Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AF5299F15C072EB338CD27866457F79835E18A2FD63C47002C1EE31F358F737B/0/323830333a346361303a3a2f33322d3438203d3e20323634363638.roa
File:                     323830333a346361303a3a2f33322d3438203d3e20323634363638.roa (raw, json)
Hash identifier:          uHraboF5X56UrEX4lkfFilz4owz8/dy/T90/2q1KrgQ=
Subject key identifier:   72:E2:71:1E:B4:38:92:63:C0:CB:6D:86:95:E7:DD:2B:CC:72:70:18
Certificate issuer:       /CN=B6200CE22A13E0365B263C1B068DE612DB3FA0CC
Certificate serial:       55F08423BA179B99769446660E9489C8C63B51CC
Authority key identifier: B6:20:0C:E2:2A:13:E0:36:5B:26:3C:1B:06:8D:E6:12:DB:3F:A0:CC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6200CE22A13E0365B263C1B068DE612DB3FA0CC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AF5299F15C072EB338CD27866457F79835E18A2FD63C47002C1EE31F358F737B/0/323830333a346361303a3a2f33322d3438203d3e20323634363638.roa
Signing time:             Tue 04 Feb 2025 18:05:58 +0000
ROA not before:           Tue 04 Feb 2025 18:00:58 +0000
ROA not after:            Tue 03 Feb 2026 18:05:58 +0000
asID:                     264668
IP address blocks:        2803:4ca0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AF5299F15C072EB338CD27866457F79835E18A2FD63C47002C1EE31F358F737B/0/B6200CE22A13E0365B263C1B068DE612DB3FA0CC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AF5299F15C072EB338CD27866457F79835E18A2FD63C47002C1EE31F358F737B/0/B6200CE22A13E0365B263C1B068DE612DB3FA0CC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6200CE22A13E0365B263C1B068DE612DB3FA0CC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 20:51:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:f0:84:23:ba:17:9b:99:76:94:46:66:0e:94:89:c8:c6:3b:51:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6200CE22A13E0365B263C1B068DE612DB3FA0CC
        Validity
            Not Before: Feb  4 18:00:58 2025 GMT
            Not After : Feb  3 18:05:58 2026 GMT
        Subject: CN=72E2711EB4389263C0CB6D8695E7DD2BCC727018
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:c1:40:d9:fd:3f:c0:c9:5a:c7:4d:50:dd:fe:
                    91:b7:8e:e1:b4:f8:f1:e7:85:91:ac:bc:14:bd:aa:
                    c9:bb:ae:9a:5e:6d:1c:f5:f7:dc:b5:29:62:7e:2f:
                    c3:de:f9:85:42:09:82:7b:91:0d:00:eb:c4:07:51:
                    4b:d5:7a:cd:09:8a:78:a3:f8:d4:65:81:c7:02:cd:
                    23:41:46:e7:ac:07:12:2b:da:8a:3a:83:a3:55:76:
                    06:71:68:f0:9e:9b:f1:80:b3:b2:78:7f:c0:c5:ed:
                    d7:b5:bb:22:a7:6f:99:36:9b:f4:a4:cc:a4:76:a8:
                    e1:32:ae:32:79:6d:d2:8a:a6:bd:21:cd:90:55:cb:
                    af:50:44:4b:91:a5:4e:db:fd:41:65:ad:30:46:2a:
                    78:13:13:cc:8f:0b:3d:27:8a:fb:ea:a2:38:12:b6:
                    b5:1e:ef:7d:fa:8d:fd:1d:ff:43:b5:ac:d9:20:ed:
                    bf:cc:0b:45:9c:42:ba:32:38:d7:4e:a0:f4:1f:24:
                    55:f3:eb:b3:a4:58:2d:90:14:57:ba:51:71:1f:e8:
                    e1:b1:ea:3b:07:8a:af:49:1a:f7:49:36:04:28:7a:
                    b8:68:18:8d:4d:b9:d3:f9:10:d1:eb:4a:3a:c3:2c:
                    d2:03:87:d4:d2:c1:68:e8:1f:a0:ed:e4:55:06:d7:
                    17:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:E2:71:1E:B4:38:92:63:C0:CB:6D:86:95:E7:DD:2B:CC:72:70:18
            X509v3 Authority Key Identifier:
                keyid:B6:20:0C:E2:2A:13:E0:36:5B:26:3C:1B:06:8D:E6:12:DB:3F:A0:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AF5299F15C072EB338CD27866457F79835E18A2FD63C47002C1EE31F358F737B/0/B6200CE22A13E0365B263C1B068DE612DB3FA0CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6200CE22A13E0365B263C1B068DE612DB3FA0CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AF5299F15C072EB338CD27866457F79835E18A2FD63C47002C1EE31F358F737B/0/323830333a346361303a3a2f33322d3438203d3e20323634363638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4ca0::/32

    Signature Algorithm: sha256WithRSAEncryption
         73:73:3b:4d:a2:04:de:ac:fb:e3:2d:d8:6a:0a:0e:a9:27:a2:
         b1:a5:3f:f9:20:c3:ce:7b:91:49:c1:2f:a6:13:78:1e:be:de:
         9f:dc:6c:c0:08:e6:e8:4f:34:5f:6f:18:c5:e7:cb:18:1a:62:
         9a:2b:04:59:30:57:76:66:35:19:7a:ef:d0:8d:c8:e1:c7:56:
         16:14:11:38:f9:d7:c3:12:12:ae:e0:0d:ae:6d:4b:4f:41:8a:
         3a:60:fc:1e:e0:a9:0c:7a:13:e0:ac:c1:cf:84:f5:1c:bc:2e:
         04:3d:df:4b:e9:57:0c:f9:5f:5c:3a:ec:af:14:d5:01:9b:7f:
         6b:be:3e:90:46:8c:34:75:2b:d1:c1:89:23:20:58:62:2d:e9:
         3c:a9:54:68:dd:4d:a1:76:f8:e9:4c:5c:78:39:92:42:4e:9c:
         c1:ee:de:8b:1d:51:3f:19:00:93:66:05:52:ab:bd:54:12:b0:
         67:29:74:d7:bb:a5:74:81:f8:87:2b:c8:69:56:64:36:6c:ea:
         d9:56:07:bd:6f:4f:d2:b6:e3:a9:60:94:09:1b:bd:a8:c2:c0:
         e7:fc:73:49:ac:60:a5:ec:b0:16:8d:e5:67:fb:a9:dd:51:fc:
         a0:88:d4:e2:9e:36:58:8e:68:d2:35:33:33:3a:77:f9:34:6b:
         4c:25:a5:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:55:14 2025 by rpki-client