Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/71A2A28CD4069A1E713611A097350760081D2E81DB649EC9853A5B4DD5A04565/0/323830333a633736303a3a2f33322d3634203d3e20323639383139.roa
File:                     323830333a633736303a3a2f33322d3634203d3e20323639383139.roa (raw, json)
Hash identifier:          3VEeiaO6SDcMuKzvK8o6AAxcXBu8ztcLvd3m+AKnDvQ=
Subject key identifier:   32:7F:97:F6:D1:20:A9:B9:07:39:A8:7C:20:54:99:59:47:EF:8E:ED
Certificate issuer:       /CN=F98B92454B43512A3C761A3C81A5F9B6EADD6F5D
Certificate serial:       5137940A4E41A4C8CF6B94A6FA56EA410439DE72
Authority key identifier: F9:8B:92:45:4B:43:51:2A:3C:76:1A:3C:81:A5:F9:B6:EA:DD:6F:5D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F98B92454B43512A3C761A3C81A5F9B6EADD6F5D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/71A2A28CD4069A1E713611A097350760081D2E81DB649EC9853A5B4DD5A04565/0/323830333a633736303a3a2f33322d3634203d3e20323639383139.roa
Signing time:             Tue 04 Feb 2025 18:03:47 +0000
ROA not before:           Tue 04 Feb 2025 17:58:47 +0000
ROA not after:            Tue 03 Feb 2026 18:03:47 +0000
asID:                     269819
IP address blocks:        2803:c760::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/71A2A28CD4069A1E713611A097350760081D2E81DB649EC9853A5B4DD5A04565/0/F98B92454B43512A3C761A3C81A5F9B6EADD6F5D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/71A2A28CD4069A1E713611A097350760081D2E81DB649EC9853A5B4DD5A04565/0/F98B92454B43512A3C761A3C81A5F9B6EADD6F5D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F98B92454B43512A3C761A3C81A5F9B6EADD6F5D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 20:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:37:94:0a:4e:41:a4:c8:cf:6b:94:a6:fa:56:ea:41:04:39:de:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F98B92454B43512A3C761A3C81A5F9B6EADD6F5D
        Validity
            Not Before: Feb  4 17:58:47 2025 GMT
            Not After : Feb  3 18:03:47 2026 GMT
        Subject: CN=327F97F6D120A9B90739A87C2054995947EF8EED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f6:31:26:70:d5:fa:fd:f8:f6:8b:e7:b4:f6:
                    05:79:cc:0f:e9:61:06:22:97:3a:82:34:cc:01:ba:
                    fd:b3:3a:8e:3a:fe:62:a8:45:fc:0c:43:a7:a4:96:
                    ea:e9:1f:f9:a5:0a:b8:55:79:12:08:3e:cd:68:5b:
                    39:a2:3d:5c:94:ad:40:82:23:24:01:ba:01:fc:69:
                    cb:89:59:1a:8d:87:9e:f2:34:35:cf:eb:90:0c:72:
                    11:2e:f5:76:92:75:d3:03:87:63:b4:8d:51:58:eb:
                    f1:95:81:e9:21:d8:0e:47:67:5f:6d:9f:e7:ff:8a:
                    5a:c6:f2:4e:78:80:58:5d:3f:5f:0e:1f:4e:31:43:
                    f1:47:c9:31:58:b9:c7:60:ff:0a:b4:45:79:4a:14:
                    b4:ca:19:51:34:d5:eb:20:7f:58:8b:7f:47:ae:d1:
                    b1:d9:b0:54:48:f3:01:3c:c0:ad:c9:fb:c2:07:d4:
                    94:2d:10:e8:da:ca:d9:84:a0:5a:f2:98:3a:68:7f:
                    5f:fc:81:7c:77:c3:b4:b0:ad:ff:36:3b:d3:6e:5c:
                    8d:94:fd:83:44:39:ec:d3:13:b2:11:84:bd:9e:f9:
                    d3:18:5a:f7:86:52:a9:c7:d8:3c:7d:6e:47:55:c9:
                    77:e7:01:57:c9:ef:f5:e5:b5:bf:35:d2:e6:91:58:
                    63:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:7F:97:F6:D1:20:A9:B9:07:39:A8:7C:20:54:99:59:47:EF:8E:ED
            X509v3 Authority Key Identifier:
                keyid:F9:8B:92:45:4B:43:51:2A:3C:76:1A:3C:81:A5:F9:B6:EA:DD:6F:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/71A2A28CD4069A1E713611A097350760081D2E81DB649EC9853A5B4DD5A04565/0/F98B92454B43512A3C761A3C81A5F9B6EADD6F5D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F98B92454B43512A3C761A3C81A5F9B6EADD6F5D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/71A2A28CD4069A1E713611A097350760081D2E81DB649EC9853A5B4DD5A04565/0/323830333a633736303a3a2f33322d3634203d3e20323639383139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c760::/32

    Signature Algorithm: sha256WithRSAEncryption
         68:de:bf:3c:57:de:5b:d8:38:05:50:7f:3b:ca:19:f0:8f:7b:
         38:8e:89:65:73:3a:79:29:29:de:e9:fc:81:4e:b7:e0:a2:35:
         a4:65:48:d6:0e:2f:15:2f:ce:3e:b2:3c:86:07:58:4c:80:5c:
         15:d3:53:29:5b:91:65:10:ff:a4:53:17:3d:f6:af:ef:c8:b4:
         11:cf:43:7b:51:45:3f:9b:8f:28:ee:ef:e1:2e:17:0c:20:69:
         91:0c:fc:70:d0:20:05:c8:f0:e6:62:90:4c:71:7f:1f:fa:9f:
         8d:23:fa:f9:da:1c:fd:da:9a:50:fc:58:b7:44:60:02:52:fa:
         77:f9:81:5d:e5:da:19:62:c8:ea:09:ab:ea:c5:b7:29:1c:52:
         41:a4:10:90:27:de:cb:48:34:4a:aa:ab:7f:94:8f:6a:75:7b:
         82:f3:48:04:26:48:42:5e:b2:99:ce:9c:93:97:29:6d:d1:c7:
         99:66:38:d9:ce:2d:50:d4:37:c6:33:df:07:d4:5a:0a:44:fa:
         ab:6c:74:d5:7a:c9:99:95:87:ea:a1:b2:5a:cd:85:f3:d4:ba:
         95:2c:02:16:3a:d8:42:0d:7d:da:7f:de:4d:6e:75:3b:de:0d:
         1a:18:ef:8d:eb:97:6c:f5:1c:8b:ea:ec:ad:7e:0e:d6:f9:53:
         f2:b1:73:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:50:22 2025 by rpki-client