Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/59CC5B82FBD0E8E09EC4427C0A888F610B3CB381F7A102B01C25D49E663E56EA/0/323830333a363230303a3a2f36342d3634203d3e20323632323337.roa
File:                     323830333a363230303a3a2f36342d3634203d3e20323632323337.roa (raw, json)
Hash identifier:          XZcxdoJPv3CH+3gQMSl3DebCZdfzYr1Yjvjqs50lkLo=
Subject key identifier:   2F:D6:B7:63:07:CA:3E:64:7A:F9:CA:FA:DC:44:A6:24:5A:83:62:DE
Certificate issuer:       /CN=47A0716C687813D0F1094BC55674B26A68AF90DF
Certificate serial:       3CC6807321DCB5549946AF9CDE3FB4512077B41D
Authority key identifier: 47:A0:71:6C:68:78:13:D0:F1:09:4B:C5:56:74:B2:6A:68:AF:90:DF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/47A0716C687813D0F1094BC55674B26A68AF90DF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/59CC5B82FBD0E8E09EC4427C0A888F610B3CB381F7A102B01C25D49E663E56EA/0/323830333a363230303a3a2f36342d3634203d3e20323632323337.roa
Signing time:             Tue 04 Feb 2025 18:10:41 +0000
ROA not before:           Tue 04 Feb 2025 18:05:41 +0000
ROA not after:            Tue 03 Feb 2026 18:10:41 +0000
asID:                     262237
IP address blocks:        2803:6200::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/59CC5B82FBD0E8E09EC4427C0A888F610B3CB381F7A102B01C25D49E663E56EA/0/47A0716C687813D0F1094BC55674B26A68AF90DF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/59CC5B82FBD0E8E09EC4427C0A888F610B3CB381F7A102B01C25D49E663E56EA/0/47A0716C687813D0F1094BC55674B26A68AF90DF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/47A0716C687813D0F1094BC55674B26A68AF90DF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 23:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:c6:80:73:21:dc:b5:54:99:46:af:9c:de:3f:b4:51:20:77:b4:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47A0716C687813D0F1094BC55674B26A68AF90DF
        Validity
            Not Before: Feb  4 18:05:41 2025 GMT
            Not After : Feb  3 18:10:41 2026 GMT
        Subject: CN=2FD6B76307CA3E647AF9CAFADC44A6245A8362DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:f6:49:74:cd:20:0d:10:0e:a0:65:50:2d:db:
                    cb:b9:4b:51:56:cd:03:7a:6d:4b:47:98:e7:1f:35:
                    5d:de:cd:7b:0f:3d:2d:87:55:17:6b:5e:17:eb:e2:
                    64:b2:62:e9:79:a0:e6:76:00:ed:ea:d6:08:11:24:
                    03:cf:25:24:ef:e8:eb:49:29:e8:41:35:88:4a:99:
                    82:dd:de:1c:6e:a7:f7:3c:14:84:bb:b4:e9:1c:ce:
                    03:b0:9a:bf:b0:48:a8:34:c0:41:b8:94:32:1f:6a:
                    75:ac:67:69:66:20:09:a6:7b:f3:c8:ba:b6:71:2d:
                    e5:0b:69:86:63:b7:e2:33:04:02:a8:7b:97:88:69:
                    9d:c6:ec:9f:22:07:0b:fe:54:c0:16:7b:e2:d4:ea:
                    38:89:c1:c2:63:bf:96:42:aa:c6:20:19:e3:30:3a:
                    91:9f:4a:4f:4f:ca:ff:51:37:18:fa:3b:61:20:00:
                    8c:05:d9:ae:37:54:d9:43:b0:ce:b9:54:28:75:ee:
                    2e:9f:86:eb:65:7b:aa:c5:bc:4e:8f:5f:f2:02:a4:
                    11:fb:75:f2:c6:a8:f2:d7:f1:18:88:01:b3:62:71:
                    e4:b9:bc:26:9d:94:de:0a:62:a1:ef:12:4b:a0:ff:
                    14:aa:8d:ee:d5:61:dc:0d:f3:c4:f4:96:51:66:45:
                    2d:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:D6:B7:63:07:CA:3E:64:7A:F9:CA:FA:DC:44:A6:24:5A:83:62:DE
            X509v3 Authority Key Identifier:
                keyid:47:A0:71:6C:68:78:13:D0:F1:09:4B:C5:56:74:B2:6A:68:AF:90:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/59CC5B82FBD0E8E09EC4427C0A888F610B3CB381F7A102B01C25D49E663E56EA/0/47A0716C687813D0F1094BC55674B26A68AF90DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/47A0716C687813D0F1094BC55674B26A68AF90DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/59CC5B82FBD0E8E09EC4427C0A888F610B3CB381F7A102B01C25D49E663E56EA/0/323830333a363230303a3a2f36342d3634203d3e20323632323337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6200::/64

    Signature Algorithm: sha256WithRSAEncryption
         56:0d:17:2e:43:3d:b9:51:92:aa:53:83:8e:4b:61:c4:68:23:
         62:7c:e8:ee:5a:19:a5:75:95:e1:3f:61:1f:78:47:ce:d9:ea:
         ca:18:e3:1b:cf:6e:48:81:73:7f:02:76:0a:9f:5c:50:64:73:
         07:43:c4:39:2b:6b:e9:cd:cd:50:f9:43:f5:bb:ee:9b:a7:8e:
         a5:43:5c:6e:a0:17:bd:66:47:c4:dd:55:5a:68:5e:66:3b:0b:
         90:c7:bf:47:17:e3:59:80:fb:72:b4:0e:c8:a2:fa:82:9b:b5:
         4a:e5:8c:5f:0d:1c:d3:f7:c8:3d:79:02:54:23:f7:34:2b:d6:
         ce:11:42:0a:8b:31:50:e7:1c:80:2f:4b:17:fd:c7:5a:fe:72:
         85:fa:9a:24:7c:86:d5:e0:d8:56:44:89:8c:6e:50:1f:1c:fb:
         64:df:1b:77:41:12:aa:a3:38:ad:2f:c9:d8:84:42:cf:eb:ae:
         11:6c:b5:73:7d:b0:6c:44:60:31:8d:e0:e7:33:31:09:2f:f3:
         9d:60:ef:09:30:3c:09:64:c1:7d:a3:e7:29:d1:4e:e8:4e:be:
         0b:ae:f7:6f:5e:f3:f7:18:e1:e9:b8:31:f9:2a:c6:ab:b9:72:
         a1:df:d1:92:8a:c8:be:53:d4:61:e6:3a:09:24:be:93:fc:0d:
         bb:ac:87:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 17:21:55 2025 by rpki-client