Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/52214818C59A13029495CE71BF9E834CE46B03E04DBBAEB14C1CD6CD56E1968E/0/323830333a373830303a3a2f33322d3438203d3e20323633373033.roa
File:                     323830333a373830303a3a2f33322d3438203d3e20323633373033.roa (raw, json)
Hash identifier:          XEsx9tZp5YpOR5pS3/q0yVViM1BeUC12v2caJUEE2N0=
Subject key identifier:   42:91:EF:CF:CE:E0:68:90:04:FB:A7:D1:34:BA:FC:55:89:E0:E6:E7
Certificate issuer:       /CN=C4F3D6A93ED39200B7BE0E7DA2877BFEBD304184
Certificate serial:       278E3A1ADC446D8A31234C563D4A77243A336D5C
Authority key identifier: C4:F3:D6:A9:3E:D3:92:00:B7:BE:0E:7D:A2:87:7B:FE:BD:30:41:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4F3D6A93ED39200B7BE0E7DA2877BFEBD304184.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/52214818C59A13029495CE71BF9E834CE46B03E04DBBAEB14C1CD6CD56E1968E/0/323830333a373830303a3a2f33322d3438203d3e20323633373033.roa
Signing time:             Tue 04 Feb 2025 18:26:08 +0000
ROA not before:           Tue 04 Feb 2025 18:21:08 +0000
ROA not after:            Tue 03 Feb 2026 18:26:08 +0000
asID:                     263703
IP address blocks:        2803:7800::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/52214818C59A13029495CE71BF9E834CE46B03E04DBBAEB14C1CD6CD56E1968E/0/C4F3D6A93ED39200B7BE0E7DA2877BFEBD304184.crl
                          rsync://repository.lacnic.net/rpki/lacnic/52214818C59A13029495CE71BF9E834CE46B03E04DBBAEB14C1CD6CD56E1968E/0/C4F3D6A93ED39200B7BE0E7DA2877BFEBD304184.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4F3D6A93ED39200B7BE0E7DA2877BFEBD304184.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:8e:3a:1a:dc:44:6d:8a:31:23:4c:56:3d:4a:77:24:3a:33:6d:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C4F3D6A93ED39200B7BE0E7DA2877BFEBD304184
        Validity
            Not Before: Feb  4 18:21:08 2025 GMT
            Not After : Feb  3 18:26:08 2026 GMT
        Subject: CN=4291EFCFCEE0689004FBA7D134BAFC5589E0E6E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:6f:37:a4:ec:71:56:61:04:03:56:35:11:e2:
                    6b:ac:c9:2f:04:e4:8d:c8:13:7f:3c:a6:a2:47:b8:
                    7c:0b:6d:d1:9d:8b:23:f8:27:4d:9d:ba:af:c7:db:
                    db:e0:25:ce:e5:86:61:9e:6a:57:ee:2b:d2:30:f1:
                    26:b5:12:95:83:4c:47:85:ab:25:8a:aa:ac:76:77:
                    67:07:36:68:a1:a7:c1:9a:ab:9b:18:00:72:aa:54:
                    82:cd:05:56:50:3d:72:a7:39:8a:6f:cb:e7:75:48:
                    68:ef:9f:11:8b:55:6b:7a:96:3f:65:2c:a8:8e:a4:
                    4b:3e:d0:06:af:a1:56:95:74:fa:7e:98:09:ee:f7:
                    13:3c:97:57:45:08:90:29:c0:5d:92:ab:8a:74:2d:
                    16:0e:e9:5a:1e:2a:59:fc:28:4f:69:31:78:f7:05:
                    49:8d:cc:bc:10:0b:f5:6a:15:a6:9d:5d:70:bc:d0:
                    23:84:df:53:b5:57:3c:ec:4c:02:0d:58:78:38:48:
                    60:42:4b:9f:97:f5:4d:7a:a2:69:fa:0b:ef:64:4b:
                    61:e0:eb:63:f8:2f:48:b9:7f:0b:90:ba:e7:73:62:
                    76:4d:37:58:1c:06:5b:53:f1:1c:88:e2:33:43:93:
                    00:b3:60:8b:3c:b7:11:3d:2b:c1:a4:a3:0d:98:59:
                    fb:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:91:EF:CF:CE:E0:68:90:04:FB:A7:D1:34:BA:FC:55:89:E0:E6:E7
            X509v3 Authority Key Identifier:
                keyid:C4:F3:D6:A9:3E:D3:92:00:B7:BE:0E:7D:A2:87:7B:FE:BD:30:41:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/52214818C59A13029495CE71BF9E834CE46B03E04DBBAEB14C1CD6CD56E1968E/0/C4F3D6A93ED39200B7BE0E7DA2877BFEBD304184.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4F3D6A93ED39200B7BE0E7DA2877BFEBD304184.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/52214818C59A13029495CE71BF9E834CE46B03E04DBBAEB14C1CD6CD56E1968E/0/323830333a373830303a3a2f33322d3438203d3e20323633373033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7800::/32

    Signature Algorithm: sha256WithRSAEncryption
         97:81:d3:15:e4:a5:94:78:c0:1e:be:d3:cf:de:ce:68:ba:84:
         f7:89:8d:47:93:7a:34:38:4c:6b:59:02:bc:a7:67:94:6d:3d:
         df:c3:a9:d8:e3:eb:65:c4:a8:8c:c3:0d:b1:f3:75:aa:8a:27:
         8c:36:66:62:24:09:6e:b0:54:21:22:39:6c:f4:00:fb:ab:94:
         a7:8c:9c:17:7b:43:08:87:15:24:49:79:03:fb:b6:f8:c0:7b:
         cb:2e:f4:ea:f5:03:93:52:47:73:70:f3:3c:d8:0d:a9:a8:c0:
         76:4d:4a:b1:e5:bc:f3:fe:69:7f:42:d0:6d:31:c8:2b:28:35:
         c9:85:2f:12:f1:09:ed:76:94:c1:e8:7a:ca:d3:ff:c3:dc:d1:
         f8:ba:54:20:d2:2b:d1:23:a2:01:3e:d7:52:6c:fd:39:85:55:
         bc:2f:fc:a2:b6:20:3c:b4:d8:14:2a:9b:66:d5:b5:e9:19:4a:
         12:2d:e2:d3:67:6e:57:4a:4b:c1:95:39:26:96:8f:bd:b8:88:
         a9:24:97:2c:4f:e9:60:76:b8:02:4b:1f:ef:f5:9c:18:da:3f:
         ca:c3:a1:66:96:19:c6:a6:f0:32:cd:f5:7e:63:05:1c:39:ae:
         f0:82:42:07:7b:6c:27:2f:b4:2b:51:8f:ac:fa:ca:cc:bb:ef:
         18:ff:05:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:48:23 2025 by rpki-client