Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8C3DCD134D6C2BBC15295709504834DBAD7AC33D95AEC8228564D09869C17E2C/0/323830333a366430303a3a2f33322d3438203d3e203532343434.roa
File:                     323830333a366430303a3a2f33322d3438203d3e203532343434.roa (raw, json)
Hash identifier:          7b/RtpldfmSE3TnrVQaBnTbLv+TqiQu6BM9CM/Zcv4o=
Subject key identifier:   A7:32:92:EC:F4:21:7F:CE:84:DE:21:BD:3F:86:BF:EB:7B:C3:81:0C
Certificate issuer:       /CN=B33031ED49C5CD9D439BD38100D10BFD779C4683
Certificate serial:       04731FA7DCB3AB38DE5614101EB4836B57EA2B4B
Authority key identifier: B3:30:31:ED:49:C5:CD:9D:43:9B:D3:81:00:D1:0B:FD:77:9C:46:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B33031ED49C5CD9D439BD38100D10BFD779C4683.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8C3DCD134D6C2BBC15295709504834DBAD7AC33D95AEC8228564D09869C17E2C/0/323830333a366430303a3a2f33322d3438203d3e203532343434.roa
Signing time:             Tue 04 Feb 2025 18:50:39 +0000
ROA not before:           Tue 04 Feb 2025 18:45:39 +0000
ROA not after:            Tue 03 Feb 2026 18:50:39 +0000
asID:                     52444
IP address blocks:        2803:6d00::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8C3DCD134D6C2BBC15295709504834DBAD7AC33D95AEC8228564D09869C17E2C/0/B33031ED49C5CD9D439BD38100D10BFD779C4683.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8C3DCD134D6C2BBC15295709504834DBAD7AC33D95AEC8228564D09869C17E2C/0/B33031ED49C5CD9D439BD38100D10BFD779C4683.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B33031ED49C5CD9D439BD38100D10BFD779C4683.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 12 Feb 2025 23:10:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:73:1f:a7:dc:b3:ab:38:de:56:14:10:1e:b4:83:6b:57:ea:2b:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B33031ED49C5CD9D439BD38100D10BFD779C4683
        Validity
            Not Before: Feb  4 18:45:39 2025 GMT
            Not After : Feb  3 18:50:39 2026 GMT
        Subject: CN=A73292ECF4217FCE84DE21BD3F86BFEB7BC3810C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:f1:56:41:c4:36:1e:8e:ca:40:1a:6d:2e:b6:
                    eb:ca:e2:7d:05:6b:5e:f2:0b:1b:5a:8a:94:cc:e8:
                    52:44:49:a2:da:ed:48:60:2c:9c:66:90:83:ae:74:
                    12:20:ab:00:ba:b8:b7:46:ac:ad:1e:0a:91:43:d8:
                    c6:d3:8d:47:bf:46:65:36:df:72:0b:11:00:0e:2a:
                    96:d8:3c:55:a2:a8:1c:6f:51:e5:c9:bb:4a:6d:17:
                    d4:03:b1:bd:f5:e7:bc:53:30:d2:a2:65:9e:57:5d:
                    05:a1:1d:31:82:d0:83:17:04:b9:6e:35:a8:16:83:
                    68:9a:be:8c:d8:fb:f1:d6:79:58:c3:71:56:67:48:
                    76:e8:31:59:3e:76:27:13:7d:8e:fd:7b:ed:a0:31:
                    32:80:17:08:2c:6e:ce:b3:61:17:99:1f:5d:56:ca:
                    7e:ed:cd:40:9a:f2:a6:94:fe:55:2f:10:cc:92:aa:
                    04:87:23:c3:ce:4b:68:00:33:60:46:db:1b:36:88:
                    cb:44:79:2d:3f:81:c3:e7:bd:1a:d8:e4:d5:28:e3:
                    f8:af:f1:cc:f2:55:07:6a:bd:e7:df:7a:7d:01:e9:
                    a3:97:5b:18:a2:0c:98:f3:33:00:d2:a9:0a:4b:5e:
                    a0:90:8e:35:13:53:43:32:f6:79:c5:b5:b4:55:b5:
                    c3:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:32:92:EC:F4:21:7F:CE:84:DE:21:BD:3F:86:BF:EB:7B:C3:81:0C
            X509v3 Authority Key Identifier:
                keyid:B3:30:31:ED:49:C5:CD:9D:43:9B:D3:81:00:D1:0B:FD:77:9C:46:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8C3DCD134D6C2BBC15295709504834DBAD7AC33D95AEC8228564D09869C17E2C/0/B33031ED49C5CD9D439BD38100D10BFD779C4683.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B33031ED49C5CD9D439BD38100D10BFD779C4683.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8C3DCD134D6C2BBC15295709504834DBAD7AC33D95AEC8228564D09869C17E2C/0/323830333a366430303a3a2f33322d3438203d3e203532343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6d00::/32

    Signature Algorithm: sha256WithRSAEncryption
         89:c8:5c:54:86:cb:66:4b:b8:8a:85:3c:63:29:59:94:95:83:
         ab:40:76:77:d2:01:a2:18:ad:a8:31:52:fe:b0:4a:0c:ec:6a:
         79:b0:7f:c9:a5:8a:ee:32:e8:7f:2a:04:76:27:a4:39:ee:2b:
         0f:34:2f:9a:0b:b4:07:dd:d5:bc:85:df:76:32:77:c4:7f:35:
         f9:05:76:97:89:ca:95:68:0a:9d:82:b4:82:86:f5:81:c5:48:
         40:6b:30:76:b6:66:a9:30:ca:cb:15:e6:09:1f:45:7f:c2:44:
         d8:58:39:d3:82:da:28:4b:fe:f3:99:52:dd:68:8e:69:4f:50:
         d8:3d:46:f2:8a:02:b0:d8:c8:4e:f6:98:33:32:18:2c:2b:50:
         25:d6:24:10:05:26:41:8b:9b:7e:8f:45:df:77:71:b5:83:ba:
         1a:cb:3a:c1:92:08:78:16:61:5a:85:4d:67:89:d8:32:8c:aa:
         bf:0a:f4:fd:6b:f0:ca:8d:71:f4:a9:c5:15:14:e7:6b:98:0a:
         16:e1:ec:43:a2:bf:97:aa:8d:98:29:3b:7d:a0:04:d3:ac:01:
         ff:c6:b1:b6:3a:0f:e6:97:eb:3a:b2:9b:0e:78:f6:2e:7f:d7:
         cb:c8:aa:b0:78:27:dd:c2:78:62:94:4e:54:ed:c6:e4:ad:cb:
         11:e0:df:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 9 15:19:49 2025 by rpki-client