Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AA9B4EA14C2F7117C72F1F0CEFFA6B5D03AB35E213305D4D00264FF9723854F6/0/323830333a6431303a3a2f33322d3332203d3e20323732303335.roa
File:                     323830333a6431303a3a2f33322d3332203d3e20323732303335.roa (raw, json)
Hash identifier:          WY6VRrpxv8aG5czo6X+zAGJp7ft5IIjhhxZIhKK6p2k=
Subject key identifier:   CA:77:53:9F:AF:2B:1E:80:C1:80:36:F7:72:19:3C:67:48:3A:AD:53
Certificate issuer:       /CN=F941F05838322F3861C4923BEDA92F310248FAF9
Certificate serial:       0A6C057AE7DD678C385B8BCA81E0ADD635203E80
Authority key identifier: F9:41:F0:58:38:32:2F:38:61:C4:92:3B:ED:A9:2F:31:02:48:FA:F9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F941F05838322F3861C4923BEDA92F310248FAF9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AA9B4EA14C2F7117C72F1F0CEFFA6B5D03AB35E213305D4D00264FF9723854F6/0/323830333a6431303a3a2f33322d3332203d3e20323732303335.roa
Signing time:             Tue 04 Feb 2025 18:40:11 +0000
ROA not before:           Tue 04 Feb 2025 18:35:11 +0000
ROA not after:            Tue 03 Feb 2026 18:40:11 +0000
asID:                     272035
IP address blocks:        2803:d10::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AA9B4EA14C2F7117C72F1F0CEFFA6B5D03AB35E213305D4D00264FF9723854F6/0/F941F05838322F3861C4923BEDA92F310248FAF9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AA9B4EA14C2F7117C72F1F0CEFFA6B5D03AB35E213305D4D00264FF9723854F6/0/F941F05838322F3861C4923BEDA92F310248FAF9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F941F05838322F3861C4923BEDA92F310248FAF9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:6c:05:7a:e7:dd:67:8c:38:5b:8b:ca:81:e0:ad:d6:35:20:3e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F941F05838322F3861C4923BEDA92F310248FAF9
        Validity
            Not Before: Feb  4 18:35:11 2025 GMT
            Not After : Feb  3 18:40:11 2026 GMT
        Subject: CN=CA77539FAF2B1E80C18036F772193C67483AAD53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ee:14:15:3c:8b:69:f3:28:87:69:1c:78:a1:
                    fa:4f:ee:79:ff:db:c0:45:12:e1:2a:7e:de:1c:45:
                    80:94:37:1e:b5:10:3f:e2:47:dd:20:fd:04:a6:12:
                    fd:11:7f:cf:c1:d2:36:5a:34:a2:df:7d:17:16:b9:
                    a1:6a:4e:a1:76:d0:ba:22:26:57:ee:d8:34:6b:c7:
                    96:7e:a5:8f:d6:1e:1b:2a:5a:26:fe:48:a7:33:e0:
                    54:a8:a2:f5:f8:38:4f:5c:a1:1b:96:00:e0:a6:19:
                    7c:23:1f:c7:8c:37:79:bc:ce:39:65:20:06:66:99:
                    43:71:bc:bb:66:0a:ad:45:d6:6d:30:e8:a6:73:aa:
                    43:99:3d:ad:0f:92:db:00:28:8f:f5:ee:03:9e:67:
                    c4:19:54:ad:85:b6:12:9e:22:61:60:4e:07:39:a0:
                    81:0d:ac:8f:3f:1f:92:a1:1e:bd:c8:35:24:68:7d:
                    9c:07:3a:af:93:b9:f3:bd:d7:be:bc:98:77:a7:d2:
                    4d:08:fe:26:d8:f1:9a:93:47:bb:ae:c0:d5:58:18:
                    6f:14:b9:8f:ea:25:d1:1d:17:f6:ea:b6:8a:b6:a2:
                    0a:62:4d:3d:6b:62:ee:9a:15:72:37:34:42:ac:46:
                    18:9a:f2:0a:c6:a1:79:85:20:cd:de:ef:fa:d5:b2:
                    d1:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:77:53:9F:AF:2B:1E:80:C1:80:36:F7:72:19:3C:67:48:3A:AD:53
            X509v3 Authority Key Identifier:
                keyid:F9:41:F0:58:38:32:2F:38:61:C4:92:3B:ED:A9:2F:31:02:48:FA:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AA9B4EA14C2F7117C72F1F0CEFFA6B5D03AB35E213305D4D00264FF9723854F6/0/F941F05838322F3861C4923BEDA92F310248FAF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F941F05838322F3861C4923BEDA92F310248FAF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AA9B4EA14C2F7117C72F1F0CEFFA6B5D03AB35E213305D4D00264FF9723854F6/0/323830333a6431303a3a2f33322d3332203d3e20323732303335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d10::/32

    Signature Algorithm: sha256WithRSAEncryption
         39:9d:91:9b:37:c8:9a:d4:d1:c7:49:f2:26:79:ef:e0:c1:d9:
         a9:7c:92:94:4c:dd:ae:5c:69:73:06:42:cf:f2:61:ec:d0:11:
         a0:ab:ed:65:9f:60:23:62:d8:29:9b:fa:54:5e:7d:20:7d:0b:
         1e:97:6c:74:db:8b:5f:d1:ad:9b:1b:1c:74:fb:2a:30:a5:b1:
         38:56:d7:12:77:0d:43:d8:91:8a:bf:22:db:31:80:f4:71:e4:
         fe:e8:c5:8b:c0:87:a3:1f:a0:74:77:cb:ee:89:4d:c1:c7:ad:
         d2:1e:24:5f:b8:63:fe:ce:0e:0a:b2:5e:c8:ee:29:49:8d:4f:
         93:4a:54:2a:39:72:5e:3e:da:d6:ca:e0:15:30:d2:13:3c:ba:
         f6:18:ee:2c:9f:23:89:b8:42:a8:b1:c8:37:63:57:0d:1e:0e:
         18:f0:b7:95:35:df:60:72:58:37:59:cd:8a:3c:0b:48:5c:32:
         e5:39:97:e6:c2:bd:b5:d5:83:fd:d5:bf:f9:d0:69:dc:69:ef:
         8e:f5:48:ae:96:aa:d6:46:e3:0a:6e:b2:51:28:2e:af:e3:29:
         ab:74:da:68:d1:b7:f9:b2:f9:e1:01:f4:3f:4e:2c:11:f8:8a:
         82:b6:85:78:fd:ef:f6:33:2e:04:62:a5:23:d2:e0:47:f6:3c:
         13:e9:d4:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 23:06:49 2025 by rpki-client