Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/537F02F600231DC6310D94727E3E2B5B3D31D666E29F8A8417F77E64BA229314/0/323830333a396630303a313a3a2f34382d3438203d3e203237383133.roa
File:                     323830333a396630303a313a3a2f34382d3438203d3e203237383133.roa (raw, json)
Hash identifier:          qsFqfsA0CgHFgVwScWEzeus2y9aJ95xl6PEREkSjqL4=
Subject key identifier:   6E:1A:B8:CB:ED:8C:4E:10:05:E7:F4:31:49:82:08:89:1B:95:6A:F9
Certificate issuer:       /CN=32ACF58772BC97B9F0D9462619DA1F27850FDDB1
Certificate serial:       7A0A742560FC0996A9AC559054719745461EFD8F
Authority key identifier: 32:AC:F5:87:72:BC:97:B9:F0:D9:46:26:19:DA:1F:27:85:0F:DD:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/32ACF58772BC97B9F0D9462619DA1F27850FDDB1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/537F02F600231DC6310D94727E3E2B5B3D31D666E29F8A8417F77E64BA229314/0/323830333a396630303a313a3a2f34382d3438203d3e203237383133.roa
Signing time:             Tue 04 Feb 2025 20:04:23 +0000
ROA not before:           Tue 04 Feb 2025 19:59:23 +0000
ROA not after:            Tue 03 Feb 2026 20:04:23 +0000
asID:                     27813
IP address blocks:        2803:9f00:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/537F02F600231DC6310D94727E3E2B5B3D31D666E29F8A8417F77E64BA229314/0/32ACF58772BC97B9F0D9462619DA1F27850FDDB1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/537F02F600231DC6310D94727E3E2B5B3D31D666E29F8A8417F77E64BA229314/0/32ACF58772BC97B9F0D9462619DA1F27850FDDB1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/32ACF58772BC97B9F0D9462619DA1F27850FDDB1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:0a:74:25:60:fc:09:96:a9:ac:55:90:54:71:97:45:46:1e:fd:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32ACF58772BC97B9F0D9462619DA1F27850FDDB1
        Validity
            Not Before: Feb  4 19:59:23 2025 GMT
            Not After : Feb  3 20:04:23 2026 GMT
        Subject: CN=6E1AB8CBED8C4E1005E7F431498208891B956AF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:d8:b1:8c:25:1e:67:33:20:ff:83:b5:ca:12:
                    97:f0:e5:0e:b9:fe:24:a9:1e:81:52:a0:54:da:00:
                    88:d2:83:9a:95:9d:a9:b7:53:c2:db:e5:fc:65:ac:
                    33:af:f6:29:e6:f9:90:9d:54:a8:c2:d8:01:82:73:
                    cb:2e:d9:4f:73:3c:f5:76:29:30:8d:34:be:0a:79:
                    5e:60:ae:54:5d:9c:8d:7e:c3:e6:dd:2b:4b:f4:47:
                    11:a8:ec:83:21:78:64:cc:f4:33:18:d6:c6:28:a3:
                    ac:91:ae:e9:58:4f:e4:4d:0f:b5:42:52:77:28:d2:
                    a9:21:df:91:e6:b1:f0:4c:5a:56:0b:88:c1:0d:ef:
                    10:d6:5a:c4:4d:ec:24:27:8c:26:cf:bc:af:7a:34:
                    02:85:46:44:92:b9:85:1d:ce:76:04:9c:51:c5:e1:
                    c2:61:36:04:9a:91:ef:cf:13:af:f9:b7:d4:ed:91:
                    c3:21:0e:0f:58:1d:b9:50:51:c1:ab:06:ec:40:76:
                    61:b9:cf:13:12:40:b0:4d:96:da:bd:b5:4c:4a:ec:
                    04:13:6a:26:32:53:64:ce:7f:8d:c7:fd:9c:33:fa:
                    43:fc:ed:5f:7e:47:0d:7c:5c:a6:4a:ad:85:0f:17:
                    9b:a5:b4:7b:99:af:ac:68:87:e0:bd:a0:28:d7:07:
                    cb:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:1A:B8:CB:ED:8C:4E:10:05:E7:F4:31:49:82:08:89:1B:95:6A:F9
            X509v3 Authority Key Identifier:
                keyid:32:AC:F5:87:72:BC:97:B9:F0:D9:46:26:19:DA:1F:27:85:0F:DD:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/537F02F600231DC6310D94727E3E2B5B3D31D666E29F8A8417F77E64BA229314/0/32ACF58772BC97B9F0D9462619DA1F27850FDDB1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/32ACF58772BC97B9F0D9462619DA1F27850FDDB1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/537F02F600231DC6310D94727E3E2B5B3D31D666E29F8A8417F77E64BA229314/0/323830333a396630303a313a3a2f34382d3438203d3e203237383133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9f00:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         39:94:3f:c8:a9:a0:26:11:c5:34:89:97:81:30:46:c7:1a:fc:
         00:da:12:85:4a:08:49:c3:b8:83:f5:26:2a:f2:ef:b7:bc:cd:
         0a:75:32:bb:db:23:54:1b:3c:40:85:84:cc:67:24:61:b9:8f:
         bd:f5:46:a3:1c:e8:94:80:ff:bd:39:78:47:77:c0:99:ac:92:
         d4:02:6f:f8:94:c6:c0:ff:f7:bb:12:0a:c1:72:13:e4:33:a5:
         42:20:af:b0:c6:63:e8:68:d3:8a:3c:35:19:48:f0:6b:51:70:
         a0:c9:c5:9a:6d:8a:8e:28:4f:cf:8a:b6:d7:43:48:41:32:a3:
         6b:a9:80:95:56:e0:9b:f9:7d:fd:e2:84:58:81:d4:d3:ac:05:
         44:03:a2:fd:df:56:5d:aa:ba:f6:f0:5d:19:16:ec:12:d6:88:
         ae:66:b5:11:cb:8c:ac:b0:2a:49:ff:8c:2e:69:21:e5:14:3e:
         3f:5e:27:dd:df:fe:a5:14:88:f2:57:8f:26:53:6a:27:9a:85:
         2e:6c:50:be:2d:eb:20:9a:f1:96:7d:45:00:53:aa:40:cf:56:
         86:ca:ff:d4:35:59:c5:83:55:56:49:d9:4a:be:bb:b0:35:0f:
         04:47:f3:42:a9:84:78:40:88:05:d8:a6:d2:23:a5:26:6a:e9:
         55:38:39:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:53:14 2025 by rpki-client