Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/99CC17FBDD8747189C0E4FC193FA08E0070B6CF0E1A0218CAC618A2D0200C4EF/0/323830333a336236303a343030303a3a2f33352d3335203d3e20323639383131.roa
File:                     323830333a336236303a343030303a3a2f33352d3335203d3e20323639383131.roa (raw, json)
Hash identifier:          G8eA95wT2rMcu7dwMq7h1q3PJ0GtlEjxa30gyL6Ae8A=
Subject key identifier:   74:1A:88:63:CD:E3:6F:BD:C9:29:9D:8E:B0:1B:94:56:05:8B:BF:8D
Certificate issuer:       /CN=1CEB8FE2FDB05493C8860AC2CEBC2F63CF00CDAA
Certificate serial:       3E4FF01002C4BE95260A580B0EE7602161FBD005
Authority key identifier: 1C:EB:8F:E2:FD:B0:54:93:C8:86:0A:C2:CE:BC:2F:63:CF:00:CD:AA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1CEB8FE2FDB05493C8860AC2CEBC2F63CF00CDAA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/99CC17FBDD8747189C0E4FC193FA08E0070B6CF0E1A0218CAC618A2D0200C4EF/0/323830333a336236303a343030303a3a2f33352d3335203d3e20323639383131.roa
Signing time:             Tue 11 Mar 2025 08:30:03 +0000
ROA not before:           Tue 11 Mar 2025 08:25:03 +0000
ROA not after:            Tue 10 Mar 2026 08:30:03 +0000
asID:                     269811
IP address blocks:        2803:3b60:4000::/35 maxlen: 35
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/99CC17FBDD8747189C0E4FC193FA08E0070B6CF0E1A0218CAC618A2D0200C4EF/0/1CEB8FE2FDB05493C8860AC2CEBC2F63CF00CDAA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/99CC17FBDD8747189C0E4FC193FA08E0070B6CF0E1A0218CAC618A2D0200C4EF/0/1CEB8FE2FDB05493C8860AC2CEBC2F63CF00CDAA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1CEB8FE2FDB05493C8860AC2CEBC2F63CF00CDAA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Apr 2025 21:29:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:4f:f0:10:02:c4:be:95:26:0a:58:0b:0e:e7:60:21:61:fb:d0:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1CEB8FE2FDB05493C8860AC2CEBC2F63CF00CDAA
        Validity
            Not Before: Mar 11 08:25:03 2025 GMT
            Not After : Mar 10 08:30:03 2026 GMT
        Subject: CN=741A8863CDE36FBDC9299D8EB01B9456058BBF8D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:97:9a:04:c4:32:32:91:0d:4a:e2:04:72:0f:
                    fb:83:78:cf:5c:19:56:30:22:a3:33:78:23:12:54:
                    8e:bb:6e:ba:ba:2e:e5:7a:30:e2:b6:d8:2d:d0:6f:
                    75:a2:4f:07:7c:de:81:a5:a9:36:27:e0:bd:a4:df:
                    4b:1f:22:02:4f:8c:b5:4d:9f:9c:5d:fa:f4:c9:4e:
                    ab:fe:d6:e4:e2:be:0c:00:27:05:fd:50:c7:cf:7f:
                    26:6c:ab:3e:42:33:c7:d4:37:68:8c:83:db:c0:f6:
                    8f:83:e7:95:c7:1c:a8:5e:a5:56:1a:d1:fa:74:af:
                    c2:e7:10:80:d4:0e:47:53:5a:40:0a:36:e8:7d:cc:
                    2a:af:b6:b8:fc:47:43:83:81:43:f7:93:6e:05:1f:
                    8b:e4:38:06:40:fa:26:f3:24:74:7b:a1:55:e4:d4:
                    f6:5f:4a:9e:ac:c9:db:0c:a3:fd:8f:0d:b0:b6:6e:
                    af:1c:c9:de:95:7b:9e:51:1c:52:ca:03:b8:c7:22:
                    63:c2:50:db:46:70:61:67:51:d8:00:c3:97:b3:ed:
                    83:cf:e5:26:22:44:23:3c:25:93:f1:d7:9d:59:d8:
                    36:3a:28:6d:b3:5c:26:24:18:61:ee:30:ca:ee:66:
                    76:d1:67:2f:27:26:04:48:1f:51:cf:14:13:18:4a:
                    42:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:1A:88:63:CD:E3:6F:BD:C9:29:9D:8E:B0:1B:94:56:05:8B:BF:8D
            X509v3 Authority Key Identifier:
                keyid:1C:EB:8F:E2:FD:B0:54:93:C8:86:0A:C2:CE:BC:2F:63:CF:00:CD:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/99CC17FBDD8747189C0E4FC193FA08E0070B6CF0E1A0218CAC618A2D0200C4EF/0/1CEB8FE2FDB05493C8860AC2CEBC2F63CF00CDAA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1CEB8FE2FDB05493C8860AC2CEBC2F63CF00CDAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/99CC17FBDD8747189C0E4FC193FA08E0070B6CF0E1A0218CAC618A2D0200C4EF/0/323830333a336236303a343030303a3a2f33352d3335203d3e20323639383131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3b60:4000::/35

    Signature Algorithm: sha256WithRSAEncryption
         34:66:1f:7e:95:20:79:ad:9b:68:77:67:29:e7:63:98:7b:b7:
         de:61:5b:22:97:35:fe:23:f0:dd:6d:22:19:37:b8:c5:16:8d:
         f1:67:bb:cc:33:c3:7f:3a:e9:69:cc:b2:6e:a5:2c:b1:6c:77:
         0e:5b:fd:c7:55:b6:d1:ed:36:a4:32:73:fd:0e:18:3a:5d:a2:
         90:ce:2a:db:dc:02:e0:4b:c7:a7:48:f2:74:1a:77:c1:ed:cf:
         00:de:10:c5:cb:9c:a3:b9:6c:ae:8f:92:1f:0b:a7:91:ed:4a:
         f1:55:17:df:a3:45:ef:48:99:0d:d0:78:13:37:8b:cf:c0:cd:
         af:34:aa:bb:61:d6:60:12:66:f8:dc:2a:10:08:4d:11:ab:92:
         30:fb:c9:48:cf:de:5f:d6:54:d5:04:95:69:fb:e4:1c:b3:66:
         3f:7f:69:d8:b4:fa:88:71:90:0a:35:34:cb:b8:fc:61:62:ae:
         4a:df:e7:77:c8:a2:9a:05:02:bd:8e:ea:2a:af:0a:0e:12:19:
         61:34:69:4b:66:aa:67:d9:75:f8:61:d8:53:95:ed:48:a1:1c:
         73:08:89:54:36:69:d4:8c:10:9e:50:65:3e:4b:35:48:64:87:
         b3:82:87:52:8d:c4:85:5d:ac:93:d1:f7:d8:f3:20:6f:99:fc:
         43:92:85:38
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 18 19:37:20 2025 by rpki-client