Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C1FBE9BEB0786CBAC91B5300161946F17DD363F8AEB2F1E0FE90365C62B740F5/0/323830333a373939303a3a2f33322d3634203d3e20323732393631.roa
File:                     323830333a373939303a3a2f33322d3634203d3e20323732393631.roa (raw, json)
Hash identifier:          DC78wewbGsfgWsldDDzTD9RzKAwrteIHQFjZh8Uus6M=
Subject key identifier:   10:5D:5E:53:19:99:69:3F:C9:99:A5:0F:37:FF:57:A8:B9:0B:3E:96
Certificate issuer:       /CN=9AE1EF6069D214BD367F253365FDF707B362C8A5
Certificate serial:       5BAF15FF95442554A24D8D6CA22F4E80EE99C325
Authority key identifier: 9A:E1:EF:60:69:D2:14:BD:36:7F:25:33:65:FD:F7:07:B3:62:C8:A5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9AE1EF6069D214BD367F253365FDF707B362C8A5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C1FBE9BEB0786CBAC91B5300161946F17DD363F8AEB2F1E0FE90365C62B740F5/0/323830333a373939303a3a2f33322d3634203d3e20323732393631.roa
Signing time:             Tue 04 Feb 2025 18:14:16 +0000
ROA not before:           Tue 04 Feb 2025 18:09:16 +0000
ROA not after:            Tue 03 Feb 2026 18:14:16 +0000
asID:                     272961
IP address blocks:        2803:7990::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C1FBE9BEB0786CBAC91B5300161946F17DD363F8AEB2F1E0FE90365C62B740F5/0/9AE1EF6069D214BD367F253365FDF707B362C8A5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C1FBE9BEB0786CBAC91B5300161946F17DD363F8AEB2F1E0FE90365C62B740F5/0/9AE1EF6069D214BD367F253365FDF707B362C8A5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9AE1EF6069D214BD367F253365FDF707B362C8A5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 20:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:af:15:ff:95:44:25:54:a2:4d:8d:6c:a2:2f:4e:80:ee:99:c3:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9AE1EF6069D214BD367F253365FDF707B362C8A5
        Validity
            Not Before: Feb  4 18:09:16 2025 GMT
            Not After : Feb  3 18:14:16 2026 GMT
        Subject: CN=105D5E531999693FC999A50F37FF57A8B90B3E96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:22:e1:65:90:67:04:e5:84:c5:64:cd:9b:04:
                    f1:e9:ae:95:b7:43:6e:78:a4:00:f2:09:79:03:6f:
                    3a:a7:12:3e:b8:39:24:a2:aa:a6:9d:1c:65:82:96:
                    fa:0a:f6:41:56:06:66:8d:aa:58:8a:70:cf:3e:e5:
                    59:c4:f7:60:8b:e1:df:73:76:18:ec:22:25:b5:f8:
                    6c:c8:11:af:79:5f:c5:35:cc:6a:a0:45:88:78:8b:
                    d9:08:12:1b:dc:71:4f:b0:ea:75:11:d1:ac:ae:5f:
                    31:db:0b:9d:3c:f4:bf:7b:bf:99:4d:09:d2:38:8a:
                    49:8b:db:c0:e0:02:20:9b:d2:1b:20:2c:1d:8b:e7:
                    44:ed:49:8e:f1:ec:d3:15:38:81:52:fe:52:e4:ac:
                    96:28:6c:8c:4e:92:10:de:e0:63:0f:0b:a5:03:70:
                    14:7b:fb:51:76:c3:a3:e9:56:d2:31:f0:87:08:0c:
                    28:25:b9:e3:ee:e3:f3:77:f3:b4:51:00:aa:3a:49:
                    ee:e7:8b:1a:a0:e6:bf:d0:db:10:d5:df:73:99:c1:
                    7c:d0:ad:33:81:8e:1f:a1:a9:d2:e3:e6:6e:b3:a5:
                    3a:e0:ef:5b:97:3d:25:5b:8c:ca:7c:bc:9d:4d:a4:
                    bf:f2:db:f2:e8:3c:3e:7e:32:27:b7:1e:3c:79:a5:
                    ee:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:5D:5E:53:19:99:69:3F:C9:99:A5:0F:37:FF:57:A8:B9:0B:3E:96
            X509v3 Authority Key Identifier:
                keyid:9A:E1:EF:60:69:D2:14:BD:36:7F:25:33:65:FD:F7:07:B3:62:C8:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C1FBE9BEB0786CBAC91B5300161946F17DD363F8AEB2F1E0FE90365C62B740F5/0/9AE1EF6069D214BD367F253365FDF707B362C8A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9AE1EF6069D214BD367F253365FDF707B362C8A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C1FBE9BEB0786CBAC91B5300161946F17DD363F8AEB2F1E0FE90365C62B740F5/0/323830333a373939303a3a2f33322d3634203d3e20323732393631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7990::/32

    Signature Algorithm: sha256WithRSAEncryption
         44:a5:46:dc:d0:46:77:24:e8:7a:8b:f7:db:b0:1a:46:ca:49:
         40:18:f3:f6:12:96:ff:18:29:9c:49:43:b7:c1:c8:5a:3b:a3:
         f3:be:dc:01:a5:4f:db:e5:82:3f:1c:70:97:16:dc:5e:1f:75:
         c2:c8:05:42:b7:86:9a:eb:19:93:8f:cd:85:9b:ca:16:ab:25:
         9c:31:19:fa:89:4e:1d:1e:b0:2b:d3:ba:1b:f9:08:3a:36:c7:
         f5:94:32:6c:a3:90:45:22:04:84:f1:3f:d7:ef:23:c9:ea:40:
         90:4f:f1:a2:a6:71:27:7d:a0:26:4e:02:ac:cf:05:f8:1c:c1:
         5e:c8:8e:8f:b7:7a:f2:23:5a:c6:62:a3:a5:6e:5f:d5:38:60:
         48:e1:3c:7e:d2:01:b7:bb:93:71:d7:2a:ae:e0:e8:69:27:95:
         f8:96:df:6e:39:95:1b:b6:16:bf:1b:7e:cf:8f:8d:95:a9:3a:
         a9:8d:0c:cb:51:23:21:98:ca:b0:e9:0f:60:45:c9:9d:a1:d1:
         15:ff:89:16:aa:98:e8:6b:5d:a7:d3:ee:d8:81:0e:65:a6:01:
         1e:f5:ba:96:d7:c3:36:29:27:3f:57:db:72:2a:ab:52:1a:80:
         c2:a0:4d:ba:38:4b:a1:e8:20:ab:63:02:c6:85:74:9a:aa:e0:
         17:be:35:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:50:23 2025 by rpki-client