Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/93E8A862A26EBB0297BD5DB83E22353C990F9D2D17CEF486F0FEAED8FD5262EF/0/323830333a366331303a3a2f33322d3430203d3e20323633323338.roa
File:                     323830333a366331303a3a2f33322d3430203d3e20323633323338.roa (raw, json)
Hash identifier:          /8+y462KivvY/YFS/PoJNECvlEOnWDdA+z1eTZMnobU=
Subject key identifier:   B7:68:E8:DA:7E:9D:C8:ED:AF:E8:77:E0:F3:10:F7:33:A9:D1:F2:52
Certificate issuer:       /CN=E18C8696D3879627D1261D7BA7ACC2DDBE0DAF82
Certificate serial:       40055554C0980FD58FF9C795480B1C0CBC43BDFE
Authority key identifier: E1:8C:86:96:D3:87:96:27:D1:26:1D:7B:A7:AC:C2:DD:BE:0D:AF:82
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E18C8696D3879627D1261D7BA7ACC2DDBE0DAF82.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/93E8A862A26EBB0297BD5DB83E22353C990F9D2D17CEF486F0FEAED8FD5262EF/0/323830333a366331303a3a2f33322d3430203d3e20323633323338.roa
Signing time:             Tue 04 Feb 2025 18:16:01 +0000
ROA not before:           Tue 04 Feb 2025 18:11:01 +0000
ROA not after:            Tue 03 Feb 2026 18:16:01 +0000
asID:                     263238
IP address blocks:        2803:6c10::/32 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/93E8A862A26EBB0297BD5DB83E22353C990F9D2D17CEF486F0FEAED8FD5262EF/0/E18C8696D3879627D1261D7BA7ACC2DDBE0DAF82.crl
                          rsync://repository.lacnic.net/rpki/lacnic/93E8A862A26EBB0297BD5DB83E22353C990F9D2D17CEF486F0FEAED8FD5262EF/0/E18C8696D3879627D1261D7BA7ACC2DDBE0DAF82.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E18C8696D3879627D1261D7BA7ACC2DDBE0DAF82.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 19:48:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:05:55:54:c0:98:0f:d5:8f:f9:c7:95:48:0b:1c:0c:bc:43:bd:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E18C8696D3879627D1261D7BA7ACC2DDBE0DAF82
        Validity
            Not Before: Feb  4 18:11:01 2025 GMT
            Not After : Feb  3 18:16:01 2026 GMT
        Subject: CN=B768E8DA7E9DC8EDAFE877E0F310F733A9D1F252
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:2b:50:f7:de:2a:a5:e1:d3:a6:79:d7:8a:da:
                    f9:f4:1e:e0:da:c3:d2:73:e1:a6:dc:10:a5:53:bf:
                    b7:f4:be:e0:2d:2f:b4:47:b8:74:7a:e4:c5:22:fc:
                    8c:64:a9:16:f9:86:4a:38:0e:fe:d5:92:2b:45:4e:
                    f6:0a:40:27:1b:16:18:2b:7c:c2:ec:2b:89:d9:68:
                    f4:5d:86:97:69:3c:76:5e:77:38:ef:ab:5d:16:6e:
                    39:30:cb:3c:f8:09:d2:4a:90:a3:04:2c:4d:1c:f9:
                    f5:67:64:53:15:b5:0d:39:35:1d:e8:1c:48:ba:d1:
                    1e:57:fe:17:e3:2c:8e:1c:ee:51:87:7b:c6:15:e9:
                    4b:6f:3d:43:f6:c4:41:f9:97:e0:61:f9:ab:db:f5:
                    e2:76:3e:db:0f:94:b8:9e:48:31:64:e6:63:be:d9:
                    04:73:73:00:b5:83:5f:b4:e1:d5:3d:d1:ff:22:43:
                    37:24:76:04:4d:8b:72:4a:f9:6b:c9:31:48:d7:a8:
                    07:ff:dd:0b:15:9a:0c:9c:e9:79:2e:37:ca:57:a3:
                    22:be:3b:4f:a6:9c:44:f0:7c:21:08:c9:64:96:82:
                    19:ad:8e:f4:ce:2a:f2:72:4a:bb:7d:c6:50:bb:4c:
                    28:b7:6a:80:2a:f8:3b:5a:72:11:4a:31:8e:a0:ab:
                    58:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:68:E8:DA:7E:9D:C8:ED:AF:E8:77:E0:F3:10:F7:33:A9:D1:F2:52
            X509v3 Authority Key Identifier:
                keyid:E1:8C:86:96:D3:87:96:27:D1:26:1D:7B:A7:AC:C2:DD:BE:0D:AF:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/93E8A862A26EBB0297BD5DB83E22353C990F9D2D17CEF486F0FEAED8FD5262EF/0/E18C8696D3879627D1261D7BA7ACC2DDBE0DAF82.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E18C8696D3879627D1261D7BA7ACC2DDBE0DAF82.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/93E8A862A26EBB0297BD5DB83E22353C990F9D2D17CEF486F0FEAED8FD5262EF/0/323830333a366331303a3a2f33322d3430203d3e20323633323338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6c10::/32

    Signature Algorithm: sha256WithRSAEncryption
         95:3e:b3:fb:99:b1:17:f6:de:20:f1:e4:7f:2c:1b:43:cb:bd:
         68:4f:69:df:67:fc:dc:68:23:fa:a5:20:94:fb:aa:7e:a0:0f:
         7d:4c:3a:f1:8e:21:85:37:7c:60:6c:b1:fb:a1:db:b5:70:01:
         0f:30:2c:31:9e:c5:08:02:4f:b5:a7:59:e8:dc:9e:ce:68:f2:
         4c:ae:f1:eb:db:6b:d4:99:6a:a0:e4:27:5d:04:66:4d:50:e6:
         a1:f5:85:4a:34:b5:1a:bc:43:db:bf:89:33:11:ce:6e:b1:a3:
         c6:00:90:61:4a:32:4a:a5:8f:a6:c6:eb:d3:5e:b5:1c:a9:f2:
         c6:f5:5d:bd:e5:c4:00:b5:fb:df:59:80:6e:71:3f:80:f5:e7:
         18:fc:64:10:72:7a:56:12:59:61:ff:27:a5:81:fc:e9:c6:0d:
         8a:d8:60:a6:ef:69:54:4f:f5:b0:5f:0c:c0:3c:41:a7:7c:eb:
         17:4d:bd:c9:6d:9b:ae:ef:21:7b:e2:8b:e9:02:cc:05:0f:f6:
         0a:86:08:57:3c:45:f5:f3:1d:a2:23:f5:49:0d:ba:95:c1:d5:
         f0:84:d4:f3:34:df:7e:05:0f:cc:92:7d:9e:61:53:f8:dd:d9:
         74:b3:bf:00:5b:71:6b:2c:0c:45:93:13:82:13:34:5b:ce:11:
         29:2d:bb:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:57:44 2025 by rpki-client