Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3149D26B42C9CCA8587A04375787311229944D0472ABF7587C329DC8E6B25F86/0/323830333a363336303a3a2f33322d3332203d3e20323639373933.roa
File:                     323830333a363336303a3a2f33322d3332203d3e20323639373933.roa (raw, json)
Hash identifier:          gancjaKKGr/TtBogMP6cJlcFdJQ/Xz9D2smNFk3y23Q=
Subject key identifier:   35:EE:F8:58:C2:20:05:A5:99:66:9B:3B:F8:DB:13:C5:5F:0F:8E:D2
Certificate issuer:       /CN=09A3AC3476BC01A1345B72745540D0D3983BC32E
Certificate serial:       1047089F2138AF6239489544074B7A0EEDA1AFF5
Authority key identifier: 09:A3:AC:34:76:BC:01:A1:34:5B:72:74:55:40:D0:D3:98:3B:C3:2E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09A3AC3476BC01A1345B72745540D0D3983BC32E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3149D26B42C9CCA8587A04375787311229944D0472ABF7587C329DC8E6B25F86/0/323830333a363336303a3a2f33322d3332203d3e20323639373933.roa
Signing time:             Tue 04 Feb 2025 18:24:05 +0000
ROA not before:           Tue 04 Feb 2025 18:19:05 +0000
ROA not after:            Tue 03 Feb 2026 18:24:05 +0000
asID:                     269793
IP address blocks:        2803:6360::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3149D26B42C9CCA8587A04375787311229944D0472ABF7587C329DC8E6B25F86/0/09A3AC3476BC01A1345B72745540D0D3983BC32E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3149D26B42C9CCA8587A04375787311229944D0472ABF7587C329DC8E6B25F86/0/09A3AC3476BC01A1345B72745540D0D3983BC32E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09A3AC3476BC01A1345B72745540D0D3983BC32E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:47:08:9f:21:38:af:62:39:48:95:44:07:4b:7a:0e:ed:a1:af:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09A3AC3476BC01A1345B72745540D0D3983BC32E
        Validity
            Not Before: Feb  4 18:19:05 2025 GMT
            Not After : Feb  3 18:24:05 2026 GMT
        Subject: CN=35EEF858C22005A599669B3BF8DB13C55F0F8ED2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:7c:cc:f2:d8:a3:84:68:be:b9:67:b0:e6:f3:
                    21:c8:67:d6:76:0e:7b:75:80:e5:88:68:2c:ef:79:
                    ec:df:35:c4:c6:cc:0d:d9:ba:12:7a:28:cb:bc:a6:
                    97:9b:a5:c2:0a:2b:d3:72:5f:27:b3:b5:bb:04:e3:
                    ab:4e:0d:2e:99:bf:41:03:e0:ce:f8:5d:8d:22:9a:
                    e1:f8:4c:f0:92:99:2d:24:74:ed:32:ab:43:e6:06:
                    a6:64:b2:6d:1d:e9:bc:cd:3e:dc:35:ae:29:45:a2:
                    56:0b:98:73:bc:5a:36:ca:94:7a:91:50:98:94:f1:
                    88:fd:af:6c:7f:8c:e6:b8:cd:ab:ff:b9:a9:17:58:
                    08:59:28:a7:03:3c:c7:33:0d:eb:48:ee:d0:e3:55:
                    ec:d5:57:14:fd:90:da:d8:16:8f:c7:60:3b:8f:b8:
                    75:5a:ee:d9:47:90:aa:32:9f:23:53:d2:80:3e:d0:
                    bc:a8:ba:17:20:19:42:ba:8c:bd:a1:3c:e7:fa:9b:
                    2b:c7:1a:88:76:48:a9:3b:91:aa:20:48:44:0b:75:
                    12:c1:0f:de:8c:2c:27:94:53:d1:77:6d:24:6c:68:
                    2d:77:7c:da:b7:27:bf:ff:88:6f:71:d3:c0:1b:c3:
                    04:97:0a:bf:9b:c9:ac:2a:a2:6f:8d:2f:06:12:53:
                    d9:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:EE:F8:58:C2:20:05:A5:99:66:9B:3B:F8:DB:13:C5:5F:0F:8E:D2
            X509v3 Authority Key Identifier:
                keyid:09:A3:AC:34:76:BC:01:A1:34:5B:72:74:55:40:D0:D3:98:3B:C3:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3149D26B42C9CCA8587A04375787311229944D0472ABF7587C329DC8E6B25F86/0/09A3AC3476BC01A1345B72745540D0D3983BC32E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09A3AC3476BC01A1345B72745540D0D3983BC32E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3149D26B42C9CCA8587A04375787311229944D0472ABF7587C329DC8E6B25F86/0/323830333a363336303a3a2f33322d3332203d3e20323639373933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6360::/32

    Signature Algorithm: sha256WithRSAEncryption
         c4:2e:bc:be:8d:7f:c0:a6:1e:5c:49:cf:fa:29:f5:e9:de:43:
         70:53:11:8e:48:f2:d5:d2:d3:2d:90:13:9f:d2:37:2e:35:5a:
         06:6b:dd:59:ad:a5:5b:77:70:5e:5c:6c:ce:2e:6c:fa:a7:8c:
         70:7a:7b:9b:75:fc:15:22:9d:d3:86:fc:0a:10:b3:62:20:68:
         3e:48:ce:95:e7:97:69:0e:1d:e5:77:af:76:bb:a9:7b:c7:d7:
         a7:67:c6:ed:8b:69:d4:59:54:27:52:50:dc:f3:59:83:32:cd:
         9d:47:f5:39:bf:75:a2:26:71:0e:6a:71:fb:f1:42:49:da:37:
         f2:92:94:35:e1:b9:c8:45:3b:6a:34:c3:3e:0d:4c:b3:fc:2d:
         c8:79:93:53:54:96:f7:54:e8:1d:a9:c4:37:31:37:a5:54:73:
         87:e0:49:ed:42:aa:49:2a:26:0b:dc:be:f3:9f:8e:67:b8:4f:
         f6:1b:75:cb:e2:95:12:58:b8:4f:66:00:c3:60:83:45:4c:20:
         94:4d:f0:44:d6:3e:c0:79:18:98:63:db:2b:9a:6e:b0:2b:d9:
         ca:98:cf:b3:14:1c:99:25:be:54:ca:42:fb:6b:11:6b:ba:68:
         06:33:46:73:c8:3c:ed:5e:13:8a:71:46:19:ab:4c:04:79:41:
         e8:74:34:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:12:42 2025 by rpki-client