Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/70C686E18A30E992F2E1BD802B896DEB1FEAB9CCFB439812C1789375C4132E93/0/323830333a616365303a3a2f33322d3438203d3e20323639393038.roa
File:                     323830333a616365303a3a2f33322d3438203d3e20323639393038.roa (raw, json)
Hash identifier:          W+qsIoZcQgmBmTmGuh1VR7RI+xaKsZRbD0chypRoUIo=
Subject key identifier:   07:49:2F:9C:1E:0C:3E:E8:91:45:88:C5:31:87:24:57:21:DE:D8:A6
Certificate issuer:       /CN=935D764569E69FAF7EA9F7B726A5B9FB1EE44EEB
Certificate serial:       0AF534AA755B77ED436EEC3E26D90B35F52EBAC3
Authority key identifier: 93:5D:76:45:69:E6:9F:AF:7E:A9:F7:B7:26:A5:B9:FB:1E:E4:4E:EB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/935D764569E69FAF7EA9F7B726A5B9FB1EE44EEB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/70C686E18A30E992F2E1BD802B896DEB1FEAB9CCFB439812C1789375C4132E93/0/323830333a616365303a3a2f33322d3438203d3e20323639393038.roa
Signing time:             Tue 04 Feb 2025 18:32:29 +0000
ROA not before:           Tue 04 Feb 2025 18:27:29 +0000
ROA not after:            Tue 03 Feb 2026 18:32:29 +0000
asID:                     269908
IP address blocks:        2803:ace0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/70C686E18A30E992F2E1BD802B896DEB1FEAB9CCFB439812C1789375C4132E93/0/935D764569E69FAF7EA9F7B726A5B9FB1EE44EEB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/70C686E18A30E992F2E1BD802B896DEB1FEAB9CCFB439812C1789375C4132E93/0/935D764569E69FAF7EA9F7B726A5B9FB1EE44EEB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/935D764569E69FAF7EA9F7B726A5B9FB1EE44EEB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 18:24:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:f5:34:aa:75:5b:77:ed:43:6e:ec:3e:26:d9:0b:35:f5:2e:ba:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=935D764569E69FAF7EA9F7B726A5B9FB1EE44EEB
        Validity
            Not Before: Feb  4 18:27:29 2025 GMT
            Not After : Feb  3 18:32:29 2026 GMT
        Subject: CN=07492F9C1E0C3EE8914588C53187245721DED8A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:e5:1a:cc:5c:5e:dc:6c:2b:a9:66:23:e1:5f:
                    60:86:4d:91:8b:9f:04:c6:e0:3d:7b:8d:bf:85:af:
                    94:ec:d2:74:27:48:77:66:4f:c3:4c:33:7c:c6:7c:
                    8d:cc:a2:d5:e8:80:d3:d7:ea:67:60:d8:80:2d:e3:
                    75:9a:22:df:e4:81:20:2a:e2:5d:a8:cd:a9:88:ba:
                    52:da:f9:6e:50:13:e4:86:56:30:01:16:10:14:f7:
                    d8:4d:20:54:20:a2:d1:b7:00:43:2a:1a:94:0c:9a:
                    42:6c:76:ca:06:a0:38:d9:be:2d:aa:a3:81:45:4a:
                    37:c2:88:8b:ae:00:b2:b0:a6:79:78:48:50:ff:e1:
                    09:24:7d:cc:0d:38:0b:11:1a:62:be:51:e0:c7:13:
                    b9:3d:af:73:80:21:77:58:07:25:41:77:9e:3a:c6:
                    4f:74:0c:6d:7d:ea:09:c0:e1:c5:cc:bc:d6:dd:39:
                    ca:ba:9b:54:d7:89:97:b4:47:c9:5e:8e:7a:4c:5c:
                    c1:45:0e:59:4e:7e:b3:da:d9:e0:74:24:18:39:c8:
                    2a:09:95:45:9e:9f:d2:d1:85:f2:74:4c:3a:ef:bd:
                    0f:13:51:a5:e1:e7:fd:57:ab:85:2e:ea:6b:0a:5c:
                    3e:e8:5d:3a:64:65:97:e5:16:d5:53:14:ec:5e:c6:
                    34:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:49:2F:9C:1E:0C:3E:E8:91:45:88:C5:31:87:24:57:21:DE:D8:A6
            X509v3 Authority Key Identifier:
                keyid:93:5D:76:45:69:E6:9F:AF:7E:A9:F7:B7:26:A5:B9:FB:1E:E4:4E:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/70C686E18A30E992F2E1BD802B896DEB1FEAB9CCFB439812C1789375C4132E93/0/935D764569E69FAF7EA9F7B726A5B9FB1EE44EEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/935D764569E69FAF7EA9F7B726A5B9FB1EE44EEB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/70C686E18A30E992F2E1BD802B896DEB1FEAB9CCFB439812C1789375C4132E93/0/323830333a616365303a3a2f33322d3438203d3e20323639393038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ace0::/32

    Signature Algorithm: sha256WithRSAEncryption
         16:26:1b:6e:f2:75:8d:f7:3c:7d:7a:32:a0:40:a5:eb:30:97:
         a8:4f:4f:d2:d3:40:61:9a:14:ae:3b:28:f2:a7:16:64:3f:8e:
         e7:e2:75:2f:75:d2:cf:6d:af:e5:2d:9d:fb:42:44:a0:75:5d:
         86:ef:92:d9:ec:3c:54:b1:79:47:ca:f1:be:24:14:98:d0:b6:
         9b:8b:2d:1a:44:d7:a2:a2:ef:60:c0:0b:1f:85:c1:90:58:76:
         20:fa:82:81:4d:9b:19:7e:14:bd:9c:2d:3f:cc:99:03:eb:3e:
         15:fb:9c:1c:5f:8e:3b:bd:36:ef:bf:d5:11:52:68:18:0a:2a:
         82:3b:4f:f0:c7:b0:94:71:6c:6e:83:c4:5f:11:77:57:b4:eb:
         dc:1c:a6:c1:38:92:e6:f2:c1:3f:3a:5a:3f:72:2e:5f:2b:b8:
         8a:be:b3:c6:e0:45:15:bf:86:e0:35:03:d9:b8:69:79:8d:f9:
         46:f9:8f:ff:f6:b9:00:44:bb:12:22:89:55:70:78:ac:d2:fa:
         3b:a4:df:bb:a8:56:c7:f8:9c:34:f2:ef:86:ac:34:c8:8a:7a:
         72:c5:d0:8d:56:30:f3:5b:46:55:24:33:4d:95:30:cd:1a:99:
         55:ab:19:ae:73:70:d1:63:5f:52:09:83:41:c9:07:e9:0c:4c:
         a5:d7:61:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:52:10 2025 by rpki-client