Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3D597C5D3A278EA56F9B0B669807AF2EA429D758CF27567E05936C3E80DC3CFE/0/323830333a336132303a3a2f33322d3438203d3e203532333237.roa
File:                     323830333a336132303a3a2f33322d3438203d3e203532333237.roa (raw, json)
Hash identifier:          xrsSz8tSHE2xA0f5vBf2/ITTmizavVdvjUAndY1qIzY=
Subject key identifier:   30:83:64:97:D7:2B:34:3F:5A:9A:BB:E9:EC:B4:80:AA:55:93:60:96
Certificate issuer:       /CN=6C43D070D53868DD0F1A352EAB84A7642B5CEF73
Certificate serial:       06023278F43206FC6B01921E25DFEBABBC89A663
Authority key identifier: 6C:43:D0:70:D5:38:68:DD:0F:1A:35:2E:AB:84:A7:64:2B:5C:EF:73
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C43D070D53868DD0F1A352EAB84A7642B5CEF73.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3D597C5D3A278EA56F9B0B669807AF2EA429D758CF27567E05936C3E80DC3CFE/0/323830333a336132303a3a2f33322d3438203d3e203532333237.roa
Signing time:             Wed 05 Feb 2025 19:09:07 +0000
ROA not before:           Wed 05 Feb 2025 19:04:07 +0000
ROA not after:            Wed 04 Feb 2026 19:09:07 +0000
asID:                     52327
IP address blocks:        2803:3a20::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3D597C5D3A278EA56F9B0B669807AF2EA429D758CF27567E05936C3E80DC3CFE/0/6C43D070D53868DD0F1A352EAB84A7642B5CEF73.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3D597C5D3A278EA56F9B0B669807AF2EA429D758CF27567E05936C3E80DC3CFE/0/6C43D070D53868DD0F1A352EAB84A7642B5CEF73.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C43D070D53868DD0F1A352EAB84A7642B5CEF73.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:02:32:78:f4:32:06:fc:6b:01:92:1e:25:df:eb:ab:bc:89:a6:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C43D070D53868DD0F1A352EAB84A7642B5CEF73
        Validity
            Not Before: Feb  5 19:04:07 2025 GMT
            Not After : Feb  4 19:09:07 2026 GMT
        Subject: CN=30836497D72B343F5A9ABBE9ECB480AA55936096
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:9b:45:9a:95:50:8b:7c:3e:bf:a1:92:ff:bb:
                    cb:3f:d9:0b:8e:1f:b7:10:b5:fd:61:d3:40:5b:e1:
                    00:eb:4e:f6:8c:1e:95:80:ab:d2:42:8e:f3:c6:b6:
                    21:aa:0b:48:1b:92:ff:f4:e4:7a:ed:d3:55:ee:8d:
                    ec:40:6e:34:8c:39:3b:9b:7d:74:06:08:b0:f8:8e:
                    3b:01:d9:2f:0b:d1:84:62:f1:07:22:7c:5c:b2:40:
                    0e:09:83:1e:1c:7d:6f:ae:83:98:9b:35:0c:61:75:
                    0e:ba:04:d1:44:b0:33:e6:47:ad:34:a2:52:8b:53:
                    97:7e:8f:4c:2c:1a:b7:34:92:d0:15:78:5c:08:6a:
                    9f:87:b9:d3:c7:61:9e:4a:fe:8b:2c:db:87:99:5c:
                    92:b2:f8:f9:42:da:95:7a:fe:e0:e0:24:7b:d8:ec:
                    ee:d9:b5:e8:4e:c7:5a:6d:f3:37:f3:f4:d0:d2:9c:
                    51:8b:a6:a3:21:8c:e0:ce:3b:a9:62:96:58:e2:77:
                    7a:17:82:20:f4:d5:e4:ec:4a:dc:e5:88:57:f7:5f:
                    dd:9b:02:db:02:4d:0f:54:04:4e:2f:27:d9:ae:dc:
                    b8:83:5e:61:d9:25:51:3b:80:55:f2:60:5f:d7:4d:
                    0a:01:11:34:ef:e5:00:70:fe:d2:6d:41:f6:3f:e2:
                    67:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:83:64:97:D7:2B:34:3F:5A:9A:BB:E9:EC:B4:80:AA:55:93:60:96
            X509v3 Authority Key Identifier:
                keyid:6C:43:D0:70:D5:38:68:DD:0F:1A:35:2E:AB:84:A7:64:2B:5C:EF:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3D597C5D3A278EA56F9B0B669807AF2EA429D758CF27567E05936C3E80DC3CFE/0/6C43D070D53868DD0F1A352EAB84A7642B5CEF73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C43D070D53868DD0F1A352EAB84A7642B5CEF73.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3D597C5D3A278EA56F9B0B669807AF2EA429D758CF27567E05936C3E80DC3CFE/0/323830333a336132303a3a2f33322d3438203d3e203532333237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3a20::/32

    Signature Algorithm: sha256WithRSAEncryption
         07:f3:a9:6e:dc:c1:5e:8b:01:8f:72:86:f7:0a:1f:e6:81:85:
         90:a5:1d:87:12:9a:23:a8:5e:2d:37:bc:88:ff:68:48:2d:4a:
         b0:33:b8:96:30:0b:8c:70:f6:f0:ea:56:c7:14:48:f9:e9:ba:
         e1:76:75:97:a3:dd:3b:51:a5:60:4f:fb:9d:37:fb:9d:47:3f:
         4a:f2:7d:82:a1:f7:c8:74:84:7b:6d:e4:6f:26:3e:0f:c3:2f:
         e5:52:26:ad:98:de:25:a0:16:c9:84:a1:73:83:2e:dc:05:c5:
         f1:0c:b7:22:ac:99:f6:6e:bc:d0:ff:d5:81:b5:92:41:0c:82:
         15:46:d4:af:74:64:fc:18:d5:ec:55:5e:99:16:5a:c2:b5:0a:
         e2:53:b6:e3:9f:2c:fe:a1:28:e0:20:dd:49:e5:61:af:dc:bf:
         aa:fc:e2:00:33:a6:8b:cd:45:a2:69:a8:08:2d:73:c3:29:f9:
         8f:5f:e1:2d:bf:25:c0:7d:58:84:99:f1:f0:0e:29:34:c3:05:
         f8:07:33:1e:f6:71:ae:06:53:df:3d:bf:70:a6:38:ba:0a:ca:
         2a:80:be:a9:4d:cf:47:81:61:6b:12:af:23:fe:d0:00:ad:86:
         f9:0f:53:cc:e5:07:b3:4b:a5:64:97:ed:bb:c1:84:98:43:df:
         95:b0:2b:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:12:32 2025 by rpki-client