Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6B04E12C2A0FE4D0633D4E8F2F4D6590CC843BA011459CC40A71A02B36A931B8/0/323830333a383761303a3a2f33322d3332203d3e203133343839.roa
File:                     323830333a383761303a3a2f33322d3332203d3e203133343839.roa (raw, json)
Hash identifier:          BpKaEB1pD4bD7M3YJMr3jl5zPuUaSkRsY1WsunJIBJI=
Subject key identifier:   1E:D8:88:E9:80:1B:2A:19:56:A2:D4:28:FF:99:46:8D:1B:64:2E:6A
Certificate issuer:       /CN=A369DF483898E89CE1253AC0B9004E797CC9AF0F
Certificate serial:       7150027757E9901A6C5AB7B4976A41394A96BA56
Authority key identifier: A3:69:DF:48:38:98:E8:9C:E1:25:3A:C0:B9:00:4E:79:7C:C9:AF:0F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A369DF483898E89CE1253AC0B9004E797CC9AF0F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6B04E12C2A0FE4D0633D4E8F2F4D6590CC843BA011459CC40A71A02B36A931B8/0/323830333a383761303a3a2f33322d3332203d3e203133343839.roa
Signing time:             Tue 04 Feb 2025 18:23:10 +0000
ROA not before:           Tue 04 Feb 2025 18:18:10 +0000
ROA not after:            Tue 03 Feb 2026 18:23:10 +0000
asID:                     13489
IP address blocks:        2803:87a0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6B04E12C2A0FE4D0633D4E8F2F4D6590CC843BA011459CC40A71A02B36A931B8/0/A369DF483898E89CE1253AC0B9004E797CC9AF0F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6B04E12C2A0FE4D0633D4E8F2F4D6590CC843BA011459CC40A71A02B36A931B8/0/A369DF483898E89CE1253AC0B9004E797CC9AF0F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A369DF483898E89CE1253AC0B9004E797CC9AF0F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:50:02:77:57:e9:90:1a:6c:5a:b7:b4:97:6a:41:39:4a:96:ba:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A369DF483898E89CE1253AC0B9004E797CC9AF0F
        Validity
            Not Before: Feb  4 18:18:10 2025 GMT
            Not After : Feb  3 18:23:10 2026 GMT
        Subject: CN=1ED888E9801B2A1956A2D428FF99468D1B642E6A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:91:4c:2e:98:95:3a:1f:6e:bd:ad:bf:32:16:
                    5d:d4:38:a3:d0:65:5e:ec:6e:1a:07:4d:78:83:ab:
                    b9:b1:d4:76:58:39:e7:6a:5b:c1:ac:2c:cf:38:7a:
                    5e:60:91:66:28:79:3c:a8:dd:b7:df:17:c8:89:49:
                    54:4c:ba:dc:0c:e4:77:a9:d6:01:27:28:2c:bf:d9:
                    c4:63:94:45:85:04:65:60:d6:f1:e0:d4:d9:8a:00:
                    6a:91:57:1f:b4:e3:69:e0:3c:ff:f4:c9:5e:ef:ef:
                    6d:22:33:ea:d4:bc:5e:d0:a8:c7:30:75:c8:62:1f:
                    6f:fa:dc:51:98:95:7f:4a:4e:7d:f9:df:08:85:6a:
                    9d:a8:53:39:d5:0e:5c:78:e3:f2:8a:bb:f0:15:b1:
                    fa:ec:aa:1f:f3:a9:58:7b:cf:d9:7e:3e:d5:07:17:
                    ae:c1:de:c5:17:57:66:da:d0:f1:16:de:dd:e3:4d:
                    1b:05:7c:47:83:64:ad:4a:54:4c:96:5e:bb:78:4c:
                    5e:01:80:f0:96:a4:39:e5:c8:d5:c2:ab:fd:73:0f:
                    13:eb:ec:1e:74:da:dd:ab:3a:8e:03:f6:2a:9f:e2:
                    b0:c2:c8:00:c3:d5:4e:a7:d6:9e:ce:22:c7:74:b7:
                    55:b3:7e:6b:17:e4:a0:77:93:c1:f0:d3:16:26:fa:
                    71:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:D8:88:E9:80:1B:2A:19:56:A2:D4:28:FF:99:46:8D:1B:64:2E:6A
            X509v3 Authority Key Identifier:
                keyid:A3:69:DF:48:38:98:E8:9C:E1:25:3A:C0:B9:00:4E:79:7C:C9:AF:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6B04E12C2A0FE4D0633D4E8F2F4D6590CC843BA011459CC40A71A02B36A931B8/0/A369DF483898E89CE1253AC0B9004E797CC9AF0F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A369DF483898E89CE1253AC0B9004E797CC9AF0F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6B04E12C2A0FE4D0633D4E8F2F4D6590CC843BA011459CC40A71A02B36A931B8/0/323830333a383761303a3a2f33322d3332203d3e203133343839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:87a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         0a:4b:7b:25:05:19:aa:97:29:db:62:f6:51:cb:e9:d9:cf:41:
         88:2b:4a:be:46:c0:59:1f:b5:7f:fd:90:30:56:d2:f0:52:e7:
         65:56:bb:56:bf:bf:a6:af:4b:d2:c0:66:c6:2e:5b:72:ac:e0:
         35:d6:23:12:0c:fb:f4:9b:0c:dd:6d:08:02:db:77:cf:39:98:
         69:64:52:02:d8:7a:27:e8:db:61:89:ee:79:0b:c3:a0:cd:ef:
         95:10:88:74:4c:75:ba:ee:3a:fb:78:ff:0c:68:c6:e3:79:f3:
         5e:d0:e7:7b:c7:d8:cb:c9:1b:8a:11:ed:29:e3:a1:2f:a2:c9:
         13:67:cf:1f:3b:89:d4:1a:a4:42:22:9d:be:3e:49:b5:9a:d4:
         68:3c:b7:e4:ee:8d:9e:db:42:55:fd:50:0b:6d:2b:0b:1e:75:
         f2:09:78:17:b9:e6:f5:31:9b:24:fd:b9:fe:58:79:2a:b2:ae:
         4f:29:06:f6:63:fb:87:6d:8b:bf:d4:2d:03:44:95:02:75:48:
         d7:de:24:31:1a:7f:87:f4:ea:5d:23:5f:e1:0f:f6:d4:6c:7d:
         5e:73:f0:3a:f3:46:55:40:12:ca:3c:7e:1c:10:6e:a8:ff:09:
         e7:f8:83:4e:d4:43:0e:45:58:19:52:61:c8:12:5b:12:eb:06:
         f3:06:24:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:23:24 2025 by rpki-client