Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6CDC5DE2D7CD6AC9AF27F2C749BE2DB823BF4D531F23C0C35E1743B2D7F11C09/0/323830333a313036303a3a2f33322d3332203d3e20323637383039.roa
File:                     323830333a313036303a3a2f33322d3332203d3e20323637383039.roa (raw, json)
Hash identifier:          WQ5sMngzQR3FD4qd+/KztoDpJWw0xBugfxE2LHi9q9k=
Subject key identifier:   BE:4D:AE:37:AE:01:C7:E1:0C:00:63:9F:B9:FE:D4:7A:AA:13:37:6A
Certificate issuer:       /CN=95A8CEA1F7115C0D9908328A0B91BA4CEDD4B6DA
Certificate serial:       09A89E9968FECCC6396B6C4F4ACE8B60C6713892
Authority key identifier: 95:A8:CE:A1:F7:11:5C:0D:99:08:32:8A:0B:91:BA:4C:ED:D4:B6:DA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/95A8CEA1F7115C0D9908328A0B91BA4CEDD4B6DA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6CDC5DE2D7CD6AC9AF27F2C749BE2DB823BF4D531F23C0C35E1743B2D7F11C09/0/323830333a313036303a3a2f33322d3332203d3e20323637383039.roa
Signing time:             Tue 04 Feb 2025 18:48:30 +0000
ROA not before:           Tue 04 Feb 2025 18:43:30 +0000
ROA not after:            Tue 03 Feb 2026 18:48:30 +0000
asID:                     267809
IP address blocks:        2803:1060::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6CDC5DE2D7CD6AC9AF27F2C749BE2DB823BF4D531F23C0C35E1743B2D7F11C09/0/95A8CEA1F7115C0D9908328A0B91BA4CEDD4B6DA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6CDC5DE2D7CD6AC9AF27F2C749BE2DB823BF4D531F23C0C35E1743B2D7F11C09/0/95A8CEA1F7115C0D9908328A0B91BA4CEDD4B6DA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/95A8CEA1F7115C0D9908328A0B91BA4CEDD4B6DA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:a8:9e:99:68:fe:cc:c6:39:6b:6c:4f:4a:ce:8b:60:c6:71:38:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95A8CEA1F7115C0D9908328A0B91BA4CEDD4B6DA
        Validity
            Not Before: Feb  4 18:43:30 2025 GMT
            Not After : Feb  3 18:48:30 2026 GMT
        Subject: CN=BE4DAE37AE01C7E10C00639FB9FED47AAA13376A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:4c:5a:5e:69:97:82:a2:73:48:a5:86:11:95:
                    94:07:f1:06:93:52:df:94:46:60:19:14:4f:ed:d5:
                    f2:4c:96:5d:96:b0:2d:12:bc:b0:b1:52:fa:b3:5f:
                    a4:8c:86:96:07:ef:6d:b6:79:55:e8:2b:16:5c:75:
                    ea:a5:b4:3e:cd:5e:e8:d6:a1:53:99:08:10:00:b2:
                    0a:8c:ad:8b:29:81:b2:6b:4f:b0:db:ff:6e:4a:df:
                    44:a2:a7:3d:26:ad:8b:83:22:82:6c:ae:b9:00:c0:
                    e3:b5:c6:60:fe:45:49:b6:5c:bb:d7:02:21:90:78:
                    39:55:17:15:79:ac:58:34:0c:ca:c9:81:cf:b8:5a:
                    24:2a:c5:b5:9b:aa:b5:87:90:dc:0c:a3:43:b6:b2:
                    4a:51:54:37:7b:83:da:fe:c6:6c:12:c7:30:b6:42:
                    17:b9:2c:83:cd:1c:81:49:06:19:20:c8:04:94:a4:
                    95:f1:17:2a:29:df:e5:30:61:c1:89:be:94:3a:ba:
                    8d:17:4b:1c:61:6d:e3:df:4a:c2:e0:ac:63:4c:6b:
                    d3:b2:fe:36:59:5f:44:3e:bc:3b:a7:3f:2b:b9:50:
                    aa:09:8a:02:f6:3a:0d:8e:07:54:ba:75:0d:a4:8d:
                    36:08:4f:d6:aa:9b:10:b0:9f:ae:86:c5:52:53:18:
                    05:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:4D:AE:37:AE:01:C7:E1:0C:00:63:9F:B9:FE:D4:7A:AA:13:37:6A
            X509v3 Authority Key Identifier:
                keyid:95:A8:CE:A1:F7:11:5C:0D:99:08:32:8A:0B:91:BA:4C:ED:D4:B6:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6CDC5DE2D7CD6AC9AF27F2C749BE2DB823BF4D531F23C0C35E1743B2D7F11C09/0/95A8CEA1F7115C0D9908328A0B91BA4CEDD4B6DA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/95A8CEA1F7115C0D9908328A0B91BA4CEDD4B6DA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6CDC5DE2D7CD6AC9AF27F2C749BE2DB823BF4D531F23C0C35E1743B2D7F11C09/0/323830333a313036303a3a2f33322d3332203d3e20323637383039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1060::/32

    Signature Algorithm: sha256WithRSAEncryption
         1b:49:cd:bd:f0:01:61:58:87:5f:80:b6:06:d7:ca:90:63:4b:
         b2:39:9b:d9:a6:a9:ab:8d:c1:a1:c4:3b:54:cc:91:0f:d6:9f:
         0a:76:29:9d:6f:cf:05:29:2d:15:52:32:b8:96:35:6e:eb:b4:
         eb:5e:fa:96:78:b3:85:a1:62:41:84:49:d5:60:16:02:d6:97:
         32:49:c8:70:a4:2b:8f:40:08:d4:04:27:65:77:36:43:d6:5b:
         20:3b:97:1c:89:0f:cf:b1:36:06:9d:96:86:53:fc:a3:6d:1a:
         d8:dc:96:e9:62:79:8f:ab:b6:5b:70:08:f2:1d:dc:f9:6b:4e:
         bf:06:cd:bc:5e:15:c8:92:bd:77:6f:a6:2d:29:a7:41:1a:f9:
         00:4c:78:1a:92:7e:73:6b:d1:98:7d:94:86:60:c5:5b:bf:7b:
         99:9f:84:15:36:5f:55:e9:6d:c1:21:d1:f4:46:08:f8:51:a1:
         ce:ee:d4:15:26:30:b6:60:f9:3e:1e:c4:c1:4c:18:9d:69:9b:
         00:a3:a7:c6:7c:ee:6f:96:d9:31:d8:f0:61:8c:10:3b:8c:50:
         f3:57:f3:06:49:d5:7d:9c:bd:3a:d5:dc:2c:5b:3c:41:68:d5:
         c9:a8:ed:70:e2:50:01:a7:0c:08:6a:a7:cf:cd:7d:a3:c4:43:
         0f:b8:65:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:49:31 2025 by rpki-client