Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7D8D389EFB2AB3FA1807B96BA53497ABE04A0F5972C2681E622A3540646E0E20/0/323830333a623532303a3a2f33322d3438203d3e20323636363933.roa
File:                     323830333a623532303a3a2f33322d3438203d3e20323636363933.roa (raw, json)
Hash identifier:          7ccb26o7POpOgjjKHGnxpIH1yWfDYOaQKuwAmgFACms=
Subject key identifier:   C0:00:8B:59:C6:B6:CE:2A:F0:58:45:4E:A5:62:63:F3:18:DC:58:B1
Certificate issuer:       /CN=BDCCFDE2FE1388F24130105293A56A9F271FF8D9
Certificate serial:       74ED626B5F1DC4D7E913AB5D6AF062A5CC0254F1
Authority key identifier: BD:CC:FD:E2:FE:13:88:F2:41:30:10:52:93:A5:6A:9F:27:1F:F8:D9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BDCCFDE2FE1388F24130105293A56A9F271FF8D9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7D8D389EFB2AB3FA1807B96BA53497ABE04A0F5972C2681E622A3540646E0E20/0/323830333a623532303a3a2f33322d3438203d3e20323636363933.roa
Signing time:             Tue 04 Feb 2025 20:05:27 +0000
ROA not before:           Tue 04 Feb 2025 20:00:27 +0000
ROA not after:            Tue 03 Feb 2026 20:05:27 +0000
asID:                     266693
IP address blocks:        2803:b520::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7D8D389EFB2AB3FA1807B96BA53497ABE04A0F5972C2681E622A3540646E0E20/0/BDCCFDE2FE1388F24130105293A56A9F271FF8D9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7D8D389EFB2AB3FA1807B96BA53497ABE04A0F5972C2681E622A3540646E0E20/0/BDCCFDE2FE1388F24130105293A56A9F271FF8D9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BDCCFDE2FE1388F24130105293A56A9F271FF8D9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 20:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:ed:62:6b:5f:1d:c4:d7:e9:13:ab:5d:6a:f0:62:a5:cc:02:54:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BDCCFDE2FE1388F24130105293A56A9F271FF8D9
        Validity
            Not Before: Feb  4 20:00:27 2025 GMT
            Not After : Feb  3 20:05:27 2026 GMT
        Subject: CN=C0008B59C6B6CE2AF058454EA56263F318DC58B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:31:7b:2c:eb:25:cd:64:98:d7:5d:87:81:de:
                    61:20:be:f9:07:b7:3b:bb:e1:3e:20:b7:f9:a5:65:
                    61:5c:80:df:7a:05:ea:de:84:6c:04:62:e0:e3:2a:
                    e6:fd:57:0b:d2:6b:a6:b2:d9:d2:68:db:85:ff:c7:
                    96:ae:5e:c1:a6:9b:b8:98:39:41:3c:02:fb:42:09:
                    c6:bb:b6:96:23:ae:16:83:d0:c8:58:d2:6d:b5:59:
                    32:bc:6c:bb:7f:11:5d:45:51:e2:aa:e5:4a:48:d0:
                    c2:87:ae:42:ae:9b:d4:dd:87:c6:ce:29:9a:41:06:
                    c2:37:2d:b6:d1:94:ab:54:66:a2:f9:f0:a3:99:a8:
                    d9:a1:69:ef:2c:de:26:c0:69:bc:99:fa:da:a8:b4:
                    26:9a:77:d1:5e:c6:f0:ac:47:fe:a8:9b:3a:4f:d8:
                    13:81:17:de:9d:84:1f:5e:b8:67:f4:c5:4d:eb:76:
                    0a:57:85:48:ef:11:b9:bb:3c:23:1b:d7:b4:88:c5:
                    ca:e3:80:64:a4:6f:6a:7b:83:3c:7f:13:8b:1d:3e:
                    e7:d9:eb:41:e0:b4:d9:28:db:cd:87:6c:f3:33:c9:
                    34:20:d7:f4:5e:66:1e:cc:b6:9b:79:7f:9f:77:57:
                    d3:94:d0:35:0b:ed:60:6d:ad:8d:57:ad:cb:c5:28:
                    69:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:00:8B:59:C6:B6:CE:2A:F0:58:45:4E:A5:62:63:F3:18:DC:58:B1
            X509v3 Authority Key Identifier:
                keyid:BD:CC:FD:E2:FE:13:88:F2:41:30:10:52:93:A5:6A:9F:27:1F:F8:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7D8D389EFB2AB3FA1807B96BA53497ABE04A0F5972C2681E622A3540646E0E20/0/BDCCFDE2FE1388F24130105293A56A9F271FF8D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BDCCFDE2FE1388F24130105293A56A9F271FF8D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7D8D389EFB2AB3FA1807B96BA53497ABE04A0F5972C2681E622A3540646E0E20/0/323830333a623532303a3a2f33322d3438203d3e20323636363933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b520::/32

    Signature Algorithm: sha256WithRSAEncryption
         a1:df:0d:8a:ee:ee:03:0a:11:63:e7:d1:2c:06:5c:56:d7:41:
         55:15:1d:f5:b4:e2:76:d9:35:8b:6e:57:67:cd:d9:7a:3f:01:
         ca:b9:6d:d3:56:de:29:5a:57:11:35:8c:c5:fa:02:ef:f0:83:
         32:67:59:26:0b:0b:15:29:f4:cd:51:13:73:20:a7:5c:d5:cc:
         54:13:9c:f1:db:63:bd:84:1b:7c:61:9a:76:45:9c:29:b4:f1:
         91:2d:63:1f:be:23:d6:f8:01:cd:52:6a:ba:6e:14:61:ef:fb:
         92:cd:51:f4:47:07:7a:21:d5:ec:36:16:61:81:6a:66:72:39:
         b1:30:ea:da:0c:00:f1:4c:eb:67:79:93:5c:f1:fc:21:38:f0:
         09:80:e5:c4:f6:af:16:24:a2:5a:01:bc:bb:58:9d:15:48:25:
         ca:b1:97:79:14:36:76:cf:69:5d:05:82:6a:8f:d5:f7:5c:f3:
         11:6b:30:ae:5c:da:d5:5d:a3:a8:4a:9a:b5:2b:6a:d2:45:1c:
         d1:19:d5:cf:e3:4a:f6:6c:80:38:22:b9:e6:c9:b3:04:74:76:
         a5:ee:b2:b3:b2:87:2b:1b:52:35:39:b5:de:7e:1b:78:cb:86:
         c5:6c:1c:05:c1:b7:1d:ee:83:01:94:f1:79:d6:9a:41:3d:f1:
         28:72:c4:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:47:54 2025 by rpki-client