Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9B6F64B5E3928B29CDB375003108665F7EA3D191148C7ACA28310E45C96B0A21/0/323830333a356665303a3a2f33322d3438203d3e20323731373835.roa
File:                     323830333a356665303a3a2f33322d3438203d3e20323731373835.roa (raw, json)
Hash identifier:          7FlHdQ8SB4+8R2dU/+S2doIPYPdDG55EVBY2lMNM4/o=
Subject key identifier:   79:94:D9:F5:DA:64:E1:16:D0:D4:5C:A6:5F:BC:B7:7C:68:30:1D:19
Certificate issuer:       /CN=64989D03F141E6B4840F299AD2E229F9A3F6DD77
Certificate serial:       49EC3DC3B08606C0CB981C0BD2B78CA65B80A409
Authority key identifier: 64:98:9D:03:F1:41:E6:B4:84:0F:29:9A:D2:E2:29:F9:A3:F6:DD:77
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/64989D03F141E6B4840F299AD2E229F9A3F6DD77.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9B6F64B5E3928B29CDB375003108665F7EA3D191148C7ACA28310E45C96B0A21/0/323830333a356665303a3a2f33322d3438203d3e20323731373835.roa
Signing time:             Tue 04 Feb 2025 18:15:03 +0000
ROA not before:           Tue 04 Feb 2025 18:10:03 +0000
ROA not after:            Tue 03 Feb 2026 18:15:03 +0000
asID:                     271785
IP address blocks:        2803:5fe0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9B6F64B5E3928B29CDB375003108665F7EA3D191148C7ACA28310E45C96B0A21/0/64989D03F141E6B4840F299AD2E229F9A3F6DD77.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9B6F64B5E3928B29CDB375003108665F7EA3D191148C7ACA28310E45C96B0A21/0/64989D03F141E6B4840F299AD2E229F9A3F6DD77.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/64989D03F141E6B4840F299AD2E229F9A3F6DD77.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:ec:3d:c3:b0:86:06:c0:cb:98:1c:0b:d2:b7:8c:a6:5b:80:a4:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64989D03F141E6B4840F299AD2E229F9A3F6DD77
        Validity
            Not Before: Feb  4 18:10:03 2025 GMT
            Not After : Feb  3 18:15:03 2026 GMT
        Subject: CN=7994D9F5DA64E116D0D45CA65FBCB77C68301D19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:f4:6b:b0:0e:0c:f7:30:29:3f:59:ca:df:99:
                    00:c0:dc:19:ca:4f:b5:79:00:02:74:aa:7d:9f:3c:
                    d2:55:7c:98:05:2e:87:e7:24:e9:83:88:47:8e:5f:
                    34:24:a3:a0:10:5f:93:ca:d2:65:af:57:03:42:d5:
                    55:b9:a8:ef:f1:80:c5:3a:4c:ee:2f:aa:a7:75:86:
                    0c:5b:94:a9:1d:7e:46:80:86:75:c1:97:d5:c1:f1:
                    be:22:3b:8a:71:dc:aa:62:e1:38:93:54:2d:28:53:
                    40:84:18:33:75:96:bc:51:ae:e8:7b:8a:4b:e0:f3:
                    c7:93:0f:89:7a:ce:65:aa:9b:61:92:83:4d:fd:83:
                    c0:3a:53:62:76:54:c4:5f:bb:31:be:ca:0d:82:2f:
                    e5:53:32:7f:73:53:5c:25:2c:66:24:2d:75:b4:2b:
                    a2:60:fb:77:89:fc:e0:ed:00:fe:36:5c:a4:f6:6a:
                    f5:0c:26:72:50:e3:e4:52:39:57:0e:2f:1b:66:ad:
                    bb:af:25:5d:39:3c:b7:88:d7:ff:a4:53:3b:40:d2:
                    ca:8a:e4:e3:1c:ed:49:fe:e0:77:03:04:7a:cc:69:
                    54:57:83:ad:9d:3b:2a:67:d6:a0:65:ef:78:48:a8:
                    59:5c:33:ab:db:c3:9f:c7:ba:e0:80:76:31:54:dd:
                    a0:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:94:D9:F5:DA:64:E1:16:D0:D4:5C:A6:5F:BC:B7:7C:68:30:1D:19
            X509v3 Authority Key Identifier:
                keyid:64:98:9D:03:F1:41:E6:B4:84:0F:29:9A:D2:E2:29:F9:A3:F6:DD:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9B6F64B5E3928B29CDB375003108665F7EA3D191148C7ACA28310E45C96B0A21/0/64989D03F141E6B4840F299AD2E229F9A3F6DD77.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/64989D03F141E6B4840F299AD2E229F9A3F6DD77.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9B6F64B5E3928B29CDB375003108665F7EA3D191148C7ACA28310E45C96B0A21/0/323830333a356665303a3a2f33322d3438203d3e20323731373835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5fe0::/32

    Signature Algorithm: sha256WithRSAEncryption
         92:6e:56:4a:79:6a:70:4b:ef:46:fd:58:ad:ae:1d:6e:72:d2:
         c1:37:a7:3a:1c:c2:e6:07:9d:40:53:69:f9:05:99:13:6b:e4:
         66:ca:84:a9:8d:96:32:50:bf:73:8e:2a:b8:02:77:54:8a:b3:
         a3:1f:eb:95:58:f8:c1:f3:35:87:b4:13:fe:ba:f8:4a:dd:0e:
         90:de:6b:d3:45:15:db:45:de:cc:49:ff:05:1e:64:2e:d4:64:
         ae:97:99:be:b5:ef:59:87:47:cc:25:79:86:04:f0:16:4b:fc:
         73:b1:55:90:d6:b7:7b:29:69:a6:e4:40:62:de:a0:9b:8f:25:
         74:0e:09:96:f4:4d:90:52:7d:f3:64:ec:e9:55:00:68:18:a4:
         f8:11:9e:c4:fe:6f:0c:72:dc:22:98:f8:45:58:90:d5:c0:ec:
         8c:0c:d9:27:2b:ca:a6:74:15:01:26:8f:59:ce:f8:44:46:4c:
         55:90:69:52:24:f3:37:7d:25:6c:27:21:a1:8f:2d:75:63:4f:
         3c:bc:fd:d9:29:f6:6c:90:01:43:b5:f6:72:6c:59:d7:a4:d4:
         b3:c6:89:5c:8e:7d:5f:ad:c4:98:ca:53:2f:c0:0d:12:ef:a8:
         82:fa:d6:3c:b4:ec:4f:6f:f7:a1:78:8c:c8:07:55:53:f2:ec:
         af:7d:89:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:06:11 2025 by rpki-client