Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8FC2692E9603D23AF02853DC75D35F465BF61721FEEA8F1D965544177D2F9846/0/323830333a656238303a666666663a3a2f34382d3438203d3e203631343933.roa
File:                     323830333a656238303a666666663a3a2f34382d3438203d3e203631343933.roa (raw, json)
Hash identifier:          OIC6uw2Qk5gcyJ1Rmj5Jf5eywvEjkJFEA/0UL2y506E=
Subject key identifier:   D3:2B:F2:85:C8:42:F2:18:56:BF:E4:3B:F8:C5:86:59:B6:89:64:9D
Certificate issuer:       /CN=1B0F9F6ADE6146F86AFFA55E79F85D04B0C13EEF
Certificate serial:       09DB9688A8A3819B13020B2956CF374D893406B0
Authority key identifier: 1B:0F:9F:6A:DE:61:46:F8:6A:FF:A5:5E:79:F8:5D:04:B0:C1:3E:EF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B0F9F6ADE6146F86AFFA55E79F85D04B0C13EEF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8FC2692E9603D23AF02853DC75D35F465BF61721FEEA8F1D965544177D2F9846/0/323830333a656238303a666666663a3a2f34382d3438203d3e203631343933.roa
Signing time:             Tue 04 Feb 2025 18:50:43 +0000
ROA not before:           Tue 04 Feb 2025 18:45:43 +0000
ROA not after:            Tue 03 Feb 2026 18:50:43 +0000
asID:                     61493
IP address blocks:        2803:eb80:ffff::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8FC2692E9603D23AF02853DC75D35F465BF61721FEEA8F1D965544177D2F9846/0/1B0F9F6ADE6146F86AFFA55E79F85D04B0C13EEF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8FC2692E9603D23AF02853DC75D35F465BF61721FEEA8F1D965544177D2F9846/0/1B0F9F6ADE6146F86AFFA55E79F85D04B0C13EEF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B0F9F6ADE6146F86AFFA55E79F85D04B0C13EEF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 01:32:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:db:96:88:a8:a3:81:9b:13:02:0b:29:56:cf:37:4d:89:34:06:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B0F9F6ADE6146F86AFFA55E79F85D04B0C13EEF
        Validity
            Not Before: Feb  4 18:45:43 2025 GMT
            Not After : Feb  3 18:50:43 2026 GMT
        Subject: CN=D32BF285C842F21856BFE43BF8C58659B689649D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:01:c1:06:4b:6e:d9:37:65:ed:8a:40:05:73:
                    4b:ea:87:3a:95:27:18:60:07:d8:45:61:9e:ea:ac:
                    7b:92:ed:33:53:6f:04:41:16:81:9c:a7:92:f5:ea:
                    f5:8e:4c:de:e9:a3:09:1e:b8:9e:a5:25:47:d7:39:
                    c5:8f:11:bf:4e:2d:d0:74:70:29:ca:7d:bc:97:df:
                    89:4f:20:0a:5e:9a:d3:60:a0:6e:e0:3a:84:68:79:
                    37:eb:a1:e5:63:b8:83:e2:9b:30:b2:51:e3:b9:95:
                    e0:75:08:09:92:df:60:bb:7e:73:0b:af:a6:ee:9b:
                    d3:5e:97:2d:7d:73:c7:e9:df:3a:e0:3e:76:49:7b:
                    35:d3:21:e6:83:21:90:fd:1d:27:67:e6:32:10:9d:
                    62:92:1f:86:00:ee:dd:1f:2b:75:69:64:e4:f3:ba:
                    82:2c:a9:98:50:15:bd:9c:1b:04:dc:36:68:1b:dd:
                    fd:46:33:88:86:81:6f:81:47:5c:a4:36:93:10:19:
                    b5:90:6b:94:99:2e:c5:8b:44:3f:ae:b1:19:11:0f:
                    a0:df:2e:51:66:6f:e8:a8:f0:56:14:14:68:5e:3d:
                    35:d1:68:60:41:27:a6:e1:6e:88:62:27:c6:52:92:
                    2c:54:a6:3a:15:2c:4a:1f:43:7b:53:a4:8a:e8:20:
                    89:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:2B:F2:85:C8:42:F2:18:56:BF:E4:3B:F8:C5:86:59:B6:89:64:9D
            X509v3 Authority Key Identifier:
                keyid:1B:0F:9F:6A:DE:61:46:F8:6A:FF:A5:5E:79:F8:5D:04:B0:C1:3E:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8FC2692E9603D23AF02853DC75D35F465BF61721FEEA8F1D965544177D2F9846/0/1B0F9F6ADE6146F86AFFA55E79F85D04B0C13EEF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B0F9F6ADE6146F86AFFA55E79F85D04B0C13EEF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8FC2692E9603D23AF02853DC75D35F465BF61721FEEA8F1D965544177D2F9846/0/323830333a656238303a666666663a3a2f34382d3438203d3e203631343933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:eb80:ffff::/48

    Signature Algorithm: sha256WithRSAEncryption
         92:c5:71:c3:86:71:7c:93:51:40:e9:6b:82:00:58:2e:b3:58:
         af:df:21:0e:0f:1b:ee:bf:da:18:94:70:44:2a:6f:f8:42:f3:
         45:62:75:df:65:9d:cc:72:a9:c6:d4:96:f2:8f:65:08:ac:37:
         01:ba:f4:21:3a:5c:14:5e:f6:7c:66:a4:20:3b:14:9a:60:c0:
         56:8b:40:d4:8d:8f:62:9e:e2:db:f0:cc:17:80:e7:08:62:d5:
         9e:41:9e:fb:a2:31:5d:f6:61:69:3b:39:4f:ec:28:1c:0c:27:
         d5:06:5f:fe:df:c9:f7:16:1f:7a:eb:7e:92:5f:21:59:7e:9f:
         42:04:04:92:5e:8f:ca:3b:e2:41:79:0f:64:19:5f:4b:1b:ad:
         5c:1c:cc:b1:9d:9c:09:38:31:db:b4:d1:ec:59:ef:0a:15:3a:
         7a:54:3d:2b:64:6d:a9:d6:10:85:6b:19:48:93:57:24:25:ba:
         26:6f:82:26:58:95:eb:4a:78:cd:10:a0:a6:0f:0f:c9:9e:21:
         7a:ca:6e:d7:00:9b:fa:7e:f1:bd:75:68:6e:f2:e2:18:99:b1:
         db:fd:89:b7:2f:29:cf:5d:2f:42:17:b8:45:9d:66:85:3b:6a:
         be:4b:bb:f5:26:c6:97:14:71:83:7e:a7:d0:50:a7:60:ba:5f:
         3b:b4:0b:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:44:41 2025 by rpki-client