Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9EBBE1579ABCBF2E8AC49DC7AD3D4D932EFFEF6A1824B416F289A8AF88097301/0/323830333a376563303a633030303a3a2f33362d3336203d3e20323635363731.roa
File:                     323830333a376563303a633030303a3a2f33362d3336203d3e20323635363731.roa (raw, json)
Hash identifier:          12GrdyZBrtOlXi/5iR5/m/XkgcL/77+w5Se/PEHrc0k=
Subject key identifier:   7F:63:69:00:C2:68:C9:1E:D9:58:CD:5C:17:50:9A:1E:0D:3D:9E:F1
Certificate issuer:       /CN=4CA91FFA6AE8A06F96A7F21B170F2E116200F977
Certificate serial:       448DF0FF41E5B5E42ED77F725B864616910F82A8
Authority key identifier: 4C:A9:1F:FA:6A:E8:A0:6F:96:A7:F2:1B:17:0F:2E:11:62:00:F9:77
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CA91FFA6AE8A06F96A7F21B170F2E116200F977.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9EBBE1579ABCBF2E8AC49DC7AD3D4D932EFFEF6A1824B416F289A8AF88097301/0/323830333a376563303a633030303a3a2f33362d3336203d3e20323635363731.roa
Signing time:             Tue 04 Feb 2025 20:01:30 +0000
ROA not before:           Tue 04 Feb 2025 19:56:30 +0000
ROA not after:            Tue 03 Feb 2026 20:01:30 +0000
asID:                     265671
IP address blocks:        2803:7ec0:c000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9EBBE1579ABCBF2E8AC49DC7AD3D4D932EFFEF6A1824B416F289A8AF88097301/0/4CA91FFA6AE8A06F96A7F21B170F2E116200F977.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9EBBE1579ABCBF2E8AC49DC7AD3D4D932EFFEF6A1824B416F289A8AF88097301/0/4CA91FFA6AE8A06F96A7F21B170F2E116200F977.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CA91FFA6AE8A06F96A7F21B170F2E116200F977.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 20 Feb 2025 17:49:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:8d:f0:ff:41:e5:b5:e4:2e:d7:7f:72:5b:86:46:16:91:0f:82:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4CA91FFA6AE8A06F96A7F21B170F2E116200F977
        Validity
            Not Before: Feb  4 19:56:30 2025 GMT
            Not After : Feb  3 20:01:30 2026 GMT
        Subject: CN=7F636900C268C91ED958CD5C17509A1E0D3D9EF1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:79:fc:43:11:cf:7e:3d:03:64:87:f4:0b:ab:
                    d0:57:0e:0a:14:7d:68:c4:53:07:db:fa:55:c0:c8:
                    14:d9:31:79:1d:bf:eb:d6:b7:16:60:4f:aa:dc:5b:
                    bc:e9:6c:63:c0:3e:31:04:fb:41:4f:e5:8c:b9:2d:
                    bb:b5:3d:ea:85:37:33:74:3d:6f:eb:50:1e:48:76:
                    30:54:d4:7c:c9:c6:04:2f:8e:e6:42:04:06:62:f7:
                    82:f0:f3:10:00:38:6c:b5:6f:d5:46:9a:ef:6a:95:
                    b9:15:54:02:55:9a:24:5b:87:6f:3a:52:b2:48:0f:
                    9e:bb:75:8d:fe:3d:5d:af:ef:89:95:a3:14:eb:c1:
                    a0:71:17:4a:de:6e:3f:ff:cb:75:f1:1e:30:33:4c:
                    22:74:c9:c1:70:21:33:40:4b:79:d3:6e:cc:53:ed:
                    13:1b:a9:de:2a:13:2a:71:e9:1d:8e:9e:05:ee:ea:
                    0d:c5:9b:69:10:5b:f1:55:f2:28:be:05:d7:9d:c5:
                    47:c5:4c:c3:54:6f:c1:47:bf:f9:d7:96:ef:9b:33:
                    01:4b:1d:2f:05:24:c2:c8:e3:dc:24:b3:f3:e0:ab:
                    78:53:55:4a:44:a2:ac:aa:49:32:6e:b0:59:cf:ee:
                    64:33:d1:f4:a4:0e:bd:ad:af:c8:fc:9e:f9:d6:49:
                    b3:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:63:69:00:C2:68:C9:1E:D9:58:CD:5C:17:50:9A:1E:0D:3D:9E:F1
            X509v3 Authority Key Identifier:
                keyid:4C:A9:1F:FA:6A:E8:A0:6F:96:A7:F2:1B:17:0F:2E:11:62:00:F9:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9EBBE1579ABCBF2E8AC49DC7AD3D4D932EFFEF6A1824B416F289A8AF88097301/0/4CA91FFA6AE8A06F96A7F21B170F2E116200F977.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CA91FFA6AE8A06F96A7F21B170F2E116200F977.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9EBBE1579ABCBF2E8AC49DC7AD3D4D932EFFEF6A1824B416F289A8AF88097301/0/323830333a376563303a633030303a3a2f33362d3336203d3e20323635363731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7ec0:c000::/36

    Signature Algorithm: sha256WithRSAEncryption
         53:63:a8:a6:03:ee:1c:e8:2b:ac:27:7e:7a:f5:47:83:c2:46:
         2b:f9:1f:64:ca:cf:33:56:5e:48:23:12:f0:dc:56:68:af:37:
         30:16:63:ff:fc:b2:e1:7f:7d:0a:41:18:75:31:5f:2b:64:0f:
         b0:2a:4c:8b:74:80:d5:5b:73:18:07:07:3a:3c:27:17:07:1a:
         6d:68:9f:4c:8c:bf:a4:a6:b4:51:b6:fc:ea:e4:92:af:9e:e6:
         08:3a:c9:c9:2f:e0:0a:17:a1:72:18:e1:34:8b:4e:4f:86:fe:
         17:e9:46:0c:4b:84:7c:17:72:fe:d5:75:34:f9:89:b9:8b:b1:
         7a:21:c0:44:5b:e3:a0:f7:26:43:14:49:59:c4:72:c0:2c:8a:
         98:c1:26:cd:af:dc:7e:47:6f:ac:f9:07:60:08:e2:bd:fd:e1:
         b5:76:a5:a2:e2:f4:f6:88:ae:d2:07:e2:5b:d3:e9:7f:ef:4b:
         fb:67:c1:db:15:a9:9c:93:d9:2f:a2:0b:fa:31:25:d5:f7:29:
         6f:31:e7:16:b4:49:53:b4:cb:87:f2:34:35:5a:1d:9d:c6:b3:
         59:55:7c:4a:be:c8:5c:40:68:a8:3e:45:7e:0c:3e:7f:1a:b9:
         c7:75:78:48:7f:c9:52:67:1f:eb:da:0b:ec:73:16:d7:d3:07:
         64:f4:d7:3c
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:35:25 2025 by rpki-client