Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/25F4487951F05D1A68FEBDE2B3524AC2AB5F70277D0CDBCAD122A35AF0EE4318/0/323830333a643165303a3a2f33322d3438203d3e20323730303034.roa
File:                     323830333a643165303a3a2f33322d3438203d3e20323730303034.roa (raw, json)
Hash identifier:          3bjwGrm2AJ5kbLiKh+dcpH9zScX49Ws8ptWqa1usoJk=
Subject key identifier:   C3:24:C4:85:BC:B5:8A:15:80:A2:AC:10:3D:1F:54:3A:1B:DD:AB:AE
Certificate issuer:       /CN=6313E6A17698A1287384FBB72C52152A7BD6DCB6
Certificate serial:       73D70C1C1FF34E30490F75F06B8D02258DDDBB42
Authority key identifier: 63:13:E6:A1:76:98:A1:28:73:84:FB:B7:2C:52:15:2A:7B:D6:DC:B6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6313E6A17698A1287384FBB72C52152A7BD6DCB6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/25F4487951F05D1A68FEBDE2B3524AC2AB5F70277D0CDBCAD122A35AF0EE4318/0/323830333a643165303a3a2f33322d3438203d3e20323730303034.roa
Signing time:             Tue 04 Feb 2025 18:30:18 +0000
ROA not before:           Tue 04 Feb 2025 18:25:18 +0000
ROA not after:            Tue 03 Feb 2026 18:30:18 +0000
asID:                     270004
IP address blocks:        2803:d1e0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/25F4487951F05D1A68FEBDE2B3524AC2AB5F70277D0CDBCAD122A35AF0EE4318/0/6313E6A17698A1287384FBB72C52152A7BD6DCB6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/25F4487951F05D1A68FEBDE2B3524AC2AB5F70277D0CDBCAD122A35AF0EE4318/0/6313E6A17698A1287384FBB72C52152A7BD6DCB6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6313E6A17698A1287384FBB72C52152A7BD6DCB6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:d7:0c:1c:1f:f3:4e:30:49:0f:75:f0:6b:8d:02:25:8d:dd:bb:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6313E6A17698A1287384FBB72C52152A7BD6DCB6
        Validity
            Not Before: Feb  4 18:25:18 2025 GMT
            Not After : Feb  3 18:30:18 2026 GMT
        Subject: CN=C324C485BCB58A1580A2AC103D1F543A1BDDABAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d4:ca:f9:e1:07:5c:4e:ca:75:3c:81:a5:6f:
                    e0:7d:ce:2c:c3:d8:fb:39:6d:c3:62:c4:2e:bd:01:
                    ff:99:d6:d0:1f:c4:6c:b1:22:21:4b:83:d5:68:49:
                    b0:17:00:0a:d5:59:24:23:ca:ad:98:1e:b1:54:95:
                    b0:a2:78:79:12:3e:06:09:ad:e5:70:52:52:27:b8:
                    08:79:a6:42:35:61:6d:71:1f:8e:ea:fa:54:e2:13:
                    c3:20:20:5d:a9:af:0f:e4:05:c0:3e:fe:01:4e:11:
                    76:e4:4e:16:a7:c2:3a:8a:4c:b9:44:e9:bb:92:45:
                    69:ce:3e:0d:b7:14:cf:ff:51:f7:34:93:35:1c:c3:
                    f7:68:0c:eb:b2:76:c6:96:3f:e8:12:0e:04:09:ec:
                    f5:e5:fa:75:cf:b8:17:31:07:89:73:a5:6a:bd:f9:
                    6a:7e:de:f8:2f:ce:ad:e1:c1:a2:70:2a:30:34:99:
                    22:c0:c5:1b:93:d6:77:b6:9e:42:15:1c:04:aa:9b:
                    a5:e7:98:d3:33:08:17:9a:71:63:e5:4f:c5:d6:e5:
                    c0:2c:a4:34:83:95:76:56:2d:ec:f2:4a:56:9e:b5:
                    52:7a:e4:57:d6:e7:9c:ca:81:29:95:14:e9:1b:aa:
                    77:d7:32:06:f3:da:d3:e0:7b:fd:28:e1:0f:97:a0:
                    a2:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:24:C4:85:BC:B5:8A:15:80:A2:AC:10:3D:1F:54:3A:1B:DD:AB:AE
            X509v3 Authority Key Identifier:
                keyid:63:13:E6:A1:76:98:A1:28:73:84:FB:B7:2C:52:15:2A:7B:D6:DC:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/25F4487951F05D1A68FEBDE2B3524AC2AB5F70277D0CDBCAD122A35AF0EE4318/0/6313E6A17698A1287384FBB72C52152A7BD6DCB6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6313E6A17698A1287384FBB72C52152A7BD6DCB6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/25F4487951F05D1A68FEBDE2B3524AC2AB5F70277D0CDBCAD122A35AF0EE4318/0/323830333a643165303a3a2f33322d3438203d3e20323730303034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d1e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         5f:27:68:10:dc:54:08:03:c0:da:73:73:92:2f:4f:fa:28:72:
         da:29:95:e4:1b:62:5e:e5:69:2c:33:4f:e3:0f:fb:6d:c4:5b:
         cd:f1:27:2b:bb:16:e1:9d:00:f8:fa:35:2a:cc:2f:45:ee:18:
         9a:9d:11:fd:13:ff:94:30:0c:2b:34:fd:4c:ae:78:5c:07:33:
         54:31:48:c4:29:1d:33:cc:6e:87:18:5e:3b:bf:cc:b6:6e:3e:
         1f:f9:6d:1d:87:82:91:ce:50:5c:9f:d3:ef:fb:81:dd:83:1c:
         bd:df:ee:5d:4d:8e:15:f5:8b:d3:aa:c7:26:16:3a:b7:01:c1:
         48:bd:a5:02:ee:d7:09:95:66:d2:86:56:b1:52:57:10:c3:4c:
         93:db:04:bf:63:7d:09:db:0e:8c:78:28:bc:a5:73:77:3e:d0:
         28:8c:cf:f3:d5:f5:4c:e0:18:4e:a6:e2:38:dd:c0:ce:93:91:
         29:9d:c6:1b:e7:0c:da:b8:cb:67:6e:c3:e4:07:ef:cb:fc:82:
         ac:e4:db:9f:c1:3b:92:82:e4:14:59:d4:84:14:8d:58:fb:e3:
         ae:e5:21:6c:af:e4:61:fe:40:af:23:19:3d:e6:d5:1a:ea:45:
         67:91:a1:45:6e:fb:77:8f:07:af:f7:d6:03:bc:86:a3:1d:b8:
         f0:cd:48:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:51:33 2025 by rpki-client