Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/61CCC720CDBC167213ADAA418043DA86E1FE3975F38BB23C48C43A8E8C60C3F0/0/323830333a333638303a3a2f33322d3438203d3e203237383531.roa
File:                     323830333a333638303a3a2f33322d3438203d3e203237383531.roa (raw, json)
Hash identifier:          cOv6o3eW7x0mvlkznVf0YfPqIb3w+heQPkzXtaO1vy0=
Subject key identifier:   1B:36:CE:9E:A0:7F:04:B0:E6:E0:D1:74:A5:9A:17:3E:E0:05:A5:CD
Certificate issuer:       /CN=5762012909FC5692BB70AC7A12BF804F577A0AE8
Certificate serial:       673B6E745470CDB0B6B06FD1F0810D675F914061
Authority key identifier: 57:62:01:29:09:FC:56:92:BB:70:AC:7A:12:BF:80:4F:57:7A:0A:E8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5762012909FC5692BB70AC7A12BF804F577A0AE8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/61CCC720CDBC167213ADAA418043DA86E1FE3975F38BB23C48C43A8E8C60C3F0/0/323830333a333638303a3a2f33322d3438203d3e203237383531.roa
Signing time:             Tue 04 Feb 2025 18:48:46 +0000
ROA not before:           Tue 04 Feb 2025 18:43:46 +0000
ROA not after:            Tue 03 Feb 2026 18:48:46 +0000
asID:                     27851
IP address blocks:        2803:3680::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/61CCC720CDBC167213ADAA418043DA86E1FE3975F38BB23C48C43A8E8C60C3F0/0/5762012909FC5692BB70AC7A12BF804F577A0AE8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/61CCC720CDBC167213ADAA418043DA86E1FE3975F38BB23C48C43A8E8C60C3F0/0/5762012909FC5692BB70AC7A12BF804F577A0AE8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5762012909FC5692BB70AC7A12BF804F577A0AE8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:3b:6e:74:54:70:cd:b0:b6:b0:6f:d1:f0:81:0d:67:5f:91:40:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5762012909FC5692BB70AC7A12BF804F577A0AE8
        Validity
            Not Before: Feb  4 18:43:46 2025 GMT
            Not After : Feb  3 18:48:46 2026 GMT
        Subject: CN=1B36CE9EA07F04B0E6E0D174A59A173EE005A5CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ad:ef:c6:88:58:60:26:91:f5:3c:21:8d:67:
                    bf:dd:a8:5b:79:78:08:88:3a:5f:8b:c6:69:70:c8:
                    60:62:3d:36:47:9e:8b:2d:11:06:45:96:07:4f:2c:
                    29:71:7e:e0:fc:bb:a9:15:ce:2a:c1:cd:02:6a:25:
                    48:c4:48:9c:08:49:dd:72:70:c6:ff:25:ba:f9:b8:
                    65:21:1a:95:01:ee:09:83:87:06:36:62:32:f8:44:
                    23:3a:52:a6:11:89:0f:f2:2e:41:bd:ee:b1:28:e0:
                    59:ea:c9:6d:74:92:5c:c9:84:35:f6:3a:83:d3:fc:
                    2e:2e:34:9a:5d:be:3a:b5:af:b2:8b:4f:18:60:d5:
                    1e:32:0c:c8:d1:44:c5:ea:58:27:7d:97:47:f4:a1:
                    5c:40:4a:16:23:aa:bb:da:f3:29:b1:cd:e6:4f:0a:
                    cc:2c:aa:75:31:17:81:df:bf:9a:e2:3d:f4:b8:31:
                    d7:bf:ad:73:5a:4b:49:e5:ed:ca:b9:07:75:4e:5d:
                    c5:d6:69:67:82:65:88:05:78:9c:4f:fa:98:1f:cb:
                    b4:d2:95:49:58:c4:1d:e1:e4:e9:cc:b8:fc:49:1e:
                    95:0b:1f:b8:ba:ad:7e:de:cb:d0:f4:61:d2:e0:d1:
                    81:58:7e:f2:dd:80:79:12:04:93:e6:17:c3:a5:0f:
                    d2:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:36:CE:9E:A0:7F:04:B0:E6:E0:D1:74:A5:9A:17:3E:E0:05:A5:CD
            X509v3 Authority Key Identifier:
                keyid:57:62:01:29:09:FC:56:92:BB:70:AC:7A:12:BF:80:4F:57:7A:0A:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/61CCC720CDBC167213ADAA418043DA86E1FE3975F38BB23C48C43A8E8C60C3F0/0/5762012909FC5692BB70AC7A12BF804F577A0AE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5762012909FC5692BB70AC7A12BF804F577A0AE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/61CCC720CDBC167213ADAA418043DA86E1FE3975F38BB23C48C43A8E8C60C3F0/0/323830333a333638303a3a2f33322d3438203d3e203237383531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3680::/32

    Signature Algorithm: sha256WithRSAEncryption
         75:43:29:9f:73:51:90:89:fd:5b:0d:4b:77:9a:d1:05:41:88:
         e6:72:7a:e2:78:04:bb:5e:6a:71:c7:a3:48:c1:da:1c:e0:d9:
         d3:71:2b:32:07:e8:b1:cc:7c:2b:72:d9:80:7c:99:1f:b6:8a:
         a0:e7:16:6f:b8:5b:9a:27:4e:5c:5c:1f:1b:82:be:99:9b:b2:
         b0:09:d6:15:93:42:7d:4f:cd:af:24:56:cb:45:82:f2:05:be:
         f3:9b:4f:a5:16:2c:bd:bc:53:6c:0a:2c:29:ba:4b:9c:01:61:
         78:7e:5f:47:71:95:5a:78:31:09:11:f9:df:95:0a:29:77:f9:
         ba:d5:1d:7e:75:6a:84:13:7c:33:6f:6c:ea:d1:85:0c:a0:d6:
         4c:52:2a:69:be:28:ca:a6:08:cc:6b:97:02:34:1c:d2:ce:19:
         b2:64:fa:61:fb:dc:f4:40:b8:b8:2e:7d:cf:16:a6:e5:fb:7a:
         cb:0a:c9:2d:52:65:bb:e3:09:b4:c2:f4:68:ac:ae:07:52:5f:
         fb:97:a8:3e:a1:6e:bb:d1:36:bd:21:ae:a9:3e:dc:32:0a:71:
         f6:1f:c1:9b:52:2b:8f:d8:8b:a4:45:04:66:0e:52:1b:dc:dc:
         40:18:8b:de:12:1b:97:d1:fa:0e:9e:15:e8:7f:8a:8e:a9:fd:
         15:2e:f4:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 12:36:47 2025 by rpki-client