Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/30CC8E928CEFD03411023C0EDE689D1B7B796364201C2AC9B99E515B83A7F74D/0/323830333a386361303a373030303a3a2f33362d3336203d3e20323636383332.roa
File:                     323830333a386361303a373030303a3a2f33362d3336203d3e20323636383332.roa (raw, json)
Hash identifier:          Slo6m7uBuK6WiVlaouM00BZSlIDofZRFUZZx77UxiDE=
Subject key identifier:   B7:3D:A7:1D:8C:66:D1:95:69:B6:AD:34:95:41:17:18:F1:AA:FE:BE
Certificate issuer:       /CN=CB51CF25AE68F0C858FEB51FF72D964BE568AA54
Certificate serial:       61710C02912E24410BA52C86C4E5159BB8B3071D
Authority key identifier: CB:51:CF:25:AE:68:F0:C8:58:FE:B5:1F:F7:2D:96:4B:E5:68:AA:54
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB51CF25AE68F0C858FEB51FF72D964BE568AA54.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/30CC8E928CEFD03411023C0EDE689D1B7B796364201C2AC9B99E515B83A7F74D/0/323830333a386361303a373030303a3a2f33362d3336203d3e20323636383332.roa
Signing time:             Fri 24 Jan 2025 17:00:02 +0000
ROA not before:           Fri 24 Jan 2025 16:55:02 +0000
ROA not after:            Fri 23 Jan 2026 17:00:02 +0000
asID:                     266832
IP address blocks:        2803:8ca0:7000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/30CC8E928CEFD03411023C0EDE689D1B7B796364201C2AC9B99E515B83A7F74D/0/CB51CF25AE68F0C858FEB51FF72D964BE568AA54.crl
                          rsync://repository.lacnic.net/rpki/lacnic/30CC8E928CEFD03411023C0EDE689D1B7B796364201C2AC9B99E515B83A7F74D/0/CB51CF25AE68F0C858FEB51FF72D964BE568AA54.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB51CF25AE68F0C858FEB51FF72D964BE568AA54.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 20:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:71:0c:02:91:2e:24:41:0b:a5:2c:86:c4:e5:15:9b:b8:b3:07:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CB51CF25AE68F0C858FEB51FF72D964BE568AA54
        Validity
            Not Before: Jan 24 16:55:02 2025 GMT
            Not After : Jan 23 17:00:02 2026 GMT
        Subject: CN=B73DA71D8C66D19569B6AD3495411718F1AAFEBE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:5e:b1:d9:3f:41:7a:45:c7:6e:6a:52:38:7c:
                    28:7e:be:cd:72:6e:4c:48:9b:93:bd:5b:8a:69:ca:
                    71:a0:e5:ce:f9:f3:1b:70:a0:b5:52:77:9b:c2:53:
                    da:7f:4a:1d:1a:16:e4:ee:91:09:ca:e9:0e:a3:b9:
                    8c:b9:74:88:ec:3c:8f:fe:57:3f:9e:1f:b5:e0:15:
                    5e:af:1b:db:55:4f:27:e5:39:41:a3:44:56:54:cc:
                    c5:6b:53:1f:cf:ad:60:e5:29:09:65:6f:1c:90:89:
                    6f:ee:cf:aa:d8:0d:a4:d6:a7:14:cf:17:b7:72:17:
                    71:7e:d9:29:10:84:18:b2:0d:5c:27:95:75:d0:45:
                    28:f4:1e:c4:86:76:03:09:49:42:8d:cb:c3:d8:27:
                    85:e2:cf:da:c6:60:56:33:c9:57:30:5a:37:a7:f9:
                    2f:df:c9:44:d3:90:a2:b9:9d:de:15:d2:f9:b0:36:
                    53:cd:95:8f:b3:79:0c:44:a3:1a:fb:be:74:b4:d8:
                    48:42:8d:53:1c:fe:21:0a:e5:e3:80:a3:09:66:e0:
                    e9:c6:b7:f3:d6:8c:97:45:12:9e:6a:a8:f4:03:72:
                    0c:52:34:bc:ac:2f:b0:b3:cc:5e:d8:59:6d:11:8e:
                    21:56:f2:02:98:25:81:60:f8:c1:b0:ba:eb:7a:9b:
                    50:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:3D:A7:1D:8C:66:D1:95:69:B6:AD:34:95:41:17:18:F1:AA:FE:BE
            X509v3 Authority Key Identifier:
                keyid:CB:51:CF:25:AE:68:F0:C8:58:FE:B5:1F:F7:2D:96:4B:E5:68:AA:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/30CC8E928CEFD03411023C0EDE689D1B7B796364201C2AC9B99E515B83A7F74D/0/CB51CF25AE68F0C858FEB51FF72D964BE568AA54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB51CF25AE68F0C858FEB51FF72D964BE568AA54.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/30CC8E928CEFD03411023C0EDE689D1B7B796364201C2AC9B99E515B83A7F74D/0/323830333a386361303a373030303a3a2f33362d3336203d3e20323636383332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8ca0:7000::/36

    Signature Algorithm: sha256WithRSAEncryption
         b3:1f:76:c9:c8:c6:f3:89:11:e2:12:83:87:1f:2f:43:1b:6e:
         1d:55:2a:ea:02:e2:b3:a3:69:89:b9:20:37:ef:5c:2a:88:b9:
         00:aa:be:ec:ef:61:80:32:9e:9c:54:2e:bc:8d:74:79:96:c4:
         37:44:fe:fe:ea:76:24:c9:61:5a:ad:cd:1d:9a:e7:c9:58:79:
         14:b8:d0:3d:b1:ff:ef:21:26:19:5e:41:ef:a0:2f:8d:76:21:
         dc:91:c0:68:9f:1c:a9:a0:f0:9a:2a:61:e3:f8:f5:05:4b:8c:
         55:1e:ef:f6:04:28:69:26:e7:cf:2f:80:84:ce:ac:ec:4d:86:
         c7:2d:3b:c6:1f:7b:87:34:91:81:d2:f8:41:91:81:e8:13:0e:
         9a:7b:0e:97:e1:45:92:96:ce:09:c4:ee:3f:c2:08:fa:e4:93:
         3e:d2:47:f4:23:29:c0:5b:37:43:85:08:52:f5:50:c1:af:a2:
         c2:7e:a3:25:23:9e:e0:fc:37:47:bf:f3:e1:b9:df:53:15:4f:
         38:ee:1b:93:17:f4:a8:fc:80:b5:70:33:f7:e3:ae:e5:aa:a2:
         ce:d9:c6:dd:1e:71:1b:5c:db:c6:4d:70:a4:c3:40:a7:0f:97:
         ac:e2:1d:b8:41:10:7c:75:b4:dd:d6:3a:ca:37:36:a8:dd:61:
         19:a6:c9:60
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 18 21:45:24 2025 by rpki-client