Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/71DABF3580E6AA5EC9BED9A9986EB700AC2800DD83BBAC871308C6A1862DD88C/0/323830333a326136303a3a2f33322d3332203d3e20323637383831.roa
File:                     323830333a326136303a3a2f33322d3332203d3e20323637383831.roa (raw, json)
Hash identifier:          kLZ4vjYH0Z912EYfK5nzN/upKJHuQEbMzwtFzuVnKns=
Subject key identifier:   C0:02:D0:56:F3:CD:A0:DA:92:78:D1:84:FF:DD:61:D7:85:D9:20:A4
Certificate issuer:       /CN=DB145FAFC708C3BD136195C3A2A4059024EE404A
Certificate serial:       05BD885C27BE2370829FA46E5E64E2DBB8472D7E
Authority key identifier: DB:14:5F:AF:C7:08:C3:BD:13:61:95:C3:A2:A4:05:90:24:EE:40:4A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB145FAFC708C3BD136195C3A2A4059024EE404A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/71DABF3580E6AA5EC9BED9A9986EB700AC2800DD83BBAC871308C6A1862DD88C/0/323830333a326136303a3a2f33322d3332203d3e20323637383831.roa
Signing time:             Tue 04 Feb 2025 18:47:42 +0000
ROA not before:           Tue 04 Feb 2025 18:42:42 +0000
ROA not after:            Tue 03 Feb 2026 18:47:42 +0000
asID:                     267881
IP address blocks:        2803:2a60::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/71DABF3580E6AA5EC9BED9A9986EB700AC2800DD83BBAC871308C6A1862DD88C/0/DB145FAFC708C3BD136195C3A2A4059024EE404A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/71DABF3580E6AA5EC9BED9A9986EB700AC2800DD83BBAC871308C6A1862DD88C/0/DB145FAFC708C3BD136195C3A2A4059024EE404A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB145FAFC708C3BD136195C3A2A4059024EE404A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:bd:88:5c:27:be:23:70:82:9f:a4:6e:5e:64:e2:db:b8:47:2d:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB145FAFC708C3BD136195C3A2A4059024EE404A
        Validity
            Not Before: Feb  4 18:42:42 2025 GMT
            Not After : Feb  3 18:47:42 2026 GMT
        Subject: CN=C002D056F3CDA0DA9278D184FFDD61D785D920A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:a3:15:9d:17:be:fd:9e:3e:04:d2:97:87:34:
                    97:7d:95:fa:eb:ad:e9:25:c8:96:d2:7c:d9:55:ff:
                    8e:5d:8c:dd:e5:26:8a:6a:62:6c:50:98:41:f7:38:
                    c2:14:4d:00:00:3b:52:b7:78:eb:b0:91:37:06:d1:
                    2c:25:5e:f4:28:9b:5f:5c:97:9d:f2:01:d8:32:47:
                    88:b1:90:29:88:ac:64:81:3f:4e:01:02:73:f9:96:
                    3f:84:4b:a2:d0:3b:f0:25:ad:1b:93:a5:3e:af:62:
                    96:80:a5:24:a9:16:7b:28:33:c0:94:62:75:69:86:
                    71:14:fd:13:ac:5a:f6:16:97:fe:35:14:bf:d7:b8:
                    e9:3d:2d:61:35:6c:37:04:12:e2:59:cd:43:47:ed:
                    f4:ac:21:9f:07:3d:be:7b:9a:1c:55:1b:6e:4b:d5:
                    df:e3:5e:e7:36:03:87:aa:ec:1c:90:8e:b4:3d:9c:
                    ca:7b:2d:58:b1:10:d9:94:03:82:8c:99:6d:01:e9:
                    85:89:32:e5:f1:64:02:d2:1e:ac:b2:ae:48:8e:f7:
                    d2:22:5a:c6:1b:fe:c3:46:73:3b:c2:0e:f7:4c:f8:
                    32:4a:2f:20:e4:31:2b:24:79:e5:e6:66:5d:6f:2b:
                    c7:a9:3d:23:93:49:78:86:e4:b5:ce:f9:c5:81:33:
                    80:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:02:D0:56:F3:CD:A0:DA:92:78:D1:84:FF:DD:61:D7:85:D9:20:A4
            X509v3 Authority Key Identifier:
                keyid:DB:14:5F:AF:C7:08:C3:BD:13:61:95:C3:A2:A4:05:90:24:EE:40:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/71DABF3580E6AA5EC9BED9A9986EB700AC2800DD83BBAC871308C6A1862DD88C/0/DB145FAFC708C3BD136195C3A2A4059024EE404A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB145FAFC708C3BD136195C3A2A4059024EE404A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/71DABF3580E6AA5EC9BED9A9986EB700AC2800DD83BBAC871308C6A1862DD88C/0/323830333a326136303a3a2f33322d3332203d3e20323637383831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2a60::/32

    Signature Algorithm: sha256WithRSAEncryption
         50:23:d0:da:4e:8d:2c:e9:41:8f:5b:89:c9:6f:7b:03:20:d9:
         7c:70:4a:39:8c:ea:6f:24:90:a3:39:09:51:5c:f6:7c:e6:a6:
         10:22:5a:5d:a3:ab:c4:9c:56:a4:f9:71:81:53:0f:ac:28:37:
         a9:4d:86:c6:c7:f7:1a:a0:bd:d9:d7:ab:82:f2:df:cb:5c:81:
         b0:87:9b:a9:9c:30:f3:6f:7e:4a:18:b0:80:7a:23:5a:0d:02:
         87:a3:02:2e:fa:5d:11:84:88:24:d8:05:f9:0c:d7:4e:90:0a:
         c1:9b:cc:a6:43:db:0b:c3:2d:62:d7:db:67:02:50:f7:ff:6e:
         ae:df:88:d9:60:4d:0b:b2:86:f1:fd:61:db:c5:e4:42:ee:ab:
         c2:6b:84:e9:34:d1:cb:15:00:4c:c8:1b:c2:d5:1b:e5:6e:df:
         72:48:1c:41:d5:bf:f2:18:b5:db:f7:6f:b6:23:89:bc:70:9b:
         58:40:cd:c8:0d:f7:d4:60:31:01:f4:b4:96:ef:33:bc:c7:33:
         f0:36:7f:96:22:b1:02:40:a8:32:1f:a3:24:8e:0f:f7:27:df:
         02:38:f7:d1:bb:46:19:eb:be:4d:bb:26:d4:ed:3f:ab:fb:87:
         21:cb:dd:8a:d0:67:7a:81:54:d9:8b:e8:fa:70:13:0b:84:8f:
         ec:61:8a:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:16:04 2025 by rpki-client