Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/323830333a663038303a323234303a3a2f34332d3634203d3e203634313230.roa
File:                     323830333a663038303a323234303a3a2f34332d3634203d3e203634313230.roa (raw, json)
Hash identifier:          JgtIThv3bT7yOfIi2v81CAYQ5qK/Kchwup8QE5TyL5I=
Subject key identifier:   A1:C8:16:91:3D:B4:A4:BE:60:E6:A2:33:8B:B8:32:F3:2A:4C:7D:58
Certificate issuer:       /CN=D6017AACFB785EAB7EA56D24337CDCD724EAC2AD
Certificate serial:       165B1661754C8A8C5190EAE37843CC9910B7BA09
Authority key identifier: D6:01:7A:AC:FB:78:5E:AB:7E:A5:6D:24:33:7C:DC:D7:24:EA:C2:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/323830333a663038303a323234303a3a2f34332d3634203d3e203634313230.roa
Signing time:             Thu 20 Feb 2025 13:50:01 +0000
ROA not before:           Thu 20 Feb 2025 13:45:01 +0000
ROA not after:            Thu 19 Feb 2026 13:50:01 +0000
asID:                     64120
IP address blocks:        2803:f080:2240::/43 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:5b:16:61:75:4c:8a:8c:51:90:ea:e3:78:43:cc:99:10:b7:ba:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6017AACFB785EAB7EA56D24337CDCD724EAC2AD
        Validity
            Not Before: Feb 20 13:45:01 2025 GMT
            Not After : Feb 19 13:50:01 2026 GMT
        Subject: CN=A1C816913DB4A4BE60E6A2338BB832F32A4C7D58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:19:04:b6:9d:ce:00:78:67:c7:84:32:e7:a5:
                    94:3c:3d:cd:e4:9a:f3:4b:5d:31:48:8f:7f:d1:84:
                    78:af:f6:3e:97:02:8a:6c:3b:56:6d:3f:91:bd:bd:
                    c0:b4:73:8e:71:18:2a:c8:08:ff:e6:c1:ca:62:d0:
                    03:19:f6:eb:b2:fb:ee:b3:0b:87:b5:f2:68:97:80:
                    9a:0a:97:dd:3f:8f:26:b0:6b:7b:d8:1c:67:58:0c:
                    c8:7a:03:70:bf:e5:92:5f:cb:7d:de:60:07:08:4b:
                    a2:3c:8d:a7:bc:10:d6:b1:18:ed:02:10:82:75:66:
                    53:e1:a6:70:ed:04:e4:83:10:28:75:51:0a:20:2f:
                    3f:49:e7:08:83:c2:ef:9b:8c:61:6d:4f:17:2c:c7:
                    6f:c2:fd:82:65:8e:2e:f1:a9:37:33:83:20:6b:f3:
                    09:96:e9:1c:2f:f4:f9:a7:fa:55:ae:8e:0c:c5:df:
                    b2:90:7a:89:7e:8f:25:ea:fb:4b:1c:b2:6a:ee:dc:
                    b4:b8:5e:66:80:45:77:cf:ec:d6:a6:cb:87:2b:b1:
                    2e:37:4a:1a:47:1e:6b:8c:fd:7b:f6:41:59:fd:fb:
                    5e:2c:11:07:3d:41:64:aa:d6:e7:8a:62:d0:84:35:
                    2c:82:e1:c0:e5:bd:6a:5c:2e:4f:a5:75:46:ed:cc:
                    cc:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:C8:16:91:3D:B4:A4:BE:60:E6:A2:33:8B:B8:32:F3:2A:4C:7D:58
            X509v3 Authority Key Identifier:
                keyid:D6:01:7A:AC:FB:78:5E:AB:7E:A5:6D:24:33:7C:DC:D7:24:EA:C2:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/323830333a663038303a323234303a3a2f34332d3634203d3e203634313230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f080:2240::/43

    Signature Algorithm: sha256WithRSAEncryption
         2c:17:a3:f0:e8:a2:c5:95:3d:1b:8f:ff:6b:06:15:04:bb:2b:
         ea:41:48:e5:09:9b:2b:76:db:d4:ff:00:5b:1c:bc:46:ab:70:
         84:50:11:b9:5a:3f:a4:2c:6a:43:01:74:55:d6:96:a2:bc:75:
         82:42:18:e1:8d:66:d7:05:25:fc:4d:ac:1e:85:eb:ee:e0:a1:
         cd:dd:03:30:68:70:4b:89:da:22:dc:1e:5f:f5:b6:a5:1d:6d:
         69:b2:ab:e4:16:7f:95:42:2f:76:a2:52:87:f1:1f:2c:48:85:
         81:e0:8b:ea:5c:5f:54:53:08:fd:57:91:e0:db:cb:a9:dc:3a:
         4b:2f:59:8e:c4:6e:7a:91:c2:f6:35:96:5c:45:58:7c:48:2d:
         95:53:69:3e:a1:80:52:24:fc:7a:9d:e3:0d:7a:f6:d5:69:09:
         03:36:48:57:11:ed:48:74:9c:4a:3a:a3:09:ac:ee:8a:e4:76:
         ed:86:90:a1:19:e4:14:7e:85:55:6e:f3:68:7d:e1:51:af:50:
         d7:a9:99:8f:8c:e3:4a:29:e6:95:3c:42:b0:2f:74:58:7a:7c:
         27:5f:71:2a:2d:5d:2b:63:fe:b0:f1:38:36:fc:dd:ef:5a:c2:
         97:e2:e7:06:98:af:99:7a:7a:4b:fe:37:a7:e5:45:a5:a3:87:
         50:9f:bb:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:40:06 2025 by rpki-client