Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/323830333a6630303a3638303a3a2f34322d3438203d3e20323632313832.roa
File:                     323830333a6630303a3638303a3a2f34322d3438203d3e20323632313832.roa (raw, json)
Hash identifier:          a9KJaRAdncJ84tUGBmp37W5hphHzI0lncrnQpIQwogo=
Subject key identifier:   D4:B3:50:9E:C3:8F:17:44:32:A2:C3:BA:3F:3D:EE:9F:84:0E:BA:C9
Certificate issuer:       /CN=3D608F1A58C367A78F93EDCEF6DA6EACD069209B
Certificate serial:       5D899CF4538339F0D96595AF30433EE45212AFE6
Authority key identifier: 3D:60:8F:1A:58:C3:67:A7:8F:93:ED:CE:F6:DA:6E:AC:D0:69:20:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/323830333a6630303a3638303a3a2f34322d3438203d3e20323632313832.roa
Signing time:             Mon 10 Feb 2025 20:09:28 +0000
ROA not before:           Mon 10 Feb 2025 20:04:28 +0000
ROA not after:            Mon 09 Feb 2026 20:09:28 +0000
asID:                     262182
IP address blocks:        2803:f00:680::/42 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 17:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:89:9c:f4:53:83:39:f0:d9:65:95:af:30:43:3e:e4:52:12:af:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D608F1A58C367A78F93EDCEF6DA6EACD069209B
        Validity
            Not Before: Feb 10 20:04:28 2025 GMT
            Not After : Feb  9 20:09:28 2026 GMT
        Subject: CN=D4B3509EC38F174432A2C3BA3F3DEE9F840EBAC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:25:2e:b2:b5:af:43:63:d0:1f:d3:8d:3d:0d:
                    6d:14:c9:74:3d:02:a3:54:db:ce:bd:8d:87:67:75:
                    1a:23:3c:7b:aa:23:7b:29:15:1f:1a:20:f5:d1:fc:
                    ba:10:57:63:62:08:b4:c4:a2:ee:fe:e9:51:44:b4:
                    34:7a:a3:05:24:cb:8f:f5:40:65:8e:57:29:fb:fa:
                    35:c8:c0:1c:02:9b:7d:2f:9f:06:c1:fb:05:1b:3d:
                    b1:80:2d:87:ca:40:ce:0e:7c:7a:19:15:23:35:ec:
                    33:1e:dd:50:c6:e7:0f:61:3a:c4:cc:09:29:35:f4:
                    01:a1:ee:71:8c:1c:67:be:e7:c3:05:04:5a:99:f0:
                    20:67:fc:4d:4e:05:7a:7e:18:9a:22:7c:4f:57:e7:
                    8b:dc:ef:53:42:bd:91:5b:f4:36:05:6b:5f:4c:ab:
                    be:26:d1:a4:5d:8c:83:a5:eb:f5:23:e2:2f:42:9f:
                    c2:e1:d8:1c:69:64:28:e2:26:c0:9c:a9:36:08:c5:
                    2c:32:2e:03:0c:34:1e:a7:04:f7:65:62:f8:18:80:
                    73:37:32:34:6a:50:bb:a8:e3:0f:24:1f:63:05:d6:
                    9c:a5:5e:ad:0c:81:d0:57:93:6d:d0:a0:7d:57:5c:
                    7e:32:22:85:d0:e2:cb:db:ea:d4:b2:0c:c6:1e:52:
                    ab:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:B3:50:9E:C3:8F:17:44:32:A2:C3:BA:3F:3D:EE:9F:84:0E:BA:C9
            X509v3 Authority Key Identifier:
                keyid:3D:60:8F:1A:58:C3:67:A7:8F:93:ED:CE:F6:DA:6E:AC:D0:69:20:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/323830333a6630303a3638303a3a2f34322d3438203d3e20323632313832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f00:680::/42

    Signature Algorithm: sha256WithRSAEncryption
         d7:2d:dd:41:10:6d:41:7b:5e:c3:ca:ad:c3:64:7c:cf:e3:92:
         29:23:48:e1:9c:a6:02:c5:64:a9:e1:f5:35:15:d5:c4:39:7e:
         6f:98:1b:9a:0c:40:75:ee:95:44:fe:55:eb:bf:c5:fc:35:b3:
         08:27:10:67:ca:03:b5:4a:44:06:b4:b2:34:d5:34:7e:33:2a:
         7e:4b:cb:2a:78:6c:cb:6b:b7:81:94:40:2c:3d:52:4a:ca:dd:
         33:14:b2:c9:59:91:80:83:25:18:b5:c8:5b:6b:9b:81:4c:0a:
         ea:6c:38:f1:df:f8:43:2c:a8:40:0e:62:e4:99:7a:5f:96:e9:
         8c:c5:c8:ef:cc:be:b7:36:a9:60:2f:a8:91:f4:94:04:29:ae:
         08:74:a0:42:3d:10:83:a5:d2:01:43:19:92:f2:8b:f3:f2:de:
         c8:62:2e:cd:a9:90:e1:08:7b:13:13:65:af:ad:dd:28:73:8f:
         5b:0a:71:08:45:e4:43:c8:ab:d5:c8:29:1b:5b:bf:0b:ab:a0:
         7f:fe:cc:f6:0f:c6:c0:64:41:bf:f0:87:ce:96:af:8c:eb:19:
         58:d1:4d:65:29:63:b0:65:f7:b5:c0:4d:3e:59:16:9f:9a:5f:
         f3:d2:f7:55:7a:d6:57:59:bd:1f:93:69:98:97:72:10:0c:e6:
         af:75:97:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 19:58:13 2025 by rpki-client