Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/81974DCAD53278941C0C83F19FBC6EFA3DC0418D5CBF53CCDA63024298B3D382/0/323830333a643863303a343030303a3a2f33342d3334203d3e20323634373837.roa
File:                     323830333a643863303a343030303a3a2f33342d3334203d3e20323634373837.roa (raw, json)
Hash identifier:          ObfRqOgFqmly29XQF9DjIWzerUf1EOs0HFeWkQ5d8yk=
Subject key identifier:   83:21:77:E2:7E:08:69:AB:76:9A:D1:04:44:5F:90:91:8D:27:F7:64
Certificate issuer:       /CN=2E65CE6BF0A7A6D11D4718FAA637B08C3B592F88
Certificate serial:       7D36CE8C49B328ED0277EBD8B3032A5C1905344F
Authority key identifier: 2E:65:CE:6B:F0:A7:A6:D1:1D:47:18:FA:A6:37:B0:8C:3B:59:2F:88
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E65CE6BF0A7A6D11D4718FAA637B08C3B592F88.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/81974DCAD53278941C0C83F19FBC6EFA3DC0418D5CBF53CCDA63024298B3D382/0/323830333a643863303a343030303a3a2f33342d3334203d3e20323634373837.roa
Signing time:             Tue 25 Feb 2025 12:30:00 +0000
ROA not before:           Tue 25 Feb 2025 12:25:00 +0000
ROA not after:            Tue 24 Feb 2026 12:30:00 +0000
asID:                     264787
IP address blocks:        2803:d8c0:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/81974DCAD53278941C0C83F19FBC6EFA3DC0418D5CBF53CCDA63024298B3D382/0/2E65CE6BF0A7A6D11D4718FAA637B08C3B592F88.crl
                          rsync://repository.lacnic.net/rpki/lacnic/81974DCAD53278941C0C83F19FBC6EFA3DC0418D5CBF53CCDA63024298B3D382/0/2E65CE6BF0A7A6D11D4718FAA637B08C3B592F88.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E65CE6BF0A7A6D11D4718FAA637B08C3B592F88.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:36:ce:8c:49:b3:28:ed:02:77:eb:d8:b3:03:2a:5c:19:05:34:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E65CE6BF0A7A6D11D4718FAA637B08C3B592F88
        Validity
            Not Before: Feb 25 12:25:00 2025 GMT
            Not After : Feb 24 12:30:00 2026 GMT
        Subject: CN=832177E27E0869AB769AD104445F90918D27F764
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e3:33:99:6c:8c:9a:cc:fb:f7:4a:a1:34:c6:
                    45:4d:be:0b:d5:56:bd:43:0e:3b:e8:9b:cd:6e:fb:
                    88:c4:0b:f0:58:bd:5f:65:95:c1:3e:03:4d:1e:10:
                    75:e0:9d:35:3b:91:ac:6c:d9:56:b5:de:07:96:30:
                    5c:4c:83:3e:b2:7e:e7:52:31:ca:a5:e3:aa:17:c2:
                    5a:47:93:ab:10:45:97:08:92:a2:38:1d:ed:f3:c3:
                    92:bf:13:3f:ce:f1:32:2c:21:79:6a:17:a4:87:bf:
                    f6:ea:98:d4:f9:10:4a:7f:e2:8c:c8:07:c5:6e:db:
                    3c:ef:cd:d4:19:d8:d1:d6:91:31:e9:2f:a9:f8:b0:
                    88:11:89:7c:29:b1:9a:4e:7e:f9:11:03:19:8c:f7:
                    6d:a0:6d:06:32:76:18:5b:fd:33:18:48:98:ea:31:
                    43:be:52:b1:68:37:6d:39:3d:8f:e1:eb:00:f1:ec:
                    98:b8:17:36:cf:09:45:d0:67:1b:7a:52:3c:94:9e:
                    5f:71:d6:ff:3d:6a:0a:ca:38:0d:c5:b2:5a:72:fa:
                    be:15:26:08:f6:40:68:92:26:64:53:ce:8a:cc:d9:
                    d4:b4:4c:cb:c9:fb:31:1b:e8:d5:da:31:5b:0d:fa:
                    93:43:1d:c4:72:30:02:00:89:56:8c:57:c3:93:02:
                    d5:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:21:77:E2:7E:08:69:AB:76:9A:D1:04:44:5F:90:91:8D:27:F7:64
            X509v3 Authority Key Identifier:
                keyid:2E:65:CE:6B:F0:A7:A6:D1:1D:47:18:FA:A6:37:B0:8C:3B:59:2F:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/81974DCAD53278941C0C83F19FBC6EFA3DC0418D5CBF53CCDA63024298B3D382/0/2E65CE6BF0A7A6D11D4718FAA637B08C3B592F88.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E65CE6BF0A7A6D11D4718FAA637B08C3B592F88.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/81974DCAD53278941C0C83F19FBC6EFA3DC0418D5CBF53CCDA63024298B3D382/0/323830333a643863303a343030303a3a2f33342d3334203d3e20323634373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d8c0:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         11:0c:f6:59:da:31:4d:cd:c4:af:05:e2:14:be:40:2e:40:36:
         75:1e:35:24:0f:28:0a:67:4e:21:24:9e:a6:8b:b3:cd:4d:bf:
         44:f5:d1:a2:f4:3f:d6:15:20:0e:8c:ae:2c:c7:dd:ab:a5:9e:
         14:f3:cc:3e:55:95:9c:60:ba:c8:da:af:71:25:22:1a:8e:06:
         e5:90:65:c5:a5:7f:53:f6:f7:9c:fc:38:16:a5:48:27:d6:41:
         18:5d:b1:8b:b4:3b:48:23:f0:e8:2b:5c:b1:b6:68:39:24:08:
         bc:f6:53:81:a1:72:fa:cf:e5:d3:1c:ca:a1:d9:45:d9:3c:15:
         f7:06:2e:c8:f1:e4:af:72:22:42:94:26:60:12:57:65:bc:90:
         8f:b0:14:cf:55:35:42:6e:20:99:14:e7:e1:45:1b:fc:f1:7d:
         3f:a9:97:72:4d:03:61:6d:cb:39:bf:8a:05:66:36:82:3c:d2:
         0d:23:1d:2c:0a:80:5e:ec:21:8f:67:0a:04:60:a0:92:68:48:
         8c:da:20:99:bb:ca:a7:72:9a:25:36:24:ae:a0:8e:58:2a:cc:
         5b:70:f6:19:28:e2:05:97:a0:45:19:4b:61:a7:72:f6:29:84:
         83:88:61:77:a9:ad:a1:9a:41:8b:32:10:91:15:3c:bf:bf:92:
         93:82:b6:ef
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 5 10:48:33 2025 by rpki-client