Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9698A2CC2D249AA8756FD138D30804C21927952D66FCAFC4A3D613E7C75C8191/0/323830333a383138303a383a3a2f34372d3438203d3e20323633323337.roa
File:                     323830333a383138303a383a3a2f34372d3438203d3e20323633323337.roa (raw, json)
Hash identifier:          IwP6+DQ+eInGn6qQRPy62SZnDwW7qdIJ5u6oFf1gQC8=
Subject key identifier:   C8:43:A8:A0:C0:9D:F5:3D:92:13:B6:6D:88:0C:93:D7:92:E0:64:66
Certificate issuer:       /CN=6F5638A54E694E3FCFC335F3AFD2311F07D05D08
Certificate serial:       68389E2C2C0C06064857C4B6165107E3130D0757
Authority key identifier: 6F:56:38:A5:4E:69:4E:3F:CF:C3:35:F3:AF:D2:31:1F:07:D0:5D:08
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6F5638A54E694E3FCFC335F3AFD2311F07D05D08.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9698A2CC2D249AA8756FD138D30804C21927952D66FCAFC4A3D613E7C75C8191/0/323830333a383138303a383a3a2f34372d3438203d3e20323633323337.roa
Signing time:             Tue 04 Feb 2025 18:06:15 +0000
ROA not before:           Tue 04 Feb 2025 18:01:15 +0000
ROA not after:            Tue 03 Feb 2026 18:06:15 +0000
asID:                     263237
IP address blocks:        2803:8180:8::/47 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9698A2CC2D249AA8756FD138D30804C21927952D66FCAFC4A3D613E7C75C8191/0/6F5638A54E694E3FCFC335F3AFD2311F07D05D08.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9698A2CC2D249AA8756FD138D30804C21927952D66FCAFC4A3D613E7C75C8191/0/6F5638A54E694E3FCFC335F3AFD2311F07D05D08.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6F5638A54E694E3FCFC335F3AFD2311F07D05D08.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 12:12:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:38:9e:2c:2c:0c:06:06:48:57:c4:b6:16:51:07:e3:13:0d:07:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F5638A54E694E3FCFC335F3AFD2311F07D05D08
        Validity
            Not Before: Feb  4 18:01:15 2025 GMT
            Not After : Feb  3 18:06:15 2026 GMT
        Subject: CN=C843A8A0C09DF53D9213B66D880C93D792E06466
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:95:a4:46:79:b2:59:89:34:51:d7:90:cc:4f:
                    96:77:b5:21:6e:0c:4e:1e:d2:4a:3e:00:bd:07:31:
                    6e:25:b2:af:3e:a4:14:09:45:ed:0c:3a:d7:2f:d0:
                    a1:fe:99:4f:96:36:ef:42:1e:4c:06:e0:8d:78:87:
                    7b:6d:29:24:a9:fc:1d:d4:5d:51:9e:c2:48:72:b1:
                    d4:04:c7:e2:c7:74:88:d6:f8:c5:f2:30:b3:79:6f:
                    02:2d:26:bc:24:72:4c:8f:d3:23:af:0a:d0:3c:0f:
                    45:59:6e:46:27:e1:5f:ce:60:12:21:cd:52:20:5f:
                    97:62:7f:db:78:e7:73:95:ea:81:16:5a:8a:27:95:
                    12:34:35:f0:0c:27:56:05:92:df:0d:53:03:d2:80:
                    07:67:c3:f0:42:3b:36:27:d5:e8:2f:ff:cd:dc:53:
                    8f:02:47:4a:c5:c6:7b:cb:b8:cf:c7:1a:2d:6b:c2:
                    cb:16:8e:cc:63:ed:6a:b1:36:92:9e:97:ac:42:af:
                    fe:f6:3b:c7:c9:ea:89:6a:b6:f9:e6:67:0d:2b:c5:
                    18:64:c3:33:c6:91:e9:4a:fa:9c:ed:56:b4:f5:db:
                    49:cb:5e:e3:ba:7e:b4:a4:b7:57:2d:a2:07:e3:31:
                    8c:a7:30:6b:4a:5b:c5:43:4a:a7:da:3f:47:f0:ed:
                    72:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:43:A8:A0:C0:9D:F5:3D:92:13:B6:6D:88:0C:93:D7:92:E0:64:66
            X509v3 Authority Key Identifier:
                keyid:6F:56:38:A5:4E:69:4E:3F:CF:C3:35:F3:AF:D2:31:1F:07:D0:5D:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9698A2CC2D249AA8756FD138D30804C21927952D66FCAFC4A3D613E7C75C8191/0/6F5638A54E694E3FCFC335F3AFD2311F07D05D08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6F5638A54E694E3FCFC335F3AFD2311F07D05D08.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9698A2CC2D249AA8756FD138D30804C21927952D66FCAFC4A3D613E7C75C8191/0/323830333a383138303a383a3a2f34372d3438203d3e20323633323337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8180:8::/47

    Signature Algorithm: sha256WithRSAEncryption
         1e:11:03:78:ae:59:82:91:64:29:2e:a0:a2:0d:43:9d:14:cb:
         a5:12:d4:b7:fe:2d:05:99:dc:7e:a3:fd:0d:25:73:ec:24:9e:
         fa:f2:3e:1b:ff:2b:f2:f7:d9:35:1e:85:0d:42:6a:01:33:9f:
         f1:a0:8e:4a:ae:47:a2:de:6c:ce:77:c0:b7:e7:e4:67:0d:8e:
         23:77:1e:b5:f5:f2:09:cd:76:a1:0e:f8:fc:62:ee:15:06:2f:
         2f:ce:d2:8a:c2:a6:31:ba:bc:7c:43:f1:b4:52:a0:ca:7d:d2:
         83:14:bf:97:8e:97:51:b8:33:6b:f2:ad:18:81:75:8c:f3:93:
         1b:8f:c3:40:12:2f:2f:5e:2f:dc:ab:67:1b:8b:cf:6b:ef:a9:
         20:12:b5:78:21:3e:ad:07:39:b8:c5:d3:1c:0d:a8:9c:84:30:
         08:be:51:89:05:1c:4f:ac:8b:33:d0:91:15:2c:8f:84:1c:5d:
         b6:15:c0:1c:1b:87:7b:fa:b5:99:c5:16:d8:c8:6c:e7:86:34:
         a4:e7:08:ea:bd:4a:f7:02:70:13:fe:38:0a:8b:f3:54:5b:1b:
         c8:80:27:fc:cf:42:1d:80:fb:51:0f:31:a1:5c:bc:f1:88:40:
         dc:23:39:cd:35:cc:50:17:4c:0e:94:8c:90:47:61:49:d6:37:
         1e:31:eb:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:31:29 2025 by rpki-client