Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/323830333a323336303a633030303a3a2f33362d3336203d3e20323639373832.roa
File:                     323830333a323336303a633030303a3a2f33362d3336203d3e20323639373832.roa (raw, json)
Hash identifier:          oMb7d3rPPjNuPpx7KRZt1nB8ocZ7/TVfCO/LBB5pdQE=
Subject key identifier:   14:11:1D:04:E0:3C:60:4E:DA:52:E2:B4:8C:07:90:39:F3:E4:BD:8F
Certificate issuer:       /CN=01A51A04B7D920D1806F07B0F77D143B1C7FAAE1
Certificate serial:       48D6CFAC511910713973EF9B0476C3291ED7FB36
Authority key identifier: 01:A5:1A:04:B7:D9:20:D1:80:6F:07:B0:F7:7D:14:3B:1C:7F:AA:E1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/323830333a323336303a633030303a3a2f33362d3336203d3e20323639373832.roa
Signing time:             Tue 04 Feb 2025 18:15:53 +0000
ROA not before:           Tue 04 Feb 2025 18:10:53 +0000
ROA not after:            Tue 03 Feb 2026 18:15:53 +0000
asID:                     269782
IP address blocks:        2803:2360:c000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:d6:cf:ac:51:19:10:71:39:73:ef:9b:04:76:c3:29:1e:d7:fb:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01A51A04B7D920D1806F07B0F77D143B1C7FAAE1
        Validity
            Not Before: Feb  4 18:10:53 2025 GMT
            Not After : Feb  3 18:15:53 2026 GMT
        Subject: CN=14111D04E03C604EDA52E2B48C079039F3E4BD8F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:b0:14:03:49:88:19:7e:36:b1:18:40:19:c4:
                    05:be:9a:ca:37:79:36:b4:01:e2:c4:68:1a:0d:8d:
                    aa:e0:ea:09:6b:bf:1d:e9:8f:f1:10:1c:a9:0f:4b:
                    41:d5:69:20:db:5f:ef:52:49:5a:73:53:a8:f5:bd:
                    db:da:eb:14:2d:52:2a:7d:0e:c1:c4:22:62:a8:88:
                    cf:33:70:dd:fc:6d:13:7b:e0:e9:26:fa:d7:2e:cc:
                    c4:15:70:7c:96:97:19:9a:b9:2d:dd:2f:4a:92:56:
                    36:60:aa:3a:62:ba:ab:62:ec:6e:ea:d6:7d:a4:20:
                    c4:52:4c:31:4c:a6:24:16:6d:8d:e8:ef:db:b5:1e:
                    8a:24:90:fa:72:85:0d:65:b9:87:f9:e7:63:ac:14:
                    b4:a7:e0:ab:ee:1f:d3:8e:e2:db:2a:76:db:4b:9a:
                    3a:fa:c3:e4:46:f5:0e:b0:6e:07:67:3b:d7:e7:0c:
                    1e:6e:b0:b2:b3:8b:9b:9d:e9:fb:1d:9b:2e:37:b8:
                    ef:ec:3c:09:43:85:a8:68:82:9c:2f:3f:17:2d:02:
                    67:72:a5:3e:6b:10:8d:ef:5d:8e:72:a7:0d:16:d3:
                    25:94:b6:ac:2a:c6:8b:8f:44:70:0d:70:5c:d2:ce:
                    e4:58:e7:33:9b:65:6f:b9:ed:d6:51:3c:d6:4e:45:
                    5d:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:11:1D:04:E0:3C:60:4E:DA:52:E2:B4:8C:07:90:39:F3:E4:BD:8F
            X509v3 Authority Key Identifier:
                keyid:01:A5:1A:04:B7:D9:20:D1:80:6F:07:B0:F7:7D:14:3B:1C:7F:AA:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/323830333a323336303a633030303a3a2f33362d3336203d3e20323639373832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2360:c000::/36

    Signature Algorithm: sha256WithRSAEncryption
         0e:8a:fc:34:26:89:6a:61:29:75:84:64:11:51:ef:58:9d:ca:
         8c:ef:90:0e:e8:3b:b8:84:e3:d7:69:48:cf:87:1a:83:b0:92:
         de:ad:dc:77:23:08:96:2f:46:46:8c:5b:e8:ba:a1:ae:3f:e4:
         70:a8:2a:8f:4a:30:da:19:50:11:86:7d:76:3c:6f:65:88:2c:
         49:d7:d9:20:4f:66:38:39:0a:76:01:7b:3a:24:cf:b0:c0:73:
         06:9a:b3:23:1a:b2:84:bf:dd:8e:dd:5b:41:1c:95:88:b9:4c:
         bb:5a:ad:12:8b:e5:82:43:69:8d:cd:b7:43:3d:99:f1:a3:15:
         4d:5d:9e:29:f6:3a:05:d5:0f:31:e5:c2:57:55:34:18:05:aa:
         fc:09:44:22:5b:ab:3f:af:c1:a7:91:d8:68:75:fd:05:e7:ad:
         83:be:af:dc:45:31:7d:ed:51:65:22:91:d9:4e:50:32:52:ec:
         c2:ab:55:ed:81:e6:07:45:32:eb:3c:4d:52:c0:05:14:c0:d6:
         03:f4:1a:62:d4:99:48:ef:5f:6a:64:4e:14:65:1b:4e:b8:02:
         38:20:92:7a:ef:51:30:30:cf:a9:92:40:8d:00:b8:6b:43:08:
         48:a8:30:97:00:97:63:26:3e:c2:c2:f1:8b:70:ae:cd:84:17:
         41:b9:81:2b
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:05:10 2025 by rpki-client