Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3550B7AE8DCD874D7FFA3A6D40723D4C1B616BA57DE88EFDDFEF6DCD9DA4FDDB/0/323830333a636461303a3a2f33322d3332203d3e20323637373838.roa
File:                     323830333a636461303a3a2f33322d3332203d3e20323637373838.roa (raw, json)
Hash identifier:          2bzvCth/cTRY9JyDWe9uYxHE5QbGwugpQ0lQ7A+Vwvw=
Subject key identifier:   28:90:D1:1F:2D:A2:9E:B7:82:D2:51:18:B8:58:B2:47:AE:8B:F2:31
Certificate issuer:       /CN=A18333048C43710CA4783E73FD39659E7AC094BD
Certificate serial:       7BE85B72ED5A1AE54546621D495F31008C7E8DED
Authority key identifier: A1:83:33:04:8C:43:71:0C:A4:78:3E:73:FD:39:65:9E:7A:C0:94:BD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A18333048C43710CA4783E73FD39659E7AC094BD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3550B7AE8DCD874D7FFA3A6D40723D4C1B616BA57DE88EFDDFEF6DCD9DA4FDDB/0/323830333a636461303a3a2f33322d3332203d3e20323637373838.roa
Signing time:             Tue 04 Feb 2025 18:19:11 +0000
ROA not before:           Tue 04 Feb 2025 18:14:11 +0000
ROA not after:            Tue 03 Feb 2026 18:19:11 +0000
asID:                     267788
IP address blocks:        2803:cda0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3550B7AE8DCD874D7FFA3A6D40723D4C1B616BA57DE88EFDDFEF6DCD9DA4FDDB/0/A18333048C43710CA4783E73FD39659E7AC094BD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3550B7AE8DCD874D7FFA3A6D40723D4C1B616BA57DE88EFDDFEF6DCD9DA4FDDB/0/A18333048C43710CA4783E73FD39659E7AC094BD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A18333048C43710CA4783E73FD39659E7AC094BD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:e8:5b:72:ed:5a:1a:e5:45:46:62:1d:49:5f:31:00:8c:7e:8d:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A18333048C43710CA4783E73FD39659E7AC094BD
        Validity
            Not Before: Feb  4 18:14:11 2025 GMT
            Not After : Feb  3 18:19:11 2026 GMT
        Subject: CN=2890D11F2DA29EB782D25118B858B247AE8BF231
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:72:2e:3a:09:24:23:72:02:f4:0f:7f:bf:db:
                    5a:a1:9c:73:1d:8f:b6:3f:3e:89:b1:29:ab:0a:8e:
                    6a:bd:a2:d1:e1:68:63:c6:1f:4c:1c:68:ff:cf:93:
                    a8:9d:66:e1:23:23:ee:49:fe:46:6a:f5:90:bf:99:
                    62:8c:94:3b:d8:d0:99:9b:b9:20:fe:6c:ae:a9:21:
                    e9:81:04:f2:7f:65:19:cc:94:e3:b1:1f:d0:05:47:
                    e3:bc:7f:93:ae:04:a9:cf:6b:a1:81:c7:63:a7:15:
                    10:64:34:b2:e5:24:97:92:56:55:ed:60:82:d2:17:
                    df:7d:b5:25:88:c3:b2:ee:ac:95:e3:9a:30:39:4b:
                    63:d9:dc:bd:03:df:97:ee:3c:2f:ab:a4:5e:6c:20:
                    ea:d8:ce:68:64:36:a8:88:09:8f:b1:5c:55:f7:79:
                    a0:94:cc:6a:07:eb:29:cf:9f:42:62:f1:f3:0f:84:
                    a7:0b:2a:48:6f:ad:fe:8c:96:66:0b:c0:b1:da:dd:
                    3c:f7:a7:f4:ad:af:0e:1c:2c:c3:23:99:95:02:3d:
                    55:53:0a:cc:cc:78:55:3b:50:a4:94:0a:ee:b0:cd:
                    ee:f6:4d:b2:6e:9c:4a:88:d7:93:e0:ba:5f:77:6e:
                    8b:66:f7:53:ee:e1:01:49:16:3d:32:36:4d:8d:09:
                    f3:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:90:D1:1F:2D:A2:9E:B7:82:D2:51:18:B8:58:B2:47:AE:8B:F2:31
            X509v3 Authority Key Identifier:
                keyid:A1:83:33:04:8C:43:71:0C:A4:78:3E:73:FD:39:65:9E:7A:C0:94:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3550B7AE8DCD874D7FFA3A6D40723D4C1B616BA57DE88EFDDFEF6DCD9DA4FDDB/0/A18333048C43710CA4783E73FD39659E7AC094BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A18333048C43710CA4783E73FD39659E7AC094BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3550B7AE8DCD874D7FFA3A6D40723D4C1B616BA57DE88EFDDFEF6DCD9DA4FDDB/0/323830333a636461303a3a2f33322d3332203d3e20323637373838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:cda0::/32

    Signature Algorithm: sha256WithRSAEncryption
         aa:43:3a:8d:10:bc:70:e4:37:8e:2e:28:02:76:5f:e5:58:05:
         09:c5:18:7c:4b:cd:85:81:0e:fa:9d:5f:68:4a:6b:9f:b8:6c:
         f0:b4:79:4d:4b:5a:f8:35:2c:8b:53:42:7e:6f:6e:ea:93:82:
         ee:99:40:f2:25:35:5c:67:39:ee:5d:8e:92:3c:40:6c:00:8b:
         16:08:2d:38:cf:3e:fb:7a:ee:1c:59:3e:3f:93:03:72:10:0a:
         ac:64:a3:ad:46:c6:66:cf:55:75:41:90:f1:d2:2a:a0:0c:c7:
         e8:d9:53:6c:e5:3f:4a:6b:97:5c:74:fa:60:f5:97:58:bc:65:
         dd:4a:c7:18:99:87:d2:a9:9f:4d:26:ab:3f:06:9d:cc:7c:ad:
         3a:3a:03:ce:fe:8f:ea:1f:13:92:fa:2b:5e:72:2d:7a:cb:8e:
         ac:69:6c:9a:cb:0f:9a:79:dc:0d:9b:e1:73:79:ec:0b:26:d8:
         e8:c4:3b:46:e4:1f:5b:fe:4c:ee:cd:67:a1:48:80:7e:76:91:
         f4:5f:49:06:ce:84:b2:83:47:f0:f7:40:b0:76:aa:8d:d7:70:
         47:11:9c:4d:d5:63:e4:ea:1e:ee:50:55:85:7e:b4:cb:ed:a4:
         71:bf:9b:59:ec:fc:c8:33:2b:6b:ce:8c:2b:0b:3b:74:2d:46:
         37:ae:84:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:47:02 2025 by rpki-client