Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/32F76A5724B02A3A9A56A772DC53A9CEC8CF842310D15EFBA33AF33C390C008B/0/323830333a6131303a3a2f33322d3332203d3e20323635383232.roa
File:                     323830333a6131303a3a2f33322d3332203d3e20323635383232.roa (raw, json)
Hash identifier:          055PZTlwxtvA3uuaHBN1LauNmi83wg0ICo+2+XIDwRQ=
Subject key identifier:   06:16:B9:09:68:0D:38:86:AB:B5:64:52:EB:DD:31:3F:89:6E:92:4A
Certificate issuer:       /CN=044C73C833ED8F4D51E1C1A0A76C06F7DC33562A
Certificate serial:       3D40B3180A2A7C04B15C4260C363EA206330347F
Authority key identifier: 04:4C:73:C8:33:ED:8F:4D:51:E1:C1:A0:A7:6C:06:F7:DC:33:56:2A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/044C73C833ED8F4D51E1C1A0A76C06F7DC33562A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/32F76A5724B02A3A9A56A772DC53A9CEC8CF842310D15EFBA33AF33C390C008B/0/323830333a6131303a3a2f33322d3332203d3e20323635383232.roa
Signing time:             Tue 04 Feb 2025 18:14:38 +0000
ROA not before:           Tue 04 Feb 2025 18:09:38 +0000
ROA not after:            Tue 03 Feb 2026 18:14:38 +0000
asID:                     265822
IP address blocks:        2803:a10::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/32F76A5724B02A3A9A56A772DC53A9CEC8CF842310D15EFBA33AF33C390C008B/0/044C73C833ED8F4D51E1C1A0A76C06F7DC33562A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/32F76A5724B02A3A9A56A772DC53A9CEC8CF842310D15EFBA33AF33C390C008B/0/044C73C833ED8F4D51E1C1A0A76C06F7DC33562A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/044C73C833ED8F4D51E1C1A0A76C06F7DC33562A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 05:37:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:40:b3:18:0a:2a:7c:04:b1:5c:42:60:c3:63:ea:20:63:30:34:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=044C73C833ED8F4D51E1C1A0A76C06F7DC33562A
        Validity
            Not Before: Feb  4 18:09:38 2025 GMT
            Not After : Feb  3 18:14:38 2026 GMT
        Subject: CN=0616B909680D3886ABB56452EBDD313F896E924A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:de:9c:81:c4:1c:fe:08:8f:ef:b4:20:7d:ce:
                    83:bd:66:40:0e:a3:88:d0:5a:d1:fb:1d:35:ad:ff:
                    26:dd:59:2f:fb:d9:c8:58:e0:c7:24:73:d6:37:8d:
                    37:11:d8:a2:44:4c:ff:df:d8:dd:c4:ae:c9:20:26:
                    a5:82:b5:19:08:b9:ba:ba:f2:57:aa:66:2f:a1:77:
                    f7:35:7c:e8:46:13:59:26:83:c7:d0:57:28:d3:59:
                    7a:1e:99:d7:89:e5:3c:d7:69:3c:bc:7a:5b:2e:07:
                    a3:5f:ff:57:dc:e4:df:ca:d2:b4:7d:a3:ad:16:b9:
                    24:56:c9:42:8d:4b:89:6d:71:5e:4f:c9:0c:f6:f1:
                    33:9f:82:0c:8c:ef:84:b0:94:bf:45:ad:fd:43:a3:
                    9d:7d:fa:38:25:74:6f:18:d3:37:a0:9a:3d:2f:b2:
                    f6:de:0b:04:81:e5:d5:f9:5e:df:66:e3:a5:11:26:
                    0a:2b:5a:f4:4d:f1:b6:be:23:9c:37:41:48:f2:6a:
                    91:7c:de:50:f4:ec:96:19:bd:d3:98:cd:c1:95:32:
                    bd:89:03:e9:3f:33:2d:13:d9:80:8b:bf:9e:05:57:
                    e1:47:75:ca:3d:dd:12:21:e8:5a:91:49:cb:6a:95:
                    11:b5:52:3e:86:d3:69:13:8d:e5:df:aa:40:46:00:
                    d3:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:16:B9:09:68:0D:38:86:AB:B5:64:52:EB:DD:31:3F:89:6E:92:4A
            X509v3 Authority Key Identifier:
                keyid:04:4C:73:C8:33:ED:8F:4D:51:E1:C1:A0:A7:6C:06:F7:DC:33:56:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/32F76A5724B02A3A9A56A772DC53A9CEC8CF842310D15EFBA33AF33C390C008B/0/044C73C833ED8F4D51E1C1A0A76C06F7DC33562A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/044C73C833ED8F4D51E1C1A0A76C06F7DC33562A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/32F76A5724B02A3A9A56A772DC53A9CEC8CF842310D15EFBA33AF33C390C008B/0/323830333a6131303a3a2f33322d3332203d3e20323635383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:a10::/32

    Signature Algorithm: sha256WithRSAEncryption
         08:3f:34:04:9c:11:a4:86:f5:3d:11:3c:f5:3c:01:2f:ee:1c:
         5a:ad:e7:02:dd:41:31:65:d9:3b:21:b0:a5:63:76:92:ac:83:
         48:07:ee:cb:97:c9:d8:97:8f:cc:6c:56:17:cb:12:fe:f8:7b:
         98:10:30:2d:55:85:22:ab:8f:64:45:38:30:c0:c1:b3:4f:aa:
         87:4e:46:9e:27:85:3e:54:60:9d:9a:b2:05:7d:ca:33:76:17:
         72:ee:14:32:e3:f3:88:e8:20:32:2c:2c:d2:89:4d:09:47:8b:
         49:f2:50:91:17:23:db:fa:93:1d:75:46:04:d2:c0:ea:c0:a9:
         2b:71:fe:53:8b:8a:c4:b9:ed:6d:6c:1d:99:15:b2:9d:46:1b:
         0b:04:0e:d2:dd:6b:79:97:e0:f3:70:dc:64:5d:1c:43:ce:ae:
         6f:f9:0b:8c:3a:a3:6b:a6:28:29:f0:43:3d:4c:ce:9f:6c:d3:
         a2:1e:75:a1:63:d0:27:40:25:c4:3f:5a:65:fe:c7:0b:35:fd:
         7a:41:5f:9b:01:ff:8d:fc:15:2f:d5:fd:c9:35:d5:e1:c6:76:
         64:98:74:b0:6b:89:a0:eb:9c:de:ad:ad:a6:e7:37:43:c5:f3:
         a9:13:d2:cd:51:36:1d:de:a2:07:03:ca:4f:01:fa:ef:8a:85:
         b1:86:c8:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:10:14 2025 by rpki-client