Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/863541C677207DD94084DA7E64C5DC419A023519835F22763B5B0E507C92367C/0/323830333a386536303a3a2f33322d3332203d3e20323637393134.roa
File:                     323830333a386536303a3a2f33322d3332203d3e20323637393134.roa (raw, json)
Hash identifier:          2BGkIIxj4SvcsiIs8VA7v9GzQOZvVeAKXO7jhQUetec=
Subject key identifier:   BB:AC:BC:4A:EB:EE:37:4A:FE:84:5F:CE:9C:4B:03:C4:4E:D0:EA:D4
Certificate issuer:       /CN=C6F7CB2EE52FBCDCDEFC46131584783FC8A60557
Certificate serial:       0B923E92D1CBF1DC707712BBB8BA27D9A002EE07
Authority key identifier: C6:F7:CB:2E:E5:2F:BC:DC:DE:FC:46:13:15:84:78:3F:C8:A6:05:57
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C6F7CB2EE52FBCDCDEFC46131584783FC8A60557.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/863541C677207DD94084DA7E64C5DC419A023519835F22763B5B0E507C92367C/0/323830333a386536303a3a2f33322d3332203d3e20323637393134.roa
Signing time:             Tue 04 Feb 2025 18:28:22 +0000
ROA not before:           Tue 04 Feb 2025 18:23:22 +0000
ROA not after:            Tue 03 Feb 2026 18:28:22 +0000
asID:                     267914
IP address blocks:        2803:8e60::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/863541C677207DD94084DA7E64C5DC419A023519835F22763B5B0E507C92367C/0/C6F7CB2EE52FBCDCDEFC46131584783FC8A60557.crl
                          rsync://repository.lacnic.net/rpki/lacnic/863541C677207DD94084DA7E64C5DC419A023519835F22763B5B0E507C92367C/0/C6F7CB2EE52FBCDCDEFC46131584783FC8A60557.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C6F7CB2EE52FBCDCDEFC46131584783FC8A60557.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 23:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:92:3e:92:d1:cb:f1:dc:70:77:12:bb:b8:ba:27:d9:a0:02:ee:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C6F7CB2EE52FBCDCDEFC46131584783FC8A60557
        Validity
            Not Before: Feb  4 18:23:22 2025 GMT
            Not After : Feb  3 18:28:22 2026 GMT
        Subject: CN=BBACBC4AEBEE374AFE845FCE9C4B03C44ED0EAD4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:cf:45:ea:a3:4d:8c:37:5a:0e:94:3c:65:53:
                    30:90:1d:50:c9:c8:c5:13:83:0b:17:67:6c:34:48:
                    c4:16:4a:3c:7f:fb:a3:65:f2:af:6b:57:06:26:ed:
                    a0:80:ce:1b:bf:70:df:f8:d1:d0:d4:f9:47:df:11:
                    dc:fc:46:8a:d9:7d:e1:c8:4c:b6:a2:57:32:b7:94:
                    fc:57:a8:56:43:8b:ba:38:aa:b3:67:2b:de:13:1e:
                    35:63:13:4c:92:4f:0b:34:e5:36:2a:86:f3:86:33:
                    70:04:56:92:6f:2e:01:66:55:01:ea:02:92:08:5d:
                    37:a8:88:97:ef:d8:8a:e0:be:eb:89:bc:3f:eb:89:
                    79:58:71:ba:73:b2:99:cd:17:e3:fd:84:eb:32:b4:
                    c7:a5:80:51:cd:ed:bf:21:82:10:18:65:74:ed:7c:
                    3b:50:87:d2:92:25:8f:5f:05:78:5b:93:a3:58:56:
                    de:46:e3:d1:17:14:4f:12:5b:6d:de:b1:db:26:e6:
                    e8:37:42:15:e9:14:76:b2:5e:cc:a1:49:a6:2e:a1:
                    d8:53:bc:7b:c8:67:5b:92:1e:b0:43:0c:fa:f7:5b:
                    f8:49:f0:26:70:cb:61:4f:c8:61:b5:b5:70:43:6e:
                    ae:3d:56:e5:e0:dc:94:fd:9d:94:08:07:a0:fe:14:
                    09:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:AC:BC:4A:EB:EE:37:4A:FE:84:5F:CE:9C:4B:03:C4:4E:D0:EA:D4
            X509v3 Authority Key Identifier:
                keyid:C6:F7:CB:2E:E5:2F:BC:DC:DE:FC:46:13:15:84:78:3F:C8:A6:05:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/863541C677207DD94084DA7E64C5DC419A023519835F22763B5B0E507C92367C/0/C6F7CB2EE52FBCDCDEFC46131584783FC8A60557.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C6F7CB2EE52FBCDCDEFC46131584783FC8A60557.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/863541C677207DD94084DA7E64C5DC419A023519835F22763B5B0E507C92367C/0/323830333a386536303a3a2f33322d3332203d3e20323637393134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8e60::/32

    Signature Algorithm: sha256WithRSAEncryption
         22:e3:d9:16:e0:ae:f7:61:b1:24:ec:71:c5:71:bd:92:dc:1b:
         8e:83:03:fe:52:e6:b9:5c:05:e1:da:7c:13:a3:63:77:33:5c:
         06:60:b5:01:29:e4:7d:c1:e6:a6:ce:a0:38:d2:1d:e6:28:11:
         48:38:e7:ec:ac:51:0e:ea:89:b2:58:18:03:5c:b9:0f:3c:b1:
         f1:56:fa:3a:f2:ee:9d:64:a3:b5:2b:9c:0f:72:53:33:9f:9e:
         2b:40:16:83:ed:26:68:67:22:17:53:fb:79:32:31:66:3b:ef:
         a7:7b:7a:74:a5:01:f2:d8:d8:98:6d:a0:cb:67:00:af:fd:58:
         b2:98:7e:60:18:04:0f:bb:40:f1:ca:39:6d:4d:cb:f0:27:3d:
         8d:79:74:06:d6:0d:08:43:b3:38:89:01:9e:a1:4f:cd:68:ef:
         b8:cb:71:77:1c:db:94:c7:34:19:53:67:ab:16:28:6c:73:18:
         9f:4c:11:2a:98:9a:c9:37:4b:a0:3c:15:3b:a8:8c:9c:aa:8d:
         ae:75:6a:5e:a0:50:1d:2c:77:78:aa:2d:7b:7b:67:d0:6f:71:
         09:e2:30:08:01:57:fc:e3:bc:26:d3:39:e5:a1:ab:93:03:04:
         ef:65:eb:02:d6:dd:20:30:24:a3:ef:05:02:d9:59:7f:2d:4e:
         99:14:b4:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 04:38:21 2025 by rpki-client