Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/826DDAB6E94D74BD3305EFCFD378BE88E3BCDDD7A71212766577BB69B230E898/0/323830333a3432303a3a2f33322d3336203d3e20323635373033.roa
File:                     323830333a3432303a3a2f33322d3336203d3e20323635373033.roa (raw, json)
Hash identifier:          1189QGhLs6uWWVfnEVPIKs0KaZtEWaZP733bip7O12s=
Subject key identifier:   44:7D:87:80:A2:04:8A:EB:CF:E2:50:DD:9E:74:DC:38:E3:D3:F4:34
Certificate issuer:       /CN=FDCD3CF2DE710C85FB6B36F55702D04BF46316B3
Certificate serial:       23514452676870A7892CA3B4E7463A0FF8DF3E94
Authority key identifier: FD:CD:3C:F2:DE:71:0C:85:FB:6B:36:F5:57:02:D0:4B:F4:63:16:B3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FDCD3CF2DE710C85FB6B36F55702D04BF46316B3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/826DDAB6E94D74BD3305EFCFD378BE88E3BCDDD7A71212766577BB69B230E898/0/323830333a3432303a3a2f33322d3336203d3e20323635373033.roa
Signing time:             Tue 04 Feb 2025 18:23:39 +0000
ROA not before:           Tue 04 Feb 2025 18:18:39 +0000
ROA not after:            Tue 03 Feb 2026 18:23:39 +0000
asID:                     265703
IP address blocks:        2803:420::/32 maxlen: 36
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/826DDAB6E94D74BD3305EFCFD378BE88E3BCDDD7A71212766577BB69B230E898/0/FDCD3CF2DE710C85FB6B36F55702D04BF46316B3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/826DDAB6E94D74BD3305EFCFD378BE88E3BCDDD7A71212766577BB69B230E898/0/FDCD3CF2DE710C85FB6B36F55702D04BF46316B3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FDCD3CF2DE710C85FB6B36F55702D04BF46316B3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 15:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:51:44:52:67:68:70:a7:89:2c:a3:b4:e7:46:3a:0f:f8:df:3e:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FDCD3CF2DE710C85FB6B36F55702D04BF46316B3
        Validity
            Not Before: Feb  4 18:18:39 2025 GMT
            Not After : Feb  3 18:23:39 2026 GMT
        Subject: CN=447D8780A2048AEBCFE250DD9E74DC38E3D3F434
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:70:b3:3f:fd:e9:63:1f:e7:e9:1a:6b:9e:0a:
                    58:51:01:e7:eb:b0:44:4f:ca:7b:94:67:62:b1:0c:
                    1b:12:d9:30:d1:32:32:2b:aa:fe:f6:09:4e:63:64:
                    27:06:9c:fe:48:ce:3c:7b:40:af:37:54:ec:74:73:
                    68:fe:81:9f:59:59:67:bd:20:2a:be:ac:8f:92:72:
                    cc:55:31:73:c1:9f:1e:8f:05:65:2a:47:41:d7:73:
                    8e:ba:dc:0d:5c:17:08:14:99:76:91:1a:88:ea:06:
                    3d:b5:e6:a4:6e:68:1a:ee:73:a6:94:78:04:ef:2f:
                    71:b6:6f:85:e0:47:60:be:b6:bb:75:90:25:2b:88:
                    5b:41:55:ec:36:c7:7d:0b:59:de:5e:fb:d0:54:70:
                    74:61:72:fa:b6:3b:c0:88:cd:fa:5d:49:d8:31:38:
                    a6:02:52:42:63:56:bc:7d:96:d0:36:7b:72:6c:9f:
                    a7:3f:06:ba:e5:a0:ad:7d:8b:33:93:38:d5:8d:62:
                    dc:e6:6a:f3:92:98:41:9d:3f:e8:1c:e3:18:08:54:
                    66:d4:57:42:64:e5:aa:9e:ce:a9:4a:af:dd:22:2f:
                    28:2a:89:30:78:11:93:97:c5:3a:a4:eb:a8:22:98:
                    1b:5c:8c:bf:ad:1c:13:a7:d6:99:9e:7a:88:b0:f9:
                    bc:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:7D:87:80:A2:04:8A:EB:CF:E2:50:DD:9E:74:DC:38:E3:D3:F4:34
            X509v3 Authority Key Identifier:
                keyid:FD:CD:3C:F2:DE:71:0C:85:FB:6B:36:F5:57:02:D0:4B:F4:63:16:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/826DDAB6E94D74BD3305EFCFD378BE88E3BCDDD7A71212766577BB69B230E898/0/FDCD3CF2DE710C85FB6B36F55702D04BF46316B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FDCD3CF2DE710C85FB6B36F55702D04BF46316B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/826DDAB6E94D74BD3305EFCFD378BE88E3BCDDD7A71212766577BB69B230E898/0/323830333a3432303a3a2f33322d3336203d3e20323635373033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:420::/32

    Signature Algorithm: sha256WithRSAEncryption
         26:08:0e:d6:83:54:e2:85:5d:4b:f6:a0:c7:e5:4a:44:af:20:
         a4:a8:b3:1f:8e:58:62:f4:cd:22:3d:01:2d:77:d4:66:79:37:
         9c:42:40:56:46:0d:5a:c1:40:f6:df:d4:2b:78:8b:96:c9:d8:
         36:ed:ab:6a:61:e6:d9:98:b5:f3:8d:74:e3:1a:55:09:df:df:
         40:87:27:10:e7:9e:5a:5f:a7:1a:65:e4:61:dc:81:8b:65:a2:
         0a:57:5c:8a:a0:b7:6b:6f:bb:85:9b:54:5e:32:d2:83:46:5d:
         fe:28:5f:46:a0:39:46:82:51:6c:ab:85:22:bb:e1:5c:00:2e:
         a4:8b:15:c4:c7:22:1a:87:a0:22:d0:2d:ff:a6:ee:7e:d5:38:
         e1:35:2d:2f:fe:6a:9f:10:0d:6c:0d:a2:00:b7:7d:43:64:c8:
         21:2e:89:a0:2e:ec:67:82:4e:e2:5d:b0:22:24:d0:7c:ac:e1:
         6b:25:f6:41:dd:a0:36:6b:b8:50:24:73:a1:ac:67:42:b0:61:
         9f:71:8a:e0:8a:c5:58:05:c5:a4:e5:56:f7:df:fb:91:79:8e:
         07:5d:83:d2:72:58:a5:cb:dd:a7:d8:f5:bd:08:66:63:db:d3:
         7a:d4:6a:3c:bf:87:66:44:b1:93:31:68:02:8b:50:24:fc:af:
         63:da:0f:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:59:50 2025 by rpki-client