Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8D5F97215E690A70055E35A2B394C4A99F305A2C67D18B8044560421C491C2FB/0/323830333a386535303a3930303a3a2f34302d3430203d3e20323733323138.roa
File:                     323830333a386535303a3930303a3a2f34302d3430203d3e20323733323138.roa (raw, json)
Hash identifier:          uPi/qU2Xk6RNCaVrJfepMDAEE06Z96G0mYxvPtevcrk=
Subject key identifier:   D6:7D:77:32:B0:EA:BC:EF:83:58:83:4E:50:6C:71:60:48:41:CE:CB
Certificate issuer:       /CN=A1F33E406A036FC3AAB87B71ED888DD58A177037
Certificate serial:       0C4A35765BE5FE418547F726FAC89C2B044AFE07
Authority key identifier: A1:F3:3E:40:6A:03:6F:C3:AA:B8:7B:71:ED:88:8D:D5:8A:17:70:37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A1F33E406A036FC3AAB87B71ED888DD58A177037.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8D5F97215E690A70055E35A2B394C4A99F305A2C67D18B8044560421C491C2FB/0/323830333a386535303a3930303a3a2f34302d3430203d3e20323733323138.roa
Signing time:             Thu 20 Mar 2025 00:12:31 +0000
ROA not before:           Thu 20 Mar 2025 00:07:31 +0000
ROA not after:            Thu 19 Mar 2026 00:12:31 +0000
asID:                     273218
IP address blocks:        2803:8e50:900::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8D5F97215E690A70055E35A2B394C4A99F305A2C67D18B8044560421C491C2FB/0/A1F33E406A036FC3AAB87B71ED888DD58A177037.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8D5F97215E690A70055E35A2B394C4A99F305A2C67D18B8044560421C491C2FB/0/A1F33E406A036FC3AAB87B71ED888DD58A177037.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A1F33E406A036FC3AAB87B71ED888DD58A177037.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 20:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:4a:35:76:5b:e5:fe:41:85:47:f7:26:fa:c8:9c:2b:04:4a:fe:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A1F33E406A036FC3AAB87B71ED888DD58A177037
        Validity
            Not Before: Mar 20 00:07:31 2025 GMT
            Not After : Mar 19 00:12:31 2026 GMT
        Subject: CN=D67D7732B0EABCEF8358834E506C71604841CECB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:4b:bb:2d:e6:ab:d4:49:5d:d9:87:d6:45:4b:
                    d2:95:e8:62:db:03:68:5b:d1:e2:5c:45:fe:e9:0f:
                    54:c2:89:44:1b:58:9c:81:91:5f:27:65:14:d4:1a:
                    4c:7a:93:fa:ee:ce:82:ea:2c:ab:8b:ad:35:2c:9f:
                    30:f1:cc:93:d5:bd:69:b1:58:ec:36:b1:e5:c2:e8:
                    50:ff:b3:00:8f:e1:4f:9c:1e:f1:24:f0:66:39:a4:
                    e3:ab:e8:53:37:c5:5d:90:db:be:b7:69:32:9c:4d:
                    c8:01:6f:26:7b:41:dc:53:a3:86:90:af:f9:36:9e:
                    6b:49:4e:cb:d4:ea:78:65:f2:ff:c1:ff:e2:99:62:
                    2c:da:9a:b0:8f:00:46:3e:99:cd:1e:98:31:9d:50:
                    be:69:f2:ca:8a:c5:3a:11:b0:5f:a5:23:43:cd:26:
                    d5:34:60:0e:48:bf:f8:ce:da:fb:c4:90:13:30:da:
                    05:6b:88:bb:34:48:a3:09:50:a9:21:30:c8:8b:c4:
                    3a:46:45:1b:93:8e:61:d8:12:60:6a:dd:5b:c8:6e:
                    66:0d:a6:39:c5:e3:4a:bb:6c:43:5c:dc:a2:a0:a8:
                    d3:25:53:9b:4b:95:62:7e:bf:3b:c0:66:77:8a:ef:
                    6b:8b:c7:87:1d:b4:58:13:fc:98:7a:2f:33:49:53:
                    2b:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:7D:77:32:B0:EA:BC:EF:83:58:83:4E:50:6C:71:60:48:41:CE:CB
            X509v3 Authority Key Identifier:
                keyid:A1:F3:3E:40:6A:03:6F:C3:AA:B8:7B:71:ED:88:8D:D5:8A:17:70:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8D5F97215E690A70055E35A2B394C4A99F305A2C67D18B8044560421C491C2FB/0/A1F33E406A036FC3AAB87B71ED888DD58A177037.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A1F33E406A036FC3AAB87B71ED888DD58A177037.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8D5F97215E690A70055E35A2B394C4A99F305A2C67D18B8044560421C491C2FB/0/323830333a386535303a3930303a3a2f34302d3430203d3e20323733323138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8e50:900::/40

    Signature Algorithm: sha256WithRSAEncryption
         71:53:a8:81:87:7d:d2:b6:e1:82:c6:b8:e2:00:64:0a:1f:7d:
         30:e3:63:9d:3b:e2:fe:6a:3b:6a:8d:85:a2:a1:2f:66:88:35:
         8c:d6:d3:ea:d5:9c:44:0f:28:0a:f4:3a:97:27:79:88:99:2f:
         e2:ac:f0:30:06:e3:e0:29:c7:46:1d:e6:da:f9:98:a8:b2:86:
         32:10:87:0a:f1:be:24:62:f9:93:fa:62:79:10:83:50:ec:d0:
         c5:e2:5d:61:8a:c5:24:9b:b7:0d:ca:da:ab:c0:f8:26:b3:71:
         d8:1a:d3:1d:7a:35:ea:78:09:24:18:0e:f1:2e:80:f8:fd:de:
         d5:cb:3a:c9:b0:82:f8:90:e2:32:33:30:79:d6:47:fc:fc:6f:
         6c:bd:41:62:28:c2:fe:9f:f2:b2:ad:7f:52:3c:55:db:cc:9a:
         16:6e:35:56:3c:9f:fe:6d:cb:09:00:39:38:d8:da:3c:50:2e:
         93:00:80:d1:d5:8c:d3:2d:34:84:8f:27:a4:f7:8a:f8:87:f9:
         35:89:64:cc:c2:ca:d6:93:46:79:12:28:72:16:2b:55:6b:c0:
         61:dd:3b:e0:d4:0e:0d:7e:21:2e:d7:c2:3a:a4:56:9f:e5:48:
         7a:40:b0:26:8f:20:80:b8:bf:9b:8d:7c:c6:3d:a5:fa:a0:e6:
         97:16:13:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:43:33 2025 by rpki-client