Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2C98D75A90FD82DD0B5305EC2D5037CFE3292FBB062B106AF1C3133C6608FEA4/0/323830333a313738303a383a3a2f34362d3438203d3e20323634363436.roa
File:                     323830333a313738303a383a3a2f34362d3438203d3e20323634363436.roa (raw, json)
Hash identifier:          GNk5VTCAkjbV7LLUsfeUNtFtmnfBp6qMRhge0l58Z0o=
Subject key identifier:   BB:B9:2B:DF:9F:FD:2D:35:6C:5B:94:7F:0D:57:7C:1F:68:EE:67:C7
Certificate issuer:       /CN=331C39F8DA2D3717859BF2ABF1E2187143BAB539
Certificate serial:       7588E31481FF6AB6EE126657BBAE507369EBA90A
Authority key identifier: 33:1C:39:F8:DA:2D:37:17:85:9B:F2:AB:F1:E2:18:71:43:BA:B5:39
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/331C39F8DA2D3717859BF2ABF1E2187143BAB539.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2C98D75A90FD82DD0B5305EC2D5037CFE3292FBB062B106AF1C3133C6608FEA4/0/323830333a313738303a383a3a2f34362d3438203d3e20323634363436.roa
Signing time:             Tue 04 Feb 2025 18:09:18 +0000
ROA not before:           Tue 04 Feb 2025 18:04:18 +0000
ROA not after:            Tue 03 Feb 2026 18:09:18 +0000
asID:                     264646
IP address blocks:        2803:1780:8::/46 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2C98D75A90FD82DD0B5305EC2D5037CFE3292FBB062B106AF1C3133C6608FEA4/0/331C39F8DA2D3717859BF2ABF1E2187143BAB539.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2C98D75A90FD82DD0B5305EC2D5037CFE3292FBB062B106AF1C3133C6608FEA4/0/331C39F8DA2D3717859BF2ABF1E2187143BAB539.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/331C39F8DA2D3717859BF2ABF1E2187143BAB539.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Apr 2025 09:31:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:88:e3:14:81:ff:6a:b6:ee:12:66:57:bb:ae:50:73:69:eb:a9:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=331C39F8DA2D3717859BF2ABF1E2187143BAB539
        Validity
            Not Before: Feb  4 18:04:18 2025 GMT
            Not After : Feb  3 18:09:18 2026 GMT
        Subject: CN=BBB92BDF9FFD2D356C5B947F0D577C1F68EE67C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:71:e2:b4:77:65:1a:8e:14:82:23:12:dd:37:
                    fc:2f:20:7b:be:95:e8:b5:4c:88:d2:08:6b:b9:8a:
                    97:ba:72:2a:a1:5e:62:23:ba:26:c3:e7:54:ce:0b:
                    dc:67:6f:dc:45:9e:a4:18:20:31:e4:15:a2:43:ac:
                    49:c7:e9:dd:0e:78:37:28:e8:18:8a:0a:20:d7:8e:
                    93:ab:75:84:2b:bb:90:38:a7:d3:b7:63:d8:d3:03:
                    23:6f:7e:cf:38:ad:dc:81:25:bc:dc:1b:9f:2c:11:
                    9b:0e:97:a0:d1:0e:ac:95:f2:53:53:f8:9c:6d:57:
                    c8:24:93:ea:15:26:79:9e:31:55:6c:d5:a8:80:2f:
                    58:f0:6d:22:5f:03:49:2f:5d:70:f7:f4:50:ec:56:
                    94:01:f8:1e:b5:b8:4f:b9:2a:74:8a:db:12:6f:20:
                    4a:cc:09:41:4b:73:a5:fd:8f:59:22:d8:6a:e4:48:
                    ab:88:f3:df:47:89:10:88:c0:2e:14:27:77:0c:34:
                    c2:02:63:f6:c7:05:d6:72:8b:a6:85:27:e0:df:db:
                    e4:52:e7:c1:6f:bf:5b:50:59:9f:e8:63:fa:9c:03:
                    36:be:d0:53:99:8e:ab:03:11:33:80:c1:d4:cb:9a:
                    d4:25:33:e7:16:27:cf:50:20:96:68:7b:06:f5:59:
                    91:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:B9:2B:DF:9F:FD:2D:35:6C:5B:94:7F:0D:57:7C:1F:68:EE:67:C7
            X509v3 Authority Key Identifier:
                keyid:33:1C:39:F8:DA:2D:37:17:85:9B:F2:AB:F1:E2:18:71:43:BA:B5:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2C98D75A90FD82DD0B5305EC2D5037CFE3292FBB062B106AF1C3133C6608FEA4/0/331C39F8DA2D3717859BF2ABF1E2187143BAB539.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/331C39F8DA2D3717859BF2ABF1E2187143BAB539.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2C98D75A90FD82DD0B5305EC2D5037CFE3292FBB062B106AF1C3133C6608FEA4/0/323830333a313738303a383a3a2f34362d3438203d3e20323634363436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1780:8::/46

    Signature Algorithm: sha256WithRSAEncryption
         46:d6:26:ef:cc:34:84:46:40:d5:7c:38:c8:76:1d:5a:e8:05:
         9d:26:f8:f2:87:71:e3:4f:be:4e:31:49:3d:14:00:d2:9e:4e:
         33:bd:b8:a6:17:66:86:28:e9:f6:0c:8e:1a:3b:c1:ed:cb:8d:
         f9:d3:b8:c0:f5:0d:71:37:25:44:89:6d:47:9b:b9:06:26:86:
         11:63:d5:0d:ce:5c:99:d5:68:ad:2f:3a:ce:25:7c:17:9b:22:
         cd:f8:3e:55:9f:ab:3e:56:80:43:eb:37:e0:53:13:4e:0c:57:
         d1:05:aa:a6:02:c5:dc:d0:ad:eb:49:c0:5f:ce:f0:d2:18:66:
         94:78:97:bd:34:6e:d4:3b:0e:ab:c2:ed:05:cf:55:27:11:45:
         11:95:5f:19:23:a8:12:8d:92:5d:74:62:af:ca:f6:36:1c:91:
         bf:1a:6c:fd:47:98:55:ee:53:29:51:26:52:18:39:7e:aa:22:
         8a:79:b7:04:fa:be:6f:40:2f:04:cb:ef:49:b1:4e:28:03:0a:
         44:ae:11:81:67:e6:ce:cc:f6:bc:5c:4d:9f:2a:0d:be:f3:ed:
         53:b7:cd:ad:e9:72:85:1c:33:a6:a9:bc:4d:15:09:48:d7:f8:
         f3:ce:af:46:5e:54:df:98:f4:77:ab:16:d4:dc:5c:5a:54:3f:
         3f:7a:4f:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 18:34:54 2025 by rpki-client