Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/757BAD82C1507A948E8184A59EDE8AF15F432F637F2AD03FB7668CC9C1D53CAA/0/323830333a333361303a3a2f33322d3634203d3e203532343731.roa
File:                     323830333a333361303a3a2f33322d3634203d3e203532343731.roa (raw, json)
Hash identifier:          EQvibllqtBi/31zTGqSWDoG+UPza/js3ie+sMF32W1Y=
Subject key identifier:   C7:CA:99:BE:AE:08:5F:10:1F:23:4D:04:DA:36:CA:EE:53:34:53:2F
Certificate issuer:       /CN=2A6C417EA637B9F50D220D62AE4762455E2FD4C7
Certificate serial:       0B1AF9E50D7FAE1E1BA18B7428D5CA990A9377E2
Authority key identifier: 2A:6C:41:7E:A6:37:B9:F5:0D:22:0D:62:AE:47:62:45:5E:2F:D4:C7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2A6C417EA637B9F50D220D62AE4762455E2FD4C7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/757BAD82C1507A948E8184A59EDE8AF15F432F637F2AD03FB7668CC9C1D53CAA/0/323830333a333361303a3a2f33322d3634203d3e203532343731.roa
Signing time:             Tue 04 Feb 2025 20:04:05 +0000
ROA not before:           Tue 04 Feb 2025 19:59:05 +0000
ROA not after:            Tue 03 Feb 2026 20:04:05 +0000
asID:                     52471
IP address blocks:        2803:33a0::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/757BAD82C1507A948E8184A59EDE8AF15F432F637F2AD03FB7668CC9C1D53CAA/0/2A6C417EA637B9F50D220D62AE4762455E2FD4C7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/757BAD82C1507A948E8184A59EDE8AF15F432F637F2AD03FB7668CC9C1D53CAA/0/2A6C417EA637B9F50D220D62AE4762455E2FD4C7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2A6C417EA637B9F50D220D62AE4762455E2FD4C7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:1a:f9:e5:0d:7f:ae:1e:1b:a1:8b:74:28:d5:ca:99:0a:93:77:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A6C417EA637B9F50D220D62AE4762455E2FD4C7
        Validity
            Not Before: Feb  4 19:59:05 2025 GMT
            Not After : Feb  3 20:04:05 2026 GMT
        Subject: CN=C7CA99BEAE085F101F234D04DA36CAEE5334532F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:8b:7b:ad:25:02:16:82:ca:1f:ea:75:c8:48:
                    6e:d1:72:91:6e:de:07:aa:18:d3:27:90:ec:88:8e:
                    e8:f4:f1:60:0f:1d:a7:08:22:f2:ac:73:08:78:63:
                    e9:17:72:f8:2a:fa:b9:3e:1e:ff:b2:f0:b0:d0:5e:
                    93:0f:d8:37:b8:44:58:59:41:e4:3a:83:5b:ce:1e:
                    08:12:d2:ab:0a:53:76:a7:49:22:1d:6d:d0:2f:a5:
                    7d:d7:e9:f2:c5:1f:b7:d5:6c:ed:44:b4:64:f0:a1:
                    2a:79:7d:5f:20:f7:22:e8:55:c5:b6:11:a3:42:3e:
                    d2:25:62:bc:53:6b:b0:9e:e4:2c:65:35:e3:e3:f5:
                    92:ea:d9:d6:c6:c0:c1:dd:c7:d5:df:99:fc:be:78:
                    8c:25:7d:3d:e8:60:47:fb:89:08:a8:a8:e7:fd:e0:
                    80:85:98:b1:94:11:9e:6c:c3:5a:f2:70:62:b0:ef:
                    b4:f7:6e:5d:11:85:94:4c:97:1a:88:91:34:15:a2:
                    db:0a:76:95:56:7e:aa:a8:d3:bf:06:f6:49:21:2b:
                    b3:ef:d8:62:a4:54:51:26:99:47:92:97:e0:a1:b2:
                    c5:f2:21:bd:e5:76:ac:9d:a1:49:d3:10:87:30:b1:
                    4e:60:c7:24:a4:0f:ff:a4:d0:96:ee:80:39:aa:0f:
                    58:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:CA:99:BE:AE:08:5F:10:1F:23:4D:04:DA:36:CA:EE:53:34:53:2F
            X509v3 Authority Key Identifier:
                keyid:2A:6C:41:7E:A6:37:B9:F5:0D:22:0D:62:AE:47:62:45:5E:2F:D4:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/757BAD82C1507A948E8184A59EDE8AF15F432F637F2AD03FB7668CC9C1D53CAA/0/2A6C417EA637B9F50D220D62AE4762455E2FD4C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2A6C417EA637B9F50D220D62AE4762455E2FD4C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/757BAD82C1507A948E8184A59EDE8AF15F432F637F2AD03FB7668CC9C1D53CAA/0/323830333a333361303a3a2f33322d3634203d3e203532343731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:33a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         43:25:8b:07:58:eb:cc:aa:11:b8:e1:b4:8b:df:5e:42:a7:f2:
         f9:15:08:60:02:86:0e:fe:00:4a:72:c7:df:57:d0:0f:32:65:
         ed:33:85:81:ec:8d:66:0a:35:ec:05:7f:1a:8a:d0:2d:5b:8e:
         ba:4a:f1:0e:f2:01:bd:91:86:46:40:64:85:3a:ca:b4:08:5b:
         66:d9:f0:c8:f6:c1:04:6f:33:f2:29:69:89:95:54:ee:5d:7b:
         0e:02:ca:08:0d:97:34:98:02:bb:c2:a2:4b:1a:75:0d:c8:f5:
         dc:27:9b:a5:9a:03:fd:43:36:fb:c7:70:6e:0b:ef:ba:07:51:
         79:5f:0b:f0:ef:5c:fe:42:08:f5:c7:0c:0d:2a:7b:a2:c3:0a:
         c5:56:b8:06:1a:a5:51:99:06:af:a2:32:63:e3:d4:75:ec:7a:
         4f:53:65:03:2e:6e:c6:73:bb:46:3e:84:f8:0e:d7:ab:ce:99:
         d8:c9:5f:a1:d4:f3:c1:06:b4:1e:a6:3b:fd:5b:a5:da:1b:16:
         1b:85:5a:15:fb:d2:2f:1f:be:d4:c0:81:6d:63:00:c5:7a:de:
         67:f1:dd:96:0e:60:7d:63:aa:b3:d6:bc:53:08:02:fe:0f:8d:
         c8:bd:63:86:df:50:ef:75:e1:74:6f:21:38:30:4c:79:64:c1:
         12:a6:1d:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:00:18 2025 by rpki-client