Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/81A266F8152CBB106F1FEFE167201B2DF81CE38502EB834FF9E421D83E728469/0/323830333a613963303a3a2f33322d3438203d3e20323635383139.roa
File:                     323830333a613963303a3a2f33322d3438203d3e20323635383139.roa (raw, json)
Hash identifier:          LOK9Sgw/+LvNIM6YeWJZZQS8ZAsqe7AAAZ2ErfXJMbo=
Subject key identifier:   D4:0D:12:04:10:F6:DB:7E:92:67:77:96:DA:E0:FD:7B:34:C3:EE:71
Certificate issuer:       /CN=16423C98CF2548839D74EFD9FB7304F4DAB4AE75
Certificate serial:       53C4188564554EE060ADDB45BF2C58660A4FEC87
Authority key identifier: 16:42:3C:98:CF:25:48:83:9D:74:EF:D9:FB:73:04:F4:DA:B4:AE:75
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/16423C98CF2548839D74EFD9FB7304F4DAB4AE75.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/81A266F8152CBB106F1FEFE167201B2DF81CE38502EB834FF9E421D83E728469/0/323830333a613963303a3a2f33322d3438203d3e20323635383139.roa
Signing time:             Tue 04 Feb 2025 18:40:13 +0000
ROA not before:           Tue 04 Feb 2025 18:35:13 +0000
ROA not after:            Tue 03 Feb 2026 18:40:13 +0000
asID:                     265819
IP address blocks:        2803:a9c0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/81A266F8152CBB106F1FEFE167201B2DF81CE38502EB834FF9E421D83E728469/0/16423C98CF2548839D74EFD9FB7304F4DAB4AE75.crl
                          rsync://repository.lacnic.net/rpki/lacnic/81A266F8152CBB106F1FEFE167201B2DF81CE38502EB834FF9E421D83E728469/0/16423C98CF2548839D74EFD9FB7304F4DAB4AE75.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/16423C98CF2548839D74EFD9FB7304F4DAB4AE75.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 20 Feb 2025 17:49:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:c4:18:85:64:55:4e:e0:60:ad:db:45:bf:2c:58:66:0a:4f:ec:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16423C98CF2548839D74EFD9FB7304F4DAB4AE75
        Validity
            Not Before: Feb  4 18:35:13 2025 GMT
            Not After : Feb  3 18:40:13 2026 GMT
        Subject: CN=D40D120410F6DB7E92677796DAE0FD7B34C3EE71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:db:eb:48:99:68:2c:1d:6f:29:56:c7:03:8e:
                    4e:a7:7c:dd:6e:af:51:b1:6d:40:6b:9d:aa:2b:8c:
                    5c:69:a3:be:17:a4:bf:9b:40:0c:d3:63:2d:5c:2f:
                    2a:b4:59:f6:21:cf:fd:5d:a5:43:9f:92:94:90:e5:
                    e3:57:d5:dd:a3:5f:85:f9:a7:8a:fb:b2:c2:39:3b:
                    32:c4:51:e8:26:ce:25:9b:cb:ca:8e:d6:a9:90:9e:
                    5f:49:4d:21:53:14:4c:aa:80:68:b8:48:17:ab:17:
                    8c:3a:7f:2a:62:e5:d0:54:82:00:71:88:b5:77:f0:
                    22:59:04:23:5e:95:df:4d:77:b7:08:0d:f0:42:dd:
                    9c:e6:db:1b:57:f8:04:6f:ee:32:cc:51:cc:80:2b:
                    0e:15:56:0c:e6:33:4e:36:48:11:82:2c:eb:46:23:
                    2b:c0:1a:6b:4d:04:43:2c:f0:17:61:57:23:99:92:
                    68:6e:e8:26:79:33:bf:18:61:1a:29:1d:d5:e6:ee:
                    0b:70:41:4b:67:51:d9:7b:1c:46:31:9b:b1:3d:68:
                    05:90:15:93:25:fd:4a:b0:fc:ce:2d:72:77:25:9c:
                    26:c3:93:83:b1:e4:80:e9:ac:1e:1c:97:9c:5b:cf:
                    9d:34:33:e0:2f:6f:77:7c:74:75:ec:25:f3:34:94:
                    09:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:0D:12:04:10:F6:DB:7E:92:67:77:96:DA:E0:FD:7B:34:C3:EE:71
            X509v3 Authority Key Identifier:
                keyid:16:42:3C:98:CF:25:48:83:9D:74:EF:D9:FB:73:04:F4:DA:B4:AE:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/81A266F8152CBB106F1FEFE167201B2DF81CE38502EB834FF9E421D83E728469/0/16423C98CF2548839D74EFD9FB7304F4DAB4AE75.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/16423C98CF2548839D74EFD9FB7304F4DAB4AE75.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/81A266F8152CBB106F1FEFE167201B2DF81CE38502EB834FF9E421D83E728469/0/323830333a613963303a3a2f33322d3438203d3e20323635383139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:a9c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         66:cb:08:c7:de:29:ed:b6:7a:f2:fc:55:76:37:d0:93:99:05:
         2e:34:76:cc:41:5a:ad:ca:f6:f6:a0:55:d2:4c:c4:ee:7b:47:
         45:fe:be:bb:08:90:7c:0e:40:7a:7b:d9:9e:33:7c:41:62:70:
         a8:14:d7:94:f3:01:b3:a0:9d:24:a7:34:0d:80:53:84:1a:fe:
         c4:2e:8b:b3:62:b8:48:43:49:16:d6:34:23:7a:c7:ae:2e:aa:
         d8:0e:7f:1b:39:d0:56:ad:ae:41:c7:55:15:52:7a:5b:36:0e:
         89:9b:98:f5:36:c8:1d:56:90:09:a8:f5:f9:d0:74:ea:e7:66:
         93:44:58:b9:7c:23:8c:d0:99:b5:14:e1:50:f9:c1:5f:b0:96:
         23:14:93:9e:3d:fc:72:e7:86:80:e5:3c:bf:37:b6:55:8e:a3:
         e3:68:b9:a9:f5:9d:20:e1:4a:83:ed:b6:7a:a1:ee:6a:31:66:
         7b:95:b5:37:73:d2:f5:bb:58:16:15:0e:de:05:24:33:57:af:
         12:6d:2d:15:ce:ae:9e:9f:6e:4c:70:2c:74:67:39:c5:f2:0e:
         2f:ea:de:9c:41:4f:fe:9a:9f:54:03:f3:1a:ce:48:3f:88:2a:
         ad:cb:09:98:04:82:32:f8:fd:e8:18:41:0d:db:44:54:62:6e:
         62:87:10:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:23:54 2025 by rpki-client