Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/21F5134D3F7842FC83A15DEBA24B51C70BE726DAF9F2D16AC545EEAD744327FE/0/323830333a633430303a3a2f33322d3332203d3e203532333038.roa
File:                     323830333a633430303a3a2f33322d3332203d3e203532333038.roa (raw, json)
Hash identifier:          bQvkZzTKYwmqUTD4d+52/M4geb2NShTKhKs+PUQNfh0=
Subject key identifier:   B3:0F:F5:0A:75:D1:6D:9F:AE:09:50:97:A4:89:DF:CB:BA:91:FE:7F
Certificate issuer:       /CN=8C02E0E579C60369B9E5962BC7E700427B6915B6
Certificate serial:       2BA3A79C86CFC7E24ED8FB563080DEB52A84C87A
Authority key identifier: 8C:02:E0:E5:79:C6:03:69:B9:E5:96:2B:C7:E7:00:42:7B:69:15:B6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8C02E0E579C60369B9E5962BC7E700427B6915B6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/21F5134D3F7842FC83A15DEBA24B51C70BE726DAF9F2D16AC545EEAD744327FE/0/323830333a633430303a3a2f33322d3332203d3e203532333038.roa
Signing time:             Tue 04 Feb 2025 18:26:35 +0000
ROA not before:           Tue 04 Feb 2025 18:21:35 +0000
ROA not after:            Tue 03 Feb 2026 18:26:35 +0000
asID:                     52308
IP address blocks:        2803:c400::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/21F5134D3F7842FC83A15DEBA24B51C70BE726DAF9F2D16AC545EEAD744327FE/0/8C02E0E579C60369B9E5962BC7E700427B6915B6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/21F5134D3F7842FC83A15DEBA24B51C70BE726DAF9F2D16AC545EEAD744327FE/0/8C02E0E579C60369B9E5962BC7E700427B6915B6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8C02E0E579C60369B9E5962BC7E700427B6915B6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:a3:a7:9c:86:cf:c7:e2:4e:d8:fb:56:30:80:de:b5:2a:84:c8:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C02E0E579C60369B9E5962BC7E700427B6915B6
        Validity
            Not Before: Feb  4 18:21:35 2025 GMT
            Not After : Feb  3 18:26:35 2026 GMT
        Subject: CN=B30FF50A75D16D9FAE095097A489DFCBBA91FE7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:07:d7:89:5c:14:f1:77:dd:03:b5:54:f0:24:
                    60:d6:2e:3d:b2:c8:a6:6c:4f:d2:b1:97:71:bf:9a:
                    4f:28:b0:01:a2:43:3b:60:d7:05:fd:c9:2e:ef:28:
                    ff:4e:fe:5d:e7:85:c9:9c:32:af:5e:eb:3e:75:23:
                    10:8a:f3:03:b5:6a:26:8b:11:84:a2:fa:e6:ad:8d:
                    33:3c:78:30:07:11:e1:85:23:d8:0e:6b:fe:63:95:
                    fe:b3:b4:62:fe:d3:3a:2a:ed:2e:db:aa:06:bd:f3:
                    0b:a8:de:59:ef:27:6e:33:f5:67:ff:83:98:cf:27:
                    12:f1:f5:43:69:38:33:73:76:7b:c4:b8:6a:95:3f:
                    57:85:a4:62:0f:57:2e:6c:9b:20:e8:1e:59:43:f1:
                    3e:ef:17:6c:b2:10:10:0b:78:f3:48:dd:dc:1f:9f:
                    c9:ff:0b:3f:9a:ad:51:ff:38:6f:6a:be:88:2f:1a:
                    67:8e:5c:c9:c6:af:6a:86:f1:61:45:84:c7:0b:8e:
                    d4:15:2c:72:ce:8e:f7:c7:82:bf:ad:9f:2d:4d:1c:
                    23:0f:d5:7e:26:c7:52:a2:1b:fa:56:24:9c:ef:e3:
                    52:75:e3:af:3d:b4:19:f5:a3:70:2e:68:5d:45:6a:
                    38:b1:74:2a:77:ef:fd:e2:07:f3:f1:b0:5d:02:2c:
                    92:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:0F:F5:0A:75:D1:6D:9F:AE:09:50:97:A4:89:DF:CB:BA:91:FE:7F
            X509v3 Authority Key Identifier:
                keyid:8C:02:E0:E5:79:C6:03:69:B9:E5:96:2B:C7:E7:00:42:7B:69:15:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/21F5134D3F7842FC83A15DEBA24B51C70BE726DAF9F2D16AC545EEAD744327FE/0/8C02E0E579C60369B9E5962BC7E700427B6915B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8C02E0E579C60369B9E5962BC7E700427B6915B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/21F5134D3F7842FC83A15DEBA24B51C70BE726DAF9F2D16AC545EEAD744327FE/0/323830333a633430303a3a2f33322d3332203d3e203532333038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c400::/32

    Signature Algorithm: sha256WithRSAEncryption
         02:21:4e:1a:9e:24:7b:e5:e5:2e:b8:d4:4a:b3:ab:58:ee:c9:
         d7:c3:45:7d:e0:c8:b3:36:8a:72:81:01:b8:3b:e5:5c:ea:38:
         4e:2f:3d:65:21:e4:0b:70:7a:c1:19:9c:16:cd:9f:48:c8:84:
         da:e3:25:21:5f:e2:a1:50:c8:e5:fd:dc:bb:21:ea:9c:0f:7b:
         62:8d:74:8e:3c:c7:cb:79:97:4f:32:b9:ca:d9:77:6a:17:14:
         0d:46:f3:67:72:1d:c5:ce:82:f0:b0:32:ef:23:97:3e:be:34:
         f6:93:e1:c9:d4:05:62:1f:dc:fc:49:40:4e:4c:bc:a2:fa:50:
         34:ae:48:48:aa:2b:83:44:f3:44:be:df:37:89:15:4b:7b:e0:
         41:e2:5a:1e:c4:a4:9d:4d:6d:b8:d3:3e:84:ce:ac:c9:5c:67:
         12:59:93:bc:b4:01:23:6b:ba:36:d5:48:38:f4:67:7c:d0:58:
         77:3f:e7:73:55:77:21:3a:0e:ef:b4:7a:b3:d9:3f:71:c3:c4:
         1f:a6:28:e6:b2:18:94:2b:e8:1a:7d:36:c9:e2:03:cf:66:28:
         6b:27:87:a9:bc:6b:62:3b:65:28:d7:47:a8:f8:41:74:6e:3f:
         c7:bd:6d:24:63:7a:f5:90:2a:03:18:8c:fa:81:06:cf:61:41:
         ac:d0:f0:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:54:18 2025 by rpki-client