Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AA196223E73F9DD9FAC2B86B2F7AB7AE4AA6AC676F72446DC4A948213DF8FE2A/0/323830333a376138303a3a2f33322d3438203d3e20323633373133.roa
File:                     323830333a376138303a3a2f33322d3438203d3e20323633373133.roa (raw, json)
Hash identifier:          XFuSkwlJX45qbOzJrmGNb3hDLSxMJvvMTQ5f4JzJKIk=
Subject key identifier:   05:AA:E9:70:E4:34:A8:2C:48:F6:52:DD:E7:53:38:73:3A:06:08:31
Certificate issuer:       /CN=1FE14B937DD76E5BFDD9CAAB4BF112CF61E3929D
Certificate serial:       31DC243CF59E38B141EA2AF3D11C64C05BEDE4E4
Authority key identifier: 1F:E1:4B:93:7D:D7:6E:5B:FD:D9:CA:AB:4B:F1:12:CF:61:E3:92:9D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1FE14B937DD76E5BFDD9CAAB4BF112CF61E3929D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AA196223E73F9DD9FAC2B86B2F7AB7AE4AA6AC676F72446DC4A948213DF8FE2A/0/323830333a376138303a3a2f33322d3438203d3e20323633373133.roa
Signing time:             Tue 04 Feb 2025 18:22:02 +0000
ROA not before:           Tue 04 Feb 2025 18:17:02 +0000
ROA not after:            Tue 03 Feb 2026 18:22:02 +0000
asID:                     263713
IP address blocks:        2803:7a80::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AA196223E73F9DD9FAC2B86B2F7AB7AE4AA6AC676F72446DC4A948213DF8FE2A/0/1FE14B937DD76E5BFDD9CAAB4BF112CF61E3929D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AA196223E73F9DD9FAC2B86B2F7AB7AE4AA6AC676F72446DC4A948213DF8FE2A/0/1FE14B937DD76E5BFDD9CAAB4BF112CF61E3929D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1FE14B937DD76E5BFDD9CAAB4BF112CF61E3929D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:dc:24:3c:f5:9e:38:b1:41:ea:2a:f3:d1:1c:64:c0:5b:ed:e4:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1FE14B937DD76E5BFDD9CAAB4BF112CF61E3929D
        Validity
            Not Before: Feb  4 18:17:02 2025 GMT
            Not After : Feb  3 18:22:02 2026 GMT
        Subject: CN=05AAE970E434A82C48F652DDE75338733A060831
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:f8:4b:e0:ac:4f:a5:9d:d8:a5:b3:ec:20:b9:
                    9d:ee:45:cb:4e:b6:56:c2:77:6f:16:b2:23:d8:8b:
                    ac:d6:e6:a5:1f:58:99:c4:fa:46:9e:98:a8:8f:bc:
                    8a:aa:3a:a8:1a:19:d1:df:db:9f:b4:86:ff:b0:d4:
                    ac:24:c6:d5:82:7e:88:a0:c5:64:4c:17:fd:7e:99:
                    90:ee:11:53:23:ea:ed:03:b9:57:97:46:87:14:0b:
                    7f:40:58:09:29:94:e1:a1:f4:35:26:dd:86:d9:08:
                    1d:50:1d:89:db:d1:29:9f:8c:97:90:5b:44:ef:4e:
                    39:f8:5a:82:28:c8:5a:d2:ed:ee:39:89:cd:8f:f3:
                    b0:67:33:90:b4:0c:9a:2d:93:10:aa:bc:ca:3b:9f:
                    22:75:65:31:11:c8:11:8c:10:ec:8e:4f:e5:5a:4a:
                    d5:79:77:df:10:9a:fb:e5:82:b3:16:d9:e7:da:31:
                    58:62:3d:f6:3b:00:ec:6b:cf:df:10:8a:e3:40:e1:
                    ab:0d:d2:0a:a9:0b:d8:ee:cc:5a:8f:9f:48:3d:cd:
                    84:85:37:34:6d:52:94:bc:7a:c8:58:de:ff:39:9f:
                    01:6c:8e:e4:8c:23:19:44:4b:51:a5:78:7c:f8:4a:
                    ec:f5:c9:7c:bb:34:3f:42:44:bf:b4:25:ae:06:e0:
                    7e:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:AA:E9:70:E4:34:A8:2C:48:F6:52:DD:E7:53:38:73:3A:06:08:31
            X509v3 Authority Key Identifier:
                keyid:1F:E1:4B:93:7D:D7:6E:5B:FD:D9:CA:AB:4B:F1:12:CF:61:E3:92:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AA196223E73F9DD9FAC2B86B2F7AB7AE4AA6AC676F72446DC4A948213DF8FE2A/0/1FE14B937DD76E5BFDD9CAAB4BF112CF61E3929D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1FE14B937DD76E5BFDD9CAAB4BF112CF61E3929D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AA196223E73F9DD9FAC2B86B2F7AB7AE4AA6AC676F72446DC4A948213DF8FE2A/0/323830333a376138303a3a2f33322d3438203d3e20323633373133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7a80::/32

    Signature Algorithm: sha256WithRSAEncryption
         63:9f:d9:14:7f:f3:d6:3a:34:ac:c8:c2:c2:6b:9f:71:f5:47:
         c2:9f:b9:6b:8b:49:f0:15:21:f2:24:60:95:46:ab:17:53:9f:
         30:6b:75:c9:8d:0f:04:a9:12:af:c8:f4:e9:bc:7f:c1:fc:cb:
         d6:2e:f7:32:12:36:04:84:fa:f8:24:82:38:14:1f:48:8c:ae:
         82:f3:6c:ba:41:a2:f6:95:f8:29:af:5f:ef:8b:9b:1e:a7:0b:
         69:83:b4:a1:69:1e:f3:c1:55:27:20:03:96:b3:40:24:ca:73:
         c1:22:4e:ea:ea:30:6b:51:11:6d:20:26:ad:15:7e:65:cd:7b:
         b9:fb:ea:d8:3c:76:24:04:31:d9:df:de:4f:a1:3e:1a:7b:c0:
         78:9a:c8:de:63:a6:3c:0b:67:7d:6a:87:df:59:d5:13:3a:d4:
         bb:0a:c8:84:f4:f5:05:6c:fa:15:60:df:12:de:00:a6:97:ba:
         a8:3f:c9:de:aa:31:5a:c6:f2:44:8a:40:c6:6c:6f:f7:3e:b6:
         dc:c5:8b:a6:bc:1f:c0:ee:4a:98:3f:3f:10:d3:bb:b7:1d:62:
         0d:1a:14:04:fb:1b:63:1c:87:2b:fe:54:e3:32:63:00:83:85:
         2c:cc:71:d1:57:ff:b1:74:38:d1:68:04:54:34:ec:54:87:60:
         10:9f:9f:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:02:34 2025 by rpki-client