Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AF5299F15C072EB338CD27866457F79835E18A2FD63C47002C1EE31F358F737B/0/323830333a346361303a3a2f33322d3438203d3e20323636383334.roa
File:                     323830333a346361303a3a2f33322d3438203d3e20323636383334.roa (raw, json)
Hash identifier:          bGjLb4yy4tIASbx4Iarq6JZRr31CmZrb5uCbZ03r7Gc=
Subject key identifier:   B8:97:0B:0C:B0:05:6C:2D:BA:9D:2D:6B:3C:F3:55:E3:24:2F:81:9F
Certificate issuer:       /CN=B6200CE22A13E0365B263C1B068DE612DB3FA0CC
Certificate serial:       24423DBCA53C9AF39DA07D04927905DA96D73713
Authority key identifier: B6:20:0C:E2:2A:13:E0:36:5B:26:3C:1B:06:8D:E6:12:DB:3F:A0:CC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6200CE22A13E0365B263C1B068DE612DB3FA0CC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AF5299F15C072EB338CD27866457F79835E18A2FD63C47002C1EE31F358F737B/0/323830333a346361303a3a2f33322d3438203d3e20323636383334.roa
Signing time:             Tue 04 Feb 2025 18:05:57 +0000
ROA not before:           Tue 04 Feb 2025 18:00:57 +0000
ROA not after:            Tue 03 Feb 2026 18:05:57 +0000
asID:                     266834
IP address blocks:        2803:4ca0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AF5299F15C072EB338CD27866457F79835E18A2FD63C47002C1EE31F358F737B/0/B6200CE22A13E0365B263C1B068DE612DB3FA0CC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AF5299F15C072EB338CD27866457F79835E18A2FD63C47002C1EE31F358F737B/0/B6200CE22A13E0365B263C1B068DE612DB3FA0CC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6200CE22A13E0365B263C1B068DE612DB3FA0CC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 00:16:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:42:3d:bc:a5:3c:9a:f3:9d:a0:7d:04:92:79:05:da:96:d7:37:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6200CE22A13E0365B263C1B068DE612DB3FA0CC
        Validity
            Not Before: Feb  4 18:00:57 2025 GMT
            Not After : Feb  3 18:05:57 2026 GMT
        Subject: CN=B8970B0CB0056C2DBA9D2D6B3CF355E3242F819F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:28:b4:06:bf:15:92:4f:7c:0e:5f:f0:e2:c5:
                    19:cf:31:b8:df:bf:c3:5a:03:d6:b8:9c:22:ba:56:
                    ff:b7:37:b0:52:ad:7a:0c:59:2d:eb:32:ec:b6:5b:
                    dc:ee:22:e7:37:71:cc:9e:2e:45:a7:bf:fa:85:d1:
                    fa:5f:b4:53:a7:b3:04:b2:76:61:24:92:a4:24:c2:
                    04:eb:aa:37:c6:80:fc:a9:25:bd:6e:b0:b9:24:87:
                    e6:14:d5:9d:36:f5:a7:f4:08:49:05:2f:90:71:d4:
                    bb:36:d9:17:74:b0:8c:8c:39:44:c1:5c:36:70:00:
                    21:1c:de:35:cd:3f:82:44:93:62:20:bc:5a:ee:46:
                    5a:d3:d1:ea:3c:06:e6:71:76:e4:2a:df:ca:19:a0:
                    fc:5f:0d:91:ee:f0:17:a3:4b:1a:8d:50:35:17:b6:
                    1a:5d:8b:59:40:9f:a6:3c:b2:c8:c1:17:e5:3f:db:
                    0a:61:29:20:64:53:8b:75:99:4b:6a:42:f8:28:c9:
                    a4:40:f3:a1:fe:06:6b:12:1c:4a:a1:19:f3:73:81:
                    25:7d:d9:1c:4d:b5:f4:b4:3f:d1:79:b9:b7:f3:cf:
                    3c:77:2d:e1:11:fa:29:f4:1a:60:df:44:42:f2:f7:
                    0a:32:6f:ab:3f:8e:1d:99:ed:70:ec:08:07:49:3c:
                    f5:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:97:0B:0C:B0:05:6C:2D:BA:9D:2D:6B:3C:F3:55:E3:24:2F:81:9F
            X509v3 Authority Key Identifier:
                keyid:B6:20:0C:E2:2A:13:E0:36:5B:26:3C:1B:06:8D:E6:12:DB:3F:A0:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AF5299F15C072EB338CD27866457F79835E18A2FD63C47002C1EE31F358F737B/0/B6200CE22A13E0365B263C1B068DE612DB3FA0CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6200CE22A13E0365B263C1B068DE612DB3FA0CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AF5299F15C072EB338CD27866457F79835E18A2FD63C47002C1EE31F358F737B/0/323830333a346361303a3a2f33322d3438203d3e20323636383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4ca0::/32

    Signature Algorithm: sha256WithRSAEncryption
         8d:d8:08:86:78:0a:4b:f2:19:d5:bb:18:ed:d9:94:fb:1e:05:
         c3:b7:b6:70:9f:60:86:ec:89:6a:31:79:b4:28:c9:8d:4f:01:
         79:77:55:72:be:49:a3:22:22:3e:09:c3:61:34:c7:56:70:47:
         38:4c:01:75:04:3c:00:21:22:b5:ee:ed:08:51:ec:f8:7c:e4:
         b1:29:e4:9e:98:e9:1b:3b:cc:8f:5d:9a:6b:45:db:29:3a:45:
         64:7a:66:af:f7:69:d7:64:3a:94:aa:16:a2:d8:3c:5a:b4:86:
         50:b2:92:c9:75:3f:72:75:e9:ce:fb:53:3f:bf:4e:ac:aa:ad:
         49:e9:aa:a8:c3:c8:51:47:ab:22:23:36:ba:98:2f:53:3e:3b:
         91:cb:8d:cf:94:e6:91:f0:66:94:cd:9b:65:c3:c5:65:05:16:
         83:11:37:84:26:65:91:98:39:66:34:14:09:21:d3:37:7c:49:
         08:28:23:bd:8b:e5:1b:f7:ad:b3:0a:63:a3:b9:2b:76:4c:2a:
         ee:16:e6:c2:ce:76:d8:d9:27:2f:ee:32:38:25:c1:f4:02:a1:
         48:5c:c6:e3:31:82:a7:66:ec:15:1c:4b:1f:c7:af:91:c4:52:
         df:7d:2f:69:e7:a9:3d:af:dd:2e:dc:68:4a:a2:93:1f:35:94:
         e4:4a:8d:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:46:37 2025 by rpki-client