Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/323830333a663038303a653030303a3a2f33352d3433203d3e203634313230.roa
File:                     323830333a663038303a653030303a3a2f33352d3433203d3e203634313230.roa (raw, json)
Hash identifier:          y2jW9IhZgFk3F/Nrr5H8Aq7Kp1VxIXEobT5NbExvVNw=
Subject key identifier:   54:7D:B0:77:2F:21:A9:69:4E:2A:CE:E2:EC:13:C9:8D:F7:BA:78:D7
Certificate issuer:       /CN=D6017AACFB785EAB7EA56D24337CDCD724EAC2AD
Certificate serial:       0C9A54236F08C2106582060FDF760CB326B0854B
Authority key identifier: D6:01:7A:AC:FB:78:5E:AB:7E:A5:6D:24:33:7C:DC:D7:24:EA:C2:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/323830333a663038303a653030303a3a2f33352d3433203d3e203634313230.roa
Signing time:             Tue 04 Feb 2025 18:42:02 +0000
ROA not before:           Tue 04 Feb 2025 18:37:02 +0000
ROA not after:            Tue 03 Feb 2026 18:42:02 +0000
asID:                     64120
IP address blocks:        2803:f080:e000::/35 maxlen: 43
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 04:49:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:9a:54:23:6f:08:c2:10:65:82:06:0f:df:76:0c:b3:26:b0:85:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6017AACFB785EAB7EA56D24337CDCD724EAC2AD
        Validity
            Not Before: Feb  4 18:37:02 2025 GMT
            Not After : Feb  3 18:42:02 2026 GMT
        Subject: CN=547DB0772F21A9694E2ACEE2EC13C98DF7BA78D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:15:53:19:06:7f:41:18:09:62:bd:7a:ba:03:
                    d6:c2:11:79:6d:ac:73:ab:ae:9b:3a:03:16:fe:d3:
                    58:2a:e0:f4:45:08:eb:be:cf:1e:72:f0:61:c1:91:
                    9b:a8:64:97:8c:8d:b9:df:87:15:cf:88:43:59:33:
                    b5:b7:44:ab:42:9e:07:e8:dc:ef:6f:cc:d3:7e:25:
                    9b:08:a3:82:56:0b:aa:95:c3:d2:67:d1:61:77:80:
                    05:a0:b8:d3:51:3b:90:50:55:a9:e2:d6:29:d7:e4:
                    ae:10:82:1d:ed:ee:01:fc:bf:b9:1a:25:a0:99:f8:
                    95:8d:52:77:4b:f9:e0:44:c2:22:26:bb:71:ec:28:
                    68:71:30:e6:13:59:a1:8b:e1:f1:27:70:02:35:a8:
                    56:d4:8e:c9:68:fd:a8:a9:63:5c:45:3e:80:ee:5f:
                    11:e1:ca:a6:01:de:c0:5b:3a:59:58:68:c6:86:a2:
                    0f:6c:74:50:88:35:04:d0:69:58:52:72:cc:79:36:
                    e1:5f:74:9c:fc:ee:60:1f:30:6a:9b:b1:0e:45:0e:
                    6a:44:08:3d:33:51:82:10:2b:27:04:03:e4:b4:83:
                    de:bb:6b:8c:15:71:42:6b:5e:1b:cc:ff:70:2d:e0:
                    0c:bd:84:b6:ee:08:01:48:69:e0:9b:93:12:5c:5e:
                    5d:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:7D:B0:77:2F:21:A9:69:4E:2A:CE:E2:EC:13:C9:8D:F7:BA:78:D7
            X509v3 Authority Key Identifier:
                keyid:D6:01:7A:AC:FB:78:5E:AB:7E:A5:6D:24:33:7C:DC:D7:24:EA:C2:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/323830333a663038303a653030303a3a2f33352d3433203d3e203634313230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f080:e000::/35

    Signature Algorithm: sha256WithRSAEncryption
         52:c0:61:77:0d:b6:25:32:55:6b:b6:20:43:48:a5:b9:c8:d1:
         c4:00:22:a6:ec:10:44:61:f6:8a:0f:ff:b9:bc:0c:77:ad:7b:
         ee:5b:d7:af:08:a3:cb:04:d1:45:10:1d:f6:de:dc:b8:bd:ac:
         81:1f:1d:ea:72:9e:f0:e0:a2:65:8f:3c:c1:61:da:b3:16:eb:
         fa:91:cf:4d:26:a5:c0:26:52:10:52:e3:e6:4b:46:d8:00:e0:
         e8:2b:3e:f7:78:fc:49:80:78:a8:fd:c3:78:c9:75:5a:a6:f3:
         2e:f0:3f:0e:81:30:48:70:85:0a:2d:35:31:b5:01:86:47:4e:
         65:e4:53:c0:c7:62:33:a9:51:20:f7:d9:aa:93:92:64:86:46:
         65:f6:58:f6:5f:e4:f5:df:f4:e6:2e:50:ae:49:a4:95:43:4a:
         25:fc:c9:4f:7f:52:99:f9:34:32:75:81:bf:3a:42:98:91:ca:
         17:5f:91:69:4c:60:97:49:fd:b3:84:45:e7:73:fb:80:d5:6e:
         5c:51:da:77:6d:a5:f7:a1:80:41:37:50:6a:88:ad:e5:0c:75:
         c9:0d:80:72:04:2a:b0:24:7f:c5:d3:29:ab:7a:c3:c0:0f:57:
         a2:90:a9:0e:0d:8a:6f:a1:a8:0d:66:0b:ae:e5:c4:3f:fc:a5:
         11:67:8e:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 18:31:21 2025 by rpki-client