Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/60EA96D8A85B594311B2DE2B8AC01CB929BC9D2D9BAC952F5E083DEDE0011011/0/323830333a346265303a3a2f33322d3438203d3e20323730303738.roa
File:                     323830333a346265303a3a2f33322d3438203d3e20323730303738.roa (raw, json)
Hash identifier:          e93lsq181dWo8xkn84usZu3Ea1Z+yoCo2KQIwjRn9xs=
Subject key identifier:   D0:1B:20:09:D5:3C:78:E5:5C:0A:3E:5B:86:99:D6:12:55:7A:F7:5C
Certificate issuer:       /CN=AF855402AB8DCC9E940E7B1627DEDD822C25A8AF
Certificate serial:       24204DBF9C977FE4C2814E75D56B137D383B7404
Authority key identifier: AF:85:54:02:AB:8D:CC:9E:94:0E:7B:16:27:DE:DD:82:2C:25:A8:AF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF855402AB8DCC9E940E7B1627DEDD822C25A8AF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/60EA96D8A85B594311B2DE2B8AC01CB929BC9D2D9BAC952F5E083DEDE0011011/0/323830333a346265303a3a2f33322d3438203d3e20323730303738.roa
Signing time:             Tue 04 Feb 2025 18:46:55 +0000
ROA not before:           Tue 04 Feb 2025 18:41:55 +0000
ROA not after:            Tue 03 Feb 2026 18:46:55 +0000
asID:                     270078
IP address blocks:        2803:4be0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/60EA96D8A85B594311B2DE2B8AC01CB929BC9D2D9BAC952F5E083DEDE0011011/0/AF855402AB8DCC9E940E7B1627DEDD822C25A8AF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/60EA96D8A85B594311B2DE2B8AC01CB929BC9D2D9BAC952F5E083DEDE0011011/0/AF855402AB8DCC9E940E7B1627DEDD822C25A8AF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF855402AB8DCC9E940E7B1627DEDD822C25A8AF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:20:4d:bf:9c:97:7f:e4:c2:81:4e:75:d5:6b:13:7d:38:3b:74:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF855402AB8DCC9E940E7B1627DEDD822C25A8AF
        Validity
            Not Before: Feb  4 18:41:55 2025 GMT
            Not After : Feb  3 18:46:55 2026 GMT
        Subject: CN=D01B2009D53C78E55C0A3E5B8699D612557AF75C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c2:1b:26:cb:b5:b7:85:e5:c5:f0:75:ec:d4:
                    03:99:3c:95:6b:e4:b4:24:67:49:2b:23:84:76:59:
                    41:d8:63:46:a9:42:3c:25:3f:9a:51:9e:7b:f8:76:
                    a5:a4:5c:17:64:69:f9:03:21:2b:52:a6:52:af:72:
                    cb:8c:6f:61:9f:40:d7:ea:17:3b:4c:fa:12:3e:a0:
                    c0:0a:50:7e:3f:9e:0f:b0:63:e6:31:1e:6f:c9:de:
                    cf:84:93:5c:cf:e2:21:7d:12:dc:c0:29:3b:14:18:
                    8e:d8:6c:9d:03:67:de:f5:35:a4:12:e8:01:34:8e:
                    15:3b:ae:ad:88:c9:5d:4f:02:68:cd:90:59:f0:69:
                    59:70:8c:83:b2:7f:00:b6:dd:02:56:9c:79:c9:e7:
                    93:07:d4:46:99:b5:f5:2d:4d:6b:b9:33:31:ba:c3:
                    cc:10:a7:a4:76:66:5d:28:94:60:ee:ec:27:45:78:
                    d6:1f:aa:e0:9d:7b:08:8b:c7:13:73:ea:02:fa:42:
                    24:5c:a4:22:4b:10:55:8b:a7:8d:f3:7a:2e:13:70:
                    58:2a:b7:8b:f2:d8:50:4c:d8:8d:2b:27:1e:e1:ad:
                    bc:11:be:ec:1d:ac:52:7b:c4:05:ea:fc:1e:a0:3f:
                    f3:82:b8:99:e4:45:9e:8f:b4:fd:a6:12:17:cb:59:
                    e6:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:1B:20:09:D5:3C:78:E5:5C:0A:3E:5B:86:99:D6:12:55:7A:F7:5C
            X509v3 Authority Key Identifier:
                keyid:AF:85:54:02:AB:8D:CC:9E:94:0E:7B:16:27:DE:DD:82:2C:25:A8:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/60EA96D8A85B594311B2DE2B8AC01CB929BC9D2D9BAC952F5E083DEDE0011011/0/AF855402AB8DCC9E940E7B1627DEDD822C25A8AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF855402AB8DCC9E940E7B1627DEDD822C25A8AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/60EA96D8A85B594311B2DE2B8AC01CB929BC9D2D9BAC952F5E083DEDE0011011/0/323830333a346265303a3a2f33322d3438203d3e20323730303738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4be0::/32

    Signature Algorithm: sha256WithRSAEncryption
         92:a0:5e:83:b7:c0:cc:d0:50:95:b0:b5:cd:61:c6:83:ec:f2:
         fd:62:56:ab:4b:15:d7:5b:5a:9e:42:5c:d8:40:a5:85:4d:d7:
         59:c2:72:45:96:8d:84:87:e1:85:74:bb:6e:05:b1:04:70:d1:
         31:d0:b2:40:98:de:fd:f0:7b:1d:4e:1d:e5:f2:94:00:98:68:
         cb:84:d9:25:01:80:9f:95:51:01:cc:4d:75:95:01:d8:dc:15:
         d3:8f:bd:cc:f0:0a:8f:48:dc:0a:66:1e:38:f3:5e:1c:87:be:
         da:3f:0f:c8:9f:a4:7d:02:94:ac:5d:c1:e9:bf:3f:d3:ff:7a:
         c7:cd:e8:d4:e9:cc:e0:18:03:1f:76:1a:ee:74:70:3e:8b:35:
         56:b2:c7:ac:ee:8d:2a:54:b0:8c:b9:21:8e:d5:02:2f:49:a5:
         80:66:be:8c:96:4a:5c:78:5a:aa:46:06:cc:d3:82:3e:f3:92:
         23:a4:2d:e1:79:c4:9d:67:92:e3:d4:94:29:d9:5e:2e:46:5e:
         e0:7d:7b:13:e8:eb:87:2d:35:8f:aa:fd:03:b7:3e:d2:b5:a2:
         24:0a:79:82:fa:c3:66:bb:73:87:58:76:ef:9f:23:5b:68:98:
         df:04:13:9e:2c:e4:4f:46:65:0b:57:1d:f7:99:3b:9d:b6:1f:
         8f:f4:e6:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:09:56 2025 by rpki-client