Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B9D1DF45E9A86CDA1CFE95BC5E5796EDEABD214A8B07C94BB9D6628D0656AE11/0/323830333a616561303a3a2f33322d3332203d3e20323637363738.roa
File:                     323830333a616561303a3a2f33322d3332203d3e20323637363738.roa (raw, json)
Hash identifier:          Jxk3mVgD1gXaWmwZTrxh7kvrnDNkMfkNGeFuC/ap3Gw=
Subject key identifier:   86:1F:F7:29:13:46:73:FE:F0:A9:C9:D2:89:6D:68:A2:21:40:EA:DC
Certificate issuer:       /CN=02ED3395A01A385371573CF59B1E5D8F2BF6D57E
Certificate serial:       24F69F841A2622D56D98E30884574150864260FB
Authority key identifier: 02:ED:33:95:A0:1A:38:53:71:57:3C:F5:9B:1E:5D:8F:2B:F6:D5:7E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/02ED3395A01A385371573CF59B1E5D8F2BF6D57E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B9D1DF45E9A86CDA1CFE95BC5E5796EDEABD214A8B07C94BB9D6628D0656AE11/0/323830333a616561303a3a2f33322d3332203d3e20323637363738.roa
Signing time:             Tue 04 Feb 2025 18:45:48 +0000
ROA not before:           Tue 04 Feb 2025 18:40:48 +0000
ROA not after:            Tue 03 Feb 2026 18:45:48 +0000
asID:                     267678
IP address blocks:        2803:aea0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B9D1DF45E9A86CDA1CFE95BC5E5796EDEABD214A8B07C94BB9D6628D0656AE11/0/02ED3395A01A385371573CF59B1E5D8F2BF6D57E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B9D1DF45E9A86CDA1CFE95BC5E5796EDEABD214A8B07C94BB9D6628D0656AE11/0/02ED3395A01A385371573CF59B1E5D8F2BF6D57E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/02ED3395A01A385371573CF59B1E5D8F2BF6D57E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 18:50:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:f6:9f:84:1a:26:22:d5:6d:98:e3:08:84:57:41:50:86:42:60:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02ED3395A01A385371573CF59B1E5D8F2BF6D57E
        Validity
            Not Before: Feb  4 18:40:48 2025 GMT
            Not After : Feb  3 18:45:48 2026 GMT
        Subject: CN=861FF729134673FEF0A9C9D2896D68A22140EADC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:4e:38:83:a0:78:f8:ca:19:56:8c:58:88:a1:
                    3c:7c:b2:82:31:28:40:46:4e:41:89:ea:58:42:90:
                    fc:7a:76:60:8b:c7:78:5d:93:29:7d:f6:82:5a:11:
                    4f:ae:d7:48:d4:26:26:9e:63:7e:8f:99:db:50:52:
                    37:8e:02:58:2a:a9:12:c1:0a:b3:2f:d1:ab:34:87:
                    83:89:47:3b:7a:3a:d9:4f:8f:86:05:2c:ce:14:4c:
                    82:32:50:e4:09:5d:82:8e:b9:f6:a9:f8:fe:8e:d4:
                    a3:ae:8d:aa:de:27:7b:cf:47:ea:e5:b2:f8:9c:7e:
                    0c:d2:52:cb:00:bc:c2:0a:3d:ba:d8:9e:82:3e:7c:
                    d5:50:68:03:c5:2b:4a:95:42:b5:a1:1e:8d:5f:a0:
                    b1:55:63:c4:38:70:ec:6a:3a:5b:7e:73:63:26:dd:
                    f5:45:36:72:7c:2e:af:87:21:05:24:ff:66:c1:e9:
                    68:84:fe:e0:22:33:dd:f8:5f:b2:00:94:d5:07:06:
                    f0:d2:0a:c4:f7:1e:5e:74:53:7f:9b:a6:42:a3:cd:
                    f0:fe:83:02:a9:49:85:3a:67:34:c2:47:18:fb:b1:
                    4b:55:ec:26:b0:a6:93:d0:53:f0:e8:5d:1a:e5:7a:
                    d1:24:55:4a:22:f8:4d:69:ed:d5:27:dc:f9:b7:80:
                    62:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:1F:F7:29:13:46:73:FE:F0:A9:C9:D2:89:6D:68:A2:21:40:EA:DC
            X509v3 Authority Key Identifier:
                keyid:02:ED:33:95:A0:1A:38:53:71:57:3C:F5:9B:1E:5D:8F:2B:F6:D5:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B9D1DF45E9A86CDA1CFE95BC5E5796EDEABD214A8B07C94BB9D6628D0656AE11/0/02ED3395A01A385371573CF59B1E5D8F2BF6D57E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/02ED3395A01A385371573CF59B1E5D8F2BF6D57E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B9D1DF45E9A86CDA1CFE95BC5E5796EDEABD214A8B07C94BB9D6628D0656AE11/0/323830333a616561303a3a2f33322d3332203d3e20323637363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:aea0::/32

    Signature Algorithm: sha256WithRSAEncryption
         3d:af:45:a2:54:b7:83:4d:e5:f9:0f:ce:c5:d6:7a:9f:68:c0:
         26:e6:bd:92:eb:de:da:d0:c8:88:00:c8:62:93:f4:66:81:d1:
         cf:81:e3:27:a5:65:76:70:0b:6c:82:a9:33:e1:b5:6b:78:39:
         84:4f:8c:8f:1d:d3:2e:6e:7f:d0:72:ca:0c:76:28:88:87:b5:
         77:1a:5f:d8:3e:77:ae:c5:fb:7f:6b:f4:e6:ed:49:a2:aa:ea:
         44:f3:f6:e4:46:ea:9c:bb:0f:92:be:c6:ac:a3:d9:1e:72:c9:
         14:90:3d:59:4b:f5:96:b0:4a:37:81:c1:01:45:9e:b2:a6:8c:
         35:2c:5d:e8:7c:d6:88:08:d6:4c:ff:18:33:74:f9:7e:5b:d2:
         81:da:80:79:26:31:db:2e:45:40:27:14:8e:c4:e5:93:8b:ba:
         b9:4c:1a:57:00:cc:38:ef:51:12:5c:09:5e:f3:77:50:ec:50:
         5e:eb:25:73:a3:44:80:dd:7c:60:4a:b8:cb:b9:21:55:f6:10:
         5f:c5:bf:ca:f1:69:d1:6b:9d:e6:93:f1:b4:60:50:b8:6b:13:
         37:7a:10:96:28:4f:66:18:52:cb:2d:b3:fa:34:a0:67:bc:2d:
         c7:e3:01:41:bd:26:86:a6:99:76:06:f7:2d:07:af:e8:a6:95:
         ea:a1:27:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:18:52 2025 by rpki-client