Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/63FB05488E65B64DD77B4299EC8FF041037DE882C46BA5A1F7037B5CB26A75FF/0/323830333a633165303a3a2f33322d3634203d3e20323639393934.roa
File:                     323830333a633165303a3a2f33322d3634203d3e20323639393934.roa (raw, json)
Hash identifier:          m+xqzinc/XZ4TVWN/ZgZYUTBZVZwfTuY5+AH/1WY4KM=
Subject key identifier:   42:9A:56:BA:97:2C:D3:27:88:D8:11:E0:A9:99:2D:1F:AF:20:85:2F
Certificate issuer:       /CN=65FF24D1AA8C1A14AB3F092654C6028160015B97
Certificate serial:       13DA5C14C53D564630FD2B662784E0D7D64F7785
Authority key identifier: 65:FF:24:D1:AA:8C:1A:14:AB:3F:09:26:54:C6:02:81:60:01:5B:97
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/65FF24D1AA8C1A14AB3F092654C6028160015B97.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/63FB05488E65B64DD77B4299EC8FF041037DE882C46BA5A1F7037B5CB26A75FF/0/323830333a633165303a3a2f33322d3634203d3e20323639393934.roa
Signing time:             Tue 04 Feb 2025 20:04:00 +0000
ROA not before:           Tue 04 Feb 2025 19:59:00 +0000
ROA not after:            Tue 03 Feb 2026 20:04:00 +0000
asID:                     269994
IP address blocks:        2803:c1e0::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/63FB05488E65B64DD77B4299EC8FF041037DE882C46BA5A1F7037B5CB26A75FF/0/65FF24D1AA8C1A14AB3F092654C6028160015B97.crl
                          rsync://repository.lacnic.net/rpki/lacnic/63FB05488E65B64DD77B4299EC8FF041037DE882C46BA5A1F7037B5CB26A75FF/0/65FF24D1AA8C1A14AB3F092654C6028160015B97.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/65FF24D1AA8C1A14AB3F092654C6028160015B97.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 18:45:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:da:5c:14:c5:3d:56:46:30:fd:2b:66:27:84:e0:d7:d6:4f:77:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65FF24D1AA8C1A14AB3F092654C6028160015B97
        Validity
            Not Before: Feb  4 19:59:00 2025 GMT
            Not After : Feb  3 20:04:00 2026 GMT
        Subject: CN=429A56BA972CD32788D811E0A9992D1FAF20852F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:43:31:0f:ea:b3:2a:f0:10:20:c4:c5:f8:65:
                    9d:2d:c4:d3:60:39:aa:93:42:7a:bf:a4:39:9b:a6:
                    ad:7a:9a:32:15:4f:14:1b:d6:b4:d9:4c:52:d7:25:
                    55:01:2f:53:27:87:de:1a:21:a0:e7:d3:a7:be:8c:
                    5c:5c:de:b8:51:5a:7c:34:fa:5b:07:f3:f9:16:12:
                    33:cd:77:ce:17:88:52:f9:c1:f7:fa:bc:ec:cd:28:
                    b5:ce:b5:bb:75:52:37:6d:12:e7:0a:6d:7d:66:25:
                    53:80:74:26:5f:fc:16:5b:8f:ba:1f:ef:ff:16:7c:
                    c2:00:81:d7:dc:9d:ad:91:69:16:a0:48:a6:40:6b:
                    ff:dc:0f:59:70:ea:19:e6:50:26:9c:2e:ce:9f:4b:
                    78:d6:d0:c0:f1:c7:87:e4:d8:b1:60:ed:6f:6b:ab:
                    e5:7d:da:d2:f1:30:92:ef:52:75:a5:d4:53:71:10:
                    9f:a8:8f:d9:a3:24:a2:c8:49:f2:6a:9f:da:51:85:
                    42:e4:d3:fb:88:1d:db:9e:6f:eb:bf:d7:c4:c2:97:
                    74:e4:bc:d2:f3:e0:be:9f:c1:97:38:4c:b9:07:18:
                    8c:b1:2a:e2:bb:58:89:c0:ad:1b:02:6a:85:61:bf:
                    f0:b5:1c:55:7f:8d:46:11:46:73:60:1b:72:27:11:
                    ec:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:9A:56:BA:97:2C:D3:27:88:D8:11:E0:A9:99:2D:1F:AF:20:85:2F
            X509v3 Authority Key Identifier:
                keyid:65:FF:24:D1:AA:8C:1A:14:AB:3F:09:26:54:C6:02:81:60:01:5B:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/63FB05488E65B64DD77B4299EC8FF041037DE882C46BA5A1F7037B5CB26A75FF/0/65FF24D1AA8C1A14AB3F092654C6028160015B97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/65FF24D1AA8C1A14AB3F092654C6028160015B97.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/63FB05488E65B64DD77B4299EC8FF041037DE882C46BA5A1F7037B5CB26A75FF/0/323830333a633165303a3a2f33322d3634203d3e20323639393934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c1e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         8d:b5:92:21:82:b7:c7:4d:71:aa:c8:cf:fa:e2:bd:5a:24:1c:
         7f:4d:6c:1f:81:30:99:03:46:e2:48:df:7d:9b:62:10:56:28:
         f8:71:8b:ea:17:f4:d3:dd:25:83:6e:e8:04:3d:9e:1d:1d:44:
         60:2a:c6:49:a2:3c:05:6a:cf:ed:78:4d:76:93:90:86:4d:13:
         62:8c:36:a6:b3:29:03:2e:92:a6:d7:c9:7c:e0:0f:95:05:a0:
         fa:a8:98:5d:1c:49:d6:93:80:c4:02:c0:c6:85:2c:7b:d7:99:
         f5:b9:d4:f3:70:b4:9a:cd:6f:3e:18:41:6b:6f:5c:32:f8:18:
         71:75:1f:66:e3:3e:f0:50:88:ea:2f:04:73:fc:2d:81:fb:6d:
         db:7b:8c:53:ae:04:29:48:42:6d:0f:81:b9:1e:64:bd:e3:fb:
         d9:04:9e:40:63:6a:e6:2d:2a:fc:f5:b4:8f:61:e4:aa:64:d7:
         d2:17:ff:42:1a:e5:dc:ca:1f:be:02:b1:d8:c6:c2:3d:17:6c:
         8b:0e:55:ca:ff:74:e9:f7:7e:36:cf:e9:0e:c8:88:64:f7:d8:
         70:2d:7e:73:e3:70:23:77:fc:35:68:b4:bc:10:5d:38:00:f9:
         78:64:32:55:a6:d7:c1:fe:6d:1e:6d:a0:84:ee:6c:80:61:ed:
         70:fc:d1:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:29:08 2025 by rpki-client