Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/323830333a6630303a3a2f34382d3438203d3e20323632313832.roa
File:                     323830333a6630303a3a2f34382d3438203d3e20323632313832.roa (raw, json)
Hash identifier:          Y9k5nY+GH3PAJFL+ZcJ+YQLDfNC5hhjsEb6GurS3eAQ=
Subject key identifier:   10:03:74:A3:D1:CF:FD:A5:54:DF:C4:6D:0F:14:25:EE:4B:5D:D0:0B
Certificate issuer:       /CN=3D608F1A58C367A78F93EDCEF6DA6EACD069209B
Certificate serial:       6DC71FCBF3B2492218DD90443D66BFB899FE7327
Authority key identifier: 3D:60:8F:1A:58:C3:67:A7:8F:93:ED:CE:F6:DA:6E:AC:D0:69:20:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/323830333a6630303a3a2f34382d3438203d3e20323632313832.roa
Signing time:             Mon 10 Feb 2025 20:09:31 +0000
ROA not before:           Mon 10 Feb 2025 20:04:31 +0000
ROA not after:            Mon 09 Feb 2026 20:09:31 +0000
asID:                     262182
IP address blocks:        2803:f00::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:c7:1f:cb:f3:b2:49:22:18:dd:90:44:3d:66:bf:b8:99:fe:73:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D608F1A58C367A78F93EDCEF6DA6EACD069209B
        Validity
            Not Before: Feb 10 20:04:31 2025 GMT
            Not After : Feb  9 20:09:31 2026 GMT
        Subject: CN=100374A3D1CFFDA554DFC46D0F1425EE4B5DD00B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:96:97:93:21:5b:92:43:23:19:1f:2f:9e:7a:
                    06:24:29:09:88:88:f0:3a:fa:c2:1d:a2:5e:08:39:
                    0e:31:5a:a9:cb:d9:03:b8:e2:87:68:96:60:63:fd:
                    4b:8d:cd:f0:ec:f3:ad:9b:a4:b8:1f:ed:1d:50:93:
                    4e:91:33:64:ba:a9:06:69:7d:71:d9:cd:9f:4c:27:
                    c1:ef:aa:1b:49:fb:16:7b:b3:8c:59:b6:d0:31:21:
                    33:db:b9:22:7b:2c:aa:f4:15:85:a2:e8:f0:b4:5a:
                    d7:62:39:87:99:c4:f1:11:1f:17:55:30:89:84:bd:
                    da:94:c3:30:9f:53:95:81:bf:c5:ed:d1:0c:93:54:
                    22:af:3d:46:4c:fe:a2:34:2a:f2:24:43:4c:74:3e:
                    d8:ba:d2:fe:29:cd:8d:eb:84:4d:69:49:08:59:4d:
                    c3:c7:12:c7:8c:d7:37:5f:bd:60:dc:3d:25:14:33:
                    5f:10:f8:02:32:64:53:82:8e:78:1d:8f:28:da:ff:
                    d8:82:d2:cc:90:dc:ab:6b:04:ae:b1:17:c4:7a:31:
                    ab:7f:a5:73:0d:9c:d5:79:8d:e7:e2:1a:89:32:79:
                    80:f4:c5:3d:ed:63:7d:25:ce:82:03:46:3e:d0:12:
                    41:91:1f:fa:9a:0f:0d:c6:fe:fa:74:bc:f9:e2:12:
                    69:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:03:74:A3:D1:CF:FD:A5:54:DF:C4:6D:0F:14:25:EE:4B:5D:D0:0B
            X509v3 Authority Key Identifier:
                keyid:3D:60:8F:1A:58:C3:67:A7:8F:93:ED:CE:F6:DA:6E:AC:D0:69:20:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/323830333a6630303a3a2f34382d3438203d3e20323632313832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f00::/48

    Signature Algorithm: sha256WithRSAEncryption
         1a:1f:b7:6a:ef:a2:b0:96:16:46:27:c9:d4:a4:eb:66:7c:e2:
         ac:28:1c:40:5f:f9:55:5a:d3:ff:53:15:04:ce:78:25:1b:5a:
         42:04:2e:55:a1:7b:15:4d:d0:c8:eb:ed:df:2b:da:8d:99:d2:
         5f:61:ec:50:d3:a0:0a:aa:d2:7e:55:49:fd:f8:a2:73:f6:ca:
         7c:60:00:08:75:19:d8:08:30:f1:a9:65:20:a8:7b:6e:4c:9b:
         00:b1:4c:8d:78:13:86:ec:d7:77:6e:99:bd:0c:76:50:d8:49:
         19:a6:06:15:95:10:c0:20:b5:ea:bd:54:a5:c9:53:04:27:0d:
         e0:9d:91:3e:2b:64:ca:18:dc:8a:9a:d3:c2:a9:27:21:e0:b6:
         f4:a2:52:60:72:8d:f8:40:34:2c:a2:e8:de:91:e5:c1:48:49:
         f9:df:59:da:7d:1c:fc:5d:d6:df:2a:02:1a:56:74:33:a1:cb:
         c8:91:14:69:29:07:f1:e0:f8:b7:8c:77:eb:76:c2:22:f0:5f:
         a5:93:e8:80:49:6b:e6:9e:53:83:d0:37:40:b3:3c:32:4d:1a:
         86:2a:07:d4:14:6d:f9:de:f7:b0:98:b2:73:1e:bc:79:a6:d3:
         fb:92:54:a5:a7:0e:ee:d6:96:6b:71:7e:c2:8e:a7:2a:f4:98:
         20:f0:9b:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:21:44 2025 by rpki-client