Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/75859C85FD10CCA9A24A8B24EA8EF3324B8C37F6E01CE243E6BF656F9A2EF744/0/323830333a626438303a3a2f33322d3438203d3e20333934363834.roa
File:                     323830333a626438303a3a2f33322d3438203d3e20333934363834.roa (raw, json)
Hash identifier:          HGLVW0b5juA4rgHibOxOLubLAuOr5ly7a36hY5eXcJo=
Subject key identifier:   A3:45:30:D7:25:3E:19:CF:86:45:EE:1A:2B:BA:A7:CD:92:77:BB:1E
Certificate issuer:       /CN=DC17BDE9178A893A0E44505700003A43E9C81665
Certificate serial:       3427450A2C08ED4E001FB37EB4FFA890909BC189
Authority key identifier: DC:17:BD:E9:17:8A:89:3A:0E:44:50:57:00:00:3A:43:E9:C8:16:65
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC17BDE9178A893A0E44505700003A43E9C81665.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/75859C85FD10CCA9A24A8B24EA8EF3324B8C37F6E01CE243E6BF656F9A2EF744/0/323830333a626438303a3a2f33322d3438203d3e20333934363834.roa
Signing time:             Tue 04 Feb 2025 18:44:41 +0000
ROA not before:           Tue 04 Feb 2025 18:39:41 +0000
ROA not after:            Tue 03 Feb 2026 18:44:41 +0000
asID:                     394684
IP address blocks:        2803:bd80::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/75859C85FD10CCA9A24A8B24EA8EF3324B8C37F6E01CE243E6BF656F9A2EF744/0/DC17BDE9178A893A0E44505700003A43E9C81665.crl
                          rsync://repository.lacnic.net/rpki/lacnic/75859C85FD10CCA9A24A8B24EA8EF3324B8C37F6E01CE243E6BF656F9A2EF744/0/DC17BDE9178A893A0E44505700003A43E9C81665.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC17BDE9178A893A0E44505700003A43E9C81665.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Mar 2025 05:41:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:27:45:0a:2c:08:ed:4e:00:1f:b3:7e:b4:ff:a8:90:90:9b:c1:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC17BDE9178A893A0E44505700003A43E9C81665
        Validity
            Not Before: Feb  4 18:39:41 2025 GMT
            Not After : Feb  3 18:44:41 2026 GMT
        Subject: CN=A34530D7253E19CF8645EE1A2BBAA7CD9277BB1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:eb:bd:eb:50:4d:ee:eb:d7:50:b9:6d:02:b9:
                    62:d6:0f:75:69:88:84:4a:72:77:0e:bf:a9:5f:33:
                    b0:ec:a6:4d:2a:47:8a:e9:26:b8:89:d9:a7:e3:48:
                    08:4b:f5:c5:87:6c:1a:3a:dc:ef:da:4d:60:d4:f3:
                    91:6d:ba:b0:e2:fa:52:97:a3:e2:11:46:4f:3a:de:
                    65:c0:1e:89:6b:3c:43:08:94:2f:d3:39:13:3f:dd:
                    ee:e5:aa:e9:09:24:15:72:8f:bc:f7:9f:4c:f7:a5:
                    68:14:8f:f8:1d:86:d1:87:f0:aa:bd:09:e7:e8:3d:
                    7b:39:3f:1c:8d:3d:67:04:36:58:9e:84:d3:0c:b2:
                    e3:b2:70:e8:d5:fa:39:f2:c6:8e:4e:c3:7b:ad:6f:
                    dc:bc:5e:d9:ff:c3:86:bb:b7:c0:08:41:47:cc:f0:
                    31:81:9a:a0:f5:dd:0b:50:7e:fb:b2:35:e9:64:5f:
                    38:ac:d0:98:69:48:52:48:cb:4b:22:b4:b9:87:de:
                    ca:6f:76:c7:73:a3:01:b2:08:52:74:61:de:90:8f:
                    57:7d:c7:27:e0:2f:3b:0e:91:77:ba:a3:2d:02:4b:
                    34:ac:97:5c:69:b4:e4:01:22:d5:a9:72:8b:eb:02:
                    b5:c3:6e:23:b8:54:fa:d7:c3:af:d8:45:06:93:0a:
                    83:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:45:30:D7:25:3E:19:CF:86:45:EE:1A:2B:BA:A7:CD:92:77:BB:1E
            X509v3 Authority Key Identifier:
                keyid:DC:17:BD:E9:17:8A:89:3A:0E:44:50:57:00:00:3A:43:E9:C8:16:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/75859C85FD10CCA9A24A8B24EA8EF3324B8C37F6E01CE243E6BF656F9A2EF744/0/DC17BDE9178A893A0E44505700003A43E9C81665.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC17BDE9178A893A0E44505700003A43E9C81665.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/75859C85FD10CCA9A24A8B24EA8EF3324B8C37F6E01CE243E6BF656F9A2EF744/0/323830333a626438303a3a2f33322d3438203d3e20333934363834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:bd80::/32

    Signature Algorithm: sha256WithRSAEncryption
         20:ca:6c:dc:ef:5c:98:1a:29:e8:e3:52:3d:49:d5:f8:8d:3c:
         4f:40:eb:3f:c4:55:11:df:ca:2f:d1:ed:c5:3d:69:65:be:f2:
         22:57:ab:40:fa:58:a8:31:2d:37:1b:47:10:bf:f1:a2:93:8d:
         22:42:4d:49:0d:87:7f:82:00:ec:f5:ae:65:35:1a:b6:ed:a9:
         0f:b2:36:0f:23:86:80:f7:4b:be:29:6e:fa:f7:bb:89:82:77:
         f6:e9:40:ae:2b:a8:a2:6e:4f:ad:fa:c8:15:df:91:ee:5e:46:
         9a:9d:f3:c1:8c:b5:d8:eb:e3:78:b4:78:96:b3:03:bf:26:db:
         63:11:1f:01:1d:60:c3:07:b4:30:9b:0e:3a:f5:df:05:12:42:
         cd:24:b9:9e:fe:42:07:5c:74:06:bc:4f:65:c8:ef:c6:ea:9e:
         05:28:b1:39:ec:15:ea:1a:e0:03:bd:61:23:a9:58:25:9e:1b:
         fd:b7:fc:5c:92:b2:68:7d:a7:b4:3f:e2:7f:96:9c:51:4b:8c:
         51:ae:17:aa:07:49:f7:78:10:be:10:80:11:23:44:6c:7f:40:
         71:37:a6:f6:33:3f:1b:58:c0:32:63:c1:d6:3e:56:e6:38:6e:
         3c:ad:dd:ab:be:6d:78:aa:f1:d1:01:b7:b5:13:ca:2c:e5:7e:
         b0:d4:3c:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 06:21:38 2025 by rpki-client