Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C1730BC18DF9F2E39D28611C9A12011BCBE42CF0E6D789A6B5EA40F4A76687FE/0/323830333a656565303a3a2f33322d3438203d3e20323639393837.roa
File:                     323830333a656565303a3a2f33322d3438203d3e20323639393837.roa (raw, json)
Hash identifier:          4CrOtTB5jwaaXMecsVb4/SBQUcJgXur9g52TRPOcQTg=
Subject key identifier:   07:C7:6A:25:81:57:95:49:86:60:82:31:4E:2E:E0:0C:E7:99:BC:5D
Certificate issuer:       /CN=2705C975E2CC4D594CF89CC53B26AD206D9F1C2F
Certificate serial:       5846F1E27052EDAFD205F3F4EF06064067321E7A
Authority key identifier: 27:05:C9:75:E2:CC:4D:59:4C:F8:9C:C5:3B:26:AD:20:6D:9F:1C:2F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2705C975E2CC4D594CF89CC53B26AD206D9F1C2F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C1730BC18DF9F2E39D28611C9A12011BCBE42CF0E6D789A6B5EA40F4A76687FE/0/323830333a656565303a3a2f33322d3438203d3e20323639393837.roa
Signing time:             Tue 04 Feb 2025 18:23:31 +0000
ROA not before:           Tue 04 Feb 2025 18:18:31 +0000
ROA not after:            Tue 03 Feb 2026 18:23:31 +0000
asID:                     269987
IP address blocks:        2803:eee0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C1730BC18DF9F2E39D28611C9A12011BCBE42CF0E6D789A6B5EA40F4A76687FE/0/2705C975E2CC4D594CF89CC53B26AD206D9F1C2F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C1730BC18DF9F2E39D28611C9A12011BCBE42CF0E6D789A6B5EA40F4A76687FE/0/2705C975E2CC4D594CF89CC53B26AD206D9F1C2F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2705C975E2CC4D594CF89CC53B26AD206D9F1C2F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Apr 2025 11:56:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:46:f1:e2:70:52:ed:af:d2:05:f3:f4:ef:06:06:40:67:32:1e:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2705C975E2CC4D594CF89CC53B26AD206D9F1C2F
        Validity
            Not Before: Feb  4 18:18:31 2025 GMT
            Not After : Feb  3 18:23:31 2026 GMT
        Subject: CN=07C76A2581579549866082314E2EE00CE799BC5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:01:c0:c8:fc:dd:ee:87:b2:df:5d:c1:d6:1e:
                    9d:0b:ab:ec:95:c4:bf:4b:9f:35:f7:9b:a4:c4:50:
                    d0:6d:47:e3:f2:53:24:08:ef:03:81:9b:2b:40:8e:
                    26:e6:31:e0:2b:71:b0:63:68:ce:86:59:92:95:ab:
                    58:c8:6a:0c:2a:c7:05:d2:b0:4e:ee:fe:d6:9b:0c:
                    b9:86:f3:ff:8a:09:17:4d:c2:f3:96:71:50:e4:d1:
                    14:82:15:09:b6:5b:49:70:ee:53:54:82:b6:34:22:
                    43:ab:52:9b:d0:94:89:37:0c:6c:8e:76:d4:3b:d9:
                    31:45:46:f9:23:f5:fd:08:9c:2c:b9:2c:52:3b:2c:
                    9e:2a:54:a2:ad:cf:2e:52:4b:2f:68:98:e9:a8:0c:
                    32:23:d6:d4:88:be:d7:d3:bf:f9:1d:78:71:aa:6a:
                    dd:62:fb:6e:91:95:43:d9:ec:5d:41:15:1f:23:f8:
                    38:01:02:8e:d1:58:50:64:2f:df:ac:82:09:82:1f:
                    9f:a5:cb:0d:97:5c:ac:94:cd:0e:88:85:fc:ac:23:
                    0c:1f:82:1f:d3:d7:e2:36:e9:49:33:4e:72:16:8a:
                    27:ed:85:1a:6f:24:43:f1:7e:f2:06:5d:3d:8e:24:
                    88:77:49:92:51:a1:99:cd:77:88:f4:de:82:43:fd:
                    13:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:C7:6A:25:81:57:95:49:86:60:82:31:4E:2E:E0:0C:E7:99:BC:5D
            X509v3 Authority Key Identifier:
                keyid:27:05:C9:75:E2:CC:4D:59:4C:F8:9C:C5:3B:26:AD:20:6D:9F:1C:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C1730BC18DF9F2E39D28611C9A12011BCBE42CF0E6D789A6B5EA40F4A76687FE/0/2705C975E2CC4D594CF89CC53B26AD206D9F1C2F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2705C975E2CC4D594CF89CC53B26AD206D9F1C2F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C1730BC18DF9F2E39D28611C9A12011BCBE42CF0E6D789A6B5EA40F4A76687FE/0/323830333a656565303a3a2f33322d3438203d3e20323639393837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:eee0::/32

    Signature Algorithm: sha256WithRSAEncryption
         88:ad:a8:f1:20:28:c5:a1:d9:2a:c3:26:30:87:93:5f:c7:de:
         7b:a3:71:b1:32:53:b3:93:92:2b:7f:b9:e3:51:af:a4:a0:d3:
         a5:d3:a5:94:ef:03:ec:2c:34:cf:e0:f7:50:0e:3c:42:88:af:
         3e:5d:c8:23:ad:dd:b5:30:e1:1e:17:2b:26:d5:1e:ad:1c:18:
         60:c8:64:88:79:98:39:b3:44:a3:c6:6f:4a:6a:ca:c4:ae:a0:
         cd:b5:83:77:43:4d:87:8f:fc:a2:1a:b8:c8:64:2b:00:c4:24:
         e4:af:57:a2:80:6d:37:41:77:0b:34:bf:83:31:9f:0c:e2:89:
         66:75:ac:52:12:99:e5:69:0d:40:84:fe:44:e4:21:6a:c4:97:
         7c:2f:cd:6c:fd:cf:d0:90:3d:a2:a9:e4:67:65:b8:58:b8:10:
         e1:8a:9a:e8:83:d5:32:95:7d:22:a8:b5:d9:5e:74:99:5d:bc:
         23:76:18:d5:73:47:74:02:e4:ab:ba:d1:88:1b:e0:b9:c8:b9:
         1e:8b:b8:03:de:f0:2d:6d:7d:52:e2:c9:da:11:e5:59:6b:1a:
         20:4d:1f:a6:52:54:41:a8:3e:9e:68:09:8b:4a:6d:db:d4:51:
         96:bc:ed:42:5f:8e:c1:f6:51:ef:fb:f1:21:f6:f4:ed:69:e3:
         1a:3d:25:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 04:53:39 2025 by rpki-client