Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/76429D3FC4898C43FD0C89E905ACAE83D553D45217106A8E0DB04088EE4FF11D/0/323830333a643034303a313a3a2f34382d3438203d3e203631343937.roa
File:                     323830333a643034303a313a3a2f34382d3438203d3e203631343937.roa (raw, json)
Hash identifier:          C3W/w2y6r/ZFYMQY4Ut83wrH6Dgf7/0VGr9hKowpp2Y=
Subject key identifier:   44:E6:78:BC:5B:DA:3F:88:B2:24:BE:CF:FB:A2:CD:C4:03:1B:38:47
Certificate issuer:       /CN=CED1302EBC484C7C69E637E45AEF6775D5E618A9
Certificate serial:       7A0860D4B6F03351588730810AB20B0347980C19
Authority key identifier: CE:D1:30:2E:BC:48:4C:7C:69:E6:37:E4:5A:EF:67:75:D5:E6:18:A9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CED1302EBC484C7C69E637E45AEF6775D5E618A9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/76429D3FC4898C43FD0C89E905ACAE83D553D45217106A8E0DB04088EE4FF11D/0/323830333a643034303a313a3a2f34382d3438203d3e203631343937.roa
Signing time:             Tue 04 Feb 2025 20:05:26 +0000
ROA not before:           Tue 04 Feb 2025 20:00:26 +0000
ROA not after:            Tue 03 Feb 2026 20:05:26 +0000
asID:                     61497
IP address blocks:        2803:d040:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/76429D3FC4898C43FD0C89E905ACAE83D553D45217106A8E0DB04088EE4FF11D/0/CED1302EBC484C7C69E637E45AEF6775D5E618A9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/76429D3FC4898C43FD0C89E905ACAE83D553D45217106A8E0DB04088EE4FF11D/0/CED1302EBC484C7C69E637E45AEF6775D5E618A9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CED1302EBC484C7C69E637E45AEF6775D5E618A9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 12:57:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:08:60:d4:b6:f0:33:51:58:87:30:81:0a:b2:0b:03:47:98:0c:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CED1302EBC484C7C69E637E45AEF6775D5E618A9
        Validity
            Not Before: Feb  4 20:00:26 2025 GMT
            Not After : Feb  3 20:05:26 2026 GMT
        Subject: CN=44E678BC5BDA3F88B224BECFFBA2CDC4031B3847
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e3:6b:c5:4f:18:2a:b1:0b:d5:bd:8f:33:a1:
                    db:5e:16:e2:45:7f:11:f7:37:d8:13:da:61:d6:be:
                    de:51:9b:90:aa:da:50:90:73:aa:30:cf:5f:5f:92:
                    5b:9c:29:9e:5e:ed:22:a6:00:50:5d:85:b4:e6:f0:
                    56:3b:5d:42:61:1c:47:0f:da:9e:89:41:c6:a8:cc:
                    48:47:77:ce:4a:ed:9e:f2:a8:e9:30:28:b3:38:36:
                    72:44:fd:31:c3:55:57:a7:5a:c4:8f:c6:9b:d8:8d:
                    c7:21:8a:1f:c4:df:34:9d:8e:9d:93:eb:08:04:69:
                    63:f0:bb:45:16:c2:c1:58:7e:d3:04:39:ac:82:15:
                    79:03:32:9c:a6:cf:13:5c:6d:fc:fc:eb:1b:f7:b7:
                    39:6f:45:7d:32:9e:1c:1c:9b:25:00:ad:43:2b:ed:
                    f8:89:9e:2c:96:a5:db:bf:b1:c7:96:8c:f7:cc:d7:
                    2c:f8:27:6c:23:20:13:20:fa:dd:11:d4:88:b0:c3:
                    a6:c7:69:36:98:12:e4:7c:1d:71:0d:ba:c6:a8:8f:
                    fc:2e:00:1a:aa:80:e3:cd:33:1a:c0:f8:6d:6b:33:
                    e8:c9:fd:cc:59:17:8f:7e:e7:39:65:2c:f7:fe:f8:
                    36:50:38:fe:64:87:26:3f:1f:89:a0:06:f0:4f:6c:
                    51:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:E6:78:BC:5B:DA:3F:88:B2:24:BE:CF:FB:A2:CD:C4:03:1B:38:47
            X509v3 Authority Key Identifier:
                keyid:CE:D1:30:2E:BC:48:4C:7C:69:E6:37:E4:5A:EF:67:75:D5:E6:18:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/76429D3FC4898C43FD0C89E905ACAE83D553D45217106A8E0DB04088EE4FF11D/0/CED1302EBC484C7C69E637E45AEF6775D5E618A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CED1302EBC484C7C69E637E45AEF6775D5E618A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/76429D3FC4898C43FD0C89E905ACAE83D553D45217106A8E0DB04088EE4FF11D/0/323830333a643034303a313a3a2f34382d3438203d3e203631343937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d040:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         57:23:dc:a1:87:8b:5c:b8:a0:c8:54:ac:66:d8:17:e3:9f:eb:
         54:70:9e:f6:4b:a4:6b:b5:8b:63:40:96:6c:a2:7f:f3:7c:fb:
         42:40:39:dc:31:d9:d3:75:69:09:c6:d7:4a:00:da:df:46:b6:
         22:30:83:d7:7b:d3:e1:a5:a9:5f:8c:6b:98:e2:5d:22:f7:8d:
         a1:ee:cb:62:37:ba:35:5a:f1:06:8f:90:b3:97:83:9e:b8:38:
         11:e4:a5:fb:23:1b:17:85:bb:7d:31:04:05:c0:9d:5a:2b:6f:
         3c:32:07:bd:a0:0d:d4:2f:c7:aa:7a:10:fe:e6:0e:34:18:cd:
         b5:36:d9:51:71:11:c9:99:ac:bc:9e:b9:3e:ce:f1:0a:b2:f6:
         9b:01:1b:5d:98:49:fe:ce:c8:89:85:fe:45:37:fa:f2:8c:ef:
         bf:a1:5d:10:1b:7d:21:98:9f:22:9e:5a:68:16:fe:b3:8b:95:
         cc:ee:78:5e:e6:83:43:d2:b3:4f:28:c7:7f:6e:c0:c9:c8:40:
         95:68:a8:fa:f8:03:60:a1:e0:b2:86:79:0c:23:36:bb:31:50:
         e1:99:9e:16:31:17:56:2a:20:0a:a7:5b:82:01:bf:1d:41:8a:
         0d:01:cf:b6:ba:ff:03:75:37:c2:5d:99:f4:9d:22:8a:66:3e:
         8c:10:6f:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:00:10 2025 by rpki-client