                    86:55:91:f7:51:2c:eb:7a:62:40:57:47:80:6e:19:
                    d5:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:61:17:C6:A6:DF:A3:9A:0A:66:A7:E1:AE:41:AC:9B:CB:48:32:1B
            X509v3 Authority Key Identifier:
                keyid:7D:A5:92:2C:AF:92:14:C6:E4:54:57:24:FF:E9:3F:C1:80:33:1E:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1D4E961A231CD13A76EEB28F44BD4C7BE9C86B64213124A12BAD2CDD7DC61586/0/7DA5922CAF9214C6E4545724FFE93FC180331E96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7DA5922CAF9214C6E4545724FFE93FC180331E96.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1D4E961A231CD13A76EEB28F44BD4C7BE9C86B64213124A12BAD2CDD7DC61586/0/323830333a616336303a32303a3a2f34382d3438203d3e20323637383439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ac60:20::/48

    Signature Algorithm: sha256WithRSAEncryption
         94:43:f7:bf:c6:e3:f8:03:3a:2d:3f:d4:b0:1c:f9:0f:ab:d1:
         e1:c1:ff:0d:5a:ad:4f:ea:79:07:43:b6:32:57:50:e1:97:ea:
         c2:ec:ba:a9:25:28:a3:43:52:8d:6f:06:8f:11:cc:8e:c8:70:
         fe:5b:04:88:ee:85:0b:a6:63:01:88:be:98:f8:3e:4a:17:53:
         32:f2:78:fc:3e:59:8a:58:d4:5a:9e:d2:3d:81:94:86:a7:d3:
         c4:e5:ba:1e:3c:42:60:31:9f:1d:70:ad:a9:50:13:89:20:a8:
         ba:dc:37:25:d1:ee:35:ac:c7:91:71:43:f6:62:74:96:c4:5d:
         b5:58:b9:ad:dd:1b:69:ec:c5:18:e0:a3:de:f6:1d:f1:40:d9:
         78:69:87:fe:65:c7:94:a3:1c:3e:b8:49:44:23:e7:f3:02:b6:
         3d:5a:c0:74:aa:bb:f0:89:fe:e9:e7:2c:fb:d9:d0:20:31:9f:
         14:8f:49:6e:75:26:24:47:92:14:3f:bb:59:28:85:6b:4d:b9:
         84:b9:ea:86:bb:63:52:75:02:60:82:e4:3c:9d:0a:2f:ae:f8:
         4c:a3:d5:11:00:28:00:00:aa:2b:80:00:e0:d2:1b:46:0b:76:
         06:77:2c:99:98:66:9b:e0:d3:d2:17:10:82:2a:a2:48:e7:de:
         14:b1:6a:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 17:47:30 2025 by rpki-client