Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/323830333a6630303a333a3a2f34382d3438203d3e20323632313832.roa
File:                     323830333a6630303a333a3a2f34382d3438203d3e20323632313832.roa (raw, json)
Hash identifier:          Jo2lGPWZpEYg5Du/5uXbePsPens8LY/hNb/MbPtm8WE=
Subject key identifier:   AF:B1:00:CB:90:EF:47:8D:F3:31:03:AC:7A:9F:E1:14:AE:92:4B:F8
Certificate issuer:       /CN=3D608F1A58C367A78F93EDCEF6DA6EACD069209B
Certificate serial:       3090C894FA0C02D1B494B26D0E8E9562081511A5
Authority key identifier: 3D:60:8F:1A:58:C3:67:A7:8F:93:ED:CE:F6:DA:6E:AC:D0:69:20:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/323830333a6630303a333a3a2f34382d3438203d3e20323632313832.roa
Signing time:             Mon 10 Feb 2025 20:09:29 +0000
ROA not before:           Mon 10 Feb 2025 20:04:29 +0000
ROA not after:            Mon 09 Feb 2026 20:09:29 +0000
asID:                     262182
IP address blocks:        2803:f00:3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 04:49:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:90:c8:94:fa:0c:02:d1:b4:94:b2:6d:0e:8e:95:62:08:15:11:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D608F1A58C367A78F93EDCEF6DA6EACD069209B
        Validity
            Not Before: Feb 10 20:04:29 2025 GMT
            Not After : Feb  9 20:09:29 2026 GMT
        Subject: CN=AFB100CB90EF478DF33103AC7A9FE114AE924BF8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:dc:76:cc:8c:96:7a:11:2d:5e:28:63:ac:d0:
                    f2:aa:5c:7f:ea:ba:4d:12:3e:ef:02:38:51:1b:94:
                    3c:3d:76:2f:d7:1f:3d:dc:fb:b9:03:05:78:f4:c9:
                    d4:83:d5:08:94:f8:df:15:42:4d:70:0e:bc:49:a6:
                    fa:47:dd:dc:6d:92:36:01:1c:7c:ac:bf:bc:bd:ec:
                    69:46:40:66:30:0d:78:4d:06:db:f2:94:92:96:05:
                    97:50:57:ba:55:66:85:25:67:bd:25:f7:3b:0b:10:
                    d6:5f:5f:d2:6d:9d:85:4a:36:11:e5:df:72:39:64:
                    07:f0:d8:f0:12:60:b5:b3:f0:10:9a:eb:e3:13:f0:
                    be:84:93:bd:96:1d:f5:fb:1b:f8:d9:46:51:ad:41:
                    21:60:e7:ff:bd:8d:5b:2f:a0:9d:ef:f7:c5:21:16:
                    95:75:8b:41:c6:c7:bc:63:9f:43:f4:d6:69:89:11:
                    cd:ee:1d:78:cf:dd:1f:71:58:fd:1e:f4:05:be:50:
                    d8:f8:bc:a8:ad:7e:a0:37:4d:a4:23:56:28:6b:d3:
                    19:13:4c:46:9b:32:78:fa:87:a5:db:12:cb:b3:48:
                    fe:0b:8f:86:1f:14:5c:e0:c2:29:68:6f:2a:c8:f7:
                    07:2c:b3:98:bc:aa:42:73:51:3a:87:f9:df:a3:eb:
                    00:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:B1:00:CB:90:EF:47:8D:F3:31:03:AC:7A:9F:E1:14:AE:92:4B:F8
            X509v3 Authority Key Identifier:
                keyid:3D:60:8F:1A:58:C3:67:A7:8F:93:ED:CE:F6:DA:6E:AC:D0:69:20:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/323830333a6630303a333a3a2f34382d3438203d3e20323632313832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f00:3::/48

    Signature Algorithm: sha256WithRSAEncryption
         4b:f0:ad:2c:f8:ec:7a:e5:e2:99:78:03:61:16:0d:6d:e5:d1:
         27:b8:16:db:fe:02:f6:9c:4a:fa:58:ff:18:1b:df:c0:09:4d:
         d8:65:85:65:b0:66:8b:cf:79:58:27:22:0b:61:d8:4f:48:9f:
         56:20:57:d2:96:25:83:aa:23:74:1c:07:bc:f0:2f:a3:1f:5d:
         3c:92:8a:90:30:3e:0d:8b:a4:36:a6:78:40:a6:c8:e5:e6:17:
         62:cd:0c:2b:f4:b2:c3:06:77:4c:41:22:67:27:49:a3:a3:45:
         44:a0:57:03:aa:b1:eb:db:9d:74:20:63:35:03:a4:33:2f:36:
         57:e8:5a:b1:48:6f:fe:ff:52:aa:27:2f:bd:e9:57:81:04:2c:
         ae:6f:a2:08:3f:a8:45:31:a8:58:c6:d5:2f:2f:a8:c5:53:ef:
         cc:a6:d7:f7:76:82:3e:4b:d9:b4:4b:8a:a8:6d:59:6f:de:20:
         23:05:b4:f4:f5:b1:fc:84:ff:75:d1:87:a8:af:f7:12:94:ff:
         7b:a1:89:38:2d:c4:dd:df:43:2a:ab:9f:e3:af:5b:84:e5:77:
         c8:21:96:97:51:bf:39:1b:bb:70:9c:19:7c:fe:91:c6:7e:83:
         0e:9e:84:02:de:61:60:b8:0b:02:b0:dd:6c:e1:09:9d:35:95:
         b9:58:02:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 22:17:47 2025 by rpki-client