Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/99CC17FBDD8747189C0E4FC193FA08E0070B6CF0E1A0218CAC618A2D0200C4EF/0/323830333a336236303a3a2f33322d3332203d3e20323639383131.roa
File:                     323830333a336236303a3a2f33322d3332203d3e20323639383131.roa (raw, json)
Hash identifier:          KVb8G+VRLWF8VAq+u8ZU+W0UyoCwmWF3pXn6TX+gbIY=
Subject key identifier:   79:77:DA:1A:85:72:25:C5:1D:AF:AC:1A:9E:75:0D:5F:CA:75:6A:49
Certificate issuer:       /CN=1CEB8FE2FDB05493C8860AC2CEBC2F63CF00CDAA
Certificate serial:       2214CC5C7899EE4ED5770D616E26C8457248F5D8
Authority key identifier: 1C:EB:8F:E2:FD:B0:54:93:C8:86:0A:C2:CE:BC:2F:63:CF:00:CD:AA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1CEB8FE2FDB05493C8860AC2CEBC2F63CF00CDAA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/99CC17FBDD8747189C0E4FC193FA08E0070B6CF0E1A0218CAC618A2D0200C4EF/0/323830333a336236303a3a2f33322d3332203d3e20323639383131.roa
Signing time:             Tue 04 Feb 2025 18:36:06 +0000
ROA not before:           Tue 04 Feb 2025 18:31:06 +0000
ROA not after:            Tue 03 Feb 2026 18:36:06 +0000
asID:                     269811
IP address blocks:        2803:3b60::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/99CC17FBDD8747189C0E4FC193FA08E0070B6CF0E1A0218CAC618A2D0200C4EF/0/1CEB8FE2FDB05493C8860AC2CEBC2F63CF00CDAA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/99CC17FBDD8747189C0E4FC193FA08E0070B6CF0E1A0218CAC618A2D0200C4EF/0/1CEB8FE2FDB05493C8860AC2CEBC2F63CF00CDAA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1CEB8FE2FDB05493C8860AC2CEBC2F63CF00CDAA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Apr 2025 21:29:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:14:cc:5c:78:99:ee:4e:d5:77:0d:61:6e:26:c8:45:72:48:f5:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1CEB8FE2FDB05493C8860AC2CEBC2F63CF00CDAA
        Validity
            Not Before: Feb  4 18:31:06 2025 GMT
            Not After : Feb  3 18:36:06 2026 GMT
        Subject: CN=7977DA1A857225C51DAFAC1A9E750D5FCA756A49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:2a:26:f7:60:d7:15:4b:86:6f:8e:ba:46:67:
                    0c:9c:c2:74:30:c2:7b:1e:67:32:b1:e7:fc:a8:e3:
                    e7:a4:e5:52:dc:25:73:37:14:c3:37:4b:d3:f1:62:
                    7d:0f:ff:71:92:b0:14:dc:e5:6d:f3:2b:55:06:3e:
                    2e:43:ff:8d:8f:6c:0f:56:2e:5b:49:75:8d:b8:f5:
                    34:6c:d4:4a:fe:02:10:24:da:8a:e6:7c:04:49:42:
                    45:26:2e:10:4f:0b:d8:34:1e:25:39:2a:3f:e4:72:
                    ad:d1:30:50:4f:c9:47:28:1d:16:aa:2e:21:01:3e:
                    e7:7e:ed:cb:5f:76:68:3c:ec:45:5b:78:c5:7d:54:
                    09:39:41:38:19:75:97:14:fd:18:63:80:16:41:7a:
                    28:18:9d:70:32:05:88:40:69:1e:89:9f:36:80:05:
                    bd:fd:c8:17:cf:f5:07:86:e1:c8:93:2e:9c:e8:05:
                    54:a6:93:f4:01:06:07:d9:32:9b:4f:f1:83:b9:21:
                    41:65:0a:5c:33:fe:b1:6e:d8:c5:fc:4e:76:58:af:
                    85:fe:2b:6e:38:e9:0d:03:05:bd:e5:fb:f4:bd:cd:
                    75:bd:fa:93:7a:77:81:bc:d6:48:e3:97:f5:27:07:
                    bc:fc:27:3a:9c:b2:74:f3:18:74:a2:b3:47:28:3d:
                    61:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:77:DA:1A:85:72:25:C5:1D:AF:AC:1A:9E:75:0D:5F:CA:75:6A:49
            X509v3 Authority Key Identifier:
                keyid:1C:EB:8F:E2:FD:B0:54:93:C8:86:0A:C2:CE:BC:2F:63:CF:00:CD:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/99CC17FBDD8747189C0E4FC193FA08E0070B6CF0E1A0218CAC618A2D0200C4EF/0/1CEB8FE2FDB05493C8860AC2CEBC2F63CF00CDAA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1CEB8FE2FDB05493C8860AC2CEBC2F63CF00CDAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/99CC17FBDD8747189C0E4FC193FA08E0070B6CF0E1A0218CAC618A2D0200C4EF/0/323830333a336236303a3a2f33322d3332203d3e20323639383131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3b60::/32

    Signature Algorithm: sha256WithRSAEncryption
         79:dd:ab:4b:86:bb:9d:05:39:04:e2:b7:e1:50:5f:c2:6b:62:
         ac:60:4e:48:55:75:a5:5a:49:c5:ef:b8:0a:1d:18:14:69:d9:
         9d:11:a8:2e:92:4e:c1:62:8e:0b:8c:0c:96:75:e1:dd:89:3b:
         de:20:6b:3a:03:5b:46:a8:b0:23:48:70:1b:d9:e1:b8:8f:74:
         06:45:18:76:f4:5e:ee:13:50:19:60:b7:bd:9d:c5:ba:48:69:
         66:b0:32:1b:05:44:2f:44:fc:59:9b:64:41:24:25:d7:36:ba:
         b8:9d:a7:2e:3f:54:db:ef:b6:03:ef:08:2f:c0:a1:93:2e:bc:
         05:72:01:df:d4:c1:73:18:f4:fb:4e:01:88:46:12:d2:1e:57:
         b6:68:37:f7:b0:29:07:b3:04:98:ab:19:85:cd:75:62:b1:9f:
         2b:e4:1e:71:aa:85:4e:38:59:99:a4:26:cc:82:37:0c:93:77:
         b1:be:3a:1f:28:72:4b:db:77:78:f1:c1:06:a2:ec:19:2d:6d:
         aa:ff:26:04:46:d5:5f:ec:61:aa:19:dd:68:61:9e:2a:99:8e:
         dd:d6:b1:b3:b9:5a:73:4a:64:16:37:01:4f:db:d2:81:e5:46:
         60:90:f5:52:72:40:ff:cd:84:b7:ed:d1:70:ea:b0:df:e4:1d:
         fa:85:ae:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 19:37:25 2025 by rpki-client