Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ED84AD638AFA0E6AA91AA69FD49C6043E9010D59CA1477EC5E4222073D7642A/0/323830333a646132303a3a2f34302d3430203d3e203237393531.roa
File:                     323830333a646132303a3a2f34302d3430203d3e203237393531.roa (raw, json)
Hash identifier:          L5TJc4gFrQaBinHuicOB1/cDolftxn7OhjXdeNHg+vc=
Subject key identifier:   8C:6D:3C:B0:F8:DC:F7:20:99:7F:47:58:BA:2E:91:50:73:7A:6F:83
Certificate issuer:       /CN=F341739AE08457A031B734E9D432A5F3E22893FE
Certificate serial:       028FA6457BB80342EB41CC439F70B12BA567404F
Authority key identifier: F3:41:73:9A:E0:84:57:A0:31:B7:34:E9:D4:32:A5:F3:E2:28:93:FE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F341739AE08457A031B734E9D432A5F3E22893FE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ED84AD638AFA0E6AA91AA69FD49C6043E9010D59CA1477EC5E4222073D7642A/0/323830333a646132303a3a2f34302d3430203d3e203237393531.roa
Signing time:             Tue 04 Feb 2025 18:05:45 +0000
ROA not before:           Tue 04 Feb 2025 18:00:45 +0000
ROA not after:            Tue 03 Feb 2026 18:05:45 +0000
asID:                     27951
IP address blocks:        2803:da20::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5ED84AD638AFA0E6AA91AA69FD49C6043E9010D59CA1477EC5E4222073D7642A/0/F341739AE08457A031B734E9D432A5F3E22893FE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5ED84AD638AFA0E6AA91AA69FD49C6043E9010D59CA1477EC5E4222073D7642A/0/F341739AE08457A031B734E9D432A5F3E22893FE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F341739AE08457A031B734E9D432A5F3E22893FE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 19:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:8f:a6:45:7b:b8:03:42:eb:41:cc:43:9f:70:b1:2b:a5:67:40:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F341739AE08457A031B734E9D432A5F3E22893FE
        Validity
            Not Before: Feb  4 18:00:45 2025 GMT
            Not After : Feb  3 18:05:45 2026 GMT
        Subject: CN=8C6D3CB0F8DCF720997F4758BA2E9150737A6F83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:aa:e2:e7:58:73:b3:ce:56:22:94:a4:6c:c5:
                    07:6d:66:09:3c:00:df:64:f5:98:7a:0a:8f:4e:76:
                    0f:c1:27:4d:d3:80:d2:4d:d0:6e:e9:e2:52:cc:7e:
                    4e:20:61:6b:01:52:16:3a:ef:69:b1:70:c0:e4:00:
                    90:3f:8c:20:89:dd:29:24:6e:9d:72:78:f4:c1:59:
                    2c:6b:74:eb:39:e0:c6:e7:1c:b7:07:ca:1e:2e:d0:
                    7b:1c:e0:b1:63:1e:db:ca:99:fc:7d:86:3a:fa:1d:
                    23:1a:12:d1:de:70:69:2e:e2:74:19:8e:cd:cc:95:
                    9a:6d:2e:f8:78:f8:0b:49:85:57:db:0d:fa:08:f5:
                    88:ac:52:de:f9:5e:1b:73:1f:b2:b3:89:df:2c:38:
                    bb:b6:28:4c:59:45:aa:d1:ae:e0:3c:df:3b:43:0c:
                    ec:f6:76:06:55:27:d6:17:85:39:b5:6a:56:2e:05:
                    70:e2:87:b7:56:d5:73:13:b1:f5:62:6a:8a:ae:92:
                    7d:fd:bc:39:1c:05:55:a2:e0:10:3f:99:d3:1f:ef:
                    36:e6:ce:1a:b0:69:05:5a:9d:99:4e:b1:fb:7a:0d:
                    f5:14:fa:75:93:38:13:b9:c8:a4:bb:8e:a4:21:ca:
                    88:2e:95:03:8e:c4:cd:11:35:be:e9:51:36:6c:24:
                    ed:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:6D:3C:B0:F8:DC:F7:20:99:7F:47:58:BA:2E:91:50:73:7A:6F:83
            X509v3 Authority Key Identifier:
                keyid:F3:41:73:9A:E0:84:57:A0:31:B7:34:E9:D4:32:A5:F3:E2:28:93:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ED84AD638AFA0E6AA91AA69FD49C6043E9010D59CA1477EC5E4222073D7642A/0/F341739AE08457A031B734E9D432A5F3E22893FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F341739AE08457A031B734E9D432A5F3E22893FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ED84AD638AFA0E6AA91AA69FD49C6043E9010D59CA1477EC5E4222073D7642A/0/323830333a646132303a3a2f34302d3430203d3e203237393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:da20::/40

    Signature Algorithm: sha256WithRSAEncryption
         97:e0:7e:cf:a7:a2:80:05:95:d8:81:28:97:2d:1e:d8:b5:2b:
         fe:9f:d6:2b:e2:63:17:f3:62:d2:1a:d0:a3:be:6d:76:47:b3:
         6e:d1:18:4b:21:7b:9f:70:cf:dd:db:5c:63:7d:56:41:9e:32:
         e6:4f:71:44:f8:5e:52:48:c3:df:e5:35:d9:6e:a6:eb:b9:f8:
         8c:15:7c:ef:74:c6:67:e9:d9:27:68:d2:39:98:89:60:65:1b:
         b9:74:18:a9:d1:cb:ae:f5:30:19:47:fb:6b:46:94:31:23:4f:
         2a:13:b1:b6:46:fb:d8:2e:4c:4d:1c:7c:ad:d7:2a:27:95:a3:
         ee:fb:20:b8:bf:8a:a4:c2:f3:63:63:a3:39:1e:02:7c:97:10:
         80:0e:f3:91:4e:3b:8a:43:e5:8a:c7:e7:4c:d7:16:d4:88:67:
         58:ab:8f:64:62:8f:5a:6e:40:55:57:74:0b:24:24:57:4f:16:
         b4:ca:d5:41:8f:34:1c:ec:95:44:0e:f6:88:6f:90:02:6b:41:
         ef:b1:2e:a4:92:bd:10:f2:10:0b:d0:66:2d:a1:8e:38:d4:e1:
         e5:6f:60:e7:de:4c:81:af:f7:81:72:25:0e:65:fd:e4:ae:bf:
         0d:11:cb:d7:49:e2:4f:39:d2:89:c9:42:41:d2:09:73:0e:7b:
         5a:b2:a9:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:45:15 2025 by rpki-client