Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3C2FCDD3F920DA5F25C642EC95B696AFDDB2A408023443BE210EEF6FD1219DD7/0/323830333a383763303a3a2f33322d3438203d3e20323731393233.roa
File:                     323830333a383763303a3a2f33322d3438203d3e20323731393233.roa (raw, json)
Hash identifier:          EE3wVpuOTyTGxv1fkFf6dtPBEyUf8vnmBNQB/ER5kds=
Subject key identifier:   33:79:EF:C6:7E:2E:52:6D:BB:16:DA:3B:CA:2E:80:DC:D9:60:30:29
Certificate issuer:       /CN=F8724A48C62962BC0200BE832FFF52F4762F82D6
Certificate serial:       49C610C7BA822B8B34BF113BAE2DC0C535C1C25E
Authority key identifier: F8:72:4A:48:C6:29:62:BC:02:00:BE:83:2F:FF:52:F4:76:2F:82:D6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F8724A48C62962BC0200BE832FFF52F4762F82D6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3C2FCDD3F920DA5F25C642EC95B696AFDDB2A408023443BE210EEF6FD1219DD7/0/323830333a383763303a3a2f33322d3438203d3e20323731393233.roa
Signing time:             Tue 04 Feb 2025 18:42:59 +0000
ROA not before:           Tue 04 Feb 2025 18:37:59 +0000
ROA not after:            Tue 03 Feb 2026 18:42:59 +0000
asID:                     271923
IP address blocks:        2803:87c0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3C2FCDD3F920DA5F25C642EC95B696AFDDB2A408023443BE210EEF6FD1219DD7/0/F8724A48C62962BC0200BE832FFF52F4762F82D6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3C2FCDD3F920DA5F25C642EC95B696AFDDB2A408023443BE210EEF6FD1219DD7/0/F8724A48C62962BC0200BE832FFF52F4762F82D6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F8724A48C62962BC0200BE832FFF52F4762F82D6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:c6:10:c7:ba:82:2b:8b:34:bf:11:3b:ae:2d:c0:c5:35:c1:c2:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8724A48C62962BC0200BE832FFF52F4762F82D6
        Validity
            Not Before: Feb  4 18:37:59 2025 GMT
            Not After : Feb  3 18:42:59 2026 GMT
        Subject: CN=3379EFC67E2E526DBB16DA3BCA2E80DCD9603029
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:f7:a6:2a:a5:72:a8:3b:75:67:76:43:3d:24:
                    bb:84:dd:57:ac:dd:35:2c:6b:e9:f1:fd:ff:cf:2f:
                    5b:e3:1b:7c:bf:07:03:65:27:59:a9:1b:79:7e:7c:
                    d4:8e:f9:74:fb:89:db:1e:03:22:ff:ca:43:f9:41:
                    a5:70:af:7d:11:56:24:59:5f:db:e7:a1:7c:9d:52:
                    86:f2:8b:18:3e:a0:cf:7f:10:63:16:35:d2:a2:9e:
                    de:99:66:2b:a6:18:b0:02:95:2d:d8:82:da:58:db:
                    3a:63:8c:70:5f:05:d1:03:b8:ea:a1:eb:6c:21:ed:
                    eb:e2:f0:57:1c:ec:4d:d5:dc:4b:07:89:c9:f7:d4:
                    89:71:ff:c8:d0:18:63:58:dd:9e:c3:14:fe:0e:89:
                    3f:66:8b:95:71:57:30:98:6a:b9:11:e8:bc:6a:23:
                    b3:a9:02:b8:d3:47:e1:4b:f6:2a:48:bb:c4:a1:81:
                    78:55:83:82:e4:a5:3d:32:7e:66:c3:e8:22:ec:62:
                    29:08:35:7d:a0:32:0c:c5:a3:6a:a0:3f:21:05:f8:
                    f9:54:84:b6:f6:df:63:64:b4:ac:d8:d2:f0:10:e8:
                    e3:df:96:ac:e1:c8:39:d8:23:2f:ee:63:8a:70:30:
                    26:ce:f4:cc:3c:3a:50:66:3e:31:da:e0:5a:d4:94:
                    d3:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:79:EF:C6:7E:2E:52:6D:BB:16:DA:3B:CA:2E:80:DC:D9:60:30:29
            X509v3 Authority Key Identifier:
                keyid:F8:72:4A:48:C6:29:62:BC:02:00:BE:83:2F:FF:52:F4:76:2F:82:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3C2FCDD3F920DA5F25C642EC95B696AFDDB2A408023443BE210EEF6FD1219DD7/0/F8724A48C62962BC0200BE832FFF52F4762F82D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F8724A48C62962BC0200BE832FFF52F4762F82D6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3C2FCDD3F920DA5F25C642EC95B696AFDDB2A408023443BE210EEF6FD1219DD7/0/323830333a383763303a3a2f33322d3438203d3e20323731393233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:87c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         18:2c:fb:bc:6b:7e:63:aa:28:29:f5:9b:a1:e5:ce:fb:6d:c7:
         5d:63:1b:78:3a:64:47:d0:be:c1:f4:44:39:1d:c8:9c:75:f0:
         ac:43:1c:50:6c:3d:f2:29:a3:2f:9a:54:b5:02:fc:c3:f4:fe:
         8b:11:05:fd:bf:69:05:e6:91:40:7b:ab:ca:7a:36:b2:2b:ef:
         8d:20:5d:bf:ce:93:08:7c:cf:ab:c8:71:60:eb:e9:45:82:de:
         fb:d6:b5:5d:6c:af:36:79:3a:24:36:da:46:8d:7d:09:67:99:
         61:dc:ae:71:bd:82:4a:df:2a:6c:7c:9a:14:e1:4e:b2:ab:49:
         e9:94:b9:08:aa:12:6d:f5:75:cb:94:ef:f7:d8:87:1d:61:42:
         98:9e:54:24:76:90:84:65:20:54:43:16:61:f2:ce:e9:f1:79:
         23:b6:a3:d6:17:1a:36:91:58:0f:56:94:a9:cc:c5:11:ee:1c:
         b9:d2:6e:36:3c:8d:3a:83:bb:89:e1:f4:0d:d3:a2:88:30:c1:
         59:64:55:86:af:69:c4:a2:9f:88:6d:81:97:6f:91:5d:16:a8:
         97:39:1b:71:17:60:0c:23:53:1d:63:41:7a:d1:49:ff:4f:42:
         1d:f3:41:90:f1:1a:7f:17:e2:68:fb:ce:06:e9:2c:8c:9e:e0:
         35:11:b5:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:46:49 2025 by rpki-client