Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/323830333a333338303a663030303a3a2f33362d3336203d3e203237383138.roa
File:                     323830333a333338303a663030303a3a2f33362d3336203d3e203237383138.roa (raw, json)
Hash identifier:          m5VxZR3PA2FMaryv5WR/i5zjeITWXaYsdh81b1B7JDM=
Subject key identifier:   04:62:D2:23:B6:FF:0E:08:E0:D2:E9:12:CE:47:59:FB:A4:B5:88:2E
Certificate issuer:       /CN=20DDB465F07E0C4CF8244E3A2605195B41ADA3BB
Certificate serial:       3E18C217F84AE11D9E5A6BFF52A90D272CAE6DA5
Authority key identifier: 20:DD:B4:65:F0:7E:0C:4C:F8:24:4E:3A:26:05:19:5B:41:AD:A3:BB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/323830333a333338303a663030303a3a2f33362d3336203d3e203237383138.roa
Signing time:             Tue 04 Feb 2025 18:25:04 +0000
ROA not before:           Tue 04 Feb 2025 18:20:04 +0000
ROA not after:            Tue 03 Feb 2026 18:25:04 +0000
asID:                     27818
IP address blocks:        2803:3380:f000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:18:c2:17:f8:4a:e1:1d:9e:5a:6b:ff:52:a9:0d:27:2c:ae:6d:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20DDB465F07E0C4CF8244E3A2605195B41ADA3BB
        Validity
            Not Before: Feb  4 18:20:04 2025 GMT
            Not After : Feb  3 18:25:04 2026 GMT
        Subject: CN=0462D223B6FF0E08E0D2E912CE4759FBA4B5882E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a1:b9:ae:19:d7:7f:6f:a3:a5:db:13:fd:85:
                    80:25:49:a8:ce:94:78:66:93:60:2b:27:b1:7e:9f:
                    86:58:87:68:d4:3e:8e:ac:ff:98:19:f8:d1:4f:d6:
                    67:a0:17:7f:3a:e9:ee:df:a2:59:3e:fa:3e:96:99:
                    b8:71:2c:95:4a:d1:ab:33:d4:87:41:d1:70:62:cc:
                    28:de:c9:12:38:b6:a9:75:0b:6e:da:4b:a0:72:21:
                    80:33:b1:44:e4:ca:b0:f1:a1:57:60:41:ec:ae:95:
                    01:98:6a:a4:da:be:30:d7:d5:8f:03:9c:a4:68:07:
                    68:ce:81:9b:df:0c:6d:f5:66:8e:2e:d9:cd:bd:8b:
                    75:85:11:5b:4e:f4:b8:77:17:08:56:20:65:45:76:
                    bd:3b:f1:ff:07:91:3a:fa:69:22:e4:45:38:e2:58:
                    44:3a:a1:a7:4e:8f:7b:03:fd:5f:fd:94:98:6b:7e:
                    bd:6b:ed:7d:83:b6:be:42:48:67:75:e8:79:e8:81:
                    1f:84:90:06:e6:cb:fb:d4:d4:5c:27:04:fb:6a:1f:
                    85:ce:33:e9:99:5b:23:b5:e6:d6:d3:26:dd:8e:7f:
                    0b:cf:94:9d:2e:9e:d1:57:d5:47:4f:e5:a4:1b:45:
                    c3:a5:7f:c8:7d:59:e2:df:6d:6b:b2:76:39:dd:70:
                    d2:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:62:D2:23:B6:FF:0E:08:E0:D2:E9:12:CE:47:59:FB:A4:B5:88:2E
            X509v3 Authority Key Identifier:
                keyid:20:DD:B4:65:F0:7E:0C:4C:F8:24:4E:3A:26:05:19:5B:41:AD:A3:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/323830333a333338303a663030303a3a2f33362d3336203d3e203237383138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3380:f000::/36

    Signature Algorithm: sha256WithRSAEncryption
         4b:0c:b3:8c:7f:e8:cc:08:78:30:e9:e0:d3:94:60:9a:04:2c:
         5e:f7:ae:65:a8:4d:4e:af:a2:ea:f1:97:a0:bc:8f:98:ac:68:
         c2:50:11:55:62:1c:fc:02:40:82:4b:88:c4:33:d8:77:b1:cb:
         d3:5c:1a:de:20:38:70:65:4d:91:63:59:1c:af:4b:e4:89:35:
         4b:d7:c1:82:eb:63:1c:5d:37:fc:1f:31:0d:b1:4c:2b:88:86:
         c2:bc:5a:69:29:c3:de:35:74:cb:ce:95:29:72:7e:0a:b3:db:
         00:35:2d:6f:5e:a1:9d:76:ec:e2:89:86:2d:00:cc:81:53:85:
         b6:c9:5d:99:7e:03:76:b6:4b:6e:80:09:a1:80:78:93:d6:a4:
         f1:e3:2b:dc:af:a0:86:4f:e3:43:06:eb:61:96:60:83:aa:50:
         b6:69:3a:e1:76:70:d5:cb:b8:bd:1f:a9:1f:98:5b:0d:30:1b:
         49:38:8a:08:43:22:83:ac:af:3a:2c:6b:57:18:95:58:f1:07:
         3c:04:3e:f5:4d:1b:d2:36:84:be:d7:97:1a:49:4f:20:35:29:
         bb:28:1c:e2:b6:eb:55:83:7f:48:7c:4a:90:c2:53:ed:f7:50:
         cd:2d:cb:47:d2:c3:6a:51:0e:5b:1b:69:c9:ff:9b:a0:c2:3e:
         77:09:c1:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:06:27 2025 by rpki-client