Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4F3638C8DF693002EB8C051A778FCFE2CE757B735E1CFA668B3F601E7CF617D7/0/323830333a323263303a3a2f33322d3332203d3e20323634383337.roa
File:                     323830333a323263303a3a2f33322d3332203d3e20323634383337.roa (raw, json)
Hash identifier:          FivkCR/URb1DB7x+IFZPaqoaXxAUPC7cmu/guUrzhns=
Subject key identifier:   C9:DE:16:EE:21:4F:CC:9C:65:F8:61:40:14:2C:35:49:CD:4F:F7:BE
Certificate issuer:       /CN=4F1AF54C46F29B17E758E9F9463DCF9650C71A8F
Certificate serial:       5F514BA4C97DFE2F54291B532210A3F9B36C1A30
Authority key identifier: 4F:1A:F5:4C:46:F2:9B:17:E7:58:E9:F9:46:3D:CF:96:50:C7:1A:8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4F1AF54C46F29B17E758E9F9463DCF9650C71A8F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4F3638C8DF693002EB8C051A778FCFE2CE757B735E1CFA668B3F601E7CF617D7/0/323830333a323263303a3a2f33322d3332203d3e20323634383337.roa
Signing time:             Tue 04 Feb 2025 18:21:27 +0000
ROA not before:           Tue 04 Feb 2025 18:16:27 +0000
ROA not after:            Tue 03 Feb 2026 18:21:27 +0000
asID:                     264837
IP address blocks:        2803:22c0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4F3638C8DF693002EB8C051A778FCFE2CE757B735E1CFA668B3F601E7CF617D7/0/4F1AF54C46F29B17E758E9F9463DCF9650C71A8F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4F3638C8DF693002EB8C051A778FCFE2CE757B735E1CFA668B3F601E7CF617D7/0/4F1AF54C46F29B17E758E9F9463DCF9650C71A8F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4F1AF54C46F29B17E758E9F9463DCF9650C71A8F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 13:17:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:51:4b:a4:c9:7d:fe:2f:54:29:1b:53:22:10:a3:f9:b3:6c:1a:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F1AF54C46F29B17E758E9F9463DCF9650C71A8F
        Validity
            Not Before: Feb  4 18:16:27 2025 GMT
            Not After : Feb  3 18:21:27 2026 GMT
        Subject: CN=C9DE16EE214FCC9C65F86140142C3549CD4FF7BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:bc:78:75:71:87:59:ef:c5:8e:4d:fb:1d:d7:
                    3e:55:8b:9f:7c:b3:69:15:56:65:16:6d:d6:a6:72:
                    54:8e:aa:96:1a:67:91:b4:b7:d4:6a:9f:43:f5:23:
                    29:42:ca:45:ba:4d:9e:c4:75:a6:9b:67:16:02:7c:
                    23:ba:d6:d6:64:57:c3:8d:a1:9e:49:80:b0:32:1c:
                    9d:23:fb:2f:7d:d8:19:46:08:85:c0:2a:ef:f9:29:
                    b1:98:b4:f7:2d:db:c4:4c:1f:20:f5:9a:3f:c0:e8:
                    60:81:3f:f6:d0:e3:c9:0a:50:96:05:91:0e:01:ce:
                    34:16:95:48:05:17:ea:3c:d8:66:51:26:b2:a1:a1:
                    23:12:fd:d4:bf:a0:98:99:58:4a:51:65:74:3b:1f:
                    4d:53:90:1c:60:e8:8a:85:08:35:11:56:0f:7c:8f:
                    fd:39:fd:25:b0:2e:5c:cb:32:dd:d0:14:ef:a2:83:
                    56:5d:5e:28:8c:25:24:8f:37:e0:e3:ef:b0:dd:aa:
                    ff:ec:19:f8:99:81:e0:3e:58:e1:76:cf:2c:92:fa:
                    d5:5b:ac:0e:2d:39:67:90:93:be:38:91:0a:a7:c3:
                    62:e6:ec:ab:0d:84:34:9a:a1:9c:81:68:09:e1:7c:
                    34:db:75:44:dc:04:79:a0:a1:a2:34:00:07:9c:29:
                    db:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:DE:16:EE:21:4F:CC:9C:65:F8:61:40:14:2C:35:49:CD:4F:F7:BE
            X509v3 Authority Key Identifier:
                keyid:4F:1A:F5:4C:46:F2:9B:17:E7:58:E9:F9:46:3D:CF:96:50:C7:1A:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4F3638C8DF693002EB8C051A778FCFE2CE757B735E1CFA668B3F601E7CF617D7/0/4F1AF54C46F29B17E758E9F9463DCF9650C71A8F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4F1AF54C46F29B17E758E9F9463DCF9650C71A8F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4F3638C8DF693002EB8C051A778FCFE2CE757B735E1CFA668B3F601E7CF617D7/0/323830333a323263303a3a2f33322d3332203d3e20323634383337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:22c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         13:a4:d6:2d:25:8f:23:17:3b:81:a9:6f:99:8c:bd:a8:4e:cf:
         af:1d:80:57:7c:fb:68:4d:8a:cb:ef:28:d4:ea:fa:2b:c5:5f:
         20:72:3d:6f:a6:a3:0a:c3:79:ff:42:3a:56:b2:79:e0:3e:03:
         60:b0:4f:65:bd:67:92:cf:56:43:da:9f:c7:83:b5:08:ec:ea:
         37:3e:b4:77:a3:93:d3:f6:fe:27:ae:67:d8:8e:6b:41:fb:5e:
         99:09:6c:7e:46:ed:04:01:08:cb:0f:18:4a:80:1c:60:7a:6b:
         de:0a:94:3b:93:2f:18:3e:d7:16:ea:ab:1e:dd:3d:4a:89:c4:
         1b:48:2f:33:e2:64:56:6e:09:e6:da:f2:2e:fd:48:e1:89:e4:
         c4:d9:d9:aa:e1:8b:57:b2:f4:3a:c1:20:14:14:14:17:36:43:
         07:4f:75:08:34:9d:87:de:f3:8d:d5:9b:1e:d3:df:3b:d6:bf:
         82:35:2b:11:34:be:7d:02:93:65:37:40:0b:69:ed:be:63:27:
         63:fc:2c:ab:6a:de:5d:35:32:1e:51:67:9e:bb:fc:2c:94:b4:
         3b:ce:de:09:34:8f:40:25:0a:3a:d7:fc:cd:48:3a:e2:84:37:
         4f:94:a1:79:3b:2f:f9:90:e0:d7:d7:ee:81:51:f6:41:e6:2c:
         d9:46:1f:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:00:12 2025 by rpki-client