Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/42E31670C7B5AA2B80EB48BDADE8DBC39F8227A1EAB3BB2CC638AA0C2529B9B8/0/323830333a316336303a3a2f33322d3438203d3e203532333033.roa
File:                     323830333a316336303a3a2f33322d3438203d3e203532333033.roa (raw, json)
Hash identifier:          4BA87Puz4yVT1raOjrqA/7UzVeVQT3ijw1coriN/sMY=
Subject key identifier:   53:03:17:02:8F:73:C9:5F:D1:C9:AC:74:2A:77:C4:E9:FD:52:1E:AD
Certificate issuer:       /CN=9B48C7C37EA3416F0E2263901D5683835F4FD5C7
Certificate serial:       61FDCA82CE3944B068CF0A76CDBC5229857E4616
Authority key identifier: 9B:48:C7:C3:7E:A3:41:6F:0E:22:63:90:1D:56:83:83:5F:4F:D5:C7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9B48C7C37EA3416F0E2263901D5683835F4FD5C7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/42E31670C7B5AA2B80EB48BDADE8DBC39F8227A1EAB3BB2CC638AA0C2529B9B8/0/323830333a316336303a3a2f33322d3438203d3e203532333033.roa
Signing time:             Tue 04 Feb 2025 20:01:26 +0000
ROA not before:           Tue 04 Feb 2025 19:56:26 +0000
ROA not after:            Tue 03 Feb 2026 20:01:26 +0000
asID:                     52303
IP address blocks:        2803:1c60::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/42E31670C7B5AA2B80EB48BDADE8DBC39F8227A1EAB3BB2CC638AA0C2529B9B8/0/9B48C7C37EA3416F0E2263901D5683835F4FD5C7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/42E31670C7B5AA2B80EB48BDADE8DBC39F8227A1EAB3BB2CC638AA0C2529B9B8/0/9B48C7C37EA3416F0E2263901D5683835F4FD5C7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9B48C7C37EA3416F0E2263901D5683835F4FD5C7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:fd:ca:82:ce:39:44:b0:68:cf:0a:76:cd:bc:52:29:85:7e:46:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B48C7C37EA3416F0E2263901D5683835F4FD5C7
        Validity
            Not Before: Feb  4 19:56:26 2025 GMT
            Not After : Feb  3 20:01:26 2026 GMT
        Subject: CN=530317028F73C95FD1C9AC742A77C4E9FD521EAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:61:e1:6c:ba:0f:f0:a2:9e:4e:15:25:2d:48:
                    d0:6d:6b:91:fa:7e:68:1e:94:85:dc:9e:bd:1c:8f:
                    f8:37:c0:72:0d:dd:16:8b:72:2e:8c:bb:55:c3:ad:
                    90:46:24:e6:07:c1:47:31:d7:06:f7:f3:cd:a4:93:
                    88:f8:2a:4b:d4:6e:5e:54:95:a5:f6:6e:93:de:b0:
                    2b:75:cb:7b:a4:4f:b7:95:b5:ef:ab:e8:42:20:05:
                    04:66:14:7b:76:af:fd:a0:c0:c3:7a:52:8f:b0:7b:
                    d1:f7:7b:50:50:db:c1:44:64:99:55:2c:97:ff:93:
                    ad:fa:2d:13:fd:c4:d6:d8:f4:72:c1:9a:54:b6:36:
                    1e:ae:68:4d:87:dd:90:5f:9c:55:19:1e:dc:dc:9a:
                    16:e6:54:99:f9:10:fa:78:2f:6b:55:fc:a6:5d:7b:
                    d3:89:e4:10:7f:61:00:96:eb:93:1d:f6:c8:4b:03:
                    09:28:da:5f:d0:1e:ae:c8:6a:77:14:a1:f1:b9:4c:
                    a0:36:52:a8:6b:81:16:c4:80:b5:41:14:45:5e:e1:
                    1f:06:01:93:cb:af:d4:88:e6:3d:92:ba:bb:f7:35:
                    4a:f5:5b:fd:ae:18:06:65:cc:9d:f7:40:d0:fd:4d:
                    70:1e:6b:94:2c:df:47:98:55:5a:1e:b7:f7:e1:e2:
                    73:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:03:17:02:8F:73:C9:5F:D1:C9:AC:74:2A:77:C4:E9:FD:52:1E:AD
            X509v3 Authority Key Identifier:
                keyid:9B:48:C7:C3:7E:A3:41:6F:0E:22:63:90:1D:56:83:83:5F:4F:D5:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/42E31670C7B5AA2B80EB48BDADE8DBC39F8227A1EAB3BB2CC638AA0C2529B9B8/0/9B48C7C37EA3416F0E2263901D5683835F4FD5C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9B48C7C37EA3416F0E2263901D5683835F4FD5C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/42E31670C7B5AA2B80EB48BDADE8DBC39F8227A1EAB3BB2CC638AA0C2529B9B8/0/323830333a316336303a3a2f33322d3438203d3e203532333033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1c60::/32

    Signature Algorithm: sha256WithRSAEncryption
         52:10:d7:db:20:d6:8e:6f:52:57:c6:7f:9e:39:f1:17:b1:86:
         55:b4:5b:23:20:19:a1:56:b5:a6:13:c4:af:99:01:bf:08:14:
         00:9c:2f:0e:c4:e3:1b:0a:80:31:6f:21:d0:6b:06:43:f2:e7:
         a7:bd:73:94:c6:f3:53:47:fb:74:7e:75:58:c4:95:c3:31:55:
         fb:9b:20:42:49:2d:13:c1:57:3a:29:2d:42:15:3c:25:57:23:
         d5:ff:8a:9a:df:a6:33:54:04:d4:2b:ae:ac:4a:f8:ae:68:68:
         bf:f6:36:cb:2d:b1:97:f7:22:07:b6:69:8c:c7:a1:a7:04:c4:
         dd:48:67:b2:37:e6:3b:e5:5f:b0:2c:38:7e:6f:a7:2b:60:88:
         eb:ab:98:28:6d:b0:98:e3:c0:c2:05:ca:53:b3:7f:60:c2:ef:
         9b:e9:c8:66:78:5b:4e:36:ec:71:69:02:22:4b:a1:d7:84:11:
         71:26:40:ad:b7:d0:05:b1:d5:ef:54:05:96:10:3e:e1:0d:5f:
         3f:b5:9d:7b:af:03:93:b0:87:6e:49:82:aa:3d:0d:8e:4b:47:
         01:93:76:b9:73:8f:f3:ac:40:10:97:b0:95:7c:e4:e4:01:64:
         7f:11:31:d8:59:4a:f2:b6:a7:b7:e6:be:45:19:a0:d1:a1:0d:
         e6:a1:f4:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:57:05 2025 by rpki-client