Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4BECB9E2B3F5A22E924C370D2AD51C87A8EB028135C17D0BBB1C79BE10BCF52C/0/323830333a633232303a3a2f33322d3438203d3e203532343638.roa
File:                     323830333a633232303a3a2f33322d3438203d3e203532343638.roa (raw, json)
Hash identifier:          eEFePLWSpwoRmk/COUWbfLGVXGRY9D0WI4SpIFRhGCI=
Subject key identifier:   2F:12:EE:71:A3:AB:74:33:D5:72:16:BA:AD:05:56:F2:B6:00:DE:3F
Certificate issuer:       /CN=E74DAABF7E260E0A0AAD795F69C95998705429E3
Certificate serial:       1A80007865731C770D05CD9674A33F2682BBE857
Authority key identifier: E7:4D:AA:BF:7E:26:0E:0A:0A:AD:79:5F:69:C9:59:98:70:54:29:E3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E74DAABF7E260E0A0AAD795F69C95998705429E3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4BECB9E2B3F5A22E924C370D2AD51C87A8EB028135C17D0BBB1C79BE10BCF52C/0/323830333a633232303a3a2f33322d3438203d3e203532343638.roa
Signing time:             Tue 04 Feb 2025 18:32:11 +0000
ROA not before:           Tue 04 Feb 2025 18:27:11 +0000
ROA not after:            Tue 03 Feb 2026 18:32:11 +0000
asID:                     52468
IP address blocks:        2803:c220::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4BECB9E2B3F5A22E924C370D2AD51C87A8EB028135C17D0BBB1C79BE10BCF52C/0/E74DAABF7E260E0A0AAD795F69C95998705429E3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4BECB9E2B3F5A22E924C370D2AD51C87A8EB028135C17D0BBB1C79BE10BCF52C/0/E74DAABF7E260E0A0AAD795F69C95998705429E3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E74DAABF7E260E0A0AAD795F69C95998705429E3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:80:00:78:65:73:1c:77:0d:05:cd:96:74:a3:3f:26:82:bb:e8:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E74DAABF7E260E0A0AAD795F69C95998705429E3
        Validity
            Not Before: Feb  4 18:27:11 2025 GMT
            Not After : Feb  3 18:32:11 2026 GMT
        Subject: CN=2F12EE71A3AB7433D57216BAAD0556F2B600DE3F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:5f:c7:83:80:f4:40:6d:77:f5:5a:87:60:0e:
                    20:15:61:46:44:a8:5f:ab:ee:82:81:90:16:54:91:
                    fc:32:9c:36:f8:a5:3c:cb:ac:b4:d2:cd:a3:05:65:
                    8f:a1:75:74:e2:68:cd:3f:f2:9e:2e:a3:99:c2:b1:
                    d1:04:82:4a:a0:a7:ce:71:ac:4f:da:6a:65:fe:3e:
                    43:eb:b8:e6:61:fc:e7:23:9d:2c:b1:4c:2a:f4:ca:
                    c9:c4:4f:d2:f4:9b:e3:fe:98:f7:5d:05:8f:89:86:
                    d5:a0:1e:4f:fc:5d:7c:bc:67:23:58:f9:a5:c6:60:
                    8b:a9:5d:21:fc:39:cb:93:44:8a:fb:a8:a2:ae:7a:
                    1d:19:54:e3:ff:ba:26:bb:34:81:78:f7:47:58:7c:
                    76:d9:51:16:80:28:2e:95:04:c9:9b:38:5c:2c:b8:
                    7f:fa:8b:5f:90:4a:9f:07:3e:17:b0:e3:77:e9:f9:
                    4a:96:78:61:fa:bd:95:fd:3a:47:7b:96:17:37:37:
                    af:60:00:df:f6:6d:d8:b2:4d:8a:ee:96:ce:a6:70:
                    d7:c2:47:6e:e7:c1:18:ba:71:95:92:ce:23:ec:0d:
                    86:4a:37:41:36:d4:99:6c:c0:da:ae:09:18:e6:9e:
                    5d:a0:b6:eb:a2:df:cf:0c:c6:b3:cd:90:0f:b9:71:
                    5c:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:12:EE:71:A3:AB:74:33:D5:72:16:BA:AD:05:56:F2:B6:00:DE:3F
            X509v3 Authority Key Identifier:
                keyid:E7:4D:AA:BF:7E:26:0E:0A:0A:AD:79:5F:69:C9:59:98:70:54:29:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4BECB9E2B3F5A22E924C370D2AD51C87A8EB028135C17D0BBB1C79BE10BCF52C/0/E74DAABF7E260E0A0AAD795F69C95998705429E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E74DAABF7E260E0A0AAD795F69C95998705429E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4BECB9E2B3F5A22E924C370D2AD51C87A8EB028135C17D0BBB1C79BE10BCF52C/0/323830333a633232303a3a2f33322d3438203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c220::/32

    Signature Algorithm: sha256WithRSAEncryption
         91:da:4e:f0:30:23:37:36:6f:16:99:95:15:3f:33:3b:5f:8b:
         24:32:36:94:19:18:31:a5:c9:3c:11:05:8e:4e:4c:e4:04:62:
         ab:31:39:2c:7d:ac:c0:af:6b:16:29:09:0a:ca:b0:95:65:e1:
         81:7a:0d:d4:7f:82:fd:01:b2:dc:e0:cc:8f:e4:4c:a2:69:db:
         ad:c9:aa:c4:6b:8b:5d:8b:f2:10:98:e1:64:3c:7a:48:90:d6:
         a0:43:36:03:62:6e:79:79:51:e0:c8:52:50:2e:ee:99:04:06:
         a6:6e:33:c4:5e:a7:3d:af:a3:51:60:d1:37:1e:6a:65:72:cc:
         d7:65:c9:0e:fd:94:5b:93:6e:50:b6:60:ef:51:a7:20:96:ba:
         7f:4d:8e:a8:e7:b0:9f:d8:a1:91:e6:1b:32:73:63:09:28:a8:
         f1:90:03:96:38:61:9c:2e:45:8b:2a:43:5b:b7:99:9b:fa:40:
         6f:9d:6e:86:48:22:b3:b1:6c:72:af:89:fd:d1:7d:48:6e:c2:
         40:1a:a6:ba:25:12:a2:3f:f4:a8:be:b8:27:f7:1d:60:7a:4c:
         a9:a5:34:7d:ae:df:42:7e:97:01:a2:22:61:90:aa:57:fe:ef:
         3a:31:7b:a4:af:29:cd:e1:23:d1:63:ae:fb:4e:8d:b6:42:34:
         b5:e0:c7:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:08:38 2025 by rpki-client