Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3343A908EDE93E105CBF53349033070201D8E830DE5C1FB7DADE644F49D1897F/0/323830333a323865303a3a2f33322d3438203d3e20323639383732.roa
File:                     323830333a323865303a3a2f33322d3438203d3e20323639383732.roa (raw, json)
Hash identifier:          KNd5hSPNYOt6RH6fZitP9mQEDhSyKM2vf6yI74YuCp8=
Subject key identifier:   08:9D:54:A9:F4:B1:EE:0A:59:0D:81:FB:12:76:40:71:15:8B:C5:DB
Certificate issuer:       /CN=D30B668CCFD504504370BC862A490DCA5B1FADDC
Certificate serial:       496E08127B232FFFA9E29265EFCF026C1DF1167B
Authority key identifier: D3:0B:66:8C:CF:D5:04:50:43:70:BC:86:2A:49:0D:CA:5B:1F:AD:DC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D30B668CCFD504504370BC862A490DCA5B1FADDC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3343A908EDE93E105CBF53349033070201D8E830DE5C1FB7DADE644F49D1897F/0/323830333a323865303a3a2f33322d3438203d3e20323639383732.roa
Signing time:             Tue 04 Feb 2025 20:02:54 +0000
ROA not before:           Tue 04 Feb 2025 19:57:54 +0000
ROA not after:            Tue 03 Feb 2026 20:02:54 +0000
asID:                     269872
IP address blocks:        2803:28e0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3343A908EDE93E105CBF53349033070201D8E830DE5C1FB7DADE644F49D1897F/0/D30B668CCFD504504370BC862A490DCA5B1FADDC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3343A908EDE93E105CBF53349033070201D8E830DE5C1FB7DADE644F49D1897F/0/D30B668CCFD504504370BC862A490DCA5B1FADDC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D30B668CCFD504504370BC862A490DCA5B1FADDC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 20:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:6e:08:12:7b:23:2f:ff:a9:e2:92:65:ef:cf:02:6c:1d:f1:16:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D30B668CCFD504504370BC862A490DCA5B1FADDC
        Validity
            Not Before: Feb  4 19:57:54 2025 GMT
            Not After : Feb  3 20:02:54 2026 GMT
        Subject: CN=089D54A9F4B1EE0A590D81FB12764071158BC5DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:0a:14:7c:90:45:58:5a:b5:91:20:8b:dd:e9:
                    49:64:28:ac:6b:a4:d4:70:cf:67:49:f2:b2:32:b3:
                    99:3a:b7:c0:ee:8f:cf:31:af:6d:aa:9b:d7:fe:95:
                    35:d9:a0:a1:b5:e4:69:bb:f0:b8:be:a1:cc:a6:59:
                    91:f3:c6:17:d2:5b:8b:8e:b4:7d:97:12:11:b9:f9:
                    0d:8d:15:5d:62:9b:e7:ae:70:0a:ce:e0:74:6a:73:
                    b3:47:20:09:19:5e:a5:16:f5:cd:a7:da:71:f6:6d:
                    1d:72:11:b4:88:f5:87:75:90:12:29:31:d3:c4:91:
                    9c:67:b2:ce:b9:9f:72:df:fd:67:2d:49:1f:0e:b9:
                    3a:f1:f1:2a:10:05:31:33:17:c2:39:57:48:d6:26:
                    80:a1:56:4a:62:e4:3b:b6:fb:cd:ca:3f:ec:ef:78:
                    af:61:8e:03:3d:5c:12:fb:43:07:f1:67:e6:ee:8c:
                    49:f5:0a:78:66:09:53:f4:75:c0:0a:eb:90:37:c6:
                    46:1c:0f:f1:ed:c8:b8:0e:96:42:59:6e:bf:25:8a:
                    2b:c6:66:7e:89:2c:60:2f:76:67:9f:0c:dd:99:b5:
                    f7:6a:f0:a0:b9:cf:3c:30:d3:59:cc:d0:97:88:91:
                    4c:4f:4c:9f:d1:50:6b:b7:9a:7b:c6:9f:9f:2b:e8:
                    58:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:9D:54:A9:F4:B1:EE:0A:59:0D:81:FB:12:76:40:71:15:8B:C5:DB
            X509v3 Authority Key Identifier:
                keyid:D3:0B:66:8C:CF:D5:04:50:43:70:BC:86:2A:49:0D:CA:5B:1F:AD:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3343A908EDE93E105CBF53349033070201D8E830DE5C1FB7DADE644F49D1897F/0/D30B668CCFD504504370BC862A490DCA5B1FADDC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D30B668CCFD504504370BC862A490DCA5B1FADDC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3343A908EDE93E105CBF53349033070201D8E830DE5C1FB7DADE644F49D1897F/0/323830333a323865303a3a2f33322d3438203d3e20323639383732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:28e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         73:c2:ef:92:30:82:9b:4a:43:4d:e0:08:16:9e:64:b7:25:05:
         5d:11:79:bd:ba:ee:f6:09:ab:ec:a9:a9:bf:90:eb:51:49:5f:
         a4:3c:e9:09:08:ea:3d:9a:1a:ac:18:18:33:f5:58:7f:f5:43:
         d5:fd:b1:1a:4e:2e:e9:0b:4b:a1:a9:dd:af:e1:99:b7:84:01:
         3f:42:00:59:ab:f8:2a:e8:8b:9b:b9:7d:b5:f0:74:d3:ab:d7:
         29:91:61:ca:cb:67:38:8b:4b:36:7e:b3:e2:9d:1e:a8:dd:83:
         17:21:1b:72:3d:0d:aa:1f:f1:ff:3a:2f:36:b2:67:9a:6e:a5:
         ca:74:80:82:eb:71:24:e2:5c:c5:e8:ab:fc:77:a4:92:eb:2b:
         7e:a5:ab:63:ac:60:91:f5:6f:61:60:0f:51:df:c7:63:b2:dc:
         a7:e9:ed:bf:28:12:0a:be:1e:9d:08:42:37:43:3b:12:50:d1:
         2c:00:8e:df:1e:03:9e:99:ba:6b:73:36:2c:24:84:9c:e4:44:
         9a:cf:27:9d:36:35:70:23:48:a9:21:93:b0:04:ba:47:80:3e:
         77:94:d0:cb:d4:0c:88:00:8e:b4:2f:26:03:64:f0:36:35:a3:
         7a:ec:3c:7d:9f:1c:df:ed:dd:3f:22:05:56:d2:4a:96:27:6a:
         82:8a:19:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:50:41 2025 by rpki-client