Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7E0A0E821409076A60CBB76A1900873939C0D2EBD13D4EAAC347A76C836977FF/0/323830333a323330303a3a2f33322d3438203d3e203137303639.roa
File:                     323830333a323330303a3a2f33322d3438203d3e203137303639.roa (raw, json)
Hash identifier:          Z9NX/JZQrH6qeUjMEIkihsjp2Ylh2q039QLUXFTQHX4=
Subject key identifier:   D4:33:8B:DB:0F:61:FD:C8:C1:B9:57:1E:8B:7B:6E:F2:B5:C4:6E:7F
Certificate issuer:       /CN=A3B4B158F565B81141335DC3FCCFC3D7183C1CDC
Certificate serial:       61E6171065A7577DC3E3AF2E74D8B93D8E69EBBC
Authority key identifier: A3:B4:B1:58:F5:65:B8:11:41:33:5D:C3:FC:CF:C3:D7:18:3C:1C:DC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A3B4B158F565B81141335DC3FCCFC3D7183C1CDC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7E0A0E821409076A60CBB76A1900873939C0D2EBD13D4EAAC347A76C836977FF/0/323830333a323330303a3a2f33322d3438203d3e203137303639.roa
Signing time:             Tue 04 Feb 2025 18:49:50 +0000
ROA not before:           Tue 04 Feb 2025 18:44:50 +0000
ROA not after:            Tue 03 Feb 2026 18:49:50 +0000
asID:                     17069
IP address blocks:        2803:2300::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7E0A0E821409076A60CBB76A1900873939C0D2EBD13D4EAAC347A76C836977FF/0/A3B4B158F565B81141335DC3FCCFC3D7183C1CDC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7E0A0E821409076A60CBB76A1900873939C0D2EBD13D4EAAC347A76C836977FF/0/A3B4B158F565B81141335DC3FCCFC3D7183C1CDC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A3B4B158F565B81141335DC3FCCFC3D7183C1CDC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Apr 2025 11:56:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:e6:17:10:65:a7:57:7d:c3:e3:af:2e:74:d8:b9:3d:8e:69:eb:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A3B4B158F565B81141335DC3FCCFC3D7183C1CDC
        Validity
            Not Before: Feb  4 18:44:50 2025 GMT
            Not After : Feb  3 18:49:50 2026 GMT
        Subject: CN=D4338BDB0F61FDC8C1B9571E8B7B6EF2B5C46E7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:a9:21:32:b1:a2:52:2c:03:c7:58:6d:53:4b:
                    6b:81:3e:60:75:d6:9f:9e:b9:a9:3c:fd:2c:e6:46:
                    6c:57:ab:10:10:58:21:6d:09:f3:82:79:fe:6c:b8:
                    dd:fd:9b:99:93:d2:52:ea:f4:39:e4:09:4d:21:5b:
                    0a:6d:46:95:2d:5c:57:92:5f:c7:af:91:86:4b:82:
                    94:e3:9b:26:53:e4:a2:9f:9e:60:fb:7c:06:9d:d6:
                    5e:9c:a7:7b:80:8f:53:8f:31:b8:b6:07:7c:13:78:
                    69:13:cf:96:e0:6d:c8:b2:e5:f5:58:8d:9c:88:25:
                    18:ad:16:69:47:a0:34:de:71:90:87:9d:b4:36:f7:
                    cd:6b:45:a1:1f:c8:b9:29:ed:1d:70:f7:a1:dc:4d:
                    9d:a1:eb:24:48:c1:ab:a7:ab:2c:a0:73:52:02:28:
                    c4:ff:80:f9:63:7b:98:04:59:66:e8:ee:85:6c:2d:
                    94:5c:56:b3:19:3d:80:b2:bc:d6:32:52:fc:e2:78:
                    5c:09:3a:e3:e6:68:7c:1f:67:fd:f4:0e:8c:ab:ba:
                    ee:ed:1d:84:59:35:0f:67:36:a3:d1:7e:8f:b4:de:
                    5d:da:49:50:12:10:ff:39:93:25:b0:38:6d:c5:57:
                    8e:36:2b:8f:10:1c:01:bf:cc:0a:90:13:0b:77:8d:
                    2a:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:33:8B:DB:0F:61:FD:C8:C1:B9:57:1E:8B:7B:6E:F2:B5:C4:6E:7F
            X509v3 Authority Key Identifier:
                keyid:A3:B4:B1:58:F5:65:B8:11:41:33:5D:C3:FC:CF:C3:D7:18:3C:1C:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7E0A0E821409076A60CBB76A1900873939C0D2EBD13D4EAAC347A76C836977FF/0/A3B4B158F565B81141335DC3FCCFC3D7183C1CDC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A3B4B158F565B81141335DC3FCCFC3D7183C1CDC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7E0A0E821409076A60CBB76A1900873939C0D2EBD13D4EAAC347A76C836977FF/0/323830333a323330303a3a2f33322d3438203d3e203137303639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2300::/32

    Signature Algorithm: sha256WithRSAEncryption
         36:07:c5:5c:9a:70:e2:55:79:6c:24:cc:23:8d:e2:12:5c:b8:
         f3:af:09:5a:06:e5:0f:c0:1e:da:ed:62:f5:a7:5a:45:af:24:
         97:c7:3c:4a:ce:05:96:a0:d9:06:6c:45:39:af:20:b6:82:e4:
         72:f2:c9:c6:6c:85:dc:88:b0:e5:52:e5:4c:7d:2c:4d:cb:f7:
         16:df:57:cd:1c:78:ba:73:f5:65:d2:05:8d:7b:e8:e1:e8:60:
         5e:9f:69:30:f1:7c:38:ab:cb:70:50:31:75:cf:86:2b:54:d1:
         dc:25:b5:ae:c4:d6:48:38:ad:15:45:aa:b5:c5:cb:7d:e7:a7:
         6e:b9:ce:b3:09:44:cb:da:4d:70:10:ec:e5:d9:5a:55:1d:99:
         d7:e7:00:9d:d8:b4:bb:37:e8:8a:b8:22:77:fd:ed:7d:5f:fc:
         4e:db:45:4c:cc:59:26:53:83:1c:65:67:35:a2:13:37:71:d2:
         3f:6e:40:a3:cd:08:f4:bc:d2:d6:29:0f:f9:d3:5f:3e:7b:eb:
         52:a2:01:7a:3e:03:1f:ae:15:19:82:09:9f:c9:50:62:10:18:
         c1:03:32:35:84:2a:a8:77:f9:58:ab:d1:91:d1:6d:6c:e8:20:
         55:40:6c:ea:5c:ca:6d:18:d3:17:4c:dd:de:48:ed:ab:31:4a:
         33:a8:e8:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:49:44 2025 by rpki-client