Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3650D59C14D282419C1FFC6D534AD0B46006980772355A21D5871025F82C9883/0/323830333a623230303a3a2f33322d3438203d3e203532333636.roa
File:                     323830333a623230303a3a2f33322d3438203d3e203532333636.roa (raw, json)
Hash identifier:          XKA1MlyxnJrXu8kNyuF9oL4/BFd9LVJobp86M1utvUE=
Subject key identifier:   35:77:53:0A:28:E9:AA:03:2F:16:E6:1B:04:AD:FC:59:EA:6E:05:23
Certificate issuer:       /CN=D7A486F4E8E32EBB7CA32A25A9EFE107EF5FB25B
Certificate serial:       4A3982221ED49EEFB2881EA9432965A12D0EF421
Authority key identifier: D7:A4:86:F4:E8:E3:2E:BB:7C:A3:2A:25:A9:EF:E1:07:EF:5F:B2:5B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D7A486F4E8E32EBB7CA32A25A9EFE107EF5FB25B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3650D59C14D282419C1FFC6D534AD0B46006980772355A21D5871025F82C9883/0/323830333a623230303a3a2f33322d3438203d3e203532333636.roa
Signing time:             Tue 04 Feb 2025 18:47:49 +0000
ROA not before:           Tue 04 Feb 2025 18:42:49 +0000
ROA not after:            Tue 03 Feb 2026 18:47:49 +0000
asID:                     52366
IP address blocks:        2803:b200::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3650D59C14D282419C1FFC6D534AD0B46006980772355A21D5871025F82C9883/0/D7A486F4E8E32EBB7CA32A25A9EFE107EF5FB25B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3650D59C14D282419C1FFC6D534AD0B46006980772355A21D5871025F82C9883/0/D7A486F4E8E32EBB7CA32A25A9EFE107EF5FB25B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D7A486F4E8E32EBB7CA32A25A9EFE107EF5FB25B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:39:82:22:1e:d4:9e:ef:b2:88:1e:a9:43:29:65:a1:2d:0e:f4:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7A486F4E8E32EBB7CA32A25A9EFE107EF5FB25B
        Validity
            Not Before: Feb  4 18:42:49 2025 GMT
            Not After : Feb  3 18:47:49 2026 GMT
        Subject: CN=3577530A28E9AA032F16E61B04ADFC59EA6E0523
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:47:7b:1f:e7:de:ef:87:28:58:ef:0d:a4:52:
                    bc:df:a2:74:61:b1:14:f4:70:01:b9:b2:6c:e4:b8:
                    99:55:59:4a:ff:5a:20:90:8f:d5:e5:8b:54:08:5a:
                    08:91:70:64:18:4d:a7:9e:1d:2e:c7:b1:ce:ca:4e:
                    2b:ff:8d:13:ee:69:c6:98:23:b8:b5:12:9d:24:39:
                    22:48:7c:a6:2d:c2:db:dc:56:70:d6:d2:b9:57:9a:
                    c9:d8:9c:3a:5d:c5:98:a4:52:36:61:7a:a7:4b:cb:
                    f8:e7:bc:fa:93:fb:10:e7:ae:81:e4:09:36:7a:c8:
                    25:8c:b4:78:a5:2b:bc:1f:5e:89:fc:f6:b8:6f:d9:
                    ab:f4:5f:5e:7c:1e:45:65:a4:6d:00:e5:92:28:42:
                    9e:aa:a0:e5:d9:38:bb:47:f6:80:ea:34:cd:02:4c:
                    3a:7a:aa:60:b0:2c:d0:6d:fc:94:86:72:06:e1:0f:
                    e7:8c:54:61:01:98:3b:d7:ec:52:e7:fa:8b:ad:65:
                    91:87:52:ab:19:b9:2b:de:e5:eb:b8:73:40:92:20:
                    fa:07:64:ed:e7:13:27:b7:24:0e:bf:9d:1e:4b:4b:
                    34:5f:c5:42:31:a1:78:aa:24:a8:e5:3d:fb:ab:bb:
                    ba:8e:7a:a0:71:6b:62:35:43:cd:57:50:a1:02:3f:
                    79:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:77:53:0A:28:E9:AA:03:2F:16:E6:1B:04:AD:FC:59:EA:6E:05:23
            X509v3 Authority Key Identifier:
                keyid:D7:A4:86:F4:E8:E3:2E:BB:7C:A3:2A:25:A9:EF:E1:07:EF:5F:B2:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3650D59C14D282419C1FFC6D534AD0B46006980772355A21D5871025F82C9883/0/D7A486F4E8E32EBB7CA32A25A9EFE107EF5FB25B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D7A486F4E8E32EBB7CA32A25A9EFE107EF5FB25B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3650D59C14D282419C1FFC6D534AD0B46006980772355A21D5871025F82C9883/0/323830333a623230303a3a2f33322d3438203d3e203532333636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b200::/32

    Signature Algorithm: sha256WithRSAEncryption
         11:0d:14:fe:2b:c5:1d:18:a5:0f:44:ad:08:51:c6:fc:3b:68:
         c0:98:2c:40:d4:87:17:68:0d:a9:0a:3f:12:cd:72:d9:ee:49:
         3d:1d:2a:a1:a8:8d:28:d6:bf:09:29:97:16:e6:af:22:6f:b4:
         9c:89:2e:2d:5a:0a:7a:a6:96:91:ba:f0:53:fa:c7:1a:ec:32:
         b5:5a:b5:c1:c1:67:86:be:29:0d:06:37:65:16:8a:47:65:99:
         fb:f1:e4:37:88:36:6f:d1:e9:27:bb:ff:d6:c7:43:c5:c6:f8:
         8d:23:26:81:97:58:3f:f6:57:84:81:6b:c1:11:06:e7:6f:02:
         6a:72:55:6c:91:8a:ca:da:d6:db:b0:ae:41:51:67:91:e5:14:
         cd:fd:ed:5d:ba:28:b3:34:13:ef:38:34:3b:38:31:6b:22:41:
         55:bd:eb:fa:07:f2:b8:db:25:5a:2e:90:62:b8:57:6d:69:65:
         cd:04:c5:a2:a7:d6:81:a0:17:3f:2b:19:45:eb:d0:5a:b7:a3:
         ff:d8:05:8e:ac:78:d2:75:8b:7b:47:c9:3f:cc:90:7b:cb:68:
         56:11:57:0f:d6:c9:61:32:39:fe:6b:ff:d9:f0:e9:bc:33:3d:
         ce:f6:33:01:59:6a:68:19:1f:dd:b5:6b:fa:a2:b5:ff:ff:00:
         99:72:3e:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:18:27 2025 by rpki-client