Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AEF4C39A558544AE54CC71DBA2AA80B36BFBE2CA5BF4F0DB9823D2AB6B747E63/0/323830333a666434303a3a2f33322d3332203d3e20323635373830.roa
File:                     323830333a666434303a3a2f33322d3332203d3e20323635373830.roa (raw, json)
Hash identifier:          ftUSa+nfeTrjBawq5Ce+sixe6C0KFPYE6yt1Mfisl8s=
Subject key identifier:   C3:DC:EF:72:1D:69:70:DA:E1:20:A2:E0:D0:38:FB:0A:52:3E:29:84
Certificate issuer:       /CN=45E01B7B9B876AE1F0C01505969888DB05F86C32
Certificate serial:       67E3C761EBD8A9EAD5C39C1F8ACA3243B7FD4FF0
Authority key identifier: 45:E0:1B:7B:9B:87:6A:E1:F0:C0:15:05:96:98:88:DB:05:F8:6C:32
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/45E01B7B9B876AE1F0C01505969888DB05F86C32.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AEF4C39A558544AE54CC71DBA2AA80B36BFBE2CA5BF4F0DB9823D2AB6B747E63/0/323830333a666434303a3a2f33322d3332203d3e20323635373830.roa
Signing time:             Tue 04 Feb 2025 19:57:50 +0000
ROA not before:           Tue 04 Feb 2025 19:52:50 +0000
ROA not after:            Tue 03 Feb 2026 19:57:50 +0000
asID:                     265780
IP address blocks:        2803:fd40::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AEF4C39A558544AE54CC71DBA2AA80B36BFBE2CA5BF4F0DB9823D2AB6B747E63/0/45E01B7B9B876AE1F0C01505969888DB05F86C32.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AEF4C39A558544AE54CC71DBA2AA80B36BFBE2CA5BF4F0DB9823D2AB6B747E63/0/45E01B7B9B876AE1F0C01505969888DB05F86C32.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/45E01B7B9B876AE1F0C01505969888DB05F86C32.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 14:37:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:e3:c7:61:eb:d8:a9:ea:d5:c3:9c:1f:8a:ca:32:43:b7:fd:4f:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45E01B7B9B876AE1F0C01505969888DB05F86C32
        Validity
            Not Before: Feb  4 19:52:50 2025 GMT
            Not After : Feb  3 19:57:50 2026 GMT
        Subject: CN=C3DCEF721D6970DAE120A2E0D038FB0A523E2984
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:7e:a6:ea:e9:5b:7a:66:cc:25:e4:40:54:f4:
                    25:f1:a0:a8:7c:6d:09:cf:d7:f4:f1:25:e4:70:89:
                    4d:67:af:24:6e:eb:a9:9a:2f:92:f2:46:c7:a0:ba:
                    f3:13:0b:de:9d:26:90:3f:46:d9:f0:53:79:81:b9:
                    03:28:5f:aa:93:fb:43:9c:d5:af:aa:b3:d2:9e:6e:
                    ca:78:e3:27:e7:8f:11:dd:55:6c:7c:cf:26:5d:76:
                    b4:74:7a:25:34:90:f6:00:ec:b4:bb:88:88:72:68:
                    e9:d4:7b:7d:21:e2:b5:0e:bd:35:24:47:84:16:52:
                    63:dd:33:3c:2c:59:41:ac:55:78:fa:fb:95:86:2b:
                    0c:1f:18:17:31:b9:b0:44:1b:f9:92:8e:d0:61:35:
                    bc:f6:fd:65:85:28:cc:50:1a:73:83:3f:10:c1:07:
                    99:a9:22:be:e7:16:3b:7f:23:26:4c:6a:6c:79:59:
                    ee:02:90:f2:b0:fe:11:e5:2c:2d:d4:de:13:57:5a:
                    35:f6:6b:7d:68:7b:08:db:e4:e3:72:b7:6e:93:19:
                    e3:67:a4:ae:93:81:e4:8d:c8:76:33:5c:5f:0e:03:
                    41:97:39:6a:9a:fb:45:8e:c5:76:63:1d:57:fd:5a:
                    ad:45:8d:56:27:05:3c:ec:1e:08:a9:72:e5:45:44:
                    91:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:DC:EF:72:1D:69:70:DA:E1:20:A2:E0:D0:38:FB:0A:52:3E:29:84
            X509v3 Authority Key Identifier:
                keyid:45:E0:1B:7B:9B:87:6A:E1:F0:C0:15:05:96:98:88:DB:05:F8:6C:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AEF4C39A558544AE54CC71DBA2AA80B36BFBE2CA5BF4F0DB9823D2AB6B747E63/0/45E01B7B9B876AE1F0C01505969888DB05F86C32.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/45E01B7B9B876AE1F0C01505969888DB05F86C32.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AEF4C39A558544AE54CC71DBA2AA80B36BFBE2CA5BF4F0DB9823D2AB6B747E63/0/323830333a666434303a3a2f33322d3332203d3e20323635373830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:fd40::/32

    Signature Algorithm: sha256WithRSAEncryption
         5f:eb:9a:1e:17:29:0d:98:46:41:58:25:44:c4:4c:5a:32:e9:
         00:33:5d:87:8d:c9:69:e5:c0:73:87:e7:b3:42:cf:d5:ed:83:
         9d:21:04:39:fa:6a:ea:2d:88:db:39:58:a0:5c:3d:b4:03:a5:
         a9:89:4b:7a:d3:fe:12:16:d1:9d:79:51:b4:30:38:96:fe:a9:
         cb:07:5a:70:5f:e7:9e:c3:44:65:3a:ca:ec:3b:86:0a:0e:0f:
         b5:60:82:e1:ad:d6:53:1a:13:c4:cf:39:00:05:20:42:af:01:
         f9:7d:77:c8:44:9a:11:09:f4:17:70:a1:27:bd:27:cb:42:fe:
         88:4a:d2:22:7c:b8:59:8d:86:f1:82:a1:ff:55:cb:41:12:d8:
         b2:a8:22:77:9d:71:fb:e6:3d:48:88:4e:b0:79:85:d3:14:f9:
         e3:29:cc:f2:27:83:f4:db:2c:4e:82:0c:8a:b5:68:81:c8:06:
         5a:a7:63:ab:19:8b:db:2d:fe:1d:04:7c:51:d1:ca:b4:24:33:
         b8:63:ae:63:2e:df:e7:c5:ec:14:08:e3:e3:03:a3:4e:13:15:
         fb:79:ab:12:04:d5:84:aa:d4:ab:06:1a:cf:d0:17:a0:23:2e:
         49:be:c4:03:76:b8:19:0c:a1:4d:77:53:e0:1f:57:e1:c2:1d:
         bf:c1:99:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 21:52:31 2025 by rpki-client