Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7D09B24AEFC6CECE842C5D7B4426A5BC63316534880F9B7B0ED381EB9E1B3019/0/323830333a326663303a3a2f33322d3332203d3e20323633313730.roa
File:                     323830333a326663303a3a2f33322d3332203d3e20323633313730.roa (raw, json)
Hash identifier:          tYC3Pkhha0ChwxFdqXb0euyBIeyUTVsTlTgaMlwG3vc=
Subject key identifier:   82:3F:2C:55:DA:9D:59:6E:B9:A6:C9:8B:0D:8A:2C:06:02:B8:9B:A7
Certificate issuer:       /CN=AF2C27ED749D14E69137DB11F778C7F3F40501DD
Certificate serial:       744B68C4D69535B361518E8464610B27679F0C26
Authority key identifier: AF:2C:27:ED:74:9D:14:E6:91:37:DB:11:F7:78:C7:F3:F4:05:01:DD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF2C27ED749D14E69137DB11F778C7F3F40501DD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7D09B24AEFC6CECE842C5D7B4426A5BC63316534880F9B7B0ED381EB9E1B3019/0/323830333a326663303a3a2f33322d3332203d3e20323633313730.roa
Signing time:             Tue 04 Feb 2025 18:54:03 +0000
ROA not before:           Tue 04 Feb 2025 18:49:03 +0000
ROA not after:            Tue 03 Feb 2026 18:54:03 +0000
asID:                     263170
IP address blocks:        2803:2fc0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7D09B24AEFC6CECE842C5D7B4426A5BC63316534880F9B7B0ED381EB9E1B3019/0/AF2C27ED749D14E69137DB11F778C7F3F40501DD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7D09B24AEFC6CECE842C5D7B4426A5BC63316534880F9B7B0ED381EB9E1B3019/0/AF2C27ED749D14E69137DB11F778C7F3F40501DD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF2C27ED749D14E69137DB11F778C7F3F40501DD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:4b:68:c4:d6:95:35:b3:61:51:8e:84:64:61:0b:27:67:9f:0c:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF2C27ED749D14E69137DB11F778C7F3F40501DD
        Validity
            Not Before: Feb  4 18:49:03 2025 GMT
            Not After : Feb  3 18:54:03 2026 GMT
        Subject: CN=823F2C55DA9D596EB9A6C98B0D8A2C0602B89BA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:09:6a:b1:db:b4:a8:6b:c2:f3:f7:47:8b:11:
                    4a:31:47:3d:ed:ea:1a:c1:d8:b1:7f:6e:67:c9:3e:
                    6d:c9:e5:42:ee:b3:8d:95:55:c9:73:05:40:67:ba:
                    0f:b4:45:29:d8:d9:a4:28:a4:39:08:61:5d:51:a9:
                    b3:04:90:5a:22:75:a1:6c:88:38:3a:d1:19:64:32:
                    7c:38:da:a1:c2:5a:1c:29:b5:72:67:4d:09:4a:ee:
                    98:2d:96:89:5e:68:80:9f:f3:7e:40:39:8a:92:56:
                    f5:1c:dd:d2:97:93:d6:84:9e:d8:b5:c9:e1:ea:b5:
                    a6:db:8b:d1:45:c6:47:dd:f1:59:63:ee:2f:4e:23:
                    19:d9:99:a0:07:2c:b6:40:3f:0a:96:e8:2d:f9:49:
                    78:df:e8:b7:20:8b:92:df:b8:a0:b1:17:18:0d:95:
                    09:39:c5:c5:12:6e:8c:b7:8a:b8:f9:ca:9f:57:8d:
                    32:92:f4:05:01:9f:4f:50:70:06:65:cf:be:30:11:
                    84:0b:1d:12:1c:96:e1:f3:75:a5:24:30:cb:d4:0e:
                    59:3a:d5:40:1d:84:45:ef:de:6e:c2:25:3f:c0:a7:
                    f1:06:23:68:ce:12:7a:ab:2c:b2:00:33:2b:72:d2:
                    94:5b:e0:ed:f4:7b:07:06:e5:65:cb:5b:99:95:b3:
                    fc:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:3F:2C:55:DA:9D:59:6E:B9:A6:C9:8B:0D:8A:2C:06:02:B8:9B:A7
            X509v3 Authority Key Identifier:
                keyid:AF:2C:27:ED:74:9D:14:E6:91:37:DB:11:F7:78:C7:F3:F4:05:01:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7D09B24AEFC6CECE842C5D7B4426A5BC63316534880F9B7B0ED381EB9E1B3019/0/AF2C27ED749D14E69137DB11F778C7F3F40501DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF2C27ED749D14E69137DB11F778C7F3F40501DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7D09B24AEFC6CECE842C5D7B4426A5BC63316534880F9B7B0ED381EB9E1B3019/0/323830333a326663303a3a2f33322d3332203d3e20323633313730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2fc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         75:f4:08:90:cd:6b:86:c3:4d:bd:ee:18:0f:4d:8c:d6:ee:0c:
         fb:e0:74:d5:c0:7e:7d:42:4d:90:e3:41:75:1c:0a:78:04:ea:
         d2:9b:2b:b7:c4:f1:22:40:f4:3c:23:ee:76:7b:cc:90:fb:81:
         5b:f9:ae:40:68:62:30:72:c7:25:80:5c:9c:fc:4b:e2:b2:92:
         54:f1:a8:e9:30:da:65:f2:ab:8d:52:35:f2:f3:79:f2:74:40:
         41:e8:26:8b:1a:46:90:39:91:93:ca:34:9f:d4:c1:3a:ea:f8:
         53:66:1a:ca:e1:0a:8e:d8:e0:1a:ac:82:ed:60:6e:45:68:42:
         39:c4:84:cf:db:8a:aa:00:30:9e:7c:d2:76:ab:90:39:2b:c5:
         0b:3e:0b:6c:a0:81:6d:94:eb:ba:bb:b3:ec:80:e5:bc:aa:63:
         ed:27:6a:bd:eb:22:5b:93:db:12:6c:19:27:bd:4c:4a:52:b6:
         be:36:9e:5e:6f:c6:33:ec:54:22:d8:b3:5d:b0:d3:3b:80:9c:
         f9:ad:9b:b4:97:65:01:b7:67:cb:1a:00:66:47:aa:0d:3b:36:
         85:99:70:20:f6:41:29:9c:52:99:38:d6:fa:36:f8:1a:a9:12:
         06:2e:5b:9c:cd:c4:95:2e:3c:2e:0a:c4:2a:a2:ad:1b:a7:45:
         f8:38:95:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:25:57 2025 by rpki-client