Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2C98D75A90FD82DD0B5305EC2D5037CFE3292FBB062B106AF1C3133C6608FEA4/0/323830333a313738303a383030303a3a2f34362d3438203d3e20323634363436.roa
File:                     323830333a313738303a383030303a3a2f34362d3438203d3e20323634363436.roa (raw, json)
Hash identifier:          to3RHpkKoqoCSj4qS2V9406IIwkns6ttQm84NdQtq6c=
Subject key identifier:   53:E1:5A:69:49:08:20:02:88:FF:BF:9E:C2:EF:75:84:E3:14:E2:1D
Certificate issuer:       /CN=331C39F8DA2D3717859BF2ABF1E2187143BAB539
Certificate serial:       6DB4F4C413DCBA1EE9CC3A34351A21D6480EE0CA
Authority key identifier: 33:1C:39:F8:DA:2D:37:17:85:9B:F2:AB:F1:E2:18:71:43:BA:B5:39
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/331C39F8DA2D3717859BF2ABF1E2187143BAB539.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2C98D75A90FD82DD0B5305EC2D5037CFE3292FBB062B106AF1C3133C6608FEA4/0/323830333a313738303a383030303a3a2f34362d3438203d3e20323634363436.roa
Signing time:             Tue 04 Feb 2025 18:09:19 +0000
ROA not before:           Tue 04 Feb 2025 18:04:19 +0000
ROA not after:            Tue 03 Feb 2026 18:09:19 +0000
asID:                     264646
IP address blocks:        2803:1780:8000::/46 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2C98D75A90FD82DD0B5305EC2D5037CFE3292FBB062B106AF1C3133C6608FEA4/0/331C39F8DA2D3717859BF2ABF1E2187143BAB539.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2C98D75A90FD82DD0B5305EC2D5037CFE3292FBB062B106AF1C3133C6608FEA4/0/331C39F8DA2D3717859BF2ABF1E2187143BAB539.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/331C39F8DA2D3717859BF2ABF1E2187143BAB539.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Apr 2025 09:31:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:b4:f4:c4:13:dc:ba:1e:e9:cc:3a:34:35:1a:21:d6:48:0e:e0:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=331C39F8DA2D3717859BF2ABF1E2187143BAB539
        Validity
            Not Before: Feb  4 18:04:19 2025 GMT
            Not After : Feb  3 18:09:19 2026 GMT
        Subject: CN=53E15A694908200288FFBF9EC2EF7584E314E21D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:74:de:90:d6:a6:f3:2e:42:65:56:e8:84:80:
                    04:b6:65:6a:2f:d5:df:ca:50:25:a4:af:91:13:0f:
                    f6:1d:32:02:26:a4:29:42:e7:28:9e:c6:fd:18:e7:
                    cb:5a:99:39:18:44:43:46:41:d3:fb:0f:90:f2:2d:
                    de:fb:ec:b9:15:69:29:0d:1e:9d:a6:58:ae:a9:8c:
                    02:15:e6:0e:70:09:07:20:66:da:9d:10:f0:9c:3c:
                    8d:56:21:74:c4:dc:e3:d5:85:5e:ee:c5:a5:62:41:
                    38:5c:6f:ca:17:d3:2d:81:45:81:e9:63:60:84:61:
                    6d:33:f2:c4:dc:73:5c:54:63:9c:66:8d:96:a5:b2:
                    44:a6:93:3e:3a:b1:ac:07:7b:e1:94:37:ce:a0:5d:
                    ee:03:a5:29:c5:06:58:dd:10:a4:2c:a7:31:c1:e2:
                    57:ce:49:78:b8:79:f3:75:e8:72:08:93:8d:ac:42:
                    ce:54:4e:74:09:71:3c:25:a2:a2:a5:ec:7b:d7:d3:
                    65:50:a0:97:83:53:c4:ce:70:1c:94:fb:ce:9f:c9:
                    21:77:c0:4a:6f:99:4b:63:6f:e0:aa:0e:ad:5c:c3:
                    42:a7:ad:b9:9e:6d:3c:78:5a:fa:d3:f1:64:07:3d:
                    71:bd:dd:5e:04:c1:33:62:43:6b:a9:32:28:93:6d:
                    b6:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:E1:5A:69:49:08:20:02:88:FF:BF:9E:C2:EF:75:84:E3:14:E2:1D
            X509v3 Authority Key Identifier:
                keyid:33:1C:39:F8:DA:2D:37:17:85:9B:F2:AB:F1:E2:18:71:43:BA:B5:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2C98D75A90FD82DD0B5305EC2D5037CFE3292FBB062B106AF1C3133C6608FEA4/0/331C39F8DA2D3717859BF2ABF1E2187143BAB539.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/331C39F8DA2D3717859BF2ABF1E2187143BAB539.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2C98D75A90FD82DD0B5305EC2D5037CFE3292FBB062B106AF1C3133C6608FEA4/0/323830333a313738303a383030303a3a2f34362d3438203d3e20323634363436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1780:8000::/46

    Signature Algorithm: sha256WithRSAEncryption
         91:4a:5d:91:fa:03:b1:19:b5:83:3c:cf:81:c3:3f:77:15:45:
         6b:06:4b:c0:14:03:5f:dd:a7:69:a6:a5:59:47:83:7c:5e:6e:
         e0:a9:cc:65:a3:e3:39:62:d7:38:21:58:be:16:50:a5:af:29:
         93:ce:e7:55:78:11:26:ec:31:64:1f:b7:28:2b:c8:ce:87:9b:
         65:48:9f:a1:ba:dc:fd:5d:b1:87:44:a4:98:43:47:6f:be:d0:
         1e:52:fd:5a:0d:38:df:5a:1e:dd:29:6c:11:6e:a0:5c:cc:07:
         1e:62:bc:cb:6d:f6:42:49:fd:06:9b:c6:62:f2:e2:bf:5f:f4:
         b8:09:16:5f:ae:8c:b8:ce:03:a9:4b:25:55:b8:45:b2:25:d8:
         df:eb:b4:f7:ed:b7:39:5f:fe:6b:74:47:54:80:47:88:21:f7:
         73:df:65:43:74:b9:d3:23:c3:60:f0:f3:f4:eb:da:0e:a3:10:
         94:1f:34:79:6f:91:c8:fb:33:6e:be:26:e6:3a:42:d4:e6:04:
         c5:81:ef:e3:2b:06:2d:8e:a1:35:c7:19:16:cc:1b:7e:58:76:
         44:41:96:18:cc:25:25:8a:8e:02:7b:28:10:39:ea:f9:3b:1e:
         29:72:6d:57:69:3c:2c:10:1c:37:93:a5:48:56:a1:26:c8:84:
         d7:97:51:cd
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Apr 17 18:34:50 2025 by rpki-client