Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/45173EC92C6A0C594F767CBC1F9976C1BAE85E18EA66655427B7952D5DC4D45A/0/323830333a366131303a3a2f33322d3438203d3e203634313331.roa
File:                     323830333a366131303a3a2f33322d3438203d3e203634313331.roa (raw, json)
Hash identifier:          AQNjJBYyYQNHmqS6aLQWHti/V0lNwW5q7cH7FO3JN5o=
Subject key identifier:   1D:88:B4:46:4D:BB:90:93:B1:DF:73:80:1E:12:FC:40:EB:C6:B9:96
Certificate issuer:       /CN=4F8BDA7981C17C999F0DEF92264319AC1A10CE1D
Certificate serial:       5EEAED9CEC936439E1A2CA2FEAC3DCF35973F812
Authority key identifier: 4F:8B:DA:79:81:C1:7C:99:9F:0D:EF:92:26:43:19:AC:1A:10:CE:1D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4F8BDA7981C17C999F0DEF92264319AC1A10CE1D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/45173EC92C6A0C594F767CBC1F9976C1BAE85E18EA66655427B7952D5DC4D45A/0/323830333a366131303a3a2f33322d3438203d3e203634313331.roa
Signing time:             Mon 10 Feb 2025 14:25:00 +0000
ROA not before:           Mon 10 Feb 2025 14:20:00 +0000
ROA not after:            Mon 09 Feb 2026 14:25:00 +0000
asID:                     64131
IP address blocks:        2803:6a10::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/45173EC92C6A0C594F767CBC1F9976C1BAE85E18EA66655427B7952D5DC4D45A/0/4F8BDA7981C17C999F0DEF92264319AC1A10CE1D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/45173EC92C6A0C594F767CBC1F9976C1BAE85E18EA66655427B7952D5DC4D45A/0/4F8BDA7981C17C999F0DEF92264319AC1A10CE1D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4F8BDA7981C17C999F0DEF92264319AC1A10CE1D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:ea:ed:9c:ec:93:64:39:e1:a2:ca:2f:ea:c3:dc:f3:59:73:f8:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F8BDA7981C17C999F0DEF92264319AC1A10CE1D
        Validity
            Not Before: Feb 10 14:20:00 2025 GMT
            Not After : Feb  9 14:25:00 2026 GMT
        Subject: CN=1D88B4464DBB9093B1DF73801E12FC40EBC6B996
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:c5:fa:cc:f6:19:07:39:75:89:f8:71:7c:44:
                    c3:28:f3:99:2d:63:9c:ed:2d:d6:6f:84:fd:18:82:
                    2a:5d:f0:78:68:62:29:e9:48:f0:c6:d3:77:fb:de:
                    53:68:a7:9f:1b:36:d6:4a:84:e2:03:07:0f:97:07:
                    0a:b9:18:65:40:25:02:0c:05:1e:06:28:5f:e0:ce:
                    dd:16:d4:af:23:b6:c1:77:71:87:0f:56:2f:76:8a:
                    06:ad:bf:b4:26:9a:f9:79:ef:80:3a:08:f3:45:43:
                    f7:14:87:28:33:f9:78:39:de:c6:77:08:61:a5:a2:
                    db:b4:04:72:d0:a3:04:4b:e9:33:74:d0:87:df:35:
                    3f:21:25:31:1f:40:75:55:db:b9:db:66:bd:14:30:
                    8e:73:d5:94:b6:d9:84:95:0b:a3:b2:51:e9:fe:d1:
                    f6:04:16:81:b3:83:e8:f8:43:e8:04:f2:32:1f:7e:
                    4e:3b:7e:55:16:ae:61:d1:99:7b:88:c1:aa:00:d7:
                    4b:4b:dc:e0:82:70:d8:80:d5:42:21:8a:af:fa:e8:
                    ab:db:e9:c0:6a:0b:c0:03:3d:3e:45:04:f9:6d:39:
                    ba:9e:7f:c0:5e:23:17:f2:5c:e1:bf:b5:97:1c:c4:
                    79:73:11:ec:86:ba:ec:cf:53:39:a7:c7:7e:c3:9d:
                    b4:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:88:B4:46:4D:BB:90:93:B1:DF:73:80:1E:12:FC:40:EB:C6:B9:96
            X509v3 Authority Key Identifier:
                keyid:4F:8B:DA:79:81:C1:7C:99:9F:0D:EF:92:26:43:19:AC:1A:10:CE:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/45173EC92C6A0C594F767CBC1F9976C1BAE85E18EA66655427B7952D5DC4D45A/0/4F8BDA7981C17C999F0DEF92264319AC1A10CE1D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4F8BDA7981C17C999F0DEF92264319AC1A10CE1D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/45173EC92C6A0C594F767CBC1F9976C1BAE85E18EA66655427B7952D5DC4D45A/0/323830333a366131303a3a2f33322d3438203d3e203634313331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6a10::/32

    Signature Algorithm: sha256WithRSAEncryption
         97:36:23:86:d7:39:98:a4:87:72:79:d1:2e:a0:de:e9:52:32:
         09:47:95:ee:44:c3:b4:1c:de:cd:80:ae:37:e5:6e:0b:68:67:
         95:82:f2:9d:6d:f9:94:03:32:a9:7d:75:a7:08:9c:3b:21:29:
         41:75:21:62:93:0f:2c:9d:02:cc:2a:c9:ce:55:fd:6d:f3:fd:
         e1:ec:e4:bc:9f:be:ee:8c:80:35:80:b7:f7:1e:1a:5c:d5:49:
         30:3c:6f:63:b7:da:cc:e5:94:ad:b5:94:bc:7e:3c:dc:85:dd:
         8e:a7:20:0b:6c:2e:90:a8:08:8c:6b:31:95:e6:55:18:b4:e1:
         81:0e:d7:55:05:f9:f7:eb:55:10:b0:21:96:0e:8d:36:24:75:
         18:da:2a:05:27:d6:ec:8f:81:0f:6f:de:a8:bc:5a:28:e2:96:
         cd:7d:a4:42:69:6d:91:c1:7b:13:11:3c:bd:7a:95:53:e5:ad:
         9d:d1:9a:a2:e7:1f:1f:0b:e0:d6:4d:34:61:6a:9e:d3:92:16:
         81:b8:9a:e6:27:08:c8:64:df:3d:38:7f:9b:5f:e2:5e:7e:42:
         4f:55:9b:6a:6e:e5:7e:c9:8a:e6:5b:56:9e:31:52:ab:70:6a:
         78:20:6e:05:4d:e4:90:8c:b7:7f:3b:3b:ed:12:64:a2:1d:54:
         49:04:a5:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:57:36 2025 by rpki-client