Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C7F43753D547A9DA546DFC4E583CCE041C35853193177FEE7CE757AF2AD24D19/0/323830333a383461303a353030303a3a2f33362d3336203d3e20323636383230.roa
File:                     323830333a383461303a353030303a3a2f33362d3336203d3e20323636383230.roa (raw, json)
Hash identifier:          D3Sr/V4zutdmjIwKj7rR3DQUInRDGX3YCCd8GaMulBg=
Subject key identifier:   7F:45:69:B5:29:16:8C:96:19:0C:8C:3A:F2:D3:B8:CA:2A:21:5C:AD
Certificate issuer:       /CN=876619C7FD0F295D57635312903E44E56FCF51A3
Certificate serial:       468EDB90CE81A58B900F7EA374803347570D51A7
Authority key identifier: 87:66:19:C7:FD:0F:29:5D:57:63:53:12:90:3E:44:E5:6F:CF:51:A3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/876619C7FD0F295D57635312903E44E56FCF51A3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C7F43753D547A9DA546DFC4E583CCE041C35853193177FEE7CE757AF2AD24D19/0/323830333a383461303a353030303a3a2f33362d3336203d3e20323636383230.roa
Signing time:             Tue 04 Feb 2025 18:56:07 +0000
ROA not before:           Tue 04 Feb 2025 18:51:07 +0000
ROA not after:            Tue 03 Feb 2026 18:56:07 +0000
asID:                     266820
IP address blocks:        2803:84a0:5000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C7F43753D547A9DA546DFC4E583CCE041C35853193177FEE7CE757AF2AD24D19/0/876619C7FD0F295D57635312903E44E56FCF51A3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C7F43753D547A9DA546DFC4E583CCE041C35853193177FEE7CE757AF2AD24D19/0/876619C7FD0F295D57635312903E44E56FCF51A3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/876619C7FD0F295D57635312903E44E56FCF51A3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:8e:db:90:ce:81:a5:8b:90:0f:7e:a3:74:80:33:47:57:0d:51:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=876619C7FD0F295D57635312903E44E56FCF51A3
        Validity
            Not Before: Feb  4 18:51:07 2025 GMT
            Not After : Feb  3 18:56:07 2026 GMT
        Subject: CN=7F4569B529168C96190C8C3AF2D3B8CA2A215CAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:9d:25:82:bf:49:41:b8:a1:c0:98:ae:a4:41:
                    f5:84:1b:04:39:59:42:2d:60:1f:01:59:34:5e:c7:
                    de:05:9a:dd:7b:f0:3c:09:d7:57:e3:21:7e:b5:8d:
                    fc:93:32:67:32:1d:4e:74:e7:05:ff:07:aa:30:ea:
                    1c:94:1d:98:92:a0:fb:9c:3b:3e:4f:de:15:4f:16:
                    96:ff:cb:6c:af:d9:8b:8b:a7:06:8b:6f:0d:62:0e:
                    99:5d:41:ab:7b:08:bc:9e:d0:60:16:ce:b1:ae:7c:
                    22:36:18:6c:77:1d:70:25:52:1e:4b:4d:cc:f4:7c:
                    e7:56:f0:fa:34:44:30:34:23:af:17:17:f7:e5:12:
                    0c:8b:5c:2e:21:f8:fa:30:ef:c8:f7:3e:2b:5f:e7:
                    d0:12:dc:e8:69:ec:11:a7:c6:39:c1:63:e6:a3:da:
                    84:9d:49:3c:c2:b5:61:6a:fc:e6:fe:59:b7:41:39:
                    58:c5:41:2c:54:86:fa:da:f8:f6:c2:3a:15:9b:23:
                    89:9b:0e:7c:d1:c8:67:ff:a8:5f:9a:89:bb:c2:f8:
                    62:6f:a7:8a:14:8b:52:e0:28:66:c4:ca:1a:80:49:
                    c9:30:fb:d3:24:7e:20:34:c3:5a:0d:0c:c4:c6:c2:
                    0d:0b:68:59:93:c7:dc:0d:51:36:14:25:3f:d1:76:
                    be:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:45:69:B5:29:16:8C:96:19:0C:8C:3A:F2:D3:B8:CA:2A:21:5C:AD
            X509v3 Authority Key Identifier:
                keyid:87:66:19:C7:FD:0F:29:5D:57:63:53:12:90:3E:44:E5:6F:CF:51:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C7F43753D547A9DA546DFC4E583CCE041C35853193177FEE7CE757AF2AD24D19/0/876619C7FD0F295D57635312903E44E56FCF51A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/876619C7FD0F295D57635312903E44E56FCF51A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C7F43753D547A9DA546DFC4E583CCE041C35853193177FEE7CE757AF2AD24D19/0/323830333a383461303a353030303a3a2f33362d3336203d3e20323636383230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:84a0:5000::/36

    Signature Algorithm: sha256WithRSAEncryption
         49:dc:e0:e4:28:71:f4:1d:07:ae:0e:b0:b0:21:0f:10:2c:08:
         df:79:22:9c:84:e6:83:9f:d1:80:3b:99:b6:fb:7e:41:c0:85:
         46:90:04:85:53:3e:d3:5f:1b:66:f6:f0:97:b6:e0:72:c9:7a:
         b0:a6:97:f4:04:fd:25:b4:b0:b5:5c:8f:76:85:38:47:12:e8:
         d5:71:d3:fe:50:42:92:98:7d:47:81:ff:99:bd:82:b8:7f:97:
         b2:06:bd:9a:06:fd:cc:98:c8:13:ca:95:e8:57:1a:41:26:57:
         df:ef:af:d9:2e:54:c3:0e:b7:15:44:ce:40:17:ca:d8:3b:5a:
         99:99:16:26:ef:7e:71:b1:4a:1d:0f:52:97:04:21:71:37:7c:
         3e:83:96:7d:32:94:45:71:82:c9:30:94:35:00:62:32:98:07:
         a7:df:7d:68:3b:fc:27:8a:d7:65:32:1f:2d:34:61:c2:3f:fa:
         c1:b6:c1:09:34:27:91:c0:9b:1f:6a:4a:37:f0:5a:92:17:8e:
         3b:a3:eb:8d:98:b3:0b:3c:69:33:83:1b:90:73:26:6b:57:7f:
         aa:97:05:83:e0:01:a1:8a:c2:8c:05:f1:23:28:d5:79:d2:2c:
         36:e2:89:a7:6f:b4:0a:78:85:48:4b:6b:31:3d:85:37:63:e3:
         76:40:5d:21
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 5 14:00:08 2025 by rpki-client