Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7974DF2B4FA6EB74EEC85173F0BA46BD3C1FFD6F1C6F593B41350EA7A5565E78/0/323830333a333563303a3a2f33322d3332203d3e20323635363839.roa
File:                     323830333a333563303a3a2f33322d3332203d3e20323635363839.roa (raw, json)
Hash identifier:          rjgndy48RCSRjJLV/q+7kf17NkGXp8OQeYi5XUlKhB4=
Subject key identifier:   6A:9F:7B:B0:99:CF:54:FD:38:FB:C2:5B:81:FC:97:F3:E7:56:A9:4C
Certificate issuer:       /CN=66D7CB6044C192E36153B39F7AF75BC83FF1DCB6
Certificate serial:       41F3B4BF1E223895F170E98564264F47C1A7C498
Authority key identifier: 66:D7:CB:60:44:C1:92:E3:61:53:B3:9F:7A:F7:5B:C8:3F:F1:DC:B6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/66D7CB6044C192E36153B39F7AF75BC83FF1DCB6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7974DF2B4FA6EB74EEC85173F0BA46BD3C1FFD6F1C6F593B41350EA7A5565E78/0/323830333a333563303a3a2f33322d3332203d3e20323635363839.roa
Signing time:             Tue 04 Feb 2025 18:10:37 +0000
ROA not before:           Tue 04 Feb 2025 18:05:37 +0000
ROA not after:            Tue 03 Feb 2026 18:10:37 +0000
asID:                     265689
IP address blocks:        2803:35c0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7974DF2B4FA6EB74EEC85173F0BA46BD3C1FFD6F1C6F593B41350EA7A5565E78/0/66D7CB6044C192E36153B39F7AF75BC83FF1DCB6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7974DF2B4FA6EB74EEC85173F0BA46BD3C1FFD6F1C6F593B41350EA7A5565E78/0/66D7CB6044C192E36153B39F7AF75BC83FF1DCB6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/66D7CB6044C192E36153B39F7AF75BC83FF1DCB6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 04:55:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:f3:b4:bf:1e:22:38:95:f1:70:e9:85:64:26:4f:47:c1:a7:c4:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66D7CB6044C192E36153B39F7AF75BC83FF1DCB6
        Validity
            Not Before: Feb  4 18:05:37 2025 GMT
            Not After : Feb  3 18:10:37 2026 GMT
        Subject: CN=6A9F7BB099CF54FD38FBC25B81FC97F3E756A94C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:4c:76:dd:99:1a:08:4a:1a:90:fc:7e:69:87:
                    6f:c5:6d:44:27:05:c6:fe:e4:a1:f2:c4:1e:c2:cb:
                    c9:82:ae:44:92:2c:fe:b0:34:b7:10:83:4b:00:40:
                    bd:c9:35:39:68:c1:34:2d:2a:27:20:5d:4a:e1:8f:
                    0c:11:ef:5b:ac:19:72:28:9e:67:0a:62:2d:c4:a0:
                    55:eb:e6:cd:a5:c8:fd:d9:23:78:8c:39:ed:d6:0b:
                    2c:b1:d4:2b:09:f6:c4:ea:b9:c5:f2:1a:bb:8a:8b:
                    ce:97:0a:08:43:be:e7:0a:5c:55:55:b7:85:e2:8d:
                    ba:a6:fa:22:ea:7e:18:70:87:6c:4e:89:1f:f8:a8:
                    18:4b:93:ff:f9:97:a8:1e:4d:79:7f:6c:f6:83:74:
                    4e:09:93:a0:c0:ed:fb:0f:f7:b6:23:09:84:39:d1:
                    6d:4a:b5:96:44:f2:d2:51:ed:ff:a5:8e:ed:02:01:
                    af:53:d9:b9:12:40:99:2d:60:e7:77:95:00:46:ac:
                    2d:b1:dc:91:01:fa:c6:40:89:0f:fd:96:fc:47:ee:
                    21:15:1a:a4:1a:66:f5:6d:18:3a:42:24:cd:e1:e9:
                    12:f5:47:3f:f2:54:9c:bb:4b:ba:62:3c:e8:15:58:
                    b5:21:f3:e7:34:77:df:44:73:29:17:9e:48:ca:8a:
                    e0:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:9F:7B:B0:99:CF:54:FD:38:FB:C2:5B:81:FC:97:F3:E7:56:A9:4C
            X509v3 Authority Key Identifier:
                keyid:66:D7:CB:60:44:C1:92:E3:61:53:B3:9F:7A:F7:5B:C8:3F:F1:DC:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7974DF2B4FA6EB74EEC85173F0BA46BD3C1FFD6F1C6F593B41350EA7A5565E78/0/66D7CB6044C192E36153B39F7AF75BC83FF1DCB6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/66D7CB6044C192E36153B39F7AF75BC83FF1DCB6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7974DF2B4FA6EB74EEC85173F0BA46BD3C1FFD6F1C6F593B41350EA7A5565E78/0/323830333a333563303a3a2f33322d3332203d3e20323635363839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:35c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         9c:30:12:21:6d:c5:ec:f4:b9:de:ad:5b:fb:24:34:c0:26:47:
         d9:6c:37:f7:47:d6:2f:95:27:10:d5:d3:16:c6:d5:fd:fd:2e:
         70:be:85:3c:9a:d6:a2:fb:03:13:96:78:69:1b:b3:1d:cc:5b:
         e0:c4:10:87:7b:2f:7b:39:a5:04:f1:c4:59:7b:ef:32:6b:0b:
         1d:98:55:2d:51:55:50:92:c1:34:31:d1:0c:d4:a1:f8:3c:40:
         c5:2b:a1:1c:eb:98:57:a5:21:6b:c7:68:72:c0:1d:c4:61:d5:
         c9:40:db:26:12:2f:c0:20:45:56:85:c6:22:85:c3:76:d2:05:
         77:84:2c:ec:37:31:8a:b7:88:72:df:86:5c:6e:77:71:7a:89:
         31:b7:52:18:3c:83:ac:ca:a8:f3:0a:b4:e2:7f:88:a6:1f:5b:
         e1:b4:ac:34:b5:a1:97:1b:54:6b:96:16:3e:53:79:12:c1:bd:
         5a:0e:c6:29:2e:7a:64:c9:1b:03:9b:8b:b7:e1:a0:df:26:d2:
         ea:ce:b8:3b:5e:99:0c:63:f5:f3:ab:88:51:53:08:71:5a:f0:
         f7:e2:77:bc:5b:44:04:6b:b5:3c:b6:91:24:10:a2:5f:0d:89:
         70:bd:37:9f:1d:df:a1:6d:97:7b:43:80:5e:f8:ec:30:07:9a:
         81:0d:e5:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:10:39 2025 by rpki-client