Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B08645AA0B60218E88EA23A5386DE2D8372CB6C3CC3C618013A67E2B57446E89/0/323830333a343730303a3a2f33312d3337203d3e203238303733.roa
File:                     323830333a343730303a3a2f33312d3337203d3e203238303733.roa (raw, json)
Hash identifier:          wapsU/kMcMVwFJGkqhV1u78MoAzYgfx4AUS09syDgLo=
Subject key identifier:   99:4D:81:2B:4C:7F:52:71:52:56:EE:A9:3D:E6:DC:2E:22:C6:F2:C8
Certificate issuer:       /CN=70B8616E6A6AA7F58E4097B08FA8C0B797D5EEC0
Certificate serial:       204F0E4D2DDBD0081716290D418A203BA6E922A7
Authority key identifier: 70:B8:61:6E:6A:6A:A7:F5:8E:40:97:B0:8F:A8:C0:B7:97:D5:EE:C0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/70B8616E6A6AA7F58E4097B08FA8C0B797D5EEC0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B08645AA0B60218E88EA23A5386DE2D8372CB6C3CC3C618013A67E2B57446E89/0/323830333a343730303a3a2f33312d3337203d3e203238303733.roa
Signing time:             Tue 04 Feb 2025 18:51:16 +0000
ROA not before:           Tue 04 Feb 2025 18:46:16 +0000
ROA not after:            Tue 03 Feb 2026 18:51:16 +0000
asID:                     28073
IP address blocks:        2803:4700::/31 maxlen: 37
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B08645AA0B60218E88EA23A5386DE2D8372CB6C3CC3C618013A67E2B57446E89/0/70B8616E6A6AA7F58E4097B08FA8C0B797D5EEC0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B08645AA0B60218E88EA23A5386DE2D8372CB6C3CC3C618013A67E2B57446E89/0/70B8616E6A6AA7F58E4097B08FA8C0B797D5EEC0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/70B8616E6A6AA7F58E4097B08FA8C0B797D5EEC0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:4f:0e:4d:2d:db:d0:08:17:16:29:0d:41:8a:20:3b:a6:e9:22:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70B8616E6A6AA7F58E4097B08FA8C0B797D5EEC0
        Validity
            Not Before: Feb  4 18:46:16 2025 GMT
            Not After : Feb  3 18:51:16 2026 GMT
        Subject: CN=994D812B4C7F52715256EEA93DE6DC2E22C6F2C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:48:49:85:a7:95:2d:29:18:9c:f5:70:42:07:
                    55:33:9c:10:f5:53:18:50:98:97:76:35:8d:66:00:
                    86:f5:df:34:83:e3:c2:63:ef:18:67:bf:fd:61:3e:
                    d2:ae:ee:8c:82:76:f1:5d:7e:14:f5:a3:e5:ec:02:
                    04:69:10:44:99:eb:5d:21:b1:a9:f6:2f:45:74:84:
                    73:3d:f3:45:c2:f0:90:b8:44:d4:82:79:02:fd:78:
                    9e:e3:ce:0c:ab:50:9b:01:94:cb:16:58:6e:c2:7c:
                    92:71:f0:10:58:73:1c:29:bc:f2:5a:87:81:30:0f:
                    1f:3f:c5:36:f2:3d:c0:5d:5e:0d:a2:5b:28:f6:e9:
                    17:ca:f5:1f:ae:e7:13:ba:60:77:9b:70:f6:46:d5:
                    8a:2a:b4:51:0c:58:33:fb:50:4c:d6:64:4d:ac:96:
                    38:d9:f6:20:2b:12:df:85:a2:f9:9c:53:46:5d:02:
                    5a:1b:47:0e:fb:0b:70:13:0e:b4:b1:86:25:09:97:
                    6f:76:0d:4c:29:07:20:2c:de:89:f6:42:9d:d2:5d:
                    f8:71:33:2e:98:ce:89:38:3d:82:70:a1:70:c9:75:
                    12:aa:c0:9c:b4:37:e4:88:c8:76:d1:e6:ff:81:a4:
                    dc:f8:45:31:00:37:48:c3:b4:a3:31:c2:66:b3:c7:
                    c0:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:4D:81:2B:4C:7F:52:71:52:56:EE:A9:3D:E6:DC:2E:22:C6:F2:C8
            X509v3 Authority Key Identifier:
                keyid:70:B8:61:6E:6A:6A:A7:F5:8E:40:97:B0:8F:A8:C0:B7:97:D5:EE:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B08645AA0B60218E88EA23A5386DE2D8372CB6C3CC3C618013A67E2B57446E89/0/70B8616E6A6AA7F58E4097B08FA8C0B797D5EEC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/70B8616E6A6AA7F58E4097B08FA8C0B797D5EEC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B08645AA0B60218E88EA23A5386DE2D8372CB6C3CC3C618013A67E2B57446E89/0/323830333a343730303a3a2f33312d3337203d3e203238303733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4700::/31

    Signature Algorithm: sha256WithRSAEncryption
         b7:66:49:d6:be:d3:40:6d:ea:3c:74:f1:a9:a9:18:06:c3:88:
         db:68:33:21:01:9f:dd:58:9b:a8:a4:5a:75:90:a9:8b:5a:f3:
         ab:ea:f2:22:d1:c1:f9:62:71:ef:b8:63:f9:e2:41:84:9c:e9:
         78:28:75:af:bb:81:bc:75:7c:20:28:bd:4d:f2:7c:eb:13:2b:
         b2:ae:92:7d:37:cb:c0:4e:7b:86:c5:9f:8c:b3:6e:e4:e9:b5:
         f1:f2:6d:8b:24:ce:af:7b:44:85:2f:e7:ce:13:33:12:fc:c5:
         8c:54:8f:50:cf:03:97:70:9b:02:f0:c6:ad:17:44:2c:f9:94:
         89:de:46:e5:ea:3c:7a:cd:95:5f:f9:e1:66:2f:07:f8:f2:63:
         ce:46:6f:27:93:72:75:41:18:d9:ec:66:db:fb:ea:1d:3e:29:
         92:21:bd:20:85:7b:16:27:d7:c6:89:2d:cc:c2:24:e3:e4:96:
         9c:e8:52:1f:12:df:5c:91:2e:07:30:1a:8d:f8:aa:6a:67:59:
         02:9d:60:58:3e:5c:43:8d:1a:c5:55:e9:0a:d7:00:65:83:0b:
         0e:67:aa:c8:b0:e8:ee:c0:97:39:be:a6:cc:f6:eb:2f:bc:79:
         35:e9:6a:48:2e:5f:12:8e:3f:07:17:d8:72:83:14:3e:50:95:
         57:b1:fc:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:36:39 2025 by rpki-client