Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BF4C9242D1C3097288E5F9EB182988E0A41CB2B7538DBF786A48C8BA1F3662E9/0/323830333a383634303a3a2f33322d3332203d3e20323633383333.roa
File:                     323830333a383634303a3a2f33322d3332203d3e20323633383333.roa (raw, json)
Hash identifier:          VsrtN4rosguo5AY5mgkjlRwxPCzBsbZPhN7uX6DoN0w=
Subject key identifier:   B4:29:C9:73:32:26:5F:10:75:22:AE:37:FD:3B:13:93:FF:98:75:45
Certificate issuer:       /CN=8F2EC5CC34344AABC1D5C4185A622142C1213AEF
Certificate serial:       667E0131DE5311F3619088C1B944A8B37CBD1CF3
Authority key identifier: 8F:2E:C5:CC:34:34:4A:AB:C1:D5:C4:18:5A:62:21:42:C1:21:3A:EF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8F2EC5CC34344AABC1D5C4185A622142C1213AEF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BF4C9242D1C3097288E5F9EB182988E0A41CB2B7538DBF786A48C8BA1F3662E9/0/323830333a383634303a3a2f33322d3332203d3e20323633383333.roa
Signing time:             Tue 04 Feb 2025 18:14:59 +0000
ROA not before:           Tue 04 Feb 2025 18:09:59 +0000
ROA not after:            Tue 03 Feb 2026 18:14:59 +0000
asID:                     263833
IP address blocks:        2803:8640::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BF4C9242D1C3097288E5F9EB182988E0A41CB2B7538DBF786A48C8BA1F3662E9/0/8F2EC5CC34344AABC1D5C4185A622142C1213AEF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BF4C9242D1C3097288E5F9EB182988E0A41CB2B7538DBF786A48C8BA1F3662E9/0/8F2EC5CC34344AABC1D5C4185A622142C1213AEF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8F2EC5CC34344AABC1D5C4185A622142C1213AEF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:7e:01:31:de:53:11:f3:61:90:88:c1:b9:44:a8:b3:7c:bd:1c:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F2EC5CC34344AABC1D5C4185A622142C1213AEF
        Validity
            Not Before: Feb  4 18:09:59 2025 GMT
            Not After : Feb  3 18:14:59 2026 GMT
        Subject: CN=B429C97332265F107522AE37FD3B1393FF987545
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:6a:36:bd:87:f2:52:c7:7d:77:e1:34:89:dc:
                    13:18:e2:ec:10:e6:39:b4:16:95:cc:62:93:ae:d8:
                    e0:23:be:fa:ab:25:94:96:72:13:9b:f6:19:9c:b8:
                    29:f1:ef:c5:6a:e7:eb:35:72:35:74:f5:4d:bf:50:
                    03:8a:20:cf:9b:f8:68:47:a3:f2:aa:44:75:3e:ed:
                    2a:6b:0e:7f:28:94:da:c2:4a:4d:7a:bf:6d:5e:6a:
                    93:3e:15:f5:4b:b6:32:58:0e:9e:ab:2d:56:cd:53:
                    7f:29:97:5a:a1:3b:06:66:76:76:51:b8:43:85:9c:
                    a8:3e:13:58:19:d1:7a:71:ef:fe:7a:4e:25:90:7f:
                    13:37:79:e7:bb:7e:5f:e2:3b:97:11:29:6a:e9:72:
                    53:c2:3a:12:0c:a6:b8:7b:1d:f6:9d:25:3c:b4:77:
                    83:1a:51:b9:5d:ba:4e:25:a6:85:bd:c0:5c:59:a1:
                    4a:b3:d8:5e:c7:b5:f7:a9:85:f6:3a:31:72:32:5e:
                    49:4c:0d:b4:b4:a1:25:27:f6:27:e2:66:01:e2:bf:
                    3a:e3:a0:71:b8:42:6c:35:b7:3a:c2:d2:5a:c3:fc:
                    33:6f:29:49:64:a3:0a:9c:82:77:00:59:d1:60:f1:
                    be:af:8a:9c:5c:5d:f7:80:86:54:09:4e:f9:60:c7:
                    3a:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:29:C9:73:32:26:5F:10:75:22:AE:37:FD:3B:13:93:FF:98:75:45
            X509v3 Authority Key Identifier:
                keyid:8F:2E:C5:CC:34:34:4A:AB:C1:D5:C4:18:5A:62:21:42:C1:21:3A:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BF4C9242D1C3097288E5F9EB182988E0A41CB2B7538DBF786A48C8BA1F3662E9/0/8F2EC5CC34344AABC1D5C4185A622142C1213AEF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8F2EC5CC34344AABC1D5C4185A622142C1213AEF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BF4C9242D1C3097288E5F9EB182988E0A41CB2B7538DBF786A48C8BA1F3662E9/0/323830333a383634303a3a2f33322d3332203d3e20323633383333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8640::/32

    Signature Algorithm: sha256WithRSAEncryption
         45:b2:c0:72:b0:d5:79:dd:0e:0d:ec:b1:d5:8d:81:8d:37:80:
         3c:ba:93:74:91:8a:29:c4:93:6a:df:d3:86:b6:96:c5:ed:2a:
         52:26:1b:ed:26:ee:e1:a5:c2:cd:bf:03:e7:88:4d:0e:d2:2b:
         a0:1d:dd:69:72:f3:79:aa:dc:41:95:15:1f:c3:36:2a:ec:2c:
         49:ce:6a:36:9d:d1:32:79:bd:77:85:07:1d:ba:83:af:4b:70:
         0c:6d:a7:ab:2d:15:d6:ad:3e:83:69:a5:97:4d:ef:ed:55:fd:
         d0:c4:45:73:54:0c:1c:11:44:98:7a:6d:a1:64:5b:dd:e2:e6:
         e1:e6:78:96:be:d2:1d:ad:66:4d:7e:dd:ad:ce:91:b1:2d:5a:
         ac:5d:79:85:80:c7:f0:75:94:9e:29:57:da:3e:71:ce:52:bd:
         5d:ed:9d:4d:be:7e:30:58:e2:0f:2c:85:4c:3c:93:a3:75:4b:
         77:46:4b:ad:85:9b:46:58:55:ec:fe:1a:b6:dd:66:14:3a:be:
         2e:b5:44:a7:3d:a2:ed:1c:a8:9d:89:b0:46:59:29:35:13:81:
         4c:b5:8e:ee:3c:c4:60:35:ea:63:32:9d:0e:73:88:90:56:c6:
         f4:8a:97:a1:46:79:68:f7:c5:f1:0c:12:3a:2d:65:bb:c0:8b:
         77:36:d5:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:54:56 2025 by rpki-client