Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/58893C1AF6E023B814794DC5AE5DED369F28C8E363846F88C2F86DB3A699A659/0/323830333a336438303a3a2f33322d3438203d3e203631343837.roa
File:                     323830333a336438303a3a2f33322d3438203d3e203631343837.roa (raw, json)
Hash identifier:          wAtlyOpExLsjyUsaMFwOnep004giWGeHF1RwNUGU+nE=
Subject key identifier:   ED:73:BA:AE:9C:54:44:FA:61:AB:92:9A:DF:DA:CA:C0:A8:AC:B5:0C
Certificate issuer:       /CN=1F23047C7EB6E1CEF18DDEAF82098608FD96EFFE
Certificate serial:       1DC8956AE398B75962990AC4AD5ACB51B48966E3
Authority key identifier: 1F:23:04:7C:7E:B6:E1:CE:F1:8D:DE:AF:82:09:86:08:FD:96:EF:FE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F23047C7EB6E1CEF18DDEAF82098608FD96EFFE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/58893C1AF6E023B814794DC5AE5DED369F28C8E363846F88C2F86DB3A699A659/0/323830333a336438303a3a2f33322d3438203d3e203631343837.roa
Signing time:             Tue 04 Feb 2025 18:22:44 +0000
ROA not before:           Tue 04 Feb 2025 18:17:44 +0000
ROA not after:            Tue 03 Feb 2026 18:22:44 +0000
asID:                     61487
IP address blocks:        2803:3d80::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/58893C1AF6E023B814794DC5AE5DED369F28C8E363846F88C2F86DB3A699A659/0/1F23047C7EB6E1CEF18DDEAF82098608FD96EFFE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/58893C1AF6E023B814794DC5AE5DED369F28C8E363846F88C2F86DB3A699A659/0/1F23047C7EB6E1CEF18DDEAF82098608FD96EFFE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F23047C7EB6E1CEF18DDEAF82098608FD96EFFE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:c8:95:6a:e3:98:b7:59:62:99:0a:c4:ad:5a:cb:51:b4:89:66:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F23047C7EB6E1CEF18DDEAF82098608FD96EFFE
        Validity
            Not Before: Feb  4 18:17:44 2025 GMT
            Not After : Feb  3 18:22:44 2026 GMT
        Subject: CN=ED73BAAE9C5444FA61AB929ADFDACAC0A8ACB50C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:10:14:fb:3b:84:20:1c:ae:af:71:b4:bf:bc:
                    8e:74:53:a4:a9:12:34:f8:5c:df:b7:81:0b:aa:9a:
                    60:c0:16:ca:de:5d:1e:ad:27:61:f4:17:93:6b:ea:
                    31:d0:53:77:36:26:7a:fd:8b:c3:cb:a1:a8:db:63:
                    eb:e0:34:33:f3:42:05:45:11:68:4a:68:c7:b9:ba:
                    12:8a:68:d7:be:f3:1f:2d:c1:d1:52:1c:ff:d4:81:
                    e0:cb:e2:2a:71:64:7f:60:f4:30:56:34:f3:a6:3f:
                    d0:35:ff:bd:21:05:d0:cd:3c:de:1c:a1:22:89:7f:
                    05:58:3b:9a:4d:62:2d:b9:87:67:06:ac:9a:55:fe:
                    62:a3:cd:19:25:cc:b8:2a:20:2c:ac:b8:57:3f:fa:
                    3d:ab:b9:93:d3:cd:d8:40:0d:f3:6f:b1:ab:4f:4b:
                    f2:ae:1a:c7:98:8a:52:93:75:1f:8b:e3:df:fa:c3:
                    8f:16:21:07:bd:af:6b:f1:ca:4e:71:d4:91:a2:a9:
                    0e:2b:c8:59:eb:30:49:5b:2f:6b:38:fc:96:c4:9d:
                    05:74:51:7e:70:e8:7c:7b:70:54:a4:9c:b6:bc:73:
                    3f:60:a0:97:7f:58:05:7d:7c:18:ef:83:62:f8:ba:
                    67:b1:f8:d6:19:b1:98:8b:6c:c8:43:20:e9:31:68:
                    9d:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:73:BA:AE:9C:54:44:FA:61:AB:92:9A:DF:DA:CA:C0:A8:AC:B5:0C
            X509v3 Authority Key Identifier:
                keyid:1F:23:04:7C:7E:B6:E1:CE:F1:8D:DE:AF:82:09:86:08:FD:96:EF:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/58893C1AF6E023B814794DC5AE5DED369F28C8E363846F88C2F86DB3A699A659/0/1F23047C7EB6E1CEF18DDEAF82098608FD96EFFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F23047C7EB6E1CEF18DDEAF82098608FD96EFFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/58893C1AF6E023B814794DC5AE5DED369F28C8E363846F88C2F86DB3A699A659/0/323830333a336438303a3a2f33322d3438203d3e203631343837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3d80::/32

    Signature Algorithm: sha256WithRSAEncryption
         86:2b:74:55:9c:3c:15:fd:e8:f5:52:45:d6:11:32:c5:a4:71:
         c8:9a:33:aa:1a:b2:6a:ce:71:3a:04:fc:4e:2c:c6:8c:a8:64:
         d3:43:f4:5b:85:e6:8e:f1:a7:c3:6f:c8:af:1a:3f:6d:c3:0d:
         69:cf:f5:e7:f7:0f:3a:a6:84:b8:b1:02:77:ed:70:2b:d4:6a:
         9d:b6:47:03:ef:12:23:98:0c:65:2b:e1:be:b7:ad:fd:15:9e:
         25:3f:a7:ea:17:16:e4:6e:95:50:d6:9f:26:6e:ca:83:3e:cf:
         4b:7b:7b:60:b1:45:dd:83:d9:1f:bc:23:8d:42:c7:8f:bb:ab:
         fb:89:f5:25:73:93:97:ae:50:c8:54:7f:6b:fa:58:06:bf:c0:
         de:bb:14:16:66:61:ef:9b:be:b6:6e:5b:76:c6:a7:db:98:1a:
         98:f9:00:cc:f6:57:c0:05:81:25:c2:63:73:ce:08:c8:2b:c3:
         52:79:ef:91:d0:29:ad:9f:38:fb:f0:b4:3e:28:1c:e0:c2:5e:
         e2:36:53:59:e7:13:e7:da:c6:13:82:fd:c5:b0:42:40:18:92:
         17:ba:c7:4c:89:25:4f:78:cf:8b:da:90:61:10:2f:8a:a8:79:
         b4:bc:13:bf:4f:0f:27:bc:d0:84:35:c1:6c:9c:22:e9:4e:d1:
         cf:7c:3c:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:02:20 2025 by rpki-client