Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/766506B0E1BE55793114D7A55CE065B3F144AACB131F6E44522A772A199DA6B9/0/323830333a393636303a3a2f33322d3438203d3e20323637393030.roa
File:                     323830333a393636303a3a2f33322d3438203d3e20323637393030.roa (raw, json)
Hash identifier:          erB2L0cdHKbqCe2wX6bJkU5A6qSd0pvOCuPfsBIMvnQ=
Subject key identifier:   F7:D7:EB:C7:5D:0D:3F:54:9F:1D:88:25:4E:B0:8E:EA:DC:EA:93:0A
Certificate issuer:       /CN=0918EDFA09C0F51BF9F8F32C7D833032AED84DC7
Certificate serial:       0D8E892E50D63255F4C03F859E98D7D33CC005F6
Authority key identifier: 09:18:ED:FA:09:C0:F5:1B:F9:F8:F3:2C:7D:83:30:32:AE:D8:4D:C7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0918EDFA09C0F51BF9F8F32C7D833032AED84DC7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/766506B0E1BE55793114D7A55CE065B3F144AACB131F6E44522A772A199DA6B9/0/323830333a393636303a3a2f33322d3438203d3e20323637393030.roa
Signing time:             Tue 04 Feb 2025 18:31:02 +0000
ROA not before:           Tue 04 Feb 2025 18:26:02 +0000
ROA not after:            Tue 03 Feb 2026 18:31:02 +0000
asID:                     267900
IP address blocks:        2803:9660::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/766506B0E1BE55793114D7A55CE065B3F144AACB131F6E44522A772A199DA6B9/0/0918EDFA09C0F51BF9F8F32C7D833032AED84DC7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/766506B0E1BE55793114D7A55CE065B3F144AACB131F6E44522A772A199DA6B9/0/0918EDFA09C0F51BF9F8F32C7D833032AED84DC7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0918EDFA09C0F51BF9F8F32C7D833032AED84DC7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:8e:89:2e:50:d6:32:55:f4:c0:3f:85:9e:98:d7:d3:3c:c0:05:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0918EDFA09C0F51BF9F8F32C7D833032AED84DC7
        Validity
            Not Before: Feb  4 18:26:02 2025 GMT
            Not After : Feb  3 18:31:02 2026 GMT
        Subject: CN=F7D7EBC75D0D3F549F1D88254EB08EEADCEA930A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:8e:4c:de:35:38:11:2d:8b:5c:a1:ee:29:60:
                    7b:42:c8:3a:d5:b4:6f:56:68:fd:13:98:8c:e0:c8:
                    eb:8c:93:6d:03:f1:c9:02:c4:0f:fb:af:3f:92:7f:
                    a5:11:bf:0c:b3:0b:b0:ed:18:8b:8b:26:6b:e5:78:
                    2c:90:e9:72:bd:30:ad:fc:20:6e:40:34:33:0d:dc:
                    31:01:49:f2:80:5a:57:65:26:f6:46:b7:5d:f0:42:
                    2a:b2:48:64:25:83:3a:ed:80:f8:5a:fe:56:22:65:
                    9b:f5:ad:01:99:b4:de:23:3b:eb:69:f5:75:13:63:
                    cf:b4:66:1f:d7:4f:26:9c:6d:b0:08:83:d0:14:8c:
                    4d:50:6d:ec:63:2e:cf:cf:62:bd:77:73:a7:37:5b:
                    fe:ae:d7:91:f2:48:0a:4f:24:41:cb:22:91:39:6a:
                    56:da:08:19:dc:25:17:ad:f2:88:b1:d6:4a:e4:d5:
                    da:5c:87:ef:7f:80:84:ad:8f:99:7f:91:8e:ab:40:
                    dc:5f:3a:91:36:8b:61:8b:91:71:97:fa:9b:f8:86:
                    0b:d6:34:a9:98:1b:1a:da:8d:40:b8:f4:e7:cd:6b:
                    a3:89:84:9c:78:e2:1f:af:bf:50:e5:0a:cc:ed:74:
                    fc:05:61:13:21:6b:b9:de:9e:4a:78:53:21:fa:90:
                    65:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:D7:EB:C7:5D:0D:3F:54:9F:1D:88:25:4E:B0:8E:EA:DC:EA:93:0A
            X509v3 Authority Key Identifier:
                keyid:09:18:ED:FA:09:C0:F5:1B:F9:F8:F3:2C:7D:83:30:32:AE:D8:4D:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/766506B0E1BE55793114D7A55CE065B3F144AACB131F6E44522A772A199DA6B9/0/0918EDFA09C0F51BF9F8F32C7D833032AED84DC7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0918EDFA09C0F51BF9F8F32C7D833032AED84DC7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/766506B0E1BE55793114D7A55CE065B3F144AACB131F6E44522A772A199DA6B9/0/323830333a393636303a3a2f33322d3438203d3e20323637393030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9660::/32

    Signature Algorithm: sha256WithRSAEncryption
         79:eb:a7:f0:59:2c:99:34:7d:45:9e:81:cd:81:93:23:d5:93:
         e5:4d:20:16:58:da:4e:04:3a:42:7a:8c:00:00:00:f4:df:57:
         1f:ea:02:f9:65:f0:2a:a4:08:ed:cb:14:26:e8:c1:46:88:64:
         af:ff:ea:b0:02:c7:3c:da:c0:28:c8:0c:e0:66:af:c1:46:ed:
         75:b6:f3:54:04:ab:d5:45:95:67:92:3e:5e:7a:e8:b1:70:99:
         67:6e:a3:76:39:ea:37:a4:48:9a:f3:6c:4e:8d:c8:5e:3d:40:
         5a:0e:86:78:4f:3b:ff:d5:9f:39:33:12:12:88:a6:4a:77:92:
         f0:33:d1:7f:9a:9d:5e:0f:db:74:72:3c:9c:be:40:95:dc:62:
         73:f4:fd:a4:ab:bf:89:65:3b:0b:ce:c7:52:42:4f:95:af:91:
         de:6c:61:79:e2:8f:71:b0:41:16:14:09:33:0b:9c:77:02:31:
         ab:d4:55:12:b5:4e:18:28:0f:5b:59:a2:b0:1c:ac:8d:68:c4:
         7d:b1:de:b9:0f:52:14:ff:b1:81:26:be:08:0f:86:e0:36:22:
         72:6b:09:3c:e0:ed:ad:bc:05:7b:86:74:bf:94:6a:93:20:ef:
         d9:42:bf:30:e1:34:37:ce:0b:a6:3f:11:27:2c:fa:4b:4f:84:
         4e:52:99:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:02:28 2025 by rpki-client