Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/87E7EB4E1EABC078007A8A62356D07A0B25EFBA2F1D13B5CA6B514E67FBA4431/0/323830333a386665303a3a2f33322d3634203d3e20323731373834.roa
File:                     323830333a386665303a3a2f33322d3634203d3e20323731373834.roa (raw, json)
Hash identifier:          hj/YtQsYOV6ESzRtKy37n9uucemg3vlQaOoLZXcGGTE=
Subject key identifier:   7E:26:92:36:7F:26:EE:48:C4:D3:CF:A6:7A:D0:7E:23:5D:85:16:90
Certificate issuer:       /CN=B43E01D488885BFC75C9118EA9837A33A19423D0
Certificate serial:       38B812988F61C19CC8AE9459FBE071E9FC0233EC
Authority key identifier: B4:3E:01:D4:88:88:5B:FC:75:C9:11:8E:A9:83:7A:33:A1:94:23:D0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B43E01D488885BFC75C9118EA9837A33A19423D0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/87E7EB4E1EABC078007A8A62356D07A0B25EFBA2F1D13B5CA6B514E67FBA4431/0/323830333a386665303a3a2f33322d3634203d3e20323731373834.roa
Signing time:             Wed 16 Apr 2025 16:15:03 +0000
ROA not before:           Wed 16 Apr 2025 16:10:03 +0000
ROA not after:            Wed 15 Apr 2026 16:15:03 +0000
asID:                     271784
IP address blocks:        2803:8fe0::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/87E7EB4E1EABC078007A8A62356D07A0B25EFBA2F1D13B5CA6B514E67FBA4431/0/B43E01D488885BFC75C9118EA9837A33A19423D0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/87E7EB4E1EABC078007A8A62356D07A0B25EFBA2F1D13B5CA6B514E67FBA4431/0/B43E01D488885BFC75C9118EA9837A33A19423D0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B43E01D488885BFC75C9118EA9837A33A19423D0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 10:21:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:b8:12:98:8f:61:c1:9c:c8:ae:94:59:fb:e0:71:e9:fc:02:33:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B43E01D488885BFC75C9118EA9837A33A19423D0
        Validity
            Not Before: Apr 16 16:10:03 2025 GMT
            Not After : Apr 15 16:15:03 2026 GMT
        Subject: CN=7E2692367F26EE48C4D3CFA67AD07E235D851690
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:47:02:63:fc:10:5f:90:f8:92:86:ef:4f:75:
                    72:94:cc:4a:80:70:bc:ae:46:9c:c3:23:51:45:7c:
                    a4:4c:91:a7:24:fc:2a:e1:01:63:ff:ce:35:75:0c:
                    ce:34:83:87:2d:31:41:53:79:77:ac:e8:41:d5:6f:
                    61:1a:96:bc:24:ed:ad:5e:a3:99:07:c5:f9:55:14:
                    e2:48:cf:49:3f:86:6c:55:03:34:db:e2:a9:a1:55:
                    c7:8b:7f:b9:a3:1d:29:08:32:9b:2d:cc:75:03:19:
                    6d:d4:0f:50:49:d7:9e:10:14:37:73:c2:3c:5a:e8:
                    cd:08:8f:81:cb:18:b5:59:16:64:e0:2c:d3:62:69:
                    99:a5:ba:a6:0c:2b:55:d5:d3:72:a6:f4:33:90:8a:
                    95:90:15:a1:b0:f6:0f:28:44:fb:a1:1b:ac:f3:ad:
                    80:71:e5:81:18:c6:89:01:1e:c4:df:38:b4:5e:a7:
                    e3:30:97:ce:5b:6f:cc:b0:bf:b4:0b:2d:71:38:f0:
                    0b:4b:ba:a2:78:3c:c8:f4:85:6e:15:a6:16:84:f9:
                    47:14:de:e9:b5:b5:09:36:ee:59:f4:d7:83:2c:4d:
                    49:6a:c6:87:c8:f0:d1:4e:99:48:30:95:31:09:8b:
                    37:bf:c5:da:f7:89:79:42:8d:99:6f:27:4a:ab:c9:
                    0b:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:26:92:36:7F:26:EE:48:C4:D3:CF:A6:7A:D0:7E:23:5D:85:16:90
            X509v3 Authority Key Identifier:
                keyid:B4:3E:01:D4:88:88:5B:FC:75:C9:11:8E:A9:83:7A:33:A1:94:23:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/87E7EB4E1EABC078007A8A62356D07A0B25EFBA2F1D13B5CA6B514E67FBA4431/0/B43E01D488885BFC75C9118EA9837A33A19423D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B43E01D488885BFC75C9118EA9837A33A19423D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/87E7EB4E1EABC078007A8A62356D07A0B25EFBA2F1D13B5CA6B514E67FBA4431/0/323830333a386665303a3a2f33322d3634203d3e20323731373834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8fe0::/32

    Signature Algorithm: sha256WithRSAEncryption
         2a:f8:1e:3b:e0:e3:8b:67:30:02:53:62:63:55:9d:19:bf:6b:
         89:cf:c6:d2:d3:29:97:ba:c8:79:20:78:88:3c:d0:27:d3:ac:
         51:b1:5f:de:0b:e0:7c:40:16:8b:71:7b:d6:bf:4b:d1:b8:81:
         69:56:83:f8:98:6a:f8:16:0a:fd:37:c5:03:78:9a:91:40:e3:
         93:b1:c6:61:b2:8e:07:6a:6a:8c:a7:c8:c0:18:3c:5f:08:76:
         19:ef:2f:80:93:a1:94:90:b3:c2:c3:df:7e:31:7e:95:1a:16:
         d3:cc:05:ee:cd:bb:ab:2f:a0:d4:a8:f9:14:cb:06:fe:3f:6f:
         4e:c0:08:e8:64:2c:0b:f5:ae:73:f3:d4:b3:7e:38:c1:c4:26:
         be:32:21:77:6b:ca:26:15:de:a8:1c:ec:03:88:f2:39:d5:92:
         d1:12:60:8e:b9:39:d4:a1:b4:14:a2:bb:42:63:ff:b6:ed:5b:
         23:00:2a:e4:02:d2:2c:79:9f:1f:f5:3b:90:d8:c5:47:d1:fc:
         e1:4e:06:1e:a0:c8:b1:02:04:b9:77:f3:99:92:b3:4a:a7:6d:
         b6:e5:1e:ba:4c:22:d7:72:e4:35:63:67:61:b4:74:f8:59:a4:
         e5:1a:0e:e8:10:6c:f3:14:72:03:46:fa:7c:be:25:b4:b3:13:
         5a:94:6d:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 21:29:06 2025 by rpki-client