Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/99CC17FBDD8747189C0E4FC193FA08E0070B6CF0E1A0218CAC618A2D0200C4EF/0/323830333a336236303a383030303a3a2f33352d3335203d3e20323639383131.roa
File:                     323830333a336236303a383030303a3a2f33352d3335203d3e20323639383131.roa (raw, json)
Hash identifier:          +VFJ/Az0ETdUjnJuZ1VF/PqDu6Pm2oR/8CO8f2wsuPQ=
Subject key identifier:   8B:5C:84:BE:A2:12:D6:5D:87:C0:05:0E:2C:EF:84:48:79:69:2F:B3
Certificate issuer:       /CN=1CEB8FE2FDB05493C8860AC2CEBC2F63CF00CDAA
Certificate serial:       62764E665ECE60C54C51D15944E220D4D5A39B4C
Authority key identifier: 1C:EB:8F:E2:FD:B0:54:93:C8:86:0A:C2:CE:BC:2F:63:CF:00:CD:AA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1CEB8FE2FDB05493C8860AC2CEBC2F63CF00CDAA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/99CC17FBDD8747189C0E4FC193FA08E0070B6CF0E1A0218CAC618A2D0200C4EF/0/323830333a336236303a383030303a3a2f33352d3335203d3e20323639383131.roa
Signing time:             Tue 11 Mar 2025 08:30:01 +0000
ROA not before:           Tue 11 Mar 2025 08:25:01 +0000
ROA not after:            Tue 10 Mar 2026 08:30:01 +0000
asID:                     269811
IP address blocks:        2803:3b60:8000::/35 maxlen: 35
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/99CC17FBDD8747189C0E4FC193FA08E0070B6CF0E1A0218CAC618A2D0200C4EF/0/1CEB8FE2FDB05493C8860AC2CEBC2F63CF00CDAA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/99CC17FBDD8747189C0E4FC193FA08E0070B6CF0E1A0218CAC618A2D0200C4EF/0/1CEB8FE2FDB05493C8860AC2CEBC2F63CF00CDAA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1CEB8FE2FDB05493C8860AC2CEBC2F63CF00CDAA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Apr 2025 11:56:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:76:4e:66:5e:ce:60:c5:4c:51:d1:59:44:e2:20:d4:d5:a3:9b:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1CEB8FE2FDB05493C8860AC2CEBC2F63CF00CDAA
        Validity
            Not Before: Mar 11 08:25:01 2025 GMT
            Not After : Mar 10 08:30:01 2026 GMT
        Subject: CN=8B5C84BEA212D65D87C0050E2CEF844879692FB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:7a:9c:da:96:5f:21:bf:f6:40:c9:6d:57:d8:
                    ba:79:d4:e3:57:3e:13:d8:54:4e:45:e1:9b:fc:40:
                    59:b9:0f:54:85:ce:6f:58:8e:f7:e5:5e:70:0e:9d:
                    03:8f:9f:9c:87:05:e9:c5:43:0c:0a:e5:1d:2b:0a:
                    fb:0b:81:ed:5c:15:2f:f0:fc:7d:04:11:36:ed:c7:
                    e4:13:8c:19:8c:ed:86:b5:ed:b0:3d:df:4d:cb:82:
                    61:b1:80:8c:2a:62:fb:c6:10:2a:26:29:15:be:da:
                    4e:7a:9d:f2:87:31:16:a5:2d:27:75:92:fa:b6:03:
                    da:d1:e1:0a:d1:d4:fc:19:18:87:ed:44:3e:6f:f7:
                    34:01:6c:a6:78:a4:9d:de:b2:d9:6d:b9:0d:56:09:
                    1d:94:8e:2f:13:37:50:6d:be:bd:42:3d:67:fd:df:
                    d6:60:d5:8a:e0:0c:44:ef:2f:18:aa:ca:e0:07:17:
                    d7:48:e4:8a:a0:7d:8d:bf:b7:7f:c2:11:5a:f1:63:
                    6e:66:77:fa:43:0a:6b:24:fb:ca:66:4a:f2:ea:81:
                    66:30:ee:f2:fc:41:d6:42:99:27:25:5f:9f:87:57:
                    96:9d:09:be:bd:20:c1:75:5f:a6:70:f2:ad:c7:ab:
                    55:4d:b8:85:4a:a3:5d:12:c9:cd:a8:2c:fb:16:a9:
                    39:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:5C:84:BE:A2:12:D6:5D:87:C0:05:0E:2C:EF:84:48:79:69:2F:B3
            X509v3 Authority Key Identifier:
                keyid:1C:EB:8F:E2:FD:B0:54:93:C8:86:0A:C2:CE:BC:2F:63:CF:00:CD:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/99CC17FBDD8747189C0E4FC193FA08E0070B6CF0E1A0218CAC618A2D0200C4EF/0/1CEB8FE2FDB05493C8860AC2CEBC2F63CF00CDAA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1CEB8FE2FDB05493C8860AC2CEBC2F63CF00CDAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/99CC17FBDD8747189C0E4FC193FA08E0070B6CF0E1A0218CAC618A2D0200C4EF/0/323830333a336236303a383030303a3a2f33352d3335203d3e20323639383131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3b60:8000::/35

    Signature Algorithm: sha256WithRSAEncryption
         9a:02:eb:48:38:cb:70:ab:41:b2:8c:17:fe:20:aa:f3:7b:6c:
         21:45:2b:00:23:15:a3:a3:76:b9:d4:1a:d8:5b:2b:95:be:91:
         2b:b8:40:1d:4f:57:75:84:8c:03:c5:58:0e:cb:b9:b0:74:09:
         9d:e9:0e:d2:93:b3:d0:67:fd:47:0f:ed:1b:36:a6:7d:88:e5:
         c4:f9:6d:5a:ef:70:d6:66:19:4f:a5:e8:63:c8:d5:ec:0d:89:
         fa:2b:04:7c:54:74:c9:f9:91:a7:04:29:7e:4b:cd:23:fd:bd:
         03:dd:94:fc:4e:e5:8a:24:e5:0a:5f:0c:73:96:4c:c2:63:17:
         51:8d:22:b1:25:99:8c:18:6a:90:9a:df:6d:7e:ca:33:04:7b:
         df:2a:d1:fb:05:3a:ef:30:c1:71:60:6a:91:28:bf:5c:3b:58:
         e2:38:a0:cf:66:4d:c1:be:4f:84:43:74:a6:74:ed:36:4f:30:
         2d:7e:6e:3b:23:fb:a2:d8:ab:b7:22:fc:f3:a8:1e:77:a8:ff:
         80:89:ca:4e:18:cb:09:11:a9:80:f2:a0:7b:31:8f:e8:c5:c1:
         2f:f5:9f:1b:c2:c6:74:c0:c2:e7:50:ca:be:5a:c1:36:26:f8:
         e9:e0:3a:03:87:19:79:40:81:3f:72:3b:b1:a7:27:ab:2d:14:
         7c:6a:86:f6
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Apr 17 23:10:42 2025 by rpki-client