Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/454A6027DDD5263133FA9344DFA716AB489C8DA8889090E0FB35F36867C912EC/0/323830333a386136303a3a2f33322d3438203d3e20323634373332.roa
File:                     323830333a386136303a3a2f33322d3438203d3e20323634373332.roa (raw, json)
Hash identifier:          KBkrK/wB4fIDF+G/em8LZYcJYz+Gh4dzhgqEWEw3MYk=
Subject key identifier:   25:6F:E5:97:82:26:8C:56:ED:C5:39:45:9F:BB:7D:11:57:1F:22:63
Certificate issuer:       /CN=1F4C8E2A50993D70AF79E87C7E1B8660979E2614
Certificate serial:       46DBCE0D24072A4E227308CCCADD9ACF751C8087
Authority key identifier: 1F:4C:8E:2A:50:99:3D:70:AF:79:E8:7C:7E:1B:86:60:97:9E:26:14
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F4C8E2A50993D70AF79E87C7E1B8660979E2614.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/454A6027DDD5263133FA9344DFA716AB489C8DA8889090E0FB35F36867C912EC/0/323830333a386136303a3a2f33322d3438203d3e20323634373332.roa
Signing time:             Tue 04 Feb 2025 18:55:54 +0000
ROA not before:           Tue 04 Feb 2025 18:50:54 +0000
ROA not after:            Tue 03 Feb 2026 18:55:54 +0000
asID:                     264732
IP address blocks:        2803:8a60::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/454A6027DDD5263133FA9344DFA716AB489C8DA8889090E0FB35F36867C912EC/0/1F4C8E2A50993D70AF79E87C7E1B8660979E2614.crl
                          rsync://repository.lacnic.net/rpki/lacnic/454A6027DDD5263133FA9344DFA716AB489C8DA8889090E0FB35F36867C912EC/0/1F4C8E2A50993D70AF79E87C7E1B8660979E2614.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F4C8E2A50993D70AF79E87C7E1B8660979E2614.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 04:49:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:db:ce:0d:24:07:2a:4e:22:73:08:cc:ca:dd:9a:cf:75:1c:80:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F4C8E2A50993D70AF79E87C7E1B8660979E2614
        Validity
            Not Before: Feb  4 18:50:54 2025 GMT
            Not After : Feb  3 18:55:54 2026 GMT
        Subject: CN=256FE59782268C56EDC539459FBB7D11571F2263
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:55:65:06:ec:89:0a:bd:dd:0b:5e:05:f5:50:
                    4b:97:30:41:74:d1:03:5e:49:6a:cb:5e:b2:ce:a8:
                    b7:05:ec:96:94:e4:2f:7a:25:f7:1b:f4:ac:5e:dd:
                    70:56:cd:82:41:aa:ca:90:4a:ce:a9:63:db:4d:40:
                    19:33:9b:ce:f6:16:67:2b:73:76:ae:a6:16:6f:13:
                    1f:51:88:4e:81:b2:79:e9:08:d1:1d:00:c3:c9:c3:
                    0b:20:ff:72:fd:0e:0a:24:f8:09:e0:3d:fa:95:3c:
                    fd:2b:51:3a:55:6d:ff:84:86:af:d5:78:c7:64:5b:
                    b1:8a:b9:76:e8:c1:e0:c8:c4:60:58:b7:4a:a9:21:
                    af:7d:36:af:ce:b8:9b:ea:c5:ce:41:78:63:87:00:
                    9d:6c:e5:65:d1:cf:66:2d:aa:f6:a8:81:09:17:10:
                    e3:9b:87:13:fc:bd:ad:1b:71:4d:c9:ad:f3:2e:fd:
                    43:cd:df:c4:7d:b4:c9:96:0e:17:be:c5:f7:90:5b:
                    cf:2a:74:88:2a:af:ea:64:0c:ca:e3:1f:61:3e:58:
                    70:7c:04:96:2a:96:4c:23:de:65:1a:1e:0d:41:cd:
                    19:53:8d:45:3e:fe:2d:83:fc:5c:94:d4:80:18:03:
                    af:00:7e:94:aa:32:05:e3:22:ca:20:d2:c2:32:66:
                    50:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:6F:E5:97:82:26:8C:56:ED:C5:39:45:9F:BB:7D:11:57:1F:22:63
            X509v3 Authority Key Identifier:
                keyid:1F:4C:8E:2A:50:99:3D:70:AF:79:E8:7C:7E:1B:86:60:97:9E:26:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/454A6027DDD5263133FA9344DFA716AB489C8DA8889090E0FB35F36867C912EC/0/1F4C8E2A50993D70AF79E87C7E1B8660979E2614.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F4C8E2A50993D70AF79E87C7E1B8660979E2614.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/454A6027DDD5263133FA9344DFA716AB489C8DA8889090E0FB35F36867C912EC/0/323830333a386136303a3a2f33322d3438203d3e20323634373332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8a60::/32

    Signature Algorithm: sha256WithRSAEncryption
         50:d8:5a:01:a0:18:c6:c6:69:e2:bc:24:8b:99:c9:75:8e:eb:
         1e:db:a2:23:98:7d:b2:be:ca:d4:6d:5a:a7:0e:c1:e3:74:18:
         44:66:2c:e5:03:4d:fe:e3:78:2b:b0:de:cd:59:61:e9:de:47:
         51:72:73:40:6b:d1:6d:ed:cb:aa:e6:7f:42:c5:e8:4a:04:6b:
         de:a8:2c:b1:9b:c1:01:04:26:aa:28:3a:7b:b5:8f:7f:4b:b7:
         57:c9:d8:f0:71:8c:61:f0:e3:b1:8e:2c:6c:f4:d8:d7:63:5f:
         f1:9c:83:2b:8d:c7:0a:b5:25:d7:92:28:9f:f2:a5:64:28:db:
         2a:94:b1:23:be:38:4c:4b:0b:19:d7:b1:7a:68:65:66:c9:c7:
         bb:b6:e9:fd:39:e8:dc:51:8b:5c:75:fe:fe:0b:98:1c:9a:d4:
         18:4c:28:19:22:c8:f3:58:22:44:3c:49:ca:a1:05:31:0a:73:
         35:15:02:fc:dd:53:40:f8:82:5d:bf:5c:31:6f:f7:e1:94:58:
         3a:6f:38:31:0b:5e:16:ce:74:17:bd:28:3a:8c:ce:69:c3:ab:
         87:f6:84:2c:1f:1a:28:42:41:3b:65:49:78:96:fd:c6:a8:31:
         56:07:7a:2a:a2:22:86:51:8e:ad:f7:11:c5:99:6c:1f:ce:6f:
         f5:1c:b9:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 16:39:10 2025 by rpki-client