Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FF7B7F5770C4EDD7D6B8E4EE01C3A4B5B92E99C766788D7330E6C276C0F3088/0/323830333a636135303a316330313a3a2f34382d3438203d3e20323733313737.roa
File:                     323830333a636135303a316330313a3a2f34382d3438203d3e20323733313737.roa (raw, json)
Hash identifier:          DOIUpLOc9fbOxtSQ1zP1P+BwzavzZsrI0K9uSIULYwM=
Subject key identifier:   6C:8C:FB:6E:38:11:F7:86:EB:97:72:8E:9F:22:66:6C:B2:4D:F6:6F
Certificate issuer:       /CN=B913C260F56BF7B1E2B7323F47B326FB8A0CBCD6
Certificate serial:       74ED7D1406CBA52A10E79B70E4E0F0892A7682ED
Authority key identifier: B9:13:C2:60:F5:6B:F7:B1:E2:B7:32:3F:47:B3:26:FB:8A:0C:BC:D6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B913C260F56BF7B1E2B7323F47B326FB8A0CBCD6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1FF7B7F5770C4EDD7D6B8E4EE01C3A4B5B92E99C766788D7330E6C276C0F3088/0/323830333a636135303a316330313a3a2f34382d3438203d3e20323733313737.roa
Signing time:             Wed 11 Dec 2024 20:40:02 +0000
ROA not before:           Wed 11 Dec 2024 20:35:02 +0000
ROA not after:            Wed 10 Dec 2025 20:40:02 +0000
asID:                     273177
IP address blocks:        2803:ca50:1c01::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1FF7B7F5770C4EDD7D6B8E4EE01C3A4B5B92E99C766788D7330E6C276C0F3088/0/B913C260F56BF7B1E2B7323F47B326FB8A0CBCD6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1FF7B7F5770C4EDD7D6B8E4EE01C3A4B5B92E99C766788D7330E6C276C0F3088/0/B913C260F56BF7B1E2B7323F47B326FB8A0CBCD6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B913C260F56BF7B1E2B7323F47B326FB8A0CBCD6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 09 Feb 2025 03:51:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:ed:7d:14:06:cb:a5:2a:10:e7:9b:70:e4:e0:f0:89:2a:76:82:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B913C260F56BF7B1E2B7323F47B326FB8A0CBCD6
        Validity
            Not Before: Dec 11 20:35:02 2024 GMT
            Not After : Dec 10 20:40:02 2025 GMT
        Subject: CN=6C8CFB6E3811F786EB97728E9F22666CB24DF66F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:e3:cd:87:b7:04:f0:d7:27:91:5e:c4:46:c3:
                    03:46:23:77:6b:16:be:e6:2c:b8:6b:b8:f9:35:a9:
                    54:03:ae:62:a9:4e:7b:18:f6:1d:09:b0:59:08:be:
                    b2:f3:ac:32:83:8b:68:ab:13:e9:f5:71:94:8b:13:
                    3a:b2:82:a0:01:1d:8f:57:fd:3e:cc:8b:20:5f:d3:
                    ac:d8:2a:6c:f4:64:4d:8a:26:7b:e5:f2:67:97:e4:
                    23:c9:44:3d:29:45:18:4c:6f:b6:2c:a0:c1:41:cc:
                    a4:af:e2:1d:e7:ab:e8:b0:c5:38:1a:9d:41:fb:75:
                    52:bf:d0:7e:70:e8:34:39:a2:62:e9:38:3b:c3:f3:
                    f5:72:b4:d3:68:c5:d8:6a:8b:25:ae:23:6f:c6:38:
                    1e:57:f5:1b:45:36:40:d4:6b:a9:a7:f6:f0:ac:cb:
                    6e:f9:93:d0:4c:99:d6:bf:c6:d9:5a:23:a2:d6:4a:
                    a8:ac:f9:7c:bc:2d:bc:11:53:53:51:11:1e:3e:c6:
                    49:00:be:6d:6b:05:ec:2d:ff:43:53:04:5b:8f:6b:
                    ce:1e:ff:ad:1f:e1:1b:dd:4d:8a:b5:58:1e:b6:26:
                    c7:da:b7:6c:79:5f:5c:a3:23:81:8e:fb:e7:35:61:
                    58:1f:13:10:75:2e:d6:39:fc:da:c4:98:71:95:42:
                    59:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:8C:FB:6E:38:11:F7:86:EB:97:72:8E:9F:22:66:6C:B2:4D:F6:6F
            X509v3 Authority Key Identifier:
                keyid:B9:13:C2:60:F5:6B:F7:B1:E2:B7:32:3F:47:B3:26:FB:8A:0C:BC:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1FF7B7F5770C4EDD7D6B8E4EE01C3A4B5B92E99C766788D7330E6C276C0F3088/0/B913C260F56BF7B1E2B7323F47B326FB8A0CBCD6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B913C260F56BF7B1E2B7323F47B326FB8A0CBCD6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FF7B7F5770C4EDD7D6B8E4EE01C3A4B5B92E99C766788D7330E6C276C0F3088/0/323830333a636135303a316330313a3a2f34382d3438203d3e20323733313737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ca50:1c01::/48

    Signature Algorithm: sha256WithRSAEncryption
         af:75:eb:ba:d0:e3:41:46:3f:4c:fc:62:e7:cc:19:d0:c4:03:
         de:b2:02:c7:36:6c:e4:a8:0c:04:cf:de:9b:92:84:57:82:a7:
         c5:85:6b:8b:dd:3c:b1:58:4f:55:08:ed:24:3f:b1:21:a7:54:
         68:1e:6a:ca:18:b0:b3:97:17:6e:ae:56:aa:07:ac:b3:da:67:
         d8:2a:64:26:16:82:ce:39:e1:b2:92:e4:4a:62:c8:59:61:33:
         3b:2f:94:75:35:27:a4:c8:52:28:bc:f9:26:ef:24:e0:eb:df:
         11:01:c8:8f:5a:cf:21:e0:40:ce:e5:2f:a5:b9:a7:09:9f:18:
         2d:40:49:5c:5d:ae:02:79:30:59:95:a6:9a:ad:06:fc:29:ca:
         e4:f5:a2:91:d7:69:16:5d:5e:14:1b:52:24:1a:25:e0:3d:76:
         dd:3a:a0:20:24:38:b6:bf:68:ee:5f:42:9a:46:c5:61:a8:3f:
         9e:ce:1a:bb:01:57:a8:e1:08:8d:ff:02:63:5a:e0:cf:a2:e1:
         04:5b:51:c9:88:d1:ab:a8:65:35:f0:cf:05:f4:60:d7:5c:1d:
         83:2d:f8:0d:5a:b4:41:01:25:b3:47:16:d0:16:f9:4b:08:91:
         2b:87:10:8f:71:ca:4f:2e:5f:15:91:d6:6e:a3:18:4e:cc:3c:
         e0:f6:bb:1a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:46:16 2025 by rpki-client