Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/323830333a323630303a3230323a3a2f34382d3634203d3e203238313134.roa
File:                     323830333a323630303a3230323a3a2f34382d3634203d3e203238313134.roa (raw, json)
Hash identifier:          15oRlxcVNA3rsk8P2KgzLoxL5EWID7Jo4QePQfUSWrA=
Subject key identifier:   77:34:14:25:BC:B0:4F:A4:E0:41:25:D2:30:AE:FC:16:9C:A3:AE:00
Certificate issuer:       /CN=6B07BD31AD3335573775A9552187C8DA46C5971C
Certificate serial:       6EB4C3A59BF5A304A548C643BD83693876DA16F3
Authority key identifier: 6B:07:BD:31:AD:33:35:57:37:75:A9:55:21:87:C8:DA:46:C5:97:1C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6B07BD31AD3335573775A9552187C8DA46C5971C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/323830333a323630303a3230323a3a2f34382d3634203d3e203238313134.roa
Signing time:             Tue 04 Feb 2025 18:07:37 +0000
ROA not before:           Tue 04 Feb 2025 18:02:37 +0000
ROA not after:            Tue 03 Feb 2026 18:07:37 +0000
asID:                     28114
IP address blocks:        2803:2600:202::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/6B07BD31AD3335573775A9552187C8DA46C5971C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/6B07BD31AD3335573775A9552187C8DA46C5971C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6B07BD31AD3335573775A9552187C8DA46C5971C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 20:14:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:b4:c3:a5:9b:f5:a3:04:a5:48:c6:43:bd:83:69:38:76:da:16:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B07BD31AD3335573775A9552187C8DA46C5971C
        Validity
            Not Before: Feb  4 18:02:37 2025 GMT
            Not After : Feb  3 18:07:37 2026 GMT
        Subject: CN=77341425BCB04FA4E04125D230AEFC169CA3AE00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:dc:ed:e2:6e:60:0f:cd:58:b5:4d:e1:0f:e0:
                    61:ce:ea:10:e5:08:d1:9b:1c:43:4d:23:ef:ec:ed:
                    57:d2:c8:3c:15:4a:84:a8:d0:8e:06:dd:a1:69:2b:
                    ce:65:22:b3:d1:45:a5:3a:e1:4f:07:55:4a:82:5e:
                    30:85:a7:58:d3:52:64:1d:e1:f8:e9:bb:a0:0b:45:
                    cf:3b:9f:bc:a5:b3:c3:c9:89:6c:ea:b0:90:b6:16:
                    dc:f4:f5:08:da:18:03:7f:f8:03:1d:60:04:f2:04:
                    38:b7:a7:80:75:28:08:a7:69:3d:d9:68:a6:1c:f6:
                    f2:98:7a:6b:f6:2f:7e:91:85:bc:59:fe:bc:8f:01:
                    ff:f8:87:f6:f2:a5:a2:37:ff:6a:17:46:37:e0:13:
                    71:4a:19:90:e8:a5:f0:96:09:6f:d0:8b:ca:cc:58:
                    20:5f:f2:35:24:5b:68:73:0e:3a:70:79:4d:43:11:
                    2b:5d:19:de:77:e9:ea:08:50:d4:ef:09:6f:72:05:
                    d9:3c:c0:7c:f4:ee:cd:64:c5:da:e5:0c:81:d8:04:
                    65:09:89:f8:24:8d:d7:bb:22:8c:e3:6c:7c:1a:97:
                    c0:69:c5:98:05:c1:3c:62:37:d9:bd:b2:3b:36:9a:
                    c9:53:10:14:a6:10:a7:c4:75:93:2d:90:f9:de:08:
                    be:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:34:14:25:BC:B0:4F:A4:E0:41:25:D2:30:AE:FC:16:9C:A3:AE:00
            X509v3 Authority Key Identifier:
                keyid:6B:07:BD:31:AD:33:35:57:37:75:A9:55:21:87:C8:DA:46:C5:97:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/6B07BD31AD3335573775A9552187C8DA46C5971C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6B07BD31AD3335573775A9552187C8DA46C5971C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/323830333a323630303a3230323a3a2f34382d3634203d3e203238313134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2600:202::/48

    Signature Algorithm: sha256WithRSAEncryption
         82:53:bc:24:5c:6e:92:73:50:2e:e3:d4:52:9e:44:ae:20:07:
         ed:56:75:5f:f8:61:35:a3:b0:84:83:ae:26:15:26:62:c9:81:
         3d:da:92:d8:15:4a:77:aa:e1:ef:e6:74:06:8a:89:7f:27:58:
         a8:0c:ab:b9:83:a4:18:8e:9e:7f:7d:78:6d:b0:c4:f1:2a:b8:
         34:ae:c5:9e:e8:fd:6b:9b:3f:25:1c:94:00:9a:8a:47:ad:b5:
         65:51:02:5f:6c:a2:5b:df:8c:25:95:0d:29:d6:da:13:89:e7:
         61:a9:b7:47:29:fc:0a:6a:4d:cc:74:1f:5c:2c:ae:96:7a:25:
         99:89:44:87:0b:14:68:8f:54:a8:98:83:50:e1:ee:e4:56:1f:
         0e:8f:8e:f1:6a:2c:ed:b4:9b:9c:0d:78:70:ad:30:0c:15:25:
         06:ea:3e:25:dd:61:9b:f0:b3:b6:e5:d9:4b:8e:75:fe:a2:e9:
         3d:e1:b0:cb:87:15:7d:42:d7:c7:b4:42:a0:bd:a7:b0:e3:61:
         47:97:74:10:6e:54:f8:c8:09:9d:4f:e2:b3:59:8c:76:61:77:
         ee:ea:1d:0f:bb:9d:ff:db:0b:8f:45:1e:e2:01:37:34:3b:22:
         b4:85:dd:4a:a4:46:93:fe:db:d5:1b:5b:98:1d:36:4b:07:e3:
         71:00:26:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:25:04 2025 by rpki-client