Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B2CD1FB588CF2A3078667525D1AD957561CA57DCC94AA784C24CA84F089B85C3/0/323830333a333130303a3a2f33322d3332203d3e203136393733.roa
File:                     323830333a333130303a3a2f33322d3332203d3e203136393733.roa (raw, json)
Hash identifier:          5ms/ZBVgMvdVbHupifHN7HMoboUBLR7uUgz2gdIQ42A=
Subject key identifier:   DE:8F:31:F1:3A:E1:47:3B:95:A2:61:C6:3A:26:43:23:72:43:8D:F0
Certificate issuer:       /CN=71B0CD08B5DCFED6F97BF866CB6497AE603655B3
Certificate serial:       6369284633CECA673A5D6BDB72FD9B1FBEF074AA
Authority key identifier: 71:B0:CD:08:B5:DC:FE:D6:F9:7B:F8:66:CB:64:97:AE:60:36:55:B3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/71B0CD08B5DCFED6F97BF866CB6497AE603655B3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B2CD1FB588CF2A3078667525D1AD957561CA57DCC94AA784C24CA84F089B85C3/0/323830333a333130303a3a2f33322d3332203d3e203136393733.roa
Signing time:             Tue 04 Feb 2025 20:05:18 +0000
ROA not before:           Tue 04 Feb 2025 20:00:18 +0000
ROA not after:            Tue 03 Feb 2026 20:05:18 +0000
asID:                     16973
IP address blocks:        2803:3100::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B2CD1FB588CF2A3078667525D1AD957561CA57DCC94AA784C24CA84F089B85C3/0/71B0CD08B5DCFED6F97BF866CB6497AE603655B3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B2CD1FB588CF2A3078667525D1AD957561CA57DCC94AA784C24CA84F089B85C3/0/71B0CD08B5DCFED6F97BF866CB6497AE603655B3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/71B0CD08B5DCFED6F97BF866CB6497AE603655B3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 09:08:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:69:28:46:33:ce:ca:67:3a:5d:6b:db:72:fd:9b:1f:be:f0:74:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71B0CD08B5DCFED6F97BF866CB6497AE603655B3
        Validity
            Not Before: Feb  4 20:00:18 2025 GMT
            Not After : Feb  3 20:05:18 2026 GMT
        Subject: CN=DE8F31F13AE1473B95A261C63A26432372438DF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:e6:2b:0d:dd:e8:dd:b9:9d:21:22:5f:0e:06:
                    fb:56:03:cf:ee:ff:08:f2:91:31:6e:52:38:8a:ce:
                    ec:ce:56:08:0a:1f:ea:c0:5c:f5:7d:49:3b:ab:b9:
                    26:8e:a7:b9:4f:1a:c5:e4:2f:3e:bc:01:9f:f7:e5:
                    61:68:88:ff:18:a4:32:3b:3c:c5:b2:07:d2:96:c5:
                    ff:a5:5b:0f:2e:5e:65:aa:32:23:2f:a8:96:8c:06:
                    04:90:e6:b6:18:85:c7:38:4a:15:8d:c1:d7:b1:79:
                    0c:48:c2:65:2f:6e:2d:5a:82:0e:37:fa:8c:28:5b:
                    fe:e3:a3:25:72:90:f9:be:ab:10:6d:32:1a:48:34:
                    6d:ab:0e:61:c8:38:9f:82:3d:01:85:ba:33:e4:7c:
                    d4:17:80:79:10:01:9f:f2:28:9a:ca:1c:3e:d8:35:
                    90:12:cc:65:a3:98:21:03:e0:f3:63:c2:89:c5:b4:
                    eb:c4:1d:55:6d:65:06:b9:54:ca:f6:21:6e:84:8c:
                    a0:83:b7:33:d1:68:b0:e3:69:b8:c5:9b:c7:85:7e:
                    a4:20:31:85:ae:3f:43:d5:1e:f3:3c:0f:ae:c2:69:
                    57:89:16:c4:65:28:a1:99:a5:98:ff:d0:c0:37:b5:
                    11:4f:7e:09:73:58:95:9d:68:b7:3d:25:f4:e2:71:
                    32:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:8F:31:F1:3A:E1:47:3B:95:A2:61:C6:3A:26:43:23:72:43:8D:F0
            X509v3 Authority Key Identifier:
                keyid:71:B0:CD:08:B5:DC:FE:D6:F9:7B:F8:66:CB:64:97:AE:60:36:55:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B2CD1FB588CF2A3078667525D1AD957561CA57DCC94AA784C24CA84F089B85C3/0/71B0CD08B5DCFED6F97BF866CB6497AE603655B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/71B0CD08B5DCFED6F97BF866CB6497AE603655B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B2CD1FB588CF2A3078667525D1AD957561CA57DCC94AA784C24CA84F089B85C3/0/323830333a333130303a3a2f33322d3332203d3e203136393733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3100::/32

    Signature Algorithm: sha256WithRSAEncryption
         98:bb:54:50:5e:42:9f:6e:b9:a2:5f:a4:00:25:62:5f:e3:38:
         75:3e:9d:34:0b:e7:df:7e:25:b2:cf:75:e2:c7:f3:1d:a9:a3:
         dd:f4:56:7f:0d:13:54:89:5c:ee:9d:32:7a:f3:be:f8:8d:8c:
         2e:5c:97:25:8f:ca:34:b0:29:66:af:8d:de:03:6b:a3:ce:4a:
         dc:6a:d3:f6:95:ca:25:d7:02:aa:60:8d:7c:ca:81:99:a7:1c:
         9c:d5:15:3b:0a:72:0b:e7:95:95:13:58:82:76:d1:66:c7:a9:
         8f:3b:fb:b1:4d:05:f5:84:e2:81:c3:51:61:30:22:05:ac:82:
         b1:55:e5:3f:76:ad:aa:e3:92:2d:98:d9:56:22:95:2f:fb:63:
         d1:78:33:45:bc:9e:56:33:40:d8:65:fd:d7:3d:63:73:b5:e8:
         32:d5:94:68:6e:6c:38:fa:d6:f3:84:5c:cb:88:6a:d9:27:21:
         4f:05:b1:f0:33:4c:85:ee:be:76:2e:61:c7:4c:09:e2:1b:e2:
         1a:ef:e4:7f:31:3a:9a:7f:40:05:ea:7a:45:e3:54:1f:c9:aa:
         97:76:cc:d9:88:6a:d3:4d:70:0f:c8:c2:29:9e:63:63:3e:b3:
         46:d2:78:2b:6e:ae:13:bf:0a:0b:e8:e4:e4:82:0d:7c:a1:5e:
         53:9f:89:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 08:51:30 2025 by rpki-client