Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/323830333a3435303a316330303a3a2f34302d3430203d3e20323733313233.roa
File:                     323830333a3435303a316330303a3a2f34302d3430203d3e20323733313233.roa (raw, json)
Hash identifier:          VV2Ip+3yZsJwWqtBhuo2JaHgxEVVdrUIhHfuJCzE8iM=
Subject key identifier:   86:72:80:3F:45:92:2E:59:E5:F2:C3:EF:4E:55:9B:10:B0:2B:57:D5
Certificate issuer:       /CN=A198FA87174B8B00FBA9F65DCF1B605476A4B9FD
Certificate serial:       31D911C9BE7A23711517CE7AD2F61248459E997A
Authority key identifier: A1:98:FA:87:17:4B:8B:00:FB:A9:F6:5D:CF:1B:60:54:76:A4:B9:FD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A198FA87174B8B00FBA9F65DCF1B605476A4B9FD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/323830333a3435303a316330303a3a2f34302d3430203d3e20323733313233.roa
Signing time:             Sat 21 Dec 2024 00:15:02 +0000
ROA not before:           Sat 21 Dec 2024 00:10:02 +0000
ROA not after:            Sat 20 Dec 2025 00:15:02 +0000
asID:                     273123
IP address blocks:        2803:450:1c00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/A198FA87174B8B00FBA9F65DCF1B605476A4B9FD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/A198FA87174B8B00FBA9F65DCF1B605476A4B9FD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A198FA87174B8B00FBA9F65DCF1B605476A4B9FD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Apr 2025 11:56:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:d9:11:c9:be:7a:23:71:15:17:ce:7a:d2:f6:12:48:45:9e:99:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A198FA87174B8B00FBA9F65DCF1B605476A4B9FD
        Validity
            Not Before: Dec 21 00:10:02 2024 GMT
            Not After : Dec 20 00:15:02 2025 GMT
        Subject: CN=8672803F45922E59E5F2C3EF4E559B10B02B57D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:3e:de:0c:51:cb:5a:1c:ac:c8:41:c6:b7:78:
                    73:32:61:06:89:56:a6:a2:4e:4b:0b:c1:ce:ec:88:
                    da:50:b6:39:34:5d:34:2a:2e:24:d3:18:8b:76:0c:
                    62:0f:33:a9:0d:bd:63:e1:e5:af:dd:fa:74:12:70:
                    bb:a0:84:81:40:32:59:c8:fc:22:79:b6:6f:a0:6e:
                    8f:2a:84:87:06:98:2a:ba:b8:5f:c6:3b:59:da:51:
                    85:09:76:41:12:c3:32:09:2c:6c:65:3e:c3:83:e2:
                    55:9d:d4:10:73:c7:59:b0:a0:78:b9:1e:c7:dc:a7:
                    1d:76:1b:96:2d:f3:1d:58:9f:c9:92:76:02:4a:f3:
                    a0:92:d5:e5:e6:28:3d:5d:74:2c:44:11:10:4c:21:
                    01:bf:6f:14:2c:19:49:4d:bd:d3:c8:ef:dc:87:af:
                    3f:67:64:cc:fe:a4:d5:51:37:3f:0e:64:64:af:33:
                    37:1a:49:64:db:e9:09:2e:06:1d:bb:46:b4:23:2e:
                    c5:69:f6:14:08:ea:46:b2:81:2e:81:55:ae:27:6c:
                    d7:4a:49:fd:48:00:df:0f:bf:fe:4f:4b:d1:21:8c:
                    37:57:4a:27:fa:71:e0:10:8d:65:2f:08:d2:87:95:
                    bd:e1:cd:23:8c:db:34:64:0e:dd:ed:13:d4:6e:8c:
                    9f:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:72:80:3F:45:92:2E:59:E5:F2:C3:EF:4E:55:9B:10:B0:2B:57:D5
            X509v3 Authority Key Identifier:
                keyid:A1:98:FA:87:17:4B:8B:00:FB:A9:F6:5D:CF:1B:60:54:76:A4:B9:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/A198FA87174B8B00FBA9F65DCF1B605476A4B9FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A198FA87174B8B00FBA9F65DCF1B605476A4B9FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/323830333a3435303a316330303a3a2f34302d3430203d3e20323733313233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:450:1c00::/40

    Signature Algorithm: sha256WithRSAEncryption
         29:e3:af:2b:4a:9f:be:0e:ba:c1:3c:37:c4:72:10:25:cc:6b:
         87:0e:94:36:d6:19:c7:82:5c:07:42:43:83:94:ab:32:50:e8:
         ec:e2:9a:f3:73:4d:88:d8:57:6b:bd:86:ba:a7:e0:81:79:15:
         1e:71:5a:53:4a:fe:3f:dc:eb:20:82:c7:4c:0d:8f:e1:1c:f5:
         17:89:96:14:cc:1d:78:7b:eb:7a:e7:1c:c2:98:eb:1e:40:2d:
         ce:d0:74:39:d1:a2:5c:1d:ab:d9:6c:b7:56:b9:f4:4a:79:66:
         25:70:d1:b1:4a:cc:55:66:02:9d:7e:58:58:a3:4d:db:71:ba:
         f7:c3:06:6c:17:cd:54:5f:48:9c:56:79:bb:e0:ef:5c:97:cd:
         c2:e5:1b:dc:b2:24:63:cf:51:07:a3:99:55:39:01:86:b6:12:
         21:d0:c3:8b:c7:ab:9f:62:65:c7:6c:7d:16:23:85:45:fb:52:
         0f:22:cc:8f:ef:1c:14:e0:f2:86:d3:4f:d5:5c:85:f3:ee:95:
         b7:cd:af:0c:35:bc:82:4f:79:17:c0:d5:65:e2:91:3a:a5:9d:
         ed:73:d7:e5:c0:b7:f8:33:16:58:66:90:e7:2a:c0:57:6d:5d:
         ed:b7:b8:ad:a5:a6:b5:41:05:b9:c3:89:3d:45:ae:11:a1:33:
         78:33:a1:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 20:33:15 2025 by rpki-client