Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6A9731AA4CA522EC3D5B2588C0B5231AADF366E2D2BF6B897FECA3F38E7CF018/0/323830333a373438303a3a2f33322d3438203d3e203532343936.roa
File:                     323830333a373438303a3a2f33322d3438203d3e203532343936.roa (raw, json)
Hash identifier:          DDYSw9V8L6vN0XvUKz9+y9awRC7Y4++1UJvQT0wFCrI=
Subject key identifier:   E4:27:E2:38:A1:01:E1:CE:10:15:83:27:82:27:2D:01:3D:7E:09:50
Certificate issuer:       /CN=D4C98CFE5BCADD08104C88B86C13259A2A3D3E67
Certificate serial:       18AD0103D8ADC179C40CE53D8AA8A55F46879136
Authority key identifier: D4:C9:8C:FE:5B:CA:DD:08:10:4C:88:B8:6C:13:25:9A:2A:3D:3E:67
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D4C98CFE5BCADD08104C88B86C13259A2A3D3E67.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6A9731AA4CA522EC3D5B2588C0B5231AADF366E2D2BF6B897FECA3F38E7CF018/0/323830333a373438303a3a2f33322d3438203d3e203532343936.roa
Signing time:             Tue 04 Feb 2025 18:06:21 +0000
ROA not before:           Tue 04 Feb 2025 18:01:21 +0000
ROA not after:            Tue 03 Feb 2026 18:06:21 +0000
asID:                     52496
IP address blocks:        2803:7480::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6A9731AA4CA522EC3D5B2588C0B5231AADF366E2D2BF6B897FECA3F38E7CF018/0/D4C98CFE5BCADD08104C88B86C13259A2A3D3E67.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6A9731AA4CA522EC3D5B2588C0B5231AADF366E2D2BF6B897FECA3F38E7CF018/0/D4C98CFE5BCADD08104C88B86C13259A2A3D3E67.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D4C98CFE5BCADD08104C88B86C13259A2A3D3E67.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:ad:01:03:d8:ad:c1:79:c4:0c:e5:3d:8a:a8:a5:5f:46:87:91:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D4C98CFE5BCADD08104C88B86C13259A2A3D3E67
        Validity
            Not Before: Feb  4 18:01:21 2025 GMT
            Not After : Feb  3 18:06:21 2026 GMT
        Subject: CN=E427E238A101E1CE1015832782272D013D7E0950
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:fb:ff:fe:29:d3:fe:15:8d:e7:75:d5:11:98:
                    71:c9:e4:8f:09:97:7f:38:c8:dd:14:62:94:57:b7:
                    2e:4b:6b:b7:73:14:8c:1c:29:1a:b1:de:c8:ee:0e:
                    e0:70:1d:a6:1f:58:1d:e7:10:cf:9d:8a:e2:15:8e:
                    e9:71:8c:f9:3c:07:93:00:a9:f1:1f:0d:4f:08:9a:
                    38:2b:ee:47:12:ba:81:e3:a8:71:aa:52:c3:11:38:
                    3c:0a:13:4a:8e:90:e3:75:f6:18:d6:92:04:d8:57:
                    b7:9c:d7:c5:fe:77:a7:c2:6f:ed:c9:76:bd:28:ed:
                    73:b6:e7:0d:ab:e0:4c:01:ba:90:98:59:67:42:be:
                    6c:1f:bb:b7:af:18:4e:46:61:e0:67:11:21:c5:84:
                    97:23:1d:64:f3:42:81:55:61:79:bb:19:39:2a:32:
                    8e:d8:47:90:3e:40:4e:f6:70:5f:86:b0:db:70:29:
                    6f:ef:4d:c9:3b:bd:5f:c7:70:02:9d:ba:b9:a8:94:
                    07:da:ae:31:4a:4d:07:19:77:49:a2:14:ee:ca:8f:
                    76:b1:32:7f:db:e7:68:c4:50:63:9b:aa:91:ab:1d:
                    c8:5c:7c:c4:17:1a:ee:0d:c1:64:42:58:6d:7f:98:
                    86:a6:2c:c1:a4:8b:ca:dd:06:6d:41:74:cf:4d:17:
                    cb:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:27:E2:38:A1:01:E1:CE:10:15:83:27:82:27:2D:01:3D:7E:09:50
            X509v3 Authority Key Identifier:
                keyid:D4:C9:8C:FE:5B:CA:DD:08:10:4C:88:B8:6C:13:25:9A:2A:3D:3E:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6A9731AA4CA522EC3D5B2588C0B5231AADF366E2D2BF6B897FECA3F38E7CF018/0/D4C98CFE5BCADD08104C88B86C13259A2A3D3E67.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D4C98CFE5BCADD08104C88B86C13259A2A3D3E67.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6A9731AA4CA522EC3D5B2588C0B5231AADF366E2D2BF6B897FECA3F38E7CF018/0/323830333a373438303a3a2f33322d3438203d3e203532343936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7480::/32

    Signature Algorithm: sha256WithRSAEncryption
         7c:06:44:69:c9:ec:13:94:a5:03:b1:54:55:c8:eb:e7:00:d5:
         22:3a:84:30:5c:ea:cc:3f:3d:1c:e6:da:41:14:6d:44:71:80:
         4b:3a:2d:ad:d5:06:4c:86:6a:fd:dc:41:a5:b8:74:32:27:ca:
         bc:5a:a5:b0:e7:69:c2:51:47:a2:05:0f:ea:a3:75:eb:f1:04:
         64:16:43:7b:d1:55:a6:35:d4:c9:2e:10:05:7d:53:e9:09:04:
         ce:3a:73:34:a3:dd:ca:ba:9a:8a:cb:dd:48:c6:99:45:4f:c3:
         d8:1d:18:ea:bc:96:62:9c:a9:da:26:6c:4b:60:2a:41:23:46:
         28:27:c6:64:e7:1b:f8:1e:38:41:d8:9f:2d:e6:b1:54:8a:67:
         db:93:9b:82:cc:e8:65:b9:19:b7:90:dd:63:bc:e1:01:0e:f8:
         a1:ec:09:91:96:98:41:e8:b0:fb:e7:d5:fb:f1:46:64:f6:f7:
         57:b4:40:58:55:03:84:92:ed:20:0f:4e:16:b6:85:67:89:f3:
         2a:58:6a:73:33:92:87:50:cf:1c:00:4a:d5:e3:e7:91:dc:3e:
         ae:13:6b:93:fa:33:2d:54:14:66:ff:bd:ec:2e:d2:a4:53:af:
         5f:d2:1c:f0:25:27:02:2c:e4:c6:c6:a3:25:48:39:13:1c:ab:
         aa:51:e5:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:03:41 2025 by rpki-client