Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/20717899984AA7235696D2B43E9F059033E4B3FFC95B931F5B710B914ADA62EB/0/323830333a373630303a3a2f33322d3332203d3e20323635373531.roa
File:                     323830333a373630303a3a2f33322d3332203d3e20323635373531.roa (raw, json)
Hash identifier:          jSuJLMyZD/F8wmNI4qVJ71s5IgyGrOBNe184Rics27c=
Subject key identifier:   4A:A0:71:70:93:ED:0C:D7:D9:7F:93:DB:5A:9D:6D:80:84:BB:49:13
Certificate issuer:       /CN=4919DADC9655A6AC651084EE7AED896819F08F76
Certificate serial:       0B6946F138101AE9B637C56F4FF5D9570D46BF68
Authority key identifier: 49:19:DA:DC:96:55:A6:AC:65:10:84:EE:7A:ED:89:68:19:F0:8F:76
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4919DADC9655A6AC651084EE7AED896819F08F76.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/20717899984AA7235696D2B43E9F059033E4B3FFC95B931F5B710B914ADA62EB/0/323830333a373630303a3a2f33322d3332203d3e20323635373531.roa
Signing time:             Tue 04 Feb 2025 18:44:43 +0000
ROA not before:           Tue 04 Feb 2025 18:39:43 +0000
ROA not after:            Tue 03 Feb 2026 18:44:43 +0000
asID:                     265751
IP address blocks:        2803:7600::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/20717899984AA7235696D2B43E9F059033E4B3FFC95B931F5B710B914ADA62EB/0/4919DADC9655A6AC651084EE7AED896819F08F76.crl
                          rsync://repository.lacnic.net/rpki/lacnic/20717899984AA7235696D2B43E9F059033E4B3FFC95B931F5B710B914ADA62EB/0/4919DADC9655A6AC651084EE7AED896819F08F76.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4919DADC9655A6AC651084EE7AED896819F08F76.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:69:46:f1:38:10:1a:e9:b6:37:c5:6f:4f:f5:d9:57:0d:46:bf:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4919DADC9655A6AC651084EE7AED896819F08F76
        Validity
            Not Before: Feb  4 18:39:43 2025 GMT
            Not After : Feb  3 18:44:43 2026 GMT
        Subject: CN=4AA0717093ED0CD7D97F93DB5A9D6D8084BB4913
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:6e:0b:45:5d:30:e9:66:ba:92:27:a7:d7:46:
                    6b:39:d2:cd:a9:a2:08:52:fc:d7:b3:06:59:77:f5:
                    8b:36:1b:5b:f7:24:32:b2:e3:25:62:5f:27:3f:66:
                    a8:72:10:67:c1:d8:bc:fe:52:d6:70:66:60:3d:8a:
                    e8:0d:e9:6f:22:02:82:f5:d8:a2:f8:c9:ad:4c:ea:
                    87:76:bf:36:38:02:7a:2d:61:63:91:fb:b3:90:86:
                    1e:62:70:4c:4a:33:04:41:61:26:ca:72:c9:60:20:
                    a1:4c:b5:fd:f6:a8:0c:04:ae:f5:cc:b7:14:8b:b3:
                    39:b6:ef:5f:c3:ee:80:39:02:19:2d:59:bf:16:e6:
                    13:84:f4:ec:f5:86:22:07:73:89:f2:e7:7f:53:d8:
                    33:0a:78:5e:ec:fb:0b:9f:4c:d4:5c:e8:da:a4:19:
                    c3:c9:13:5c:42:0f:79:a0:37:ee:94:6f:76:a5:0c:
                    eb:6e:e2:c9:5b:75:25:50:02:54:e1:41:a7:16:3e:
                    7b:81:66:91:1a:b3:85:86:80:da:1a:fb:1a:9c:e8:
                    a3:a3:e1:c4:01:f6:8e:b2:db:12:9f:fb:02:f2:0c:
                    5d:86:93:37:93:98:c8:c0:f0:44:85:16:8a:0d:3c:
                    c8:f9:1c:ad:6c:32:be:d6:97:f2:3c:e9:27:ea:67:
                    49:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:A0:71:70:93:ED:0C:D7:D9:7F:93:DB:5A:9D:6D:80:84:BB:49:13
            X509v3 Authority Key Identifier:
                keyid:49:19:DA:DC:96:55:A6:AC:65:10:84:EE:7A:ED:89:68:19:F0:8F:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/20717899984AA7235696D2B43E9F059033E4B3FFC95B931F5B710B914ADA62EB/0/4919DADC9655A6AC651084EE7AED896819F08F76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4919DADC9655A6AC651084EE7AED896819F08F76.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/20717899984AA7235696D2B43E9F059033E4B3FFC95B931F5B710B914ADA62EB/0/323830333a373630303a3a2f33322d3332203d3e20323635373531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7600::/32

    Signature Algorithm: sha256WithRSAEncryption
         64:39:4b:71:b7:07:6b:1a:c4:7c:d0:c9:ad:67:b7:48:e1:b8:
         fb:01:d3:4f:81:fc:92:48:05:cc:49:1d:ee:bd:f4:b1:fc:97:
         1c:95:89:95:01:79:5e:30:04:a5:b9:e7:18:25:77:3b:07:71:
         c5:fd:e9:78:32:c8:29:0b:94:ea:71:db:d8:d9:02:17:07:fd:
         ce:94:46:8a:9d:77:4e:6b:78:2b:32:d1:ea:52:ba:7a:ba:2b:
         dd:30:e1:bd:3a:36:12:8a:12:dd:e9:84:ae:28:01:ea:3c:6a:
         89:c6:de:c2:5d:bf:71:30:eb:21:35:95:c8:a3:a5:a5:e6:e1:
         0c:43:61:76:e6:9c:51:b8:e4:7c:a0:1f:61:49:91:87:50:fd:
         02:6e:4f:0d:6f:7e:2c:c5:89:00:dd:eb:82:16:70:f1:61:2a:
         28:1f:99:82:b4:a4:b4:01:4d:4c:ea:96:b5:48:38:8b:e7:f5:
         6f:b3:1d:b3:f7:75:c4:2f:fc:0b:97:7b:7b:11:e2:69:32:ba:
         65:85:b1:f3:3f:f2:93:bd:20:bc:ba:80:45:43:cb:c1:62:6b:
         01:45:58:bc:7e:41:42:90:ec:99:8b:3c:86:aa:4b:0c:01:c3:
         c9:51:59:c7:af:58:22:ed:ac:2b:fd:49:52:d1:b6:63:d4:da:
         b0:c4:22:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 20:11:02 2025 by rpki-client