Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6743DC458C31FB4BDD94CC5506944B66C36F4DDC8884E66D69F9F66BEB920FDD/0/323830333a656536303a65303a3a2f34342d3434203d3e203130373533.roa
File:                     323830333a656536303a65303a3a2f34342d3434203d3e203130373533.roa (raw, json)
Hash identifier:          8TW8hln7oGDxe0Um3NsYb80HiE6y/csA9FRfBdrMeTA=
Subject key identifier:   EB:CF:FE:C9:7A:D3:54:3E:A8:D4:A6:8A:12:23:7F:BE:CB:16:BA:68
Certificate issuer:       /CN=C12AF1A8F8F23657299E9524D0D62F0E213FED62
Certificate serial:       1D09827A046F440BA104E5BF63E566A794CE8620
Authority key identifier: C1:2A:F1:A8:F8:F2:36:57:29:9E:95:24:D0:D6:2F:0E:21:3F:ED:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C12AF1A8F8F23657299E9524D0D62F0E213FED62.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6743DC458C31FB4BDD94CC5506944B66C36F4DDC8884E66D69F9F66BEB920FDD/0/323830333a656536303a65303a3a2f34342d3434203d3e203130373533.roa
Signing time:             Tue 04 Feb 2025 18:21:48 +0000
ROA not before:           Tue 04 Feb 2025 18:16:48 +0000
ROA not after:            Tue 03 Feb 2026 18:21:48 +0000
asID:                     10753
IP address blocks:        2803:ee60:e0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6743DC458C31FB4BDD94CC5506944B66C36F4DDC8884E66D69F9F66BEB920FDD/0/C12AF1A8F8F23657299E9524D0D62F0E213FED62.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6743DC458C31FB4BDD94CC5506944B66C36F4DDC8884E66D69F9F66BEB920FDD/0/C12AF1A8F8F23657299E9524D0D62F0E213FED62.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C12AF1A8F8F23657299E9524D0D62F0E213FED62.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 17:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:09:82:7a:04:6f:44:0b:a1:04:e5:bf:63:e5:66:a7:94:ce:86:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C12AF1A8F8F23657299E9524D0D62F0E213FED62
        Validity
            Not Before: Feb  4 18:16:48 2025 GMT
            Not After : Feb  3 18:21:48 2026 GMT
        Subject: CN=EBCFFEC97AD3543EA8D4A68A12237FBECB16BA68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:0d:7d:93:7c:de:54:fe:60:cc:e5:3b:31:32:
                    63:89:5d:9d:34:07:d5:d1:19:a0:0a:55:32:13:a1:
                    dc:8a:d0:4d:0c:62:dd:b5:cc:df:ae:24:ad:57:cb:
                    6b:6c:e1:b0:22:4b:6d:90:91:de:04:8c:9f:86:ba:
                    5c:58:95:be:04:54:5c:13:7a:d2:55:9a:10:e7:f8:
                    60:84:84:32:8b:55:49:28:2c:04:08:d2:8a:f8:df:
                    4a:20:87:46:5e:93:d5:bc:a0:5d:9a:fa:53:ef:b5:
                    80:14:72:42:32:4b:39:63:39:80:32:00:75:38:c0:
                    0c:1b:80:fc:34:0f:f4:cd:81:25:3d:3b:e0:17:d8:
                    de:30:a9:9b:05:c3:53:c0:80:d1:31:73:94:f9:77:
                    0c:5a:31:59:6a:9d:80:29:21:9b:60:c9:70:44:a0:
                    9a:3d:48:04:26:c1:11:71:df:e4:72:41:d0:9c:d4:
                    88:37:d2:37:30:87:3e:b9:fe:88:2a:c0:28:a1:99:
                    02:f5:77:bf:7c:0a:58:a9:49:bb:78:49:29:37:ae:
                    84:18:8b:13:6c:ae:ad:80:be:62:d8:b6:7f:46:d0:
                    40:0c:35:0e:e5:37:08:a4:1c:bd:36:a5:85:b1:35:
                    7f:4a:10:a7:f1:c8:38:b1:66:56:f9:4e:64:40:03:
                    56:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:CF:FE:C9:7A:D3:54:3E:A8:D4:A6:8A:12:23:7F:BE:CB:16:BA:68
            X509v3 Authority Key Identifier:
                keyid:C1:2A:F1:A8:F8:F2:36:57:29:9E:95:24:D0:D6:2F:0E:21:3F:ED:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6743DC458C31FB4BDD94CC5506944B66C36F4DDC8884E66D69F9F66BEB920FDD/0/C12AF1A8F8F23657299E9524D0D62F0E213FED62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C12AF1A8F8F23657299E9524D0D62F0E213FED62.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6743DC458C31FB4BDD94CC5506944B66C36F4DDC8884E66D69F9F66BEB920FDD/0/323830333a656536303a65303a3a2f34342d3434203d3e203130373533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ee60:e0::/44

    Signature Algorithm: sha256WithRSAEncryption
         25:2d:b3:a0:a7:a4:d0:df:0b:37:92:2a:81:e1:c7:bb:03:5d:
         33:28:1b:6e:62:54:15:35:73:5f:2e:87:11:59:34:32:af:3a:
         3b:f5:95:e2:b1:b4:72:ba:0a:00:92:d7:f0:e1:e3:ac:11:05:
         da:48:51:17:d8:62:53:5c:35:43:c4:2e:9a:d0:64:7a:1c:63:
         63:7f:60:a1:40:53:56:1f:88:d4:d9:20:17:0d:39:2c:d2:88:
         6b:7f:5b:1f:a6:cb:e8:58:41:ea:47:5b:1a:87:50:0c:50:f1:
         f7:af:3f:d2:8f:98:8d:b8:d2:85:3d:dc:25:1c:6b:81:19:35:
         ff:2d:b3:a5:7d:7b:bc:10:9b:92:71:27:bb:8a:c2:89:9a:4c:
         d0:bb:6d:6c:87:e3:ca:0b:78:5e:96:ad:ff:19:15:99:a6:25:
         b7:af:09:e9:9b:9a:d9:f9:f5:70:7e:17:ab:54:b1:e1:90:1d:
         5d:78:ab:ea:0f:31:50:fc:f2:ce:31:43:27:99:f1:96:fe:c5:
         1a:68:0e:5d:6f:f0:ab:38:c7:ff:bf:37:70:89:d7:7f:5d:ea:
         9e:35:0a:3c:b3:1c:20:cd:87:99:fe:31:1f:62:f2:1f:c0:b9:
         27:88:16:9d:3f:38:ec:11:40:72:03:6e:c1:99:09:64:df:76:
         8c:7f:3a:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 10:55:07 2025 by rpki-client