Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/61FC3343617D92E44F1435AE9777D7F4EB59FEAB5DFC1D4B4156173189CA6563/0/323830333a393131303a3a2f33322d3634203d3e20323731393932.roa
File:                     323830333a393131303a3a2f33322d3634203d3e20323731393932.roa (raw, json)
Hash identifier:          e/e2W/UFQhwtgF6tOTQ0+waiZJDOo/tpBzm0VJfhomw=
Subject key identifier:   D1:59:37:BF:04:59:C2:21:52:DD:C2:46:83:90:6B:7E:A2:86:C3:16
Certificate issuer:       /CN=B642ACFCC1420CD34E9E29BFDF84F709470FE998
Certificate serial:       1C2CDDDB74AF1BC90F39BC95B04D44E7744CCC83
Authority key identifier: B6:42:AC:FC:C1:42:0C:D3:4E:9E:29:BF:DF:84:F7:09:47:0F:E9:98
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B642ACFCC1420CD34E9E29BFDF84F709470FE998.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/61FC3343617D92E44F1435AE9777D7F4EB59FEAB5DFC1D4B4156173189CA6563/0/323830333a393131303a3a2f33322d3634203d3e20323731393932.roa
Signing time:             Tue 04 Feb 2025 18:10:25 +0000
ROA not before:           Tue 04 Feb 2025 18:05:25 +0000
ROA not after:            Tue 03 Feb 2026 18:10:25 +0000
asID:                     271992
IP address blocks:        2803:9110::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/61FC3343617D92E44F1435AE9777D7F4EB59FEAB5DFC1D4B4156173189CA6563/0/B642ACFCC1420CD34E9E29BFDF84F709470FE998.crl
                          rsync://repository.lacnic.net/rpki/lacnic/61FC3343617D92E44F1435AE9777D7F4EB59FEAB5DFC1D4B4156173189CA6563/0/B642ACFCC1420CD34E9E29BFDF84F709470FE998.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B642ACFCC1420CD34E9E29BFDF84F709470FE998.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 15:46:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:2c:dd:db:74:af:1b:c9:0f:39:bc:95:b0:4d:44:e7:74:4c:cc:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B642ACFCC1420CD34E9E29BFDF84F709470FE998
        Validity
            Not Before: Feb  4 18:05:25 2025 GMT
            Not After : Feb  3 18:10:25 2026 GMT
        Subject: CN=D15937BF0459C22152DDC24683906B7EA286C316
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:28:f2:30:63:c0:fd:e9:60:d8:f2:2f:2f:0e:
                    c6:28:1b:d3:7d:f9:20:8f:d9:e3:c3:a8:f1:87:be:
                    fc:15:31:db:a7:61:30:48:57:bb:eb:7c:78:70:68:
                    ec:fb:93:c5:00:39:bc:31:da:22:9a:b8:58:57:ea:
                    7d:b8:6c:4f:bc:b3:b0:81:96:02:59:d3:d0:ec:75:
                    29:65:86:7a:c2:73:30:75:72:29:8d:84:dd:35:49:
                    1a:5f:fc:c0:78:ad:af:57:3a:b9:23:b4:d5:31:ce:
                    ba:3f:86:97:d5:08:9b:06:f2:c1:38:79:c9:d3:29:
                    e0:de:28:73:4e:74:f7:d9:0e:d6:77:36:3f:60:83:
                    82:f9:cf:69:eb:52:23:fc:8d:1e:f2:c4:5a:25:d4:
                    be:8f:b2:cd:18:a6:df:94:5e:d1:f0:31:4a:04:e5:
                    5e:65:d8:96:5b:41:96:4b:59:a5:0d:b7:de:39:33:
                    5a:09:1a:00:c6:95:e6:a6:e4:52:50:89:fd:91:2e:
                    87:47:b7:ed:78:f4:cb:f1:20:d8:be:9a:d3:ad:d1:
                    95:49:84:31:49:31:21:da:b0:14:81:a8:fb:e5:5a:
                    86:31:0e:71:37:89:ce:cb:c6:e2:a9:3d:45:7d:0a:
                    2d:2d:b2:4c:d6:28:a6:82:9f:51:54:e0:ee:4e:8c:
                    b6:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:59:37:BF:04:59:C2:21:52:DD:C2:46:83:90:6B:7E:A2:86:C3:16
            X509v3 Authority Key Identifier:
                keyid:B6:42:AC:FC:C1:42:0C:D3:4E:9E:29:BF:DF:84:F7:09:47:0F:E9:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/61FC3343617D92E44F1435AE9777D7F4EB59FEAB5DFC1D4B4156173189CA6563/0/B642ACFCC1420CD34E9E29BFDF84F709470FE998.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B642ACFCC1420CD34E9E29BFDF84F709470FE998.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/61FC3343617D92E44F1435AE9777D7F4EB59FEAB5DFC1D4B4156173189CA6563/0/323830333a393131303a3a2f33322d3634203d3e20323731393932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9110::/32

    Signature Algorithm: sha256WithRSAEncryption
         ac:a2:03:ac:7c:26:38:ae:b5:42:01:eb:86:80:72:f7:dd:1a:
         a8:cd:b5:7f:36:53:78:01:71:02:57:c2:ac:af:24:1d:72:4f:
         22:c9:a3:82:1b:de:c9:5a:b5:9b:6a:22:81:9a:ca:f6:61:d2:
         7b:a4:2e:df:28:5a:42:6c:7f:e0:30:4b:20:83:e9:08:29:3b:
         90:c0:56:0e:16:5e:3d:76:8e:97:2f:03:1b:6e:36:79:d2:2d:
         b9:5e:c7:0b:bc:d6:81:4e:9f:71:02:8c:77:32:ca:07:c5:0c:
         fc:7d:2c:75:91:9d:31:ee:a5:dd:5c:b3:c2:8e:1a:84:0b:92:
         88:6a:f0:2f:72:b8:96:fb:cd:55:74:47:c1:31:72:c2:d4:de:
         fa:ff:09:d2:ac:fc:61:4f:53:77:c4:ed:52:fa:f2:d0:85:6f:
         cf:99:81:e3:ec:07:bf:3b:d5:b1:0d:8c:28:2f:37:40:b4:c7:
         c9:44:64:27:c8:7e:4c:b4:7c:f5:d5:86:3f:ef:17:77:5b:37:
         f0:d5:3a:1c:91:41:f6:6e:f7:ae:6f:92:5c:37:2b:42:02:49:
         93:90:b9:e7:2f:66:47:96:a8:f0:94:b1:50:ba:dd:13:74:47:
         e7:b7:c9:0b:75:c4:26:50:09:88:28:e4:88:ca:e4:fa:64:ac:
         af:2f:48:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:59:59 2025 by rpki-client