Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/460853EAAA676F37C89BE8840FD41F02F5FE23FC8E3B18B8635BC0582814F77B/0/323830333a633634303a3a2f33322d3332203d3e20323633383334.roa
File:                     323830333a633634303a3a2f33322d3332203d3e20323633383334.roa (raw, json)
Hash identifier:          VD3wXc4+IUUtnGoblnz9YHGN3AH1ltr/itgvluNlW7c=
Subject key identifier:   7A:76:7E:4C:F6:FC:71:E3:EE:C9:20:D2:B6:29:F2:4E:1A:D5:13:6C
Certificate issuer:       /CN=E699A4077A87114A3532FD22E5C0F78AD30312E4
Certificate serial:       72F5D95B3A3210935B223645D0E25FD8C074360E
Authority key identifier: E6:99:A4:07:7A:87:11:4A:35:32:FD:22:E5:C0:F7:8A:D3:03:12:E4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E699A4077A87114A3532FD22E5C0F78AD30312E4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/460853EAAA676F37C89BE8840FD41F02F5FE23FC8E3B18B8635BC0582814F77B/0/323830333a633634303a3a2f33322d3332203d3e20323633383334.roa
Signing time:             Tue 04 Feb 2025 18:19:05 +0000
ROA not before:           Tue 04 Feb 2025 18:14:05 +0000
ROA not after:            Tue 03 Feb 2026 18:19:05 +0000
asID:                     263834
IP address blocks:        2803:c640::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/460853EAAA676F37C89BE8840FD41F02F5FE23FC8E3B18B8635BC0582814F77B/0/E699A4077A87114A3532FD22E5C0F78AD30312E4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/460853EAAA676F37C89BE8840FD41F02F5FE23FC8E3B18B8635BC0582814F77B/0/E699A4077A87114A3532FD22E5C0F78AD30312E4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E699A4077A87114A3532FD22E5C0F78AD30312E4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:f5:d9:5b:3a:32:10:93:5b:22:36:45:d0:e2:5f:d8:c0:74:36:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E699A4077A87114A3532FD22E5C0F78AD30312E4
        Validity
            Not Before: Feb  4 18:14:05 2025 GMT
            Not After : Feb  3 18:19:05 2026 GMT
        Subject: CN=7A767E4CF6FC71E3EEC920D2B629F24E1AD5136C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:ab:1b:91:67:fa:57:bf:e5:43:b6:85:18:8a:
                    7a:4d:80:e1:af:0e:32:4d:6f:5c:a4:87:de:17:1b:
                    0b:74:ae:ef:bf:76:eb:7d:50:9b:6b:5f:8d:df:c7:
                    7e:f1:6e:0b:f6:33:26:1a:75:15:14:03:35:eb:24:
                    e5:0d:73:58:8a:23:ac:3a:25:28:73:32:6b:5f:77:
                    77:32:59:0b:a0:bc:6c:f4:81:5c:c4:1b:aa:db:b4:
                    60:20:0d:50:68:43:ad:19:44:f9:72:06:3a:96:1b:
                    cc:a0:cb:f4:a3:81:c3:e3:44:85:49:b8:d6:b9:ef:
                    a2:db:ea:a6:18:9c:35:9e:91:d0:0a:ba:0c:17:18:
                    7d:6a:48:f4:d6:e5:eb:ce:4a:c5:4b:db:e2:b5:52:
                    35:e8:7b:be:27:b9:22:1f:19:0d:95:cf:9b:ea:be:
                    aa:57:91:75:3d:71:79:70:c5:3a:dd:58:14:c7:9e:
                    0d:bc:00:b7:aa:b3:9b:f3:61:47:a3:51:51:5a:3e:
                    7f:ea:fd:e1:a5:38:40:e6:84:2e:ea:4c:d5:c1:7d:
                    b2:2e:4e:f2:5d:be:ee:f3:b0:cb:7f:a6:30:9c:ee:
                    bb:c6:aa:48:4d:71:a5:a3:fb:8f:66:e4:4b:b9:36:
                    71:d5:93:ea:33:96:e0:f0:b8:fd:da:f5:84:35:0d:
                    61:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:76:7E:4C:F6:FC:71:E3:EE:C9:20:D2:B6:29:F2:4E:1A:D5:13:6C
            X509v3 Authority Key Identifier:
                keyid:E6:99:A4:07:7A:87:11:4A:35:32:FD:22:E5:C0:F7:8A:D3:03:12:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/460853EAAA676F37C89BE8840FD41F02F5FE23FC8E3B18B8635BC0582814F77B/0/E699A4077A87114A3532FD22E5C0F78AD30312E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E699A4077A87114A3532FD22E5C0F78AD30312E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/460853EAAA676F37C89BE8840FD41F02F5FE23FC8E3B18B8635BC0582814F77B/0/323830333a633634303a3a2f33322d3332203d3e20323633383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c640::/32

    Signature Algorithm: sha256WithRSAEncryption
         2c:33:10:8f:e2:03:35:6e:1d:52:20:9c:18:5b:92:4f:3c:0d:
         6b:37:46:25:b0:c5:ab:61:80:0b:c1:b8:38:c3:b0:14:04:47:
         41:06:3a:36:2e:f8:3d:73:83:8d:68:0f:97:1e:e4:80:34:38:
         c5:a2:37:8a:6a:b3:d5:0d:8c:f0:43:9d:c0:cc:e1:76:df:54:
         ac:5f:4c:e2:54:6d:2b:a7:ce:48:cc:40:24:28:01:7f:f3:e7:
         db:91:cb:99:c7:4b:54:e7:f1:10:e1:f2:e9:c5:0d:1f:e7:28:
         c4:6f:62:f2:54:25:5f:25:01:5e:c7:1f:cf:ec:d3:1d:d9:62:
         e2:0f:37:32:1d:0e:27:e7:06:68:8b:03:62:81:4a:1b:6c:a6:
         a8:c4:4d:bf:0b:17:c4:5d:27:2b:c3:d7:dc:10:a1:6f:44:1d:
         bd:a7:84:a3:c0:21:cd:8e:db:98:0a:c9:ba:24:ae:ca:ce:04:
         96:81:74:34:00:b4:e2:7d:c3:d4:b0:f1:f5:ec:4d:f9:e0:75:
         a2:aa:67:1b:f5:dc:0f:1a:8e:99:ca:62:e8:24:c8:ce:06:54:
         4d:31:9c:79:31:3c:ff:ff:a5:ac:87:3f:e1:e9:d0:49:da:20:
         86:b3:c1:0e:43:56:30:0f:ab:04:15:ad:fd:10:a7:9d:8b:ec:
         6a:66:20:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:19:25 2025 by rpki-client