Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/33A99BDB536F925B006921C3920F2A5C268719CA55396C2C3DEA4CD9DE552C2D/0/323830333a316639303a3a2f33322d3438203d3e20323733303831.roa
File:                     323830333a316639303a3a2f33322d3438203d3e20323733303831.roa (raw, json)
Hash identifier:          aQmNj7bfpQ499f25KJpbxl+MxXNp/Bt+l2EeqgNN1WI=
Subject key identifier:   97:D8:CE:92:23:FE:6C:D6:F9:55:93:1D:C5:B2:F2:C9:BB:F2:AF:66
Certificate issuer:       /CN=D2884A48504D6BB3B4A646F633909D872E544072
Certificate serial:       3C661702611339A1ABB765E2DC6CF25FD4297100
Authority key identifier: D2:88:4A:48:50:4D:6B:B3:B4:A6:46:F6:33:90:9D:87:2E:54:40:72
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2884A48504D6BB3B4A646F633909D872E544072.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/33A99BDB536F925B006921C3920F2A5C268719CA55396C2C3DEA4CD9DE552C2D/0/323830333a316639303a3a2f33322d3438203d3e20323733303831.roa
Signing time:             Tue 04 Feb 2025 18:39:15 +0000
ROA not before:           Tue 04 Feb 2025 18:34:15 +0000
ROA not after:            Tue 03 Feb 2026 18:39:15 +0000
asID:                     273081
IP address blocks:        2803:1f90::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/33A99BDB536F925B006921C3920F2A5C268719CA55396C2C3DEA4CD9DE552C2D/0/D2884A48504D6BB3B4A646F633909D872E544072.crl
                          rsync://repository.lacnic.net/rpki/lacnic/33A99BDB536F925B006921C3920F2A5C268719CA55396C2C3DEA4CD9DE552C2D/0/D2884A48504D6BB3B4A646F633909D872E544072.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2884A48504D6BB3B4A646F633909D872E544072.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 20:17:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:66:17:02:61:13:39:a1:ab:b7:65:e2:dc:6c:f2:5f:d4:29:71:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2884A48504D6BB3B4A646F633909D872E544072
        Validity
            Not Before: Feb  4 18:34:15 2025 GMT
            Not After : Feb  3 18:39:15 2026 GMT
        Subject: CN=97D8CE9223FE6CD6F955931DC5B2F2C9BBF2AF66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:04:2e:f3:36:df:6e:b1:fe:f2:b0:9f:5b:8c:
                    18:e0:2a:93:b0:b1:34:24:a4:6b:ff:c1:00:d7:9e:
                    9b:1d:00:9f:c5:c1:d6:76:1c:be:9e:4d:d5:ea:3d:
                    1b:1b:86:c5:3e:83:f0:a2:11:15:e0:d5:2c:13:33:
                    90:cf:ae:26:7c:49:7e:0f:82:68:59:9c:91:b5:93:
                    2c:4d:a2:4a:e2:d5:c4:66:dd:65:f1:3d:75:94:33:
                    b0:6b:30:e3:25:5f:00:d0:5a:24:5a:f0:59:dc:24:
                    a5:5e:7a:b7:9b:d1:5e:00:82:77:87:f4:75:10:ba:
                    5c:23:15:dc:13:e9:57:13:20:19:a9:ea:c5:c2:01:
                    bc:c2:c5:6e:2e:e8:bc:e6:00:39:e1:80:b6:dc:42:
                    52:b6:99:de:d0:7f:57:58:7a:a4:26:4a:22:a8:e4:
                    e6:32:ab:63:a0:33:ba:35:9d:59:b3:58:03:52:62:
                    4d:8f:75:42:17:f8:9e:87:ee:59:a4:9d:5d:f1:43:
                    ca:45:c5:ce:69:b2:46:cd:e4:49:17:6d:e9:00:40:
                    26:01:e5:72:5f:5d:b8:c6:73:05:51:39:ec:1e:ed:
                    e8:f5:fd:1c:b0:b7:56:79:fc:00:cf:ca:17:65:bb:
                    88:e1:ab:99:7c:c9:c7:70:4f:df:85:08:79:bc:c1:
                    b9:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:D8:CE:92:23:FE:6C:D6:F9:55:93:1D:C5:B2:F2:C9:BB:F2:AF:66
            X509v3 Authority Key Identifier:
                keyid:D2:88:4A:48:50:4D:6B:B3:B4:A6:46:F6:33:90:9D:87:2E:54:40:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/33A99BDB536F925B006921C3920F2A5C268719CA55396C2C3DEA4CD9DE552C2D/0/D2884A48504D6BB3B4A646F633909D872E544072.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2884A48504D6BB3B4A646F633909D872E544072.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/33A99BDB536F925B006921C3920F2A5C268719CA55396C2C3DEA4CD9DE552C2D/0/323830333a316639303a3a2f33322d3438203d3e20323733303831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1f90::/32

    Signature Algorithm: sha256WithRSAEncryption
         56:94:d1:4d:97:f4:eb:79:8b:61:cd:00:bc:a9:89:02:5a:59:
         97:17:77:f8:cf:f1:f6:ce:d2:61:18:d7:7a:63:59:97:a8:07:
         f4:29:b8:29:b4:34:36:9e:e0:1d:36:51:16:4a:d0:69:e3:8b:
         c0:ab:3d:67:8b:2f:82:f8:15:a7:d2:f9:68:91:3f:f1:a5:76:
         e4:0d:d3:cf:e0:e8:b7:00:79:24:4e:c6:e5:0d:bf:4d:a8:71:
         73:b7:d0:61:7b:06:7c:7a:a7:13:f6:11:fb:df:d9:95:30:7a:
         c1:d5:d1:67:e5:73:f7:32:5c:04:4e:8b:a6:e5:df:0c:d3:19:
         6b:2e:6e:3d:98:8c:c0:28:a8:3d:4b:ff:1b:81:ac:b5:3c:bc:
         f8:2f:29:9e:03:a7:74:51:16:4a:41:ba:c8:25:c7:77:f9:b9:
         be:71:de:14:70:19:2f:7a:aa:ac:35:6a:d3:6d:45:52:a8:4c:
         c7:a3:8a:b0:3b:f2:95:c5:94:35:cc:06:61:59:f0:77:2d:ec:
         d8:c8:22:fc:be:9a:62:0c:3c:e6:d3:be:4b:0e:4a:0e:e9:68:
         5d:84:79:c2:a3:8c:69:b1:55:e5:62:c8:06:89:d2:c2:7b:0f:
         68:07:2c:a5:70:b1:bf:1c:26:f1:21:63:a4:f8:cd:65:88:c5:
         bf:31:9e:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:10:09 2025 by rpki-client