Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/29B8B0B5027D8D861D7CA62358652D20126B06A83B7179BC698D7D2A0E733F4D/0/323830333a6638303a3a2f33322d3634203d3e20323633373236.roa
File:                     323830333a6638303a3a2f33322d3634203d3e20323633373236.roa (raw, json)
Hash identifier:          ImfJFzYsEIMk1kCW8k/P2mY/yy74Z2evstY0N4EHt04=
Subject key identifier:   31:31:B4:87:12:FE:DB:72:FA:38:1C:1A:5C:46:10:18:CC:C1:A0:F2
Certificate issuer:       /CN=A1C86299C5FA84F9AB35C2974EACE4484F0A087A
Certificate serial:       10BD2357A19D6143B7E7FB04D31FAA238969A882
Authority key identifier: A1:C8:62:99:C5:FA:84:F9:AB:35:C2:97:4E:AC:E4:48:4F:0A:08:7A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A1C86299C5FA84F9AB35C2974EACE4484F0A087A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/29B8B0B5027D8D861D7CA62358652D20126B06A83B7179BC698D7D2A0E733F4D/0/323830333a6638303a3a2f33322d3634203d3e20323633373236.roa
Signing time:             Tue 04 Feb 2025 18:50:41 +0000
ROA not before:           Tue 04 Feb 2025 18:45:41 +0000
ROA not after:            Tue 03 Feb 2026 18:50:41 +0000
asID:                     263726
IP address blocks:        2803:f80::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/29B8B0B5027D8D861D7CA62358652D20126B06A83B7179BC698D7D2A0E733F4D/0/A1C86299C5FA84F9AB35C2974EACE4484F0A087A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/29B8B0B5027D8D861D7CA62358652D20126B06A83B7179BC698D7D2A0E733F4D/0/A1C86299C5FA84F9AB35C2974EACE4484F0A087A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A1C86299C5FA84F9AB35C2974EACE4484F0A087A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 21:42:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:bd:23:57:a1:9d:61:43:b7:e7:fb:04:d3:1f:aa:23:89:69:a8:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A1C86299C5FA84F9AB35C2974EACE4484F0A087A
        Validity
            Not Before: Feb  4 18:45:41 2025 GMT
            Not After : Feb  3 18:50:41 2026 GMT
        Subject: CN=3131B48712FEDB72FA381C1A5C461018CCC1A0F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:21:7c:1b:5c:c4:fe:7e:62:6a:0f:38:5b:43:
                    4a:73:3f:fe:58:44:74:62:eb:0b:1a:2e:ee:cc:22:
                    55:4e:cd:d8:5e:10:78:c3:7d:12:3b:db:10:1c:78:
                    50:f3:53:d1:bc:ce:23:20:7d:02:8c:fb:21:b1:c3:
                    27:87:4d:ad:32:28:01:80:a7:dd:6c:71:c0:ca:62:
                    09:0f:7b:69:83:a6:6d:42:14:6b:dc:a8:6e:29:e6:
                    ee:26:70:72:2f:05:a5:92:85:e9:cc:13:9f:ed:04:
                    b1:34:1c:04:14:ee:63:3c:64:14:de:26:b6:da:3c:
                    15:97:60:5b:2c:cd:58:45:ec:c1:f2:9a:24:22:d5:
                    7d:fb:a3:30:96:b8:c6:5d:25:cb:e9:c4:03:5b:15:
                    6f:c1:d5:4b:b7:cb:9e:2b:dc:07:02:66:1a:6b:14:
                    a4:39:c4:02:d0:21:bf:67:ca:6e:c9:ae:1b:bd:d4:
                    bd:de:72:90:2a:f7:c1:0f:db:a0:5f:2b:43:d7:ed:
                    52:c6:a6:a6:77:90:38:bc:b1:fd:05:43:20:08:ad:
                    31:6d:dd:66:09:61:53:a3:b5:47:55:16:27:47:6b:
                    b9:eb:2c:07:71:fc:c5:e8:3d:4e:a1:39:2f:f6:de:
                    cc:30:97:42:02:fe:ef:eb:c7:e4:99:be:9d:93:89:
                    42:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:31:B4:87:12:FE:DB:72:FA:38:1C:1A:5C:46:10:18:CC:C1:A0:F2
            X509v3 Authority Key Identifier:
                keyid:A1:C8:62:99:C5:FA:84:F9:AB:35:C2:97:4E:AC:E4:48:4F:0A:08:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/29B8B0B5027D8D861D7CA62358652D20126B06A83B7179BC698D7D2A0E733F4D/0/A1C86299C5FA84F9AB35C2974EACE4484F0A087A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A1C86299C5FA84F9AB35C2974EACE4484F0A087A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/29B8B0B5027D8D861D7CA62358652D20126B06A83B7179BC698D7D2A0E733F4D/0/323830333a6638303a3a2f33322d3634203d3e20323633373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f80::/32

    Signature Algorithm: sha256WithRSAEncryption
         73:6c:85:b3:5a:eb:1f:56:3e:5b:ae:73:8b:00:c4:46:a4:de:
         3e:b6:ef:4f:51:89:62:83:7c:6c:e2:ac:a4:0e:1d:11:6e:f7:
         a4:c2:aa:e8:6f:01:4b:99:dc:05:e9:c4:fc:1f:4d:4b:11:53:
         34:35:31:0b:17:6d:f2:10:63:47:b8:39:39:b1:91:a6:75:e8:
         2a:48:5f:eb:ed:b1:12:45:86:86:95:d9:dc:3b:10:5a:72:68:
         ab:3b:2b:e5:2d:9e:72:c3:b6:74:85:04:e5:c4:b5:ed:68:4e:
         82:0e:38:8c:19:1e:cd:0d:90:bb:12:a8:68:86:95:99:d6:18:
         c0:7c:1f:22:38:01:9e:31:02:0d:e9:fd:17:45:15:c1:55:ee:
         69:ea:33:10:e5:d2:56:32:52:e9:78:98:dc:69:3c:a0:94:8a:
         7b:40:6a:a8:f1:09:27:62:d7:6e:dd:f5:be:5f:cf:47:12:0c:
         44:d3:d5:d6:84:35:38:fe:fa:a8:b6:83:be:82:35:e1:ee:a0:
         c1:47:e5:57:55:53:f9:c2:51:df:d2:41:91:4c:91:f6:99:6d:
         68:88:d7:f6:ec:2c:32:09:b5:a4:56:25:c9:12:5a:39:47:a8:
         cc:3b:4f:74:48:66:77:a7:92:0d:34:f7:45:04:c2:10:96:36:
         b2:17:f1:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:08:54 2025 by rpki-client