Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4E2DB3758A19E3B8E1C876BF71FB32DC8502434CB84B581342AF174B7783D5DF/0/323830333a626661303a3a2f33322d3430203d3e20323637373939.roa
File:                     323830333a626661303a3a2f33322d3430203d3e20323637373939.roa (raw, json)
Hash identifier:          dfZ3jTArg/FiVzuql4dadltc3GCaG2UODMQ7V5l8YkY=
Subject key identifier:   DC:3C:93:A5:66:D2:78:3D:1C:A5:97:E8:47:E1:14:E9:3D:1A:D4:5B
Certificate issuer:       /CN=7C03E0A5C9816B574B54A163EC5F6E686D499DF2
Certificate serial:       024B8BD93012D25B2E9DFA1C420EE8C56643A843
Authority key identifier: 7C:03:E0:A5:C9:81:6B:57:4B:54:A1:63:EC:5F:6E:68:6D:49:9D:F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7C03E0A5C9816B574B54A163EC5F6E686D499DF2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4E2DB3758A19E3B8E1C876BF71FB32DC8502434CB84B581342AF174B7783D5DF/0/323830333a626661303a3a2f33322d3430203d3e20323637373939.roa
Signing time:             Tue 04 Feb 2025 18:54:06 +0000
ROA not before:           Tue 04 Feb 2025 18:49:06 +0000
ROA not after:            Tue 03 Feb 2026 18:54:06 +0000
asID:                     267799
IP address blocks:        2803:bfa0::/32 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4E2DB3758A19E3B8E1C876BF71FB32DC8502434CB84B581342AF174B7783D5DF/0/7C03E0A5C9816B574B54A163EC5F6E686D499DF2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4E2DB3758A19E3B8E1C876BF71FB32DC8502434CB84B581342AF174B7783D5DF/0/7C03E0A5C9816B574B54A163EC5F6E686D499DF2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7C03E0A5C9816B574B54A163EC5F6E686D499DF2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 17:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:4b:8b:d9:30:12:d2:5b:2e:9d:fa:1c:42:0e:e8:c5:66:43:a8:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C03E0A5C9816B574B54A163EC5F6E686D499DF2
        Validity
            Not Before: Feb  4 18:49:06 2025 GMT
            Not After : Feb  3 18:54:06 2026 GMT
        Subject: CN=DC3C93A566D2783D1CA597E847E114E93D1AD45B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:51:19:bf:51:77:c8:b7:06:b7:b4:d2:0b:39:
                    9c:70:4a:98:3b:35:6d:df:97:5a:ed:c6:58:aa:aa:
                    23:8f:f0:cd:af:d9:db:d0:40:76:85:bf:dc:4e:cf:
                    1b:c3:5a:6c:64:ec:81:08:9f:37:82:c0:ad:8d:88:
                    b6:a3:02:f1:06:14:b0:60:fe:15:db:e5:22:96:74:
                    bb:02:f7:78:ef:63:54:72:22:81:a4:7a:47:a5:ff:
                    ba:70:7b:67:ea:5f:01:00:70:5b:58:44:68:45:aa:
                    2b:4b:e7:1e:23:65:22:f5:3c:d4:b9:00:1d:dc:aa:
                    8e:36:cc:ec:a3:16:f7:8f:fe:19:ee:7b:af:11:46:
                    42:ad:56:bb:82:df:46:b2:fd:5f:96:4a:08:04:83:
                    87:47:e4:b8:61:e2:b4:20:db:30:90:e7:94:f5:8c:
                    e2:f2:e0:93:a7:45:ab:07:cd:be:1a:5d:84:a3:5f:
                    d3:9f:68:6e:37:8d:f7:e5:04:57:86:8e:9f:54:40:
                    96:2b:a9:21:15:83:91:07:d5:42:34:57:40:70:fe:
                    db:18:dc:07:6b:3d:4d:79:05:7d:c0:df:26:db:d7:
                    27:a7:a0:90:37:38:39:18:f0:fb:1c:b3:0f:f8:8b:
                    fa:f5:72:13:58:94:92:8d:e9:62:8f:03:d3:af:f1:
                    45:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:3C:93:A5:66:D2:78:3D:1C:A5:97:E8:47:E1:14:E9:3D:1A:D4:5B
            X509v3 Authority Key Identifier:
                keyid:7C:03:E0:A5:C9:81:6B:57:4B:54:A1:63:EC:5F:6E:68:6D:49:9D:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4E2DB3758A19E3B8E1C876BF71FB32DC8502434CB84B581342AF174B7783D5DF/0/7C03E0A5C9816B574B54A163EC5F6E686D499DF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7C03E0A5C9816B574B54A163EC5F6E686D499DF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4E2DB3758A19E3B8E1C876BF71FB32DC8502434CB84B581342AF174B7783D5DF/0/323830333a626661303a3a2f33322d3430203d3e20323637373939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:bfa0::/32

    Signature Algorithm: sha256WithRSAEncryption
         8f:6b:41:63:7e:14:47:97:cc:5c:fd:c6:71:00:69:fc:df:04:
         73:4c:b1:05:e9:17:1d:50:ee:78:a5:e7:e6:73:02:fc:97:eb:
         27:44:d6:d8:50:fe:03:7f:fd:f6:29:48:0c:64:fe:75:8d:c5:
         70:1f:aa:26:d2:70:4f:17:a3:d1:ea:d2:b9:a3:93:94:cb:10:
         84:2d:a9:ab:f0:3d:53:90:2e:44:62:cf:26:6b:6b:7f:88:29:
         02:48:10:0d:dc:34:9f:ef:c0:88:77:9e:7b:5e:35:fa:1c:42:
         d2:2a:68:9d:97:4a:fb:c1:98:ac:b2:2f:ed:21:84:61:e6:c9:
         eb:f3:36:1a:01:7f:de:b1:b6:35:e9:91:e5:77:f0:76:10:bc:
         b8:ad:91:e7:74:15:51:40:58:d4:f1:97:92:2e:4c:f4:bf:d8:
         53:24:38:a2:b8:f6:d1:b3:ab:14:27:a8:12:6e:06:26:a1:20:
         8e:04:90:bd:30:65:a2:bf:d8:6f:64:b1:b2:58:7e:f9:63:ca:
         4a:5a:b3:45:1b:7f:3a:78:35:6f:1d:b8:ae:76:8b:5d:b4:75:
         67:0a:6f:fa:d5:3c:29:9c:a5:4b:16:56:24:f9:7b:a9:8d:bc:
         94:1d:65:04:d2:b4:e4:47:e2:81:81:dc:86:d7:fd:a1:fa:d3:
         34:60:47:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 22:27:18 2025 by rpki-client