Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/396892F76FAAB3BF5E2DBB2EE31CAFB9B17C4BD6420A6A87E1097F0FD8E13D53/0/323830333a666261303a3a2f33322d3332203d3e20323731373736.roa
File:                     323830333a666261303a3a2f33322d3332203d3e20323731373736.roa (raw, json)
Hash identifier:          hH98GfxqNnMVNOdX3cF0GkqbUGnpabhdvs1NRIl+V1M=
Subject key identifier:   6C:E6:A3:E5:77:3E:09:94:3A:2E:5E:82:76:FF:40:67:CF:95:61:9C
Certificate issuer:       /CN=FE8F8DA2CA31F636CFFAE253DD8F62F84E08BE28
Certificate serial:       1361F0F07D84D551AB41AFFD23D58612D228B71F
Authority key identifier: FE:8F:8D:A2:CA:31:F6:36:CF:FA:E2:53:DD:8F:62:F8:4E:08:BE:28
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FE8F8DA2CA31F636CFFAE253DD8F62F84E08BE28.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/396892F76FAAB3BF5E2DBB2EE31CAFB9B17C4BD6420A6A87E1097F0FD8E13D53/0/323830333a666261303a3a2f33322d3332203d3e20323731373736.roa
Signing time:             Tue 04 Feb 2025 19:57:53 +0000
ROA not before:           Tue 04 Feb 2025 19:52:53 +0000
ROA not after:            Tue 03 Feb 2026 19:57:53 +0000
asID:                     271776
IP address blocks:        2803:fba0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/396892F76FAAB3BF5E2DBB2EE31CAFB9B17C4BD6420A6A87E1097F0FD8E13D53/0/FE8F8DA2CA31F636CFFAE253DD8F62F84E08BE28.crl
                          rsync://repository.lacnic.net/rpki/lacnic/396892F76FAAB3BF5E2DBB2EE31CAFB9B17C4BD6420A6A87E1097F0FD8E13D53/0/FE8F8DA2CA31F636CFFAE253DD8F62F84E08BE28.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FE8F8DA2CA31F636CFFAE253DD8F62F84E08BE28.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:61:f0:f0:7d:84:d5:51:ab:41:af:fd:23:d5:86:12:d2:28:b7:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE8F8DA2CA31F636CFFAE253DD8F62F84E08BE28
        Validity
            Not Before: Feb  4 19:52:53 2025 GMT
            Not After : Feb  3 19:57:53 2026 GMT
        Subject: CN=6CE6A3E5773E09943A2E5E8276FF4067CF95619C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:88:d0:eb:07:9e:ea:e4:a6:30:72:c9:1a:b6:
                    fd:ee:67:5e:de:dc:1e:28:cd:91:8f:84:7d:41:fe:
                    fa:f6:82:57:08:ad:67:78:3c:29:67:1f:81:c4:69:
                    11:dc:51:34:e0:8c:0d:ec:35:88:92:ff:95:ae:8b:
                    c5:0e:ee:38:42:20:c3:34:6f:89:3e:e8:e6:50:56:
                    fa:3d:24:7c:c8:d5:61:03:b1:eb:56:70:ac:85:7c:
                    19:4e:10:88:d0:23:07:32:2d:bf:f8:a7:73:52:13:
                    14:70:27:f5:8e:43:ea:ef:35:41:35:53:66:12:9e:
                    83:fc:10:f7:56:0b:73:2e:ba:ac:42:bc:0c:54:5d:
                    ae:83:5e:2d:00:cc:e1:bb:a2:16:7d:54:39:84:3b:
                    75:c3:17:53:20:31:d3:eb:33:b9:5e:0f:9b:04:44:
                    f6:29:bc:88:4f:44:b6:ba:42:57:3b:35:70:8a:ff:
                    cb:12:82:45:ec:e6:e6:37:51:8b:47:a7:69:06:00:
                    6d:1f:a9:7d:f4:00:c1:7f:e4:be:13:43:a1:51:9a:
                    cc:e1:aa:6c:32:5a:73:96:ba:ea:c1:00:c3:61:7f:
                    a5:d7:1a:fe:21:1a:f4:24:3d:37:11:08:1f:f9:2f:
                    d5:fb:49:61:12:3c:c1:35:d4:f8:d4:ed:c5:ed:fc:
                    47:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:E6:A3:E5:77:3E:09:94:3A:2E:5E:82:76:FF:40:67:CF:95:61:9C
            X509v3 Authority Key Identifier:
                keyid:FE:8F:8D:A2:CA:31:F6:36:CF:FA:E2:53:DD:8F:62:F8:4E:08:BE:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/396892F76FAAB3BF5E2DBB2EE31CAFB9B17C4BD6420A6A87E1097F0FD8E13D53/0/FE8F8DA2CA31F636CFFAE253DD8F62F84E08BE28.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FE8F8DA2CA31F636CFFAE253DD8F62F84E08BE28.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/396892F76FAAB3BF5E2DBB2EE31CAFB9B17C4BD6420A6A87E1097F0FD8E13D53/0/323830333a666261303a3a2f33322d3332203d3e20323731373736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:fba0::/32

    Signature Algorithm: sha256WithRSAEncryption
         55:60:83:78:04:43:64:17:e0:54:7b:7c:73:0a:a5:e5:ab:76:
         12:8a:08:bf:88:24:69:6d:8f:bc:0f:c5:dd:c7:b7:bd:6e:35:
         90:7f:71:f4:3f:5a:2a:ce:63:7b:22:2c:f5:11:d8:9a:cd:fa:
         9b:bd:93:cf:82:49:63:24:3b:c9:8f:a5:43:4f:2b:e8:d4:7f:
         55:62:fe:4a:4b:05:ec:88:09:db:88:07:4a:cf:05:28:8c:25:
         11:62:b6:95:8c:a7:86:b5:00:b9:13:91:9a:42:73:a0:19:0c:
         99:a7:14:81:f0:ec:5d:c9:70:67:7d:5e:1f:e9:b5:8e:41:a7:
         d2:4b:48:32:38:96:07:3c:8e:3d:78:40:1f:b8:86:ca:eb:82:
         41:f6:d8:fa:57:b8:d3:eb:e2:56:3e:ec:80:b7:65:dc:16:5f:
         67:27:53:21:7f:2f:68:cd:1a:d4:8c:44:82:40:48:2a:9c:b6:
         01:d6:85:99:43:08:38:dd:2f:0c:fa:76:9c:12:4f:f4:b9:bb:
         fa:bc:5a:ee:bc:2c:7b:98:51:94:43:c6:f7:99:36:c8:29:9d:
         13:b6:f8:1c:1a:10:1f:5f:6b:fb:1d:10:c7:06:dd:67:51:d5:
         29:d4:07:ac:7e:6d:5f:b4:1d:4b:44:e8:68:8c:7d:2c:08:e7:
         00:a1:30:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:10:03 2025 by rpki-client