Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A45CE9467DA807641A24A6C58AFB736361A89519DED1AD6CAA0A2DECA52875E/0/323830333a313936303a3a2f33322d3332203d3e20323639373339.roa
File:                     323830333a313936303a3a2f33322d3332203d3e20323639373339.roa (raw, json)
Hash identifier:          K6483R/r4NG09Na1OcbZfFFjseUu9KWfPxpFUlqunbw=
Subject key identifier:   58:7C:31:83:F7:86:91:69:F2:C7:73:4D:D8:67:10:8F:BD:59:02:1D
Certificate issuer:       /CN=CE6926438E72F952AA3A9B44F5FBCCDD244E0D4A
Certificate serial:       62B33B8EA22BDFE5812CAF2360DF550F82FCE3EC
Authority key identifier: CE:69:26:43:8E:72:F9:52:AA:3A:9B:44:F5:FB:CC:DD:24:4E:0D:4A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CE6926438E72F952AA3A9B44F5FBCCDD244E0D4A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3A45CE9467DA807641A24A6C58AFB736361A89519DED1AD6CAA0A2DECA52875E/0/323830333a313936303a3a2f33322d3332203d3e20323639373339.roa
Signing time:             Tue 04 Feb 2025 18:39:36 +0000
ROA not before:           Tue 04 Feb 2025 18:34:36 +0000
ROA not after:            Tue 03 Feb 2026 18:39:36 +0000
asID:                     269739
IP address blocks:        2803:1960::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3A45CE9467DA807641A24A6C58AFB736361A89519DED1AD6CAA0A2DECA52875E/0/CE6926438E72F952AA3A9B44F5FBCCDD244E0D4A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3A45CE9467DA807641A24A6C58AFB736361A89519DED1AD6CAA0A2DECA52875E/0/CE6926438E72F952AA3A9B44F5FBCCDD244E0D4A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CE6926438E72F952AA3A9B44F5FBCCDD244E0D4A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:b3:3b:8e:a2:2b:df:e5:81:2c:af:23:60:df:55:0f:82:fc:e3:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE6926438E72F952AA3A9B44F5FBCCDD244E0D4A
        Validity
            Not Before: Feb  4 18:34:36 2025 GMT
            Not After : Feb  3 18:39:36 2026 GMT
        Subject: CN=587C3183F7869169F2C7734DD867108FBD59021D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:f7:01:49:89:3b:00:20:82:77:5d:e6:cb:f1:
                    17:94:02:99:b3:97:ce:57:ce:1a:64:94:67:be:55:
                    3f:9b:10:61:7c:1a:fb:ba:87:0c:65:1d:06:98:40:
                    9d:40:8a:f3:ae:f8:59:f2:6a:4b:ff:f8:ef:5f:33:
                    dd:16:ac:2c:3e:d8:d5:24:2e:c4:5b:21:bf:85:bf:
                    3b:ef:8a:bd:fa:7f:2a:3e:e5:70:3d:20:22:eb:6c:
                    c7:d6:eb:a6:53:2e:3e:4f:94:a6:91:73:0e:69:94:
                    a1:01:4a:6a:db:d3:8d:2a:9d:4f:17:e9:19:d0:bf:
                    53:42:83:94:d5:9d:43:ef:31:77:fb:9d:3e:40:03:
                    3b:a3:7d:1d:d6:80:f6:21:92:96:ad:d7:3b:02:d9:
                    1a:f4:c2:6a:01:51:3c:43:15:cc:57:33:e3:bd:ce:
                    39:86:2d:81:a4:d5:7e:0c:d7:82:6e:0b:20:a2:f6:
                    ae:43:2e:7d:f0:e3:64:a3:03:24:d4:6e:a7:69:c0:
                    58:a4:50:c9:f2:5f:45:9a:3b:1b:a8:87:7e:9f:77:
                    90:17:a2:d5:57:b3:2b:97:c9:77:eb:91:82:ba:e2:
                    0b:d7:b2:74:4d:a9:5b:8c:be:93:14:d4:2f:89:15:
                    fe:af:aa:a5:ae:f9:10:ad:bd:8a:c4:69:45:66:81:
                    e7:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:7C:31:83:F7:86:91:69:F2:C7:73:4D:D8:67:10:8F:BD:59:02:1D
            X509v3 Authority Key Identifier:
                keyid:CE:69:26:43:8E:72:F9:52:AA:3A:9B:44:F5:FB:CC:DD:24:4E:0D:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3A45CE9467DA807641A24A6C58AFB736361A89519DED1AD6CAA0A2DECA52875E/0/CE6926438E72F952AA3A9B44F5FBCCDD244E0D4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CE6926438E72F952AA3A9B44F5FBCCDD244E0D4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A45CE9467DA807641A24A6C58AFB736361A89519DED1AD6CAA0A2DECA52875E/0/323830333a313936303a3a2f33322d3332203d3e20323639373339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1960::/32

    Signature Algorithm: sha256WithRSAEncryption
         4f:c4:51:7e:af:40:9c:86:52:4b:22:7f:c7:e5:68:33:ba:c7:
         b3:a7:ed:ff:34:bb:21:86:1b:34:57:10:6e:6b:04:ae:1a:5c:
         37:0f:f6:d3:80:a8:34:1b:c7:b2:26:b5:ba:cc:6a:e5:12:72:
         13:9e:52:ae:b9:fc:20:49:3e:66:7d:ff:ed:8e:d7:b5:bc:d5:
         d7:be:c1:67:9a:39:03:9f:bb:d0:5e:4c:fd:99:48:29:c6:26:
         51:a0:f8:29:cb:82:50:51:42:ad:9e:be:53:5f:87:e2:ea:39:
         7a:c4:34:e9:70:72:8e:2d:a1:e9:a4:ea:51:0a:0a:ed:1b:d2:
         33:99:3d:0f:5f:5c:11:48:1f:cd:9e:b4:89:ea:4b:e1:a1:1c:
         f2:5d:89:50:a9:13:c8:d2:89:d6:04:52:48:6a:16:3d:98:02:
         b4:25:48:57:a3:f1:b8:a2:66:07:a4:fd:27:d2:e1:13:5e:91:
         cc:f6:02:2f:37:85:43:26:b9:3d:a3:82:fa:c6:b8:f9:3a:dc:
         e3:3c:5d:87:03:f8:70:23:2a:cb:4f:cb:44:33:68:4a:a1:55:
         17:13:1d:88:ff:51:8d:06:07:8d:db:26:8a:db:78:46:53:a9:
         b0:b7:60:a0:a5:b7:38:70:c7:50:da:c6:0c:fc:e6:71:d3:bc:
         62:4f:b8:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:07:41 2025 by rpki-client