Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8845FD2F70326969EBF4B2A372A240B5C13FB4949337A5F5DDBB41CBBD731B04/0/323830333a333530303a3a2f33322d3438203d3e203532343332.roa
File:                     323830333a333530303a3a2f33322d3438203d3e203532343332.roa (raw, json)
Hash identifier:          qRT4dmzFssfazew2H07ykIZTnNuToD2fYmzRBRsASbQ=
Subject key identifier:   A7:F2:3E:75:D2:79:CC:DF:6C:6C:5D:33:54:D4:50:C0:E7:77:1D:4D
Certificate issuer:       /CN=C403FA78404641A71D95DA750617F0EEF3DD464B
Certificate serial:       0A4F88F48E47D8BD6EE131D65002347DDECDCE55
Authority key identifier: C4:03:FA:78:40:46:41:A7:1D:95:DA:75:06:17:F0:EE:F3:DD:46:4B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C403FA78404641A71D95DA750617F0EEF3DD464B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8845FD2F70326969EBF4B2A372A240B5C13FB4949337A5F5DDBB41CBBD731B04/0/323830333a333530303a3a2f33322d3438203d3e203532343332.roa
Signing time:             Tue 04 Feb 2025 18:53:15 +0000
ROA not before:           Tue 04 Feb 2025 18:48:15 +0000
ROA not after:            Tue 03 Feb 2026 18:53:15 +0000
asID:                     52432
IP address blocks:        2803:3500::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8845FD2F70326969EBF4B2A372A240B5C13FB4949337A5F5DDBB41CBBD731B04/0/C403FA78404641A71D95DA750617F0EEF3DD464B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8845FD2F70326969EBF4B2A372A240B5C13FB4949337A5F5DDBB41CBBD731B04/0/C403FA78404641A71D95DA750617F0EEF3DD464B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C403FA78404641A71D95DA750617F0EEF3DD464B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 20:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:4f:88:f4:8e:47:d8:bd:6e:e1:31:d6:50:02:34:7d:de:cd:ce:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C403FA78404641A71D95DA750617F0EEF3DD464B
        Validity
            Not Before: Feb  4 18:48:15 2025 GMT
            Not After : Feb  3 18:53:15 2026 GMT
        Subject: CN=A7F23E75D279CCDF6C6C5D3354D450C0E7771D4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:08:08:9d:c0:a1:a6:9f:03:27:33:19:c6:46:
                    58:af:dc:17:a4:dd:63:f3:3b:26:c5:eb:df:7c:02:
                    fb:1b:09:20:ba:78:1d:d2:34:f0:f9:ae:e8:df:7e:
                    4d:fd:0a:18:15:74:67:d7:e0:8f:3d:4a:b7:af:c4:
                    dd:cc:02:28:d0:4f:97:bd:b6:38:87:4d:d9:17:90:
                    c1:ae:9a:e1:51:f9:67:a7:b2:86:a7:3a:ad:14:3b:
                    c0:7e:2e:9a:35:1e:00:c0:bd:dc:5e:8a:4f:e0:1f:
                    e1:91:6e:10:c5:7a:1e:b2:65:b8:41:68:3c:dc:93:
                    ac:79:71:8c:fd:74:ed:f6:93:cf:5b:6d:b3:7b:43:
                    f2:3e:d7:bb:43:8f:dd:a2:e5:50:b4:d2:92:f5:70:
                    fe:6c:8a:8e:6c:8b:8c:a9:3a:8d:34:3b:aa:5d:59:
                    4e:b2:56:5b:e2:fe:be:fb:6e:f3:e6:44:1d:aa:18:
                    d2:b3:c4:23:9b:53:3f:b6:a8:bf:8f:27:47:56:da:
                    42:66:40:46:3d:f3:44:a5:f5:19:bd:66:20:6c:48:
                    ae:37:dc:dd:6e:49:6a:a8:d9:70:06:f9:f5:82:61:
                    c9:35:ba:39:6f:4f:63:3f:fc:7a:d7:94:71:b5:f0:
                    15:1c:d8:fa:e5:98:56:55:f4:c2:db:98:55:b0:0d:
                    7e:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:F2:3E:75:D2:79:CC:DF:6C:6C:5D:33:54:D4:50:C0:E7:77:1D:4D
            X509v3 Authority Key Identifier:
                keyid:C4:03:FA:78:40:46:41:A7:1D:95:DA:75:06:17:F0:EE:F3:DD:46:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8845FD2F70326969EBF4B2A372A240B5C13FB4949337A5F5DDBB41CBBD731B04/0/C403FA78404641A71D95DA750617F0EEF3DD464B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C403FA78404641A71D95DA750617F0EEF3DD464B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8845FD2F70326969EBF4B2A372A240B5C13FB4949337A5F5DDBB41CBBD731B04/0/323830333a333530303a3a2f33322d3438203d3e203532343332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3500::/32

    Signature Algorithm: sha256WithRSAEncryption
         8a:cf:db:85:27:7b:2a:30:d3:71:2d:51:2e:d6:e3:14:8b:4a:
         3d:d7:9d:0b:f6:4b:58:d6:3d:6e:d9:26:5c:66:2a:a3:ab:d5:
         c8:71:ae:b8:40:8e:c7:77:ee:fe:02:0a:d0:b8:75:45:4d:3d:
         83:14:52:3c:06:4e:22:e9:e2:5c:b2:a7:3e:49:cd:64:12:a5:
         64:58:74:33:3e:ea:08:38:c7:75:ac:11:2f:0b:fe:25:71:a5:
         26:63:2f:ed:6a:12:66:16:7c:f1:57:5f:88:0b:53:43:c2:d5:
         8a:d1:04:b5:59:6a:0c:4c:41:c1:4a:58:54:7f:b1:3e:c5:f8:
         50:a0:77:3e:2b:e9:e1:87:24:58:da:90:e3:83:ab:7b:2a:42:
         e6:cc:a1:7a:0c:2a:52:ea:d7:87:0e:1e:98:b7:bb:34:84:30:
         5b:68:fb:a3:01:a0:a6:a8:d4:46:f7:b5:de:67:c7:b6:e3:d8:
         9d:70:63:69:b6:de:98:20:12:2e:5f:86:ad:e9:43:8a:9a:3b:
         36:9d:82:38:89:47:5a:89:b9:71:e8:2f:a6:69:18:65:39:15:
         79:b5:09:ce:be:aa:a9:97:5a:e9:f8:64:df:8a:76:4d:51:38:
         8a:9f:03:73:bc:ea:68:50:7b:e6:60:80:92:b3:82:51:26:a7:
         55:22:2d:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:50:21 2025 by rpki-client