Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B65F1297A485164E174276C3E52B531C1A3C52B7D92C5CA05C7F962EAD46B359/0/323830333a643930303a3a2f33322d3332203d3e20323632323532.roa
File:                     323830333a643930303a3a2f33322d3332203d3e20323632323532.roa (raw, json)
Hash identifier:          q4J7CRGfoh8QhUen3JLZyvmEKxCMXuvlAyJ5nvwE1Ek=
Subject key identifier:   29:ED:9B:69:9C:7B:64:A7:8E:1A:56:E1:C3:04:11:B2:54:72:37:5A
Certificate issuer:       /CN=63BA9E74A00603CC3A1DA22BC68F56A433368CCF
Certificate serial:       1DE500838830840DB9CE3079B21CD6BBF004B42D
Authority key identifier: 63:BA:9E:74:A0:06:03:CC:3A:1D:A2:2B:C6:8F:56:A4:33:36:8C:CF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/63BA9E74A00603CC3A1DA22BC68F56A433368CCF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B65F1297A485164E174276C3E52B531C1A3C52B7D92C5CA05C7F962EAD46B359/0/323830333a643930303a3a2f33322d3332203d3e20323632323532.roa
Signing time:             Tue 04 Feb 2025 18:45:34 +0000
ROA not before:           Tue 04 Feb 2025 18:40:34 +0000
ROA not after:            Tue 03 Feb 2026 18:45:34 +0000
asID:                     262252
IP address blocks:        2803:d900::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B65F1297A485164E174276C3E52B531C1A3C52B7D92C5CA05C7F962EAD46B359/0/63BA9E74A00603CC3A1DA22BC68F56A433368CCF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B65F1297A485164E174276C3E52B531C1A3C52B7D92C5CA05C7F962EAD46B359/0/63BA9E74A00603CC3A1DA22BC68F56A433368CCF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/63BA9E74A00603CC3A1DA22BC68F56A433368CCF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:e5:00:83:88:30:84:0d:b9:ce:30:79:b2:1c:d6:bb:f0:04:b4:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63BA9E74A00603CC3A1DA22BC68F56A433368CCF
        Validity
            Not Before: Feb  4 18:40:34 2025 GMT
            Not After : Feb  3 18:45:34 2026 GMT
        Subject: CN=29ED9B699C7B64A78E1A56E1C30411B25472375A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:07:5b:ea:47:13:84:cc:07:90:14:07:0f:ad:
                    34:9c:95:f9:e8:35:8d:9f:71:5f:79:9e:10:fe:a5:
                    3e:d8:8a:b7:64:a0:dc:31:6a:ff:e1:15:02:34:45:
                    c7:58:63:b5:7b:3e:62:57:8d:54:5f:05:a9:3e:d3:
                    ef:ea:91:40:81:ab:0f:14:b6:56:29:5d:9f:95:27:
                    83:ee:3c:29:5b:a8:b5:9d:3c:e2:e1:dd:74:ab:22:
                    80:10:a3:1d:77:10:c5:04:c6:99:c9:ea:ad:90:d9:
                    7b:b0:e0:89:77:47:10:09:84:b2:78:7e:02:9f:df:
                    48:af:ee:ae:1f:d3:7b:72:a2:16:ad:36:f0:41:60:
                    da:06:d8:55:ed:f6:0c:a3:0d:47:d5:05:6f:a0:0d:
                    bb:14:6a:af:12:0a:91:13:84:75:48:73:f8:1d:93:
                    ab:5c:80:bd:d1:b9:93:86:f4:34:10:ce:5f:34:bb:
                    9c:ce:4a:b7:43:a3:51:ca:79:f6:1c:1b:23:5f:ca:
                    97:da:aa:8f:12:a0:29:6e:fc:3c:75:85:ff:30:c0:
                    4d:02:5c:85:89:aa:a9:8f:d7:b1:fe:03:6e:f9:6e:
                    94:68:ef:c7:31:36:b4:e3:78:1c:f1:ad:bd:5f:bc:
                    09:ab:4e:41:98:a5:fa:f4:98:3d:bb:18:97:c1:81:
                    8f:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:ED:9B:69:9C:7B:64:A7:8E:1A:56:E1:C3:04:11:B2:54:72:37:5A
            X509v3 Authority Key Identifier:
                keyid:63:BA:9E:74:A0:06:03:CC:3A:1D:A2:2B:C6:8F:56:A4:33:36:8C:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B65F1297A485164E174276C3E52B531C1A3C52B7D92C5CA05C7F962EAD46B359/0/63BA9E74A00603CC3A1DA22BC68F56A433368CCF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/63BA9E74A00603CC3A1DA22BC68F56A433368CCF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B65F1297A485164E174276C3E52B531C1A3C52B7D92C5CA05C7F962EAD46B359/0/323830333a643930303a3a2f33322d3332203d3e20323632323532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d900::/32

    Signature Algorithm: sha256WithRSAEncryption
         38:74:2e:04:1d:98:a8:d5:eb:5d:02:21:72:dc:58:5d:ff:d4:
         78:10:fa:0a:be:ac:79:3a:3f:17:22:d2:7d:b9:b3:fb:ee:ed:
         90:9b:7d:bc:3d:71:09:6d:4c:0b:33:27:09:b1:c2:ef:e6:79:
         52:ce:fe:13:77:8f:d8:b7:ed:75:76:35:7f:86:ae:c9:77:05:
         a6:5b:61:a5:47:9c:55:29:1e:81:70:ab:62:75:ac:33:65:39:
         21:35:4d:93:b9:8c:b6:cb:7f:c1:b9:0f:71:ae:74:7f:c3:d3:
         36:82:33:51:ae:38:2a:b1:61:dc:a7:f8:1a:df:67:05:dd:e9:
         58:39:4c:33:a5:cf:c2:1f:43:1f:33:7c:25:40:78:59:c1:24:
         23:f0:cc:b9:49:7a:62:b0:33:00:f0:f2:f5:d3:52:1e:c6:7c:
         c5:d4:f2:c3:b5:d7:62:a8:56:41:04:b2:8d:b2:dc:34:68:c3:
         f9:e2:87:73:9a:88:38:02:01:62:63:46:24:8c:8a:60:d7:bb:
         67:a5:2f:6f:77:d7:3d:2f:88:0f:86:ee:68:a0:4c:f0:61:72:
         dc:7b:5a:7b:f1:ff:78:88:8b:f6:71:c9:0b:3b:45:fb:bd:bf:
         3a:a7:1b:d5:06:80:1f:e6:b3:27:04:5f:69:d0:7e:35:c7:e3:
         81:55:7c:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:02:20 2025 by rpki-client