Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C3E043639915CFD2CBA79424AC63DD0E672E2202404388FDA16671CD2CDAA71C/0/323830333a353330303a3a2f33322d3332203d3e20323634363337.roa
File:                     323830333a353330303a3a2f33322d3332203d3e20323634363337.roa (raw, json)
Hash identifier:          zP434huRutSz31mW5d1GYobCbk/qxG4djj/FKeVv7Ck=
Subject key identifier:   D9:34:0B:1F:EE:69:0D:22:59:3D:F1:57:68:0F:5D:6D:68:1E:5D:0A
Certificate issuer:       /CN=A0AEC7E371CCB77E9F6185475032ECF66F5AF8E6
Certificate serial:       368F869AFB3932E8268B2F1816274392A35E7C16
Authority key identifier: A0:AE:C7:E3:71:CC:B7:7E:9F:61:85:47:50:32:EC:F6:6F:5A:F8:E6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A0AEC7E371CCB77E9F6185475032ECF66F5AF8E6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C3E043639915CFD2CBA79424AC63DD0E672E2202404388FDA16671CD2CDAA71C/0/323830333a353330303a3a2f33322d3332203d3e20323634363337.roa
Signing time:             Tue 04 Feb 2025 18:22:08 +0000
ROA not before:           Tue 04 Feb 2025 18:17:08 +0000
ROA not after:            Tue 03 Feb 2026 18:22:08 +0000
asID:                     264637
IP address blocks:        2803:5300::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C3E043639915CFD2CBA79424AC63DD0E672E2202404388FDA16671CD2CDAA71C/0/A0AEC7E371CCB77E9F6185475032ECF66F5AF8E6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C3E043639915CFD2CBA79424AC63DD0E672E2202404388FDA16671CD2CDAA71C/0/A0AEC7E371CCB77E9F6185475032ECF66F5AF8E6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A0AEC7E371CCB77E9F6185475032ECF66F5AF8E6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:8f:86:9a:fb:39:32:e8:26:8b:2f:18:16:27:43:92:a3:5e:7c:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0AEC7E371CCB77E9F6185475032ECF66F5AF8E6
        Validity
            Not Before: Feb  4 18:17:08 2025 GMT
            Not After : Feb  3 18:22:08 2026 GMT
        Subject: CN=D9340B1FEE690D22593DF157680F5D6D681E5D0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:d7:0c:19:a1:da:ca:83:1a:44:17:9b:53:a7:
                    54:aa:aa:a3:9f:a9:54:1b:4c:70:66:67:63:d1:5d:
                    8e:22:67:15:fd:b9:88:46:b1:c0:92:d1:ea:e5:27:
                    76:9f:1a:32:84:54:bd:1e:33:54:4c:5e:86:ed:e1:
                    d8:56:d7:c4:e5:7f:95:38:92:8e:da:69:5d:75:75:
                    22:2b:1a:6a:92:db:8c:6d:3a:4d:76:11:7c:a6:b2:
                    5d:4f:b7:87:71:84:3d:6f:bd:27:b5:04:3f:fc:2e:
                    0a:1b:4e:b6:10:39:c7:fe:46:90:dc:c1:77:ca:a3:
                    c0:ac:c7:b3:d3:24:9e:41:bf:ab:c9:55:7f:0b:80:
                    b8:c8:53:73:dd:bd:28:f5:7f:94:91:4c:27:a1:3b:
                    90:14:0f:56:c3:79:0a:ec:0e:c9:6b:de:26:7f:c1:
                    83:e4:dd:9f:72:bc:9d:a4:2d:7f:a9:74:2c:1a:b1:
                    41:1e:39:c8:f3:b4:3d:41:28:13:21:ad:1b:54:df:
                    9c:aa:a4:ea:0e:63:e6:42:62:ae:78:29:55:6a:f3:
                    d7:a1:66:45:41:d8:f7:b9:23:bb:46:e8:95:9d:fb:
                    15:d4:c6:2b:40:5c:b7:b0:88:c1:16:74:86:74:83:
                    77:fd:1a:94:9e:07:3f:c0:91:5d:33:09:6c:89:13:
                    3a:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:34:0B:1F:EE:69:0D:22:59:3D:F1:57:68:0F:5D:6D:68:1E:5D:0A
            X509v3 Authority Key Identifier:
                keyid:A0:AE:C7:E3:71:CC:B7:7E:9F:61:85:47:50:32:EC:F6:6F:5A:F8:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C3E043639915CFD2CBA79424AC63DD0E672E2202404388FDA16671CD2CDAA71C/0/A0AEC7E371CCB77E9F6185475032ECF66F5AF8E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A0AEC7E371CCB77E9F6185475032ECF66F5AF8E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C3E043639915CFD2CBA79424AC63DD0E672E2202404388FDA16671CD2CDAA71C/0/323830333a353330303a3a2f33322d3332203d3e20323634363337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5300::/32

    Signature Algorithm: sha256WithRSAEncryption
         69:49:38:3a:09:43:76:a5:07:50:b2:c5:e0:e8:e7:53:a0:ca:
         83:65:40:12:d1:f0:ed:ed:d9:b7:26:53:de:bd:08:2b:75:af:
         be:18:0f:13:9f:3e:c9:b7:a5:27:7d:b1:72:6f:98:ca:3b:5e:
         10:c3:b6:9d:95:11:42:3a:c9:49:57:00:04:40:60:2e:3c:f1:
         5d:72:59:fc:ed:d1:bc:a9:b2:b7:61:7a:7c:43:05:25:0d:b6:
         78:1d:03:09:40:14:ea:bf:6b:b5:a1:e5:44:20:4d:24:53:a1:
         af:bf:86:1f:b0:97:45:4a:83:82:d7:ea:02:d1:82:b6:fe:31:
         7d:2f:64:9e:ee:0f:43:fb:7c:3a:97:28:31:6f:67:b8:7b:9c:
         9d:30:95:56:f2:3d:2d:f1:fc:df:0c:51:2c:77:0a:ab:76:32:
         5c:00:4e:00:d7:5b:80:58:2a:3d:bd:4c:54:39:04:6f:b3:27:
         3a:eb:d4:2a:35:4b:ad:19:98:99:1c:a7:a6:c8:8e:8e:9e:43:
         40:79:09:61:44:97:50:35:ac:3f:81:4b:18:36:29:fa:dc:66:
         44:46:a1:96:d9:f3:4a:ba:24:1d:d0:38:07:bb:93:00:b9:e5:
         ab:8b:e1:64:62:2d:f4:dc:f2:2e:63:14:fb:36:66:e9:88:a9:
         8b:d3:42:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:10:27 2025 by rpki-client