Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8EBDD1DCB41F6076C7E6FEA3333A5FC30D391BAF76D71BEC58EEF5B6085A607C/0/323830333a613432303a3a2f33322d3438203d3e20323635383138.roa
File:                     323830333a613432303a3a2f33322d3438203d3e20323635383138.roa (raw, json)
Hash identifier:          ARSZlP69PeSs+dCCiPPdGK5estxAE00T2+YF9vtNVNI=
Subject key identifier:   BA:C0:07:9E:6B:50:DB:8E:2A:3E:F1:36:67:8B:1A:5F:70:1A:5D:DF
Certificate issuer:       /CN=F166E23E4118700C69E87B40D8D7DD225C3DF563
Certificate serial:       345760F22F4636395AEC35B46EE3E7FDE1A0DED7
Authority key identifier: F1:66:E2:3E:41:18:70:0C:69:E8:7B:40:D8:D7:DD:22:5C:3D:F5:63
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F166E23E4118700C69E87B40D8D7DD225C3DF563.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8EBDD1DCB41F6076C7E6FEA3333A5FC30D391BAF76D71BEC58EEF5B6085A607C/0/323830333a613432303a3a2f33322d3438203d3e20323635383138.roa
Signing time:             Wed 19 Feb 2025 03:15:00 +0000
ROA not before:           Wed 19 Feb 2025 03:10:00 +0000
ROA not after:            Wed 18 Feb 2026 03:15:00 +0000
asID:                     265818
IP address blocks:        2803:a420::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8EBDD1DCB41F6076C7E6FEA3333A5FC30D391BAF76D71BEC58EEF5B6085A607C/0/F166E23E4118700C69E87B40D8D7DD225C3DF563.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8EBDD1DCB41F6076C7E6FEA3333A5FC30D391BAF76D71BEC58EEF5B6085A607C/0/F166E23E4118700C69E87B40D8D7DD225C3DF563.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F166E23E4118700C69E87B40D8D7DD225C3DF563.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 02:52:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:57:60:f2:2f:46:36:39:5a:ec:35:b4:6e:e3:e7:fd:e1:a0:de:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F166E23E4118700C69E87B40D8D7DD225C3DF563
        Validity
            Not Before: Feb 19 03:10:00 2025 GMT
            Not After : Feb 18 03:15:00 2026 GMT
        Subject: CN=BAC0079E6B50DB8E2A3EF136678B1A5F701A5DDF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:37:60:f0:d9:5e:89:9a:a1:55:f5:0d:d8:1c:
                    03:a2:37:4e:03:16:20:9b:31:0d:f1:f0:3e:3a:08:
                    6c:7d:f6:4f:14:a1:42:13:79:be:13:20:de:36:64:
                    c9:1a:f4:4a:87:49:ed:a5:af:56:2c:82:f3:81:11:
                    1c:e1:a8:da:7b:f0:62:ae:46:37:c7:32:35:6c:12:
                    6e:5c:41:cb:7e:c0:a2:09:cf:4b:d2:ef:ca:e6:8d:
                    a5:17:d1:13:9b:67:f6:a0:96:d8:cb:b6:b5:bb:fe:
                    da:5d:09:ed:43:6c:a0:24:59:2a:05:82:6d:aa:4c:
                    b6:a7:83:2c:2e:3d:3e:03:f0:61:49:69:ca:70:9f:
                    c5:6b:5b:3f:22:c0:df:8c:83:76:64:1c:87:a1:27:
                    2b:38:56:68:c8:a9:2b:b9:3e:ef:38:40:99:f3:9f:
                    5c:6f:bf:f3:3b:8e:41:e4:82:2a:08:e5:66:a1:48:
                    b5:1b:b4:c2:83:1a:20:3b:3b:bf:97:3a:55:27:76:
                    ef:bd:0c:e2:10:13:39:8f:8e:6f:e5:8f:2e:b3:73:
                    51:16:5d:cd:79:cb:6e:c3:cc:73:ba:9b:c6:34:93:
                    49:0e:91:ac:dd:2d:89:9d:20:e0:f4:41:07:e4:5e:
                    48:cc:26:1e:b3:0f:2f:7c:1e:28:75:93:0d:ec:95:
                    a0:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:C0:07:9E:6B:50:DB:8E:2A:3E:F1:36:67:8B:1A:5F:70:1A:5D:DF
            X509v3 Authority Key Identifier:
                keyid:F1:66:E2:3E:41:18:70:0C:69:E8:7B:40:D8:D7:DD:22:5C:3D:F5:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8EBDD1DCB41F6076C7E6FEA3333A5FC30D391BAF76D71BEC58EEF5B6085A607C/0/F166E23E4118700C69E87B40D8D7DD225C3DF563.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F166E23E4118700C69E87B40D8D7DD225C3DF563.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8EBDD1DCB41F6076C7E6FEA3333A5FC30D391BAF76D71BEC58EEF5B6085A607C/0/323830333a613432303a3a2f33322d3438203d3e20323635383138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:a420::/32

    Signature Algorithm: sha256WithRSAEncryption
         51:ba:68:0c:92:43:c4:3c:14:40:f7:2d:da:40:bc:d9:14:73:
         58:d0:dc:ed:60:19:34:ec:e3:41:f8:bc:35:fc:05:68:d0:2d:
         81:a5:31:fd:db:93:5c:25:df:f7:c4:02:3c:34:21:56:7c:fb:
         b3:ac:94:c1:8e:86:56:f6:00:bf:50:8a:68:8f:bb:7a:13:23:
         4f:1b:17:32:73:62:f4:39:f7:80:92:a9:6d:0c:7d:b1:67:e0:
         f2:7e:4f:22:2e:e8:78:53:83:25:da:e3:e1:1e:c0:da:f8:1a:
         a0:dd:11:d5:d5:d0:8e:07:26:6e:ad:a2:3d:8f:72:32:95:3c:
         78:64:93:fa:79:e0:54:27:62:36:64:d8:e9:11:58:1a:ef:b4:
         29:88:f3:7e:99:50:32:be:e8:ef:f4:3b:26:b0:2c:14:83:28:
         10:c3:56:04:0d:15:da:3d:42:40:d6:ad:a7:6c:34:d1:dc:a1:
         df:cb:c2:6a:a5:1a:8f:19:1b:17:8e:c1:e2:78:0c:ee:4d:71:
         ea:23:f7:bf:80:ec:84:45:7a:bf:f1:f8:ff:40:11:9b:5f:33:
         b5:97:eb:db:c4:54:11:c6:b4:b0:ce:50:e6:39:67:19:8c:05:
         2a:31:56:ea:96:37:1d:67:21:2c:b2:17:3f:ad:68:78:82:26:
         87:c1:17:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 21:07:40 2025 by rpki-client