Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/28F749D15A239E7711C5BBFCD179E0221928BA4F3EBBC75B0E08C12A7EF28E69/0/323830333a396332303a3a2f33322d3438203d3e203532343638.roa
File:                     323830333a396332303a3a2f33322d3438203d3e203532343638.roa (raw, json)
Hash identifier:          mRo4lP93EKeRz0S4vNIb9qjNwQ+e+xpT1i37DdvawBQ=
Subject key identifier:   10:86:F9:C5:F8:12:46:FA:54:B7:5A:A5:99:5E:82:32:F9:E0:F5:B5
Certificate issuer:       /CN=87170FE663930DA5DB9475CEAC8B0600B2C02832
Certificate serial:       3512335EB6C8BC82D28C5A1F94B679F7B8DC76BD
Authority key identifier: 87:17:0F:E6:63:93:0D:A5:DB:94:75:CE:AC:8B:06:00:B2:C0:28:32
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/87170FE663930DA5DB9475CEAC8B0600B2C02832.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/28F749D15A239E7711C5BBFCD179E0221928BA4F3EBBC75B0E08C12A7EF28E69/0/323830333a396332303a3a2f33322d3438203d3e203532343638.roa
Signing time:             Tue 04 Feb 2025 18:06:20 +0000
ROA not before:           Tue 04 Feb 2025 18:01:20 +0000
ROA not after:            Tue 03 Feb 2026 18:06:20 +0000
asID:                     52468
IP address blocks:        2803:9c20::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/28F749D15A239E7711C5BBFCD179E0221928BA4F3EBBC75B0E08C12A7EF28E69/0/87170FE663930DA5DB9475CEAC8B0600B2C02832.crl
                          rsync://repository.lacnic.net/rpki/lacnic/28F749D15A239E7711C5BBFCD179E0221928BA4F3EBBC75B0E08C12A7EF28E69/0/87170FE663930DA5DB9475CEAC8B0600B2C02832.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/87170FE663930DA5DB9475CEAC8B0600B2C02832.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 19:40:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:12:33:5e:b6:c8:bc:82:d2:8c:5a:1f:94:b6:79:f7:b8:dc:76:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87170FE663930DA5DB9475CEAC8B0600B2C02832
        Validity
            Not Before: Feb  4 18:01:20 2025 GMT
            Not After : Feb  3 18:06:20 2026 GMT
        Subject: CN=1086F9C5F81246FA54B75AA5995E8232F9E0F5B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:d8:1d:b2:b8:58:46:c4:ec:d0:a7:09:b2:83:
                    c1:ba:a9:42:03:53:6d:64:86:a0:92:4a:95:48:5b:
                    70:eb:9e:34:8f:d7:17:36:b8:63:c6:4c:eb:53:aa:
                    46:68:f8:a5:76:11:59:37:34:a1:6f:db:c2:7c:6d:
                    5c:8d:e8:d0:b3:c4:81:e0:1b:0e:a3:be:98:f6:93:
                    5b:0e:c9:25:ff:15:2c:09:66:b5:e1:00:d6:70:32:
                    30:be:db:57:65:21:8c:97:b2:a0:fb:6a:9d:4f:b0:
                    50:71:97:2a:fe:c6:85:3d:a2:35:3e:5d:1f:e2:de:
                    17:d6:88:d6:77:4e:ea:21:50:9e:cd:5f:b0:03:b3:
                    0d:ae:92:28:b8:71:09:12:cf:a3:76:53:dc:0f:a7:
                    29:fd:32:f1:91:49:b2:9e:2b:38:aa:d9:e6:68:04:
                    72:66:47:c3:b8:6b:ee:32:62:23:03:c2:80:28:c7:
                    ff:ca:6b:5d:b8:79:3a:57:f5:30:ba:6d:37:9d:63:
                    f1:4a:a0:0b:d0:57:4c:71:71:49:22:23:4d:aa:fc:
                    0a:67:51:e3:af:8c:1b:f5:f5:7a:70:d6:28:8d:b5:
                    bd:82:a3:65:f5:03:2d:9e:32:ca:be:e1:bf:0c:94:
                    79:09:a5:90:92:08:09:aa:09:8f:36:21:8d:2d:33:
                    58:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:86:F9:C5:F8:12:46:FA:54:B7:5A:A5:99:5E:82:32:F9:E0:F5:B5
            X509v3 Authority Key Identifier:
                keyid:87:17:0F:E6:63:93:0D:A5:DB:94:75:CE:AC:8B:06:00:B2:C0:28:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/28F749D15A239E7711C5BBFCD179E0221928BA4F3EBBC75B0E08C12A7EF28E69/0/87170FE663930DA5DB9475CEAC8B0600B2C02832.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/87170FE663930DA5DB9475CEAC8B0600B2C02832.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/28F749D15A239E7711C5BBFCD179E0221928BA4F3EBBC75B0E08C12A7EF28E69/0/323830333a396332303a3a2f33322d3438203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9c20::/32

    Signature Algorithm: sha256WithRSAEncryption
         19:9b:ed:51:ce:fd:0b:73:88:ce:d9:3e:a9:5b:9c:77:43:14:
         76:2c:36:91:2e:46:b5:4a:90:04:5c:a9:cf:29:61:7b:f8:8b:
         87:e6:58:33:ef:b9:2c:a6:23:ed:ca:e7:3c:14:a7:05:39:2b:
         bc:78:c2:c7:b2:5b:dd:f9:35:93:28:00:03:2f:50:87:57:7f:
         40:b4:c2:cb:3f:ca:13:3e:5f:91:a8:ee:67:95:f8:4b:ea:39:
         c6:f6:4f:59:11:59:05:5e:65:a6:d4:b6:65:35:d2:36:9a:b0:
         70:f0:1f:30:da:a4:60:7f:32:bc:0a:bd:bf:84:6b:60:1d:ef:
         40:1d:8f:cc:b7:e5:c0:4a:88:6b:5e:4a:50:a3:ca:e8:a1:25:
         82:9a:d4:21:6a:07:70:1a:43:23:4d:87:97:23:be:74:2f:8b:
         d3:4e:ad:26:e4:67:0c:c3:66:82:ce:be:2f:13:34:ac:93:ff:
         3f:56:eb:cc:2e:59:de:3d:3c:1e:61:fe:69:c1:4d:de:0b:c7:
         cf:a1:47:10:40:cc:2e:6e:d1:20:c6:0f:77:4c:50:23:04:09:
         f6:16:7c:06:15:c1:a6:84:17:e9:f2:1c:27:53:be:48:dc:73:
         f0:71:5b:dc:a7:4a:71:4c:0f:14:50:f9:55:41:89:87:ef:c8:
         f2:7a:f6:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:33:43 2025 by rpki-client