Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8E7E39E7D390C8FC7CA81144BFE08B122B427B0A0513324D744447A43C76A3A9/0/323830333a363835303a333a3a2f34382d3438203d3e20323733313133.roa
File:                     323830333a363835303a333a3a2f34382d3438203d3e20323733313133.roa (raw, json)
Hash identifier:          lHnP3fTcelnF0AX29ywnhr9Dn4hTZyOG5yHzFT7bFxk=
Subject key identifier:   B0:5F:B7:FB:D9:A5:5A:8F:CD:95:C5:69:61:E8:40:59:B2:CE:B3:33
Certificate issuer:       /CN=1642A8D6C14F94500E7FF6111DCC5D5107143798
Certificate serial:       199D41D252161B328A0A3EF5994DB30F7E74CD94
Authority key identifier: 16:42:A8:D6:C1:4F:94:50:0E:7F:F6:11:1D:CC:5D:51:07:14:37:98
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1642A8D6C14F94500E7FF6111DCC5D5107143798.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8E7E39E7D390C8FC7CA81144BFE08B122B427B0A0513324D744447A43C76A3A9/0/323830333a363835303a333a3a2f34382d3438203d3e20323733313133.roa
Signing time:             Tue 04 Feb 2025 18:29:17 +0000
ROA not before:           Tue 04 Feb 2025 18:24:17 +0000
ROA not after:            Tue 03 Feb 2026 18:29:17 +0000
asID:                     273113
IP address blocks:        2803:6850:3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8E7E39E7D390C8FC7CA81144BFE08B122B427B0A0513324D744447A43C76A3A9/0/1642A8D6C14F94500E7FF6111DCC5D5107143798.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8E7E39E7D390C8FC7CA81144BFE08B122B427B0A0513324D744447A43C76A3A9/0/1642A8D6C14F94500E7FF6111DCC5D5107143798.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1642A8D6C14F94500E7FF6111DCC5D5107143798.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:9d:41:d2:52:16:1b:32:8a:0a:3e:f5:99:4d:b3:0f:7e:74:cd:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1642A8D6C14F94500E7FF6111DCC5D5107143798
        Validity
            Not Before: Feb  4 18:24:17 2025 GMT
            Not After : Feb  3 18:29:17 2026 GMT
        Subject: CN=B05FB7FBD9A55A8FCD95C56961E84059B2CEB333
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:6d:5c:ff:7b:c2:32:d3:ed:c6:17:c5:49:85:
                    22:3e:5e:98:18:c4:43:92:18:90:a4:7b:f8:03:3c:
                    e9:88:5b:0a:e0:ff:8e:13:95:09:51:7a:d5:f4:b2:
                    10:84:c6:7d:60:25:b1:d4:60:12:9f:8d:7a:e0:1b:
                    1f:f3:af:b7:e0:0c:11:3a:52:07:ba:41:22:99:4a:
                    d4:e8:c2:9f:55:1a:eb:1e:37:1b:37:21:1a:14:c8:
                    e3:be:cd:b2:18:6b:74:3c:a9:e2:b7:ea:75:93:d2:
                    0b:50:d6:86:fe:84:0c:e1:ef:e5:6c:e6:29:09:f5:
                    79:aa:2a:07:4a:fa:43:fd:28:bd:c1:64:b3:37:80:
                    17:ef:8a:56:05:c3:8f:f1:1e:ba:fe:9d:51:82:a1:
                    38:81:aa:ab:89:d7:a5:ad:ed:0e:b9:d1:0d:98:66:
                    f5:35:cc:ce:a8:1d:2a:d2:80:a2:1a:bc:45:79:ba:
                    99:9a:c5:22:97:1e:1f:1a:4f:b2:b4:52:5a:07:e9:
                    9e:63:1f:98:7b:97:48:4b:eb:84:b0:30:aa:6d:98:
                    c0:0b:f0:6e:0b:aa:e0:45:6b:da:ef:13:b6:2e:81:
                    40:1a:78:c4:02:48:ef:36:c9:81:bc:3f:76:8d:bb:
                    36:11:58:ab:8c:74:9b:e9:76:bf:73:21:0c:9c:d8:
                    bf:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:5F:B7:FB:D9:A5:5A:8F:CD:95:C5:69:61:E8:40:59:B2:CE:B3:33
            X509v3 Authority Key Identifier:
                keyid:16:42:A8:D6:C1:4F:94:50:0E:7F:F6:11:1D:CC:5D:51:07:14:37:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8E7E39E7D390C8FC7CA81144BFE08B122B427B0A0513324D744447A43C76A3A9/0/1642A8D6C14F94500E7FF6111DCC5D5107143798.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1642A8D6C14F94500E7FF6111DCC5D5107143798.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8E7E39E7D390C8FC7CA81144BFE08B122B427B0A0513324D744447A43C76A3A9/0/323830333a363835303a333a3a2f34382d3438203d3e20323733313133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6850:3::/48

    Signature Algorithm: sha256WithRSAEncryption
         01:1e:e3:d9:d6:26:4c:83:32:10:8c:aa:67:04:78:01:12:9f:
         7a:b1:57:45:95:68:44:e6:fe:32:07:37:0d:de:7a:05:5e:d6:
         59:c2:38:29:79:5d:62:f6:36:1c:92:e8:6e:6d:db:a2:59:63:
         d6:96:4f:1b:8c:17:4a:43:5e:95:35:e5:81:22:bf:bf:53:1e:
         6a:a2:d7:e7:7d:5f:c1:f0:89:39:6a:b4:d0:1d:5f:54:96:0a:
         f6:e6:18:bc:f7:3a:54:db:8b:ec:e3:ee:fa:bd:cd:18:14:49:
         2a:37:0a:f0:97:be:ae:54:4c:90:92:8c:8a:10:62:35:5f:a1:
         e7:5a:c4:99:04:56:af:f6:9e:d4:23:2c:66:ff:15:77:97:4a:
         a1:c4:3f:ef:0b:8b:92:98:9e:cb:bd:ee:e1:f7:67:e6:9c:f2:
         74:94:8b:6c:b0:f7:d0:62:93:98:00:2b:9f:cd:74:f8:e1:25:
         c4:33:e1:9c:80:e0:cf:2f:1d:5b:9f:eb:1a:3b:e5:a0:69:71:
         59:27:b7:ce:b7:96:63:f0:d1:6d:11:c2:27:36:e1:71:d3:9e:
         76:67:b9:93:ac:23:5d:7d:11:19:5c:a4:99:c2:e3:bb:0f:25:
         be:30:f6:9b:12:2a:3a:b4:74:4e:d9:10:41:30:c4:c8:b7:ea:
         5e:e5:8d:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:09:27 2025 by rpki-client