Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/96914381C104A0C2A134AEE27153F21B05BB69B1ED546BEDEEB011D91D1C6AE9/0/323830333a653339303a3a2f33322d3332203d3e20323733303138.roa
File:                     323830333a653339303a3a2f33322d3332203d3e20323733303138.roa (raw, json)
Hash identifier:          3VngpUXeB4YEVSu9gfSaO8vnc61beuvTDFC5k0zhpkA=
Subject key identifier:   2C:E2:55:20:1F:09:5C:C9:8B:5A:8A:D3:73:20:93:9A:78:A4:D9:12
Certificate issuer:       /CN=6663BC5C54F43DBA515368BA14F55108A1C454D6
Certificate serial:       4CA11E9D43928F82B7C563640AD0EA5ECC9B7281
Authority key identifier: 66:63:BC:5C:54:F4:3D:BA:51:53:68:BA:14:F5:51:08:A1:C4:54:D6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6663BC5C54F43DBA515368BA14F55108A1C454D6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/96914381C104A0C2A134AEE27153F21B05BB69B1ED546BEDEEB011D91D1C6AE9/0/323830333a653339303a3a2f33322d3332203d3e20323733303138.roa
Signing time:             Wed 19 Mar 2025 06:50:00 +0000
ROA not before:           Wed 19 Mar 2025 06:45:00 +0000
ROA not after:            Wed 18 Mar 2026 06:50:00 +0000
asID:                     273018
IP address blocks:        2803:e390::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/96914381C104A0C2A134AEE27153F21B05BB69B1ED546BEDEEB011D91D1C6AE9/0/6663BC5C54F43DBA515368BA14F55108A1C454D6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/96914381C104A0C2A134AEE27153F21B05BB69B1ED546BEDEEB011D91D1C6AE9/0/6663BC5C54F43DBA515368BA14F55108A1C454D6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6663BC5C54F43DBA515368BA14F55108A1C454D6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 23:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:a1:1e:9d:43:92:8f:82:b7:c5:63:64:0a:d0:ea:5e:cc:9b:72:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6663BC5C54F43DBA515368BA14F55108A1C454D6
        Validity
            Not Before: Mar 19 06:45:00 2025 GMT
            Not After : Mar 18 06:50:00 2026 GMT
        Subject: CN=2CE255201F095CC98B5A8AD37320939A78A4D912
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:c3:97:64:e1:c0:d1:fb:0d:cd:53:a3:13:0c:
                    60:46:67:28:b8:35:b7:62:a8:a5:01:86:e7:a6:3c:
                    b2:2c:03:70:97:b8:22:c4:c6:b7:17:a5:d3:c2:1c:
                    ae:95:da:af:13:6f:df:bd:96:68:26:37:6f:27:1a:
                    94:67:66:88:ca:b4:de:65:20:19:51:fb:94:b2:35:
                    d5:28:54:bc:ff:fb:c4:1e:6d:07:d4:f5:16:ff:69:
                    37:46:35:f4:db:62:64:97:95:02:ba:1f:e6:96:a5:
                    58:c9:f9:3b:ba:03:3f:4d:49:70:4c:58:50:01:93:
                    34:b5:08:c2:0c:a8:c9:73:e3:98:ff:24:ae:c2:d4:
                    13:f9:5d:03:06:43:90:ce:60:fb:ab:58:04:5c:7b:
                    fe:54:0d:be:7c:38:88:04:24:cc:1c:f8:1f:d4:14:
                    7c:22:65:1b:24:ce:3f:dc:ee:f9:fa:f4:8b:a0:6e:
                    ec:8a:91:e7:67:59:dc:93:d9:a8:3b:b8:b1:a1:2b:
                    b8:c5:cc:72:1e:8b:8d:c8:af:4d:e1:95:7c:bf:27:
                    bc:1a:e4:8a:d3:99:08:ae:6f:94:66:88:0f:8c:33:
                    ac:40:df:a5:5b:5b:0c:99:a6:81:fa:09:8e:46:61:
                    ef:31:b5:ef:91:e0:ed:d5:3b:11:0d:b1:27:18:73:
                    a4:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:E2:55:20:1F:09:5C:C9:8B:5A:8A:D3:73:20:93:9A:78:A4:D9:12
            X509v3 Authority Key Identifier:
                keyid:66:63:BC:5C:54:F4:3D:BA:51:53:68:BA:14:F5:51:08:A1:C4:54:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/96914381C104A0C2A134AEE27153F21B05BB69B1ED546BEDEEB011D91D1C6AE9/0/6663BC5C54F43DBA515368BA14F55108A1C454D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6663BC5C54F43DBA515368BA14F55108A1C454D6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/96914381C104A0C2A134AEE27153F21B05BB69B1ED546BEDEEB011D91D1C6AE9/0/323830333a653339303a3a2f33322d3332203d3e20323733303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e390::/32

    Signature Algorithm: sha256WithRSAEncryption
         3d:af:f3:88:ca:b1:8f:92:b4:bf:ab:91:eb:72:f7:7c:5b:53:
         8a:93:48:a4:7b:cf:86:e0:92:28:72:a3:3d:09:6e:98:a5:1e:
         76:58:3a:5b:5e:68:67:6f:07:c3:19:68:a3:2b:06:2d:d7:8d:
         2d:b3:8a:2b:c2:d9:05:37:e5:2e:54:ec:dd:9c:25:e5:70:0c:
         29:db:4d:d8:07:18:8f:e7:d0:08:21:20:e7:fe:fd:c9:80:2b:
         50:81:02:0c:04:66:70:98:8d:a5:71:c7:48:fd:39:09:4a:12:
         89:6c:2c:2b:6b:3c:9e:cd:23:5f:5a:b1:ad:18:93:5f:e3:73:
         a0:3b:39:11:b4:59:0d:de:29:e0:89:b5:8f:a4:03:0a:bf:96:
         b1:e4:7b:5a:55:ed:c0:57:2b:5a:10:7b:b5:58:10:99:54:a6:
         4b:7f:9e:19:7d:38:9f:de:b0:06:ea:09:b1:3d:cf:5b:8b:1e:
         c3:11:c1:0d:33:f9:dd:d3:da:8e:76:df:6d:8c:30:42:ab:24:
         93:f6:2a:07:96:79:9d:6c:67:fe:e0:fc:2b:83:a3:7a:ba:64:
         c2:e9:e5:1c:7b:8a:1a:62:2b:0b:90:fd:3e:ee:47:8a:01:3b:
         fb:b3:20:42:a0:ca:10:84:de:ee:5d:c8:14:b8:e1:7f:f1:d3:
         65:22:ed:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 08:04:37 2025 by rpki-client