Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/67D057FB11D3CD98343BF30FF505BE80ECAE3F0FD50826853957BB4D4A82F9DA/0/323830333a373339303a3a2f34382d3438203d3e203237373633.roa
File:                     323830333a373339303a3a2f34382d3438203d3e203237373633.roa (raw, json)
Hash identifier:          0o8RGWqfKN0fRTpRONUkAQHkwVbnvvTz+HWYd70HeSc=
Subject key identifier:   13:86:44:25:64:D7:61:01:1B:A5:43:AE:E5:AA:33:5B:B9:07:2F:1B
Certificate issuer:       /CN=68EA53CC6A42D9D3FB3D1DF2618469C1F32D6937
Certificate serial:       68EC9726B434D11F5E113BE22103F1CF074F219E
Authority key identifier: 68:EA:53:CC:6A:42:D9:D3:FB:3D:1D:F2:61:84:69:C1:F3:2D:69:37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/68EA53CC6A42D9D3FB3D1DF2618469C1F32D6937.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/67D057FB11D3CD98343BF30FF505BE80ECAE3F0FD50826853957BB4D4A82F9DA/0/323830333a373339303a3a2f34382d3438203d3e203237373633.roa
Signing time:             Wed 04 Dec 2024 19:55:00 +0000
ROA not before:           Wed 04 Dec 2024 19:50:00 +0000
ROA not after:            Wed 03 Dec 2025 19:55:00 +0000
asID:                     27763
IP address blocks:        2803:7390::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/67D057FB11D3CD98343BF30FF505BE80ECAE3F0FD50826853957BB4D4A82F9DA/0/68EA53CC6A42D9D3FB3D1DF2618469C1F32D6937.crl
                          rsync://repository.lacnic.net/rpki/lacnic/67D057FB11D3CD98343BF30FF505BE80ECAE3F0FD50826853957BB4D4A82F9DA/0/68EA53CC6A42D9D3FB3D1DF2618469C1F32D6937.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/68EA53CC6A42D9D3FB3D1DF2618469C1F32D6937.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 23 Feb 2025 12:49:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:ec:97:26:b4:34:d1:1f:5e:11:3b:e2:21:03:f1:cf:07:4f:21:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68EA53CC6A42D9D3FB3D1DF2618469C1F32D6937
        Validity
            Not Before: Dec  4 19:50:00 2024 GMT
            Not After : Dec  3 19:55:00 2025 GMT
        Subject: CN=1386442564D761011BA543AEE5AA335BB9072F1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ff:e2:db:d3:6c:75:20:8c:a8:7a:66:4e:1d:
                    86:80:eb:3c:74:25:e2:3c:e5:48:71:2b:60:92:5f:
                    62:d1:8d:e1:07:83:b6:09:38:85:d6:4a:40:87:9d:
                    58:77:0c:41:01:f2:af:20:e7:eb:0b:2e:da:5c:5f:
                    ba:3e:88:e1:a2:76:25:48:10:b2:94:57:a9:46:7a:
                    cb:16:5c:2c:cc:3c:95:be:b4:ca:bf:0d:1d:db:1f:
                    d9:47:44:f0:31:9c:31:ad:03:ab:79:1c:af:6c:56:
                    45:f5:b0:b3:ac:28:ff:fa:ac:95:1c:28:dc:78:75:
                    c1:7e:02:d9:9e:d1:e8:9b:33:49:ec:1d:b6:6d:47:
                    e3:16:3a:fd:9e:3d:3a:08:c9:59:e5:e1:22:5b:63:
                    91:d9:f0:08:18:ea:1e:a7:ba:6b:8a:8f:dd:ec:04:
                    6e:8c:a2:da:f8:f4:9f:23:ec:fc:af:59:cd:2b:8f:
                    36:4b:f3:57:e4:92:e7:85:cd:d1:57:04:63:9c:f5:
                    0b:fa:9f:0e:71:af:d7:5a:30:ef:96:c9:eb:f7:45:
                    50:f7:94:83:07:c6:53:96:c4:f4:85:75:6f:97:cb:
                    81:10:94:14:80:e4:c7:d1:a8:9e:5f:f8:e1:3a:58:
                    1a:60:74:6e:20:af:b8:d8:ab:a7:4e:b3:9c:66:3a:
                    03:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:86:44:25:64:D7:61:01:1B:A5:43:AE:E5:AA:33:5B:B9:07:2F:1B
            X509v3 Authority Key Identifier:
                keyid:68:EA:53:CC:6A:42:D9:D3:FB:3D:1D:F2:61:84:69:C1:F3:2D:69:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/67D057FB11D3CD98343BF30FF505BE80ECAE3F0FD50826853957BB4D4A82F9DA/0/68EA53CC6A42D9D3FB3D1DF2618469C1F32D6937.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/68EA53CC6A42D9D3FB3D1DF2618469C1F32D6937.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/67D057FB11D3CD98343BF30FF505BE80ECAE3F0FD50826853957BB4D4A82F9DA/0/323830333a373339303a3a2f34382d3438203d3e203237373633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7390::/48

    Signature Algorithm: sha256WithRSAEncryption
         87:04:6d:e7:7c:3a:fe:ab:c3:a4:ad:bc:d9:7a:bb:b3:7b:bb:
         3b:2e:81:bc:a0:26:83:ed:6e:4a:54:be:72:61:70:73:d5:59:
         33:0e:7c:f0:0f:1d:07:e5:1e:e2:f6:07:c3:de:2a:da:3e:7f:
         ee:ac:eb:6d:7d:4c:f1:78:57:3f:f3:38:63:f0:9f:be:44:b5:
         8a:91:86:6a:71:9e:d3:2b:33:8e:c7:73:0f:73:50:35:64:ac:
         fb:13:c6:e6:1b:22:ba:6d:0a:13:48:12:6b:5c:c2:eb:28:06:
         1b:4c:31:54:39:0a:c0:b7:61:e2:c1:e7:b0:d3:d4:3c:f2:d7:
         bc:00:92:b5:57:59:39:82:40:91:b0:b6:d9:68:f6:c1:6a:f4:
         8a:9a:61:47:6f:98:46:96:e5:b0:71:18:f9:16:bb:7a:ce:22:
         0b:00:ae:d7:bc:5c:ec:37:69:98:8c:64:88:1c:91:5d:b3:b6:
         b6:c4:e8:2a:5a:7f:e2:bf:ac:83:7d:6d:0e:d8:d5:17:6a:52:
         74:e0:ad:35:8b:fb:2c:7d:68:11:d8:68:54:43:58:7e:06:28:
         bf:df:02:31:6f:c7:cf:03:d6:81:09:8b:d8:71:3e:61:24:07:
         a0:67:52:d8:fd:ce:7b:9a:be:a2:38:58:03:db:33:ce:92:f7:
         34:e1:af:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:41:18 2025 by rpki-client