Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B1D2AB2A8DF744A4DB2A98A252BEC43A4E0EEA9B2274C84438D896155ACF5309/0/323830333a373934303a3a2f33322d3438203d3e20323634363532.roa
File:                     323830333a373934303a3a2f33322d3438203d3e20323634363532.roa (raw, json)
Hash identifier:          OCt5HehDrFQdd3K7UvVfG7vQqJYH8Rso3tFPSMIkQ1s=
Subject key identifier:   93:CD:78:5E:D2:39:05:21:43:8A:8A:27:3B:4A:D6:E3:10:6C:D0:CA
Certificate issuer:       /CN=1599BDA0EA70C244843872B07AD7381026232CA8
Certificate serial:       1730691553EDF6F98D1EBD0124693FD56CD60697
Authority key identifier: 15:99:BD:A0:EA:70:C2:44:84:38:72:B0:7A:D7:38:10:26:23:2C:A8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1599BDA0EA70C244843872B07AD7381026232CA8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B1D2AB2A8DF744A4DB2A98A252BEC43A4E0EEA9B2274C84438D896155ACF5309/0/323830333a373934303a3a2f33322d3438203d3e20323634363532.roa
Signing time:             Tue 04 Feb 2025 18:09:11 +0000
ROA not before:           Tue 04 Feb 2025 18:04:11 +0000
ROA not after:            Tue 03 Feb 2026 18:09:11 +0000
asID:                     264652
IP address blocks:        2803:7940::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B1D2AB2A8DF744A4DB2A98A252BEC43A4E0EEA9B2274C84438D896155ACF5309/0/1599BDA0EA70C244843872B07AD7381026232CA8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B1D2AB2A8DF744A4DB2A98A252BEC43A4E0EEA9B2274C84438D896155ACF5309/0/1599BDA0EA70C244843872B07AD7381026232CA8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1599BDA0EA70C244843872B07AD7381026232CA8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 05:56:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:30:69:15:53:ed:f6:f9:8d:1e:bd:01:24:69:3f:d5:6c:d6:06:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1599BDA0EA70C244843872B07AD7381026232CA8
        Validity
            Not Before: Feb  4 18:04:11 2025 GMT
            Not After : Feb  3 18:09:11 2026 GMT
        Subject: CN=93CD785ED2390521438A8A273B4AD6E3106CD0CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ba:cb:9a:2d:8e:9c:c0:9b:fe:20:06:ef:8e:
                    bf:1e:8b:4d:c7:d6:70:25:8c:f8:75:ab:9b:83:ff:
                    cf:b1:12:59:4b:ea:ee:2e:90:09:48:93:c8:d2:8e:
                    2c:2c:1d:63:df:a7:a7:6c:5c:a0:2a:09:5f:7e:91:
                    09:4c:f2:ab:00:b6:c3:2b:93:ef:4c:a1:81:07:8d:
                    59:fa:77:2c:01:a9:9a:d5:53:74:c5:6e:28:12:72:
                    d9:e5:6b:a7:27:3f:28:cf:93:c9:ca:d2:0a:d3:b3:
                    45:26:eb:b3:cd:dc:e9:9a:88:2b:50:ee:5e:de:71:
                    35:37:01:19:28:94:11:d9:ea:b9:40:e0:84:f6:6d:
                    6c:39:25:6b:f4:25:e3:27:9a:58:3f:71:47:50:fd:
                    65:55:51:68:64:15:ae:e7:f4:6a:86:24:69:4d:18:
                    ba:1c:64:97:da:a8:bd:ea:c2:96:94:85:c2:c0:56:
                    d0:68:8e:c8:ce:5d:65:1f:2b:40:c5:9a:04:d5:39:
                    85:b4:6c:b6:cd:9d:79:e6:47:da:a4:eb:b1:4b:51:
                    0b:0b:c7:80:ae:8c:ab:2d:65:74:76:c1:fc:5e:d4:
                    c3:f1:52:a1:b0:fd:07:2b:23:f3:76:45:00:0a:46:
                    5d:25:87:de:1c:a0:c0:da:20:f3:73:5c:e3:dc:e9:
                    4f:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:CD:78:5E:D2:39:05:21:43:8A:8A:27:3B:4A:D6:E3:10:6C:D0:CA
            X509v3 Authority Key Identifier:
                keyid:15:99:BD:A0:EA:70:C2:44:84:38:72:B0:7A:D7:38:10:26:23:2C:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B1D2AB2A8DF744A4DB2A98A252BEC43A4E0EEA9B2274C84438D896155ACF5309/0/1599BDA0EA70C244843872B07AD7381026232CA8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1599BDA0EA70C244843872B07AD7381026232CA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B1D2AB2A8DF744A4DB2A98A252BEC43A4E0EEA9B2274C84438D896155ACF5309/0/323830333a373934303a3a2f33322d3438203d3e20323634363532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7940::/32

    Signature Algorithm: sha256WithRSAEncryption
         0b:6c:63:c5:ae:dd:8b:e4:24:f8:e2:92:2d:a3:2c:f8:9e:16:
         ab:54:cf:f9:51:7a:8d:d5:c3:3e:31:35:74:54:96:8a:22:89:
         3b:90:00:1f:97:ee:33:ee:7e:74:6f:27:b4:22:7f:d5:26:f2:
         1e:1a:73:66:01:a5:5e:98:8f:ef:ca:5a:26:28:7e:52:27:ec:
         dc:47:fe:36:b7:6f:cf:f6:a6:04:49:ea:b8:22:73:5e:5d:87:
         1c:89:cc:79:3c:24:63:9b:1d:ab:93:1e:15:61:27:18:05:03:
         03:7d:dd:75:0d:82:63:2f:85:00:ae:a1:d0:e6:dd:3d:ee:15:
         05:96:e2:57:5a:4a:2f:34:20:d5:39:4e:78:e1:d9:07:ba:e8:
         42:69:f7:34:76:a5:4b:07:78:8f:56:da:b9:70:54:e8:75:d8:
         1f:0b:ad:75:e9:0d:61:3b:60:8c:50:27:b4:20:0e:04:b2:73:
         ba:68:66:72:b5:a8:dd:74:0b:18:ee:3c:1f:ab:f1:95:d8:82:
         fd:56:83:f1:5f:ac:b8:c6:c9:57:32:f4:a8:db:c3:e2:14:4e:
         e2:b2:f6:e7:b9:ea:14:7d:21:a4:57:7c:34:3e:0b:b5:0e:2b:
         b7:65:84:05:e2:29:1c:be:67:48:3c:40:04:99:2b:2d:ae:23:
         72:8a:59:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:13:54 2025 by rpki-client