Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C037FD9A9C5E15E31B988E54EA091666451673B3ED11475FEABE787812D334E2/0/323830333a3563303a3a2f33322d3332203d3e20323635373039.roa
File:                     323830333a3563303a3a2f33322d3332203d3e20323635373039.roa (raw, json)
Hash identifier:          pcS3tquoNEmn+WWdgZYXofwb4xuzx1ihjokYWksqnUo=
Subject key identifier:   53:5A:C6:5A:E4:4D:CA:35:1D:09:25:36:21:D9:DF:F6:08:71:3D:3A
Certificate issuer:       /CN=F1D8BA39D3C5ECC17DCA2A6EF54E783C5C5283F3
Certificate serial:       623C350542411994C3EF0D74794E016004B26E01
Authority key identifier: F1:D8:BA:39:D3:C5:EC:C1:7D:CA:2A:6E:F5:4E:78:3C:5C:52:83:F3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F1D8BA39D3C5ECC17DCA2A6EF54E783C5C5283F3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C037FD9A9C5E15E31B988E54EA091666451673B3ED11475FEABE787812D334E2/0/323830333a3563303a3a2f33322d3332203d3e20323635373039.roa
Signing time:             Tue 04 Feb 2025 18:08:02 +0000
ROA not before:           Tue 04 Feb 2025 18:03:02 +0000
ROA not after:            Tue 03 Feb 2026 18:08:02 +0000
asID:                     265709
IP address blocks:        2803:5c0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C037FD9A9C5E15E31B988E54EA091666451673B3ED11475FEABE787812D334E2/0/F1D8BA39D3C5ECC17DCA2A6EF54E783C5C5283F3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C037FD9A9C5E15E31B988E54EA091666451673B3ED11475FEABE787812D334E2/0/F1D8BA39D3C5ECC17DCA2A6EF54E783C5C5283F3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F1D8BA39D3C5ECC17DCA2A6EF54E783C5C5283F3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 09:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:3c:35:05:42:41:19:94:c3:ef:0d:74:79:4e:01:60:04:b2:6e:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1D8BA39D3C5ECC17DCA2A6EF54E783C5C5283F3
        Validity
            Not Before: Feb  4 18:03:02 2025 GMT
            Not After : Feb  3 18:08:02 2026 GMT
        Subject: CN=535AC65AE44DCA351D09253621D9DFF608713D3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f9:86:70:b1:92:a7:c9:31:91:0b:00:19:33:
                    94:83:7c:ef:64:af:c5:36:bd:b7:f4:43:c8:85:ee:
                    78:ab:c9:2f:95:65:f4:9b:82:35:cb:d7:a3:79:0d:
                    f4:ef:ca:f0:4e:42:f5:0a:f1:58:aa:5e:d9:b6:c9:
                    f9:9d:65:d5:89:dd:d7:53:30:0d:93:aa:d0:de:aa:
                    52:b9:d2:19:3a:f4:2c:92:04:d0:17:42:04:7d:f2:
                    db:1b:df:ee:87:3c:c0:bd:58:dc:52:89:d8:1c:fb:
                    3b:63:2d:0e:fb:cf:c0:19:24:8a:95:cd:2a:5a:4d:
                    5e:4d:91:8f:6d:5c:e6:5a:42:5c:99:9a:00:16:fb:
                    cf:f5:8b:d4:10:00:59:2e:b6:3c:e3:c6:34:1b:42:
                    a7:e2:24:96:4b:b6:1a:7f:a5:97:b0:6e:08:67:1b:
                    84:37:de:02:e6:e8:5b:c3:97:c6:00:ee:65:03:5a:
                    9b:aa:db:d9:1d:bc:51:eb:df:6c:6f:16:34:3e:48:
                    39:fe:64:8e:4e:b1:27:17:a7:31:81:61:62:db:8f:
                    f0:4a:1f:04:80:36:7b:bd:37:f3:06:67:b4:18:5b:
                    cb:ca:7c:aa:5e:4e:c6:4f:c5:97:55:56:2f:ee:21:
                    c5:c7:4b:7c:ce:1c:7f:c4:98:ee:20:59:a8:17:d9:
                    1e:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:5A:C6:5A:E4:4D:CA:35:1D:09:25:36:21:D9:DF:F6:08:71:3D:3A
            X509v3 Authority Key Identifier:
                keyid:F1:D8:BA:39:D3:C5:EC:C1:7D:CA:2A:6E:F5:4E:78:3C:5C:52:83:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C037FD9A9C5E15E31B988E54EA091666451673B3ED11475FEABE787812D334E2/0/F1D8BA39D3C5ECC17DCA2A6EF54E783C5C5283F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F1D8BA39D3C5ECC17DCA2A6EF54E783C5C5283F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C037FD9A9C5E15E31B988E54EA091666451673B3ED11475FEABE787812D334E2/0/323830333a3563303a3a2f33322d3332203d3e20323635373039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         9f:27:47:61:66:86:76:76:92:18:2e:5c:c6:11:6b:5c:f7:3a:
         f3:79:92:97:52:3c:09:df:76:b0:8c:ae:c9:82:79:7f:7c:c7:
         75:b2:43:1a:54:2f:64:19:92:5b:b9:89:54:d1:cf:95:b7:e0:
         e2:1d:57:22:a8:ec:85:0b:ee:38:7a:c7:9a:8d:93:62:e2:ff:
         8c:1a:07:cf:26:3c:54:3b:fa:ab:3c:38:ba:b8:7e:f9:68:ed:
         23:9e:58:99:15:d8:be:ee:3a:87:d1:20:4c:b0:88:2c:ff:85:
         a7:cb:15:e5:70:0f:df:b6:3a:eb:3e:97:ad:1b:b9:0b:12:32:
         c4:f6:88:5c:ea:a4:5d:07:68:0e:c1:e5:8f:90:25:df:47:ed:
         c7:7b:10:1b:53:54:67:29:8a:c8:b8:db:ae:5c:65:bd:b3:a0:
         4a:be:68:79:ba:65:53:29:4e:cb:02:69:db:b7:53:e9:26:fa:
         8e:4d:b7:e4:38:db:b2:01:d1:18:41:f7:6a:40:92:cc:9a:9f:
         22:a4:ea:79:05:84:14:52:70:c5:76:fc:00:7b:19:85:b3:97:
         3e:d7:8a:05:10:92:23:57:cc:49:d7:50:13:41:8f:92:89:e7:
         99:0e:39:4e:7d:5a:86:de:4d:ce:41:3c:12:80:bd:1f:64:e0:
         49:4e:c3:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 21:04:27 2025 by rpki-client