Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/87ECF80171545183B8D5C15D2878E41170336FCDE0C38140A85BD25293AC6E7F/0/323830333a383263303a3a2f33322d3634203d3e20323634383332.roa
File:                     323830333a383263303a3a2f33322d3634203d3e20323634383332.roa (raw, json)
Hash identifier:          WrpuMZvNzdmUe6haFm0wKyVUMNLciUk1A40bbVjCZNc=
Subject key identifier:   F1:5E:9F:35:0F:F5:9C:6A:56:30:E6:AC:D7:75:EB:7D:9A:19:C1:35
Certificate issuer:       /CN=C0A959C99718A77FC3BADB1D875B782D01705927
Certificate serial:       1AD5CACAB1179457B0C6DABE24FA2EF5E11919DF
Authority key identifier: C0:A9:59:C9:97:18:A7:7F:C3:BA:DB:1D:87:5B:78:2D:01:70:59:27
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C0A959C99718A77FC3BADB1D875B782D01705927.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/87ECF80171545183B8D5C15D2878E41170336FCDE0C38140A85BD25293AC6E7F/0/323830333a383263303a3a2f33322d3634203d3e20323634383332.roa
Signing time:             Tue 04 Feb 2025 18:19:20 +0000
ROA not before:           Tue 04 Feb 2025 18:14:20 +0000
ROA not after:            Tue 03 Feb 2026 18:19:20 +0000
asID:                     264832
IP address blocks:        2803:82c0::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/87ECF80171545183B8D5C15D2878E41170336FCDE0C38140A85BD25293AC6E7F/0/C0A959C99718A77FC3BADB1D875B782D01705927.crl
                          rsync://repository.lacnic.net/rpki/lacnic/87ECF80171545183B8D5C15D2878E41170336FCDE0C38140A85BD25293AC6E7F/0/C0A959C99718A77FC3BADB1D875B782D01705927.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C0A959C99718A77FC3BADB1D875B782D01705927.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 14:55:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:d5:ca:ca:b1:17:94:57:b0:c6:da:be:24:fa:2e:f5:e1:19:19:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C0A959C99718A77FC3BADB1D875B782D01705927
        Validity
            Not Before: Feb  4 18:14:20 2025 GMT
            Not After : Feb  3 18:19:20 2026 GMT
        Subject: CN=F15E9F350FF59C6A5630E6ACD775EB7D9A19C135
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:6a:24:90:f2:62:4c:03:81:ff:98:62:78:61:
                    ea:f6:b6:8e:a5:dd:c5:8e:b9:7e:17:e7:cb:ac:2e:
                    97:a6:74:e6:69:82:59:48:43:2d:8d:24:0f:24:82:
                    bd:ef:eb:6b:3b:45:49:99:6f:89:a3:cd:2f:8f:3d:
                    e2:b7:21:3a:b6:04:46:dc:58:af:51:f3:59:06:4c:
                    1e:1c:fc:4f:ef:4e:52:c1:bc:c3:15:70:35:b1:4d:
                    f5:fc:38:6e:f9:3e:da:6c:6f:33:ba:df:e1:ca:eb:
                    0c:02:fe:21:77:6c:e1:85:88:74:c6:49:db:a4:40:
                    bc:9d:ef:3d:72:aa:47:5f:87:7e:00:e2:a3:e1:2c:
                    1d:ff:33:a9:ed:55:b4:e2:56:0a:34:cc:74:9b:96:
                    87:97:ab:ec:25:bf:ff:2c:b4:55:ef:bf:bd:c1:98:
                    4c:d4:11:2f:73:ac:25:0c:3d:f1:bb:8d:24:bb:9e:
                    27:1d:81:51:83:a1:5e:ff:ca:ec:96:15:dd:a4:2f:
                    b2:d5:be:92:41:bf:0a:37:4c:97:36:a5:3b:d9:6d:
                    76:80:be:77:78:43:ec:70:a0:52:bf:49:4d:91:b9:
                    cb:25:80:60:e9:56:4a:9d:0e:86:3e:26:21:d0:93:
                    55:2e:d5:75:18:f6:51:03:e0:da:3a:24:dd:ae:c0:
                    f6:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:5E:9F:35:0F:F5:9C:6A:56:30:E6:AC:D7:75:EB:7D:9A:19:C1:35
            X509v3 Authority Key Identifier:
                keyid:C0:A9:59:C9:97:18:A7:7F:C3:BA:DB:1D:87:5B:78:2D:01:70:59:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/87ECF80171545183B8D5C15D2878E41170336FCDE0C38140A85BD25293AC6E7F/0/C0A959C99718A77FC3BADB1D875B782D01705927.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C0A959C99718A77FC3BADB1D875B782D01705927.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/87ECF80171545183B8D5C15D2878E41170336FCDE0C38140A85BD25293AC6E7F/0/323830333a383263303a3a2f33322d3634203d3e20323634383332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:82c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         8d:f7:e7:01:e3:d8:e4:86:e7:ee:97:6d:86:ed:c5:af:83:b1:
         03:65:5e:f6:9d:0c:8f:d9:2c:cb:c6:f7:16:34:a8:6d:45:82:
         f0:ef:6f:fe:f5:47:7a:70:74:ba:1d:75:2d:36:fd:b8:b9:11:
         b4:ad:b4:89:3e:e1:e3:15:e9:43:49:b9:95:13:ac:99:e8:0b:
         8b:12:71:59:58:80:fd:d5:f5:68:82:ef:f4:78:48:7e:21:79:
         08:4b:db:cc:46:10:57:a3:90:cd:94:b3:62:da:a1:75:f6:69:
         35:ca:52:e4:d3:99:67:0d:ea:1f:63:21:08:45:49:b4:f2:10:
         69:42:d3:50:06:0f:8f:f5:31:9d:2f:84:ff:f7:8d:5b:7a:df:
         5d:15:50:c7:52:c3:73:18:c7:8e:63:04:75:88:38:b3:c8:ec:
         b7:5e:b0:bd:b4:5b:27:63:8d:69:20:1d:34:3f:93:0a:84:af:
         12:7d:1f:6d:cb:73:91:40:fa:49:d1:b5:0a:43:8c:de:86:e3:
         c7:f3:db:59:93:98:00:c3:b9:f1:bf:88:3e:25:49:8d:27:a4:
         2f:26:93:d1:f3:ea:a8:2c:b9:8e:c5:1a:fe:26:9d:92:1f:59:
         56:67:f9:af:3d:f8:6a:cd:64:ae:7d:03:dd:3d:ef:7d:ed:fc:
         6b:c3:43:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 15:02:10 2025 by rpki-client