Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9DA8C6A0A5D36D7F1AFFB191D4907002FFAA0AABF3C1E484B47ED02D28D7D10D/0/323830333a343834303a3a2f33322d3332203d3e20323633373537.roa
File:                     323830333a343834303a3a2f33322d3332203d3e20323633373537.roa (raw, json)
Hash identifier:          MOjCC2hRjbbgDQMqn4w92OsGdORNweUYh2Yy0qfhIMw=
Subject key identifier:   F8:84:32:05:57:20:99:34:2D:CA:84:85:17:24:08:83:D8:50:B8:1C
Certificate issuer:       /CN=78E57A653F4F50DBE32E97A0E2737B358F4219C2
Certificate serial:       098422C613A07A31BF82B87BE862DCCD421D95F1
Authority key identifier: 78:E5:7A:65:3F:4F:50:DB:E3:2E:97:A0:E2:73:7B:35:8F:42:19:C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/78E57A653F4F50DBE32E97A0E2737B358F4219C2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9DA8C6A0A5D36D7F1AFFB191D4907002FFAA0AABF3C1E484B47ED02D28D7D10D/0/323830333a343834303a3a2f33322d3332203d3e20323633373537.roa
Signing time:             Tue 04 Feb 2025 18:28:48 +0000
ROA not before:           Tue 04 Feb 2025 18:23:48 +0000
ROA not after:            Tue 03 Feb 2026 18:28:48 +0000
asID:                     263757
IP address blocks:        2803:4840::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9DA8C6A0A5D36D7F1AFFB191D4907002FFAA0AABF3C1E484B47ED02D28D7D10D/0/78E57A653F4F50DBE32E97A0E2737B358F4219C2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9DA8C6A0A5D36D7F1AFFB191D4907002FFAA0AABF3C1E484B47ED02D28D7D10D/0/78E57A653F4F50DBE32E97A0E2737B358F4219C2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/78E57A653F4F50DBE32E97A0E2737B358F4219C2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 20:51:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:84:22:c6:13:a0:7a:31:bf:82:b8:7b:e8:62:dc:cd:42:1d:95:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78E57A653F4F50DBE32E97A0E2737B358F4219C2
        Validity
            Not Before: Feb  4 18:23:48 2025 GMT
            Not After : Feb  3 18:28:48 2026 GMT
        Subject: CN=F8843205572099342DCA848517240883D850B81C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:00:88:d1:34:c7:e4:99:5d:cc:0c:28:f0:66:
                    7f:34:b0:b6:16:98:d3:ef:4f:66:33:a5:07:d9:7f:
                    f7:f8:9a:bb:eb:dc:73:c4:ab:5b:2a:b8:d8:46:44:
                    47:7c:7f:9f:00:d1:b3:04:00:95:50:10:75:e0:ef:
                    63:61:29:5f:67:6a:ab:22:3e:5a:6f:b0:92:16:c5:
                    c2:03:84:9b:af:a1:98:2c:a5:69:3b:20:d1:3a:8d:
                    e1:6d:6d:28:4a:01:e1:37:7d:0e:07:48:92:2f:95:
                    51:90:f6:be:b5:78:23:77:23:a4:d9:5f:ca:04:86:
                    9d:14:28:58:96:27:e2:65:88:74:34:c5:b4:03:b2:
                    ba:47:3f:1e:cb:14:72:43:a2:4a:cf:15:da:23:b1:
                    fc:24:c7:f3:92:ac:27:fe:3d:c2:b6:3f:b1:96:ae:
                    70:95:66:71:d8:fa:a2:94:46:fd:4e:d9:b2:6d:e7:
                    58:d9:4e:c8:4c:d8:b7:74:e5:4b:af:ff:7f:f2:e9:
                    87:25:c4:21:4f:ec:31:24:a6:48:b6:0a:b2:99:be:
                    9e:90:57:9f:e8:78:04:9f:a7:7e:21:88:ae:df:b8:
                    fd:d2:2b:84:bf:dc:3e:5c:b9:34:9a:07:cc:da:32:
                    76:8a:30:15:76:4f:09:dc:1e:06:79:9d:f7:da:3c:
                    8b:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:84:32:05:57:20:99:34:2D:CA:84:85:17:24:08:83:D8:50:B8:1C
            X509v3 Authority Key Identifier:
                keyid:78:E5:7A:65:3F:4F:50:DB:E3:2E:97:A0:E2:73:7B:35:8F:42:19:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9DA8C6A0A5D36D7F1AFFB191D4907002FFAA0AABF3C1E484B47ED02D28D7D10D/0/78E57A653F4F50DBE32E97A0E2737B358F4219C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/78E57A653F4F50DBE32E97A0E2737B358F4219C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9DA8C6A0A5D36D7F1AFFB191D4907002FFAA0AABF3C1E484B47ED02D28D7D10D/0/323830333a343834303a3a2f33322d3332203d3e20323633373537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4840::/32

    Signature Algorithm: sha256WithRSAEncryption
         0d:a5:bf:b0:ad:24:83:94:2f:19:56:ad:61:12:11:4a:d0:87:
         d2:d2:28:49:ef:f7:0a:c3:b7:b2:c1:6e:19:d9:4c:29:bf:7d:
         a5:c0:d3:6e:9f:dd:27:63:7f:ec:69:53:f6:66:97:94:f0:43:
         67:4c:74:53:79:c7:9d:83:34:7c:11:1a:c2:42:66:eb:10:aa:
         33:cc:bc:13:d7:38:ca:6a:8a:cf:4c:79:86:16:f4:93:c7:9f:
         dc:44:65:e6:92:a7:b9:6e:fd:98:81:31:29:50:b4:55:e8:64:
         de:c3:74:7f:d6:b4:da:b8:0f:91:3a:16:1d:b2:3a:b7:39:60:
         7b:8f:ac:b9:06:69:f4:18:1f:71:2d:bc:be:78:77:fd:39:59:
         38:1a:34:ab:87:81:37:ac:76:fa:e8:66:7f:03:09:66:65:bb:
         9a:55:ca:2c:dd:9e:2a:57:da:a4:10:e0:4a:5a:86:fc:61:8d:
         b8:d9:0a:fa:6d:b2:02:a2:83:55:71:1e:ed:28:5a:52:ba:eb:
         f1:d7:37:32:7d:92:0f:59:d7:d8:4e:0d:8a:3e:c2:2d:ee:2f:
         d1:89:c8:d7:59:f7:96:bb:13:8f:6b:f3:cb:94:22:5c:79:9a:
         ca:1f:09:33:e8:5b:7c:a2:b2:d3:50:a3:ae:a5:a7:7f:5e:b4:
         bd:0d:e6:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:31:20 2025 by rpki-client