Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2F601B5A3ECAE9686A4E8C35BD9B838989DF81F7466CD880863EB98969D1BC1E/0/323830333a393134303a3a2f33322d3332203d3e203131383330.roa
File:                     323830333a393134303a3a2f33322d3332203d3e203131383330.roa (raw, json)
Hash identifier:          F7eV00FgQ6ejcxYmc+aZ0DHeyRbRdU0bSbolHngp+zg=
Subject key identifier:   CD:8A:3E:44:86:54:B1:00:76:9F:B3:21:B9:61:9C:05:10:13:DF:07
Certificate issuer:       /CN=928F2A88614C6122C25510F7A3362CB8F48CEFB3
Certificate serial:       224744E21F27DF4A98026EA1F279F2A6E311DDB0
Authority key identifier: 92:8F:2A:88:61:4C:61:22:C2:55:10:F7:A3:36:2C:B8:F4:8C:EF:B3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/928F2A88614C6122C25510F7A3362CB8F48CEFB3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2F601B5A3ECAE9686A4E8C35BD9B838989DF81F7466CD880863EB98969D1BC1E/0/323830333a393134303a3a2f33322d3332203d3e203131383330.roa
Signing time:             Fri 28 Feb 2025 22:30:00 +0000
ROA not before:           Fri 28 Feb 2025 22:25:00 +0000
ROA not after:            Fri 27 Feb 2026 22:30:00 +0000
asID:                     11830
IP address blocks:        2803:9140::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2F601B5A3ECAE9686A4E8C35BD9B838989DF81F7466CD880863EB98969D1BC1E/0/928F2A88614C6122C25510F7A3362CB8F48CEFB3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2F601B5A3ECAE9686A4E8C35BD9B838989DF81F7466CD880863EB98969D1BC1E/0/928F2A88614C6122C25510F7A3362CB8F48CEFB3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/928F2A88614C6122C25510F7A3362CB8F48CEFB3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 01:09:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:47:44:e2:1f:27:df:4a:98:02:6e:a1:f2:79:f2:a6:e3:11:dd:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=928F2A88614C6122C25510F7A3362CB8F48CEFB3
        Validity
            Not Before: Feb 28 22:25:00 2025 GMT
            Not After : Feb 27 22:30:00 2026 GMT
        Subject: CN=CD8A3E448654B100769FB321B9619C051013DF07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:8e:93:ed:c3:ae:e2:8e:cd:ab:c8:be:e5:86:
                    65:de:d6:14:95:8c:8d:33:91:e5:fd:f0:3c:31:97:
                    b9:1b:d2:a1:02:5a:d2:13:b2:7a:3d:f9:73:fd:63:
                    d1:d5:34:9f:78:09:a3:2f:ae:7d:0b:47:c6:4a:84:
                    4d:ee:d4:07:44:3b:60:8c:e6:2b:28:a9:63:ac:27:
                    a5:57:0a:5c:df:77:60:cf:c3:14:cf:d6:01:30:da:
                    0e:e8:c1:0c:c2:d3:cb:44:da:36:ed:73:93:5b:af:
                    30:56:b8:b8:44:2f:1f:a6:93:ec:a4:8d:58:aa:d9:
                    43:3f:96:07:d4:84:f5:54:13:c7:b1:d7:1a:08:ab:
                    df:29:dc:26:d8:a7:5d:f0:f5:f4:86:6f:0a:be:e3:
                    cd:3c:97:db:ea:56:70:9c:38:64:4e:49:13:13:d3:
                    a1:50:95:f6:02:d2:4b:38:43:91:59:62:26:27:15:
                    ad:31:8b:f3:9f:fe:a4:26:9e:0f:19:5c:49:79:ca:
                    43:77:5b:a9:59:63:ea:c0:35:a4:7e:5d:3b:80:2b:
                    cc:89:55:ad:ed:82:7b:dc:30:cd:b4:ce:fb:4b:ff:
                    c0:12:3f:d8:70:0f:02:0b:ea:2e:67:90:49:7e:c1:
                    b8:90:24:7e:33:ff:58:85:a7:fc:5c:77:db:28:4e:
                    58:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:8A:3E:44:86:54:B1:00:76:9F:B3:21:B9:61:9C:05:10:13:DF:07
            X509v3 Authority Key Identifier:
                keyid:92:8F:2A:88:61:4C:61:22:C2:55:10:F7:A3:36:2C:B8:F4:8C:EF:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2F601B5A3ECAE9686A4E8C35BD9B838989DF81F7466CD880863EB98969D1BC1E/0/928F2A88614C6122C25510F7A3362CB8F48CEFB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/928F2A88614C6122C25510F7A3362CB8F48CEFB3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2F601B5A3ECAE9686A4E8C35BD9B838989DF81F7466CD880863EB98969D1BC1E/0/323830333a393134303a3a2f33322d3332203d3e203131383330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9140::/32

    Signature Algorithm: sha256WithRSAEncryption
         07:7d:89:67:84:00:07:13:bf:53:0d:7a:cf:50:81:4d:8e:c9:
         5b:1d:7f:5d:1d:49:51:69:b4:eb:6e:4e:7d:0c:f4:42:89:5e:
         bc:00:43:d4:3a:6c:79:41:6b:6c:b2:f7:00:53:b9:dc:1a:08:
         8d:7a:c9:f6:94:0c:46:a4:6f:ce:ad:8f:bd:33:8f:9f:c8:4e:
         c5:60:59:90:01:de:5c:69:89:b8:3f:85:22:1e:08:d9:ec:c2:
         e1:eb:7d:0a:3d:2b:f4:d5:ac:cb:47:00:de:ed:2c:d0:7e:5f:
         25:2c:93:53:e8:04:b4:e1:de:b8:5d:0d:81:18:b0:75:d8:01:
         bc:a8:5d:8d:ef:76:7d:49:8f:ef:12:48:64:37:b6:69:7a:ed:
         d5:06:ec:35:37:f8:90:6d:8f:fb:c9:ba:ab:3d:fb:b0:53:05:
         2a:e8:6d:b0:2d:99:02:ca:58:ed:08:32:d7:d3:62:d8:78:2c:
         45:bb:28:c9:3d:79:9a:60:fd:ff:cb:5d:81:80:32:dc:1b:48:
         59:6d:8f:f5:b9:5d:fd:6a:77:68:24:61:78:13:2b:17:14:79:
         8a:1c:0b:4f:a3:cb:5a:c5:86:98:3f:37:4d:f9:04:0e:8a:34:
         37:73:4c:44:f8:0c:97:80:a6:41:37:7e:86:53:08:28:b6:a4:
         13:c7:2f:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:06:16 2025 by rpki-client