Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C93BD0C3E3A7B3D66E8412CBCB6BB212360244FD495BAF9B59613AD8A1F5E162/0/323830333a653336303a313330303a3a2f34302d3430203d3e20323634383234.roa
File:                     323830333a653336303a313330303a3a2f34302d3430203d3e20323634383234.roa (raw, json)
Hash identifier:          8i2jXSh5LPJ7MZgootCFvwAOKOSpA2gnpSnCMIZEkF4=
Subject key identifier:   31:87:A5:71:F4:9E:A9:B6:1C:A6:D2:FB:58:8D:0A:52:0E:13:1D:EB
Certificate issuer:       /CN=2C06B6FA6CB2B8122FB58DC52543671093B05FAA
Certificate serial:       4BF8F5D3AB5058252DFF923AE0939AF9A1939D57
Authority key identifier: 2C:06:B6:FA:6C:B2:B8:12:2F:B5:8D:C5:25:43:67:10:93:B0:5F:AA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C06B6FA6CB2B8122FB58DC52543671093B05FAA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C93BD0C3E3A7B3D66E8412CBCB6BB212360244FD495BAF9B59613AD8A1F5E162/0/323830333a653336303a313330303a3a2f34302d3430203d3e20323634383234.roa
Signing time:             Tue 04 Feb 2025 18:04:26 +0000
ROA not before:           Tue 04 Feb 2025 17:59:26 +0000
ROA not after:            Tue 03 Feb 2026 18:04:26 +0000
asID:                     264824
IP address blocks:        2803:e360:1300::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C93BD0C3E3A7B3D66E8412CBCB6BB212360244FD495BAF9B59613AD8A1F5E162/0/2C06B6FA6CB2B8122FB58DC52543671093B05FAA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C93BD0C3E3A7B3D66E8412CBCB6BB212360244FD495BAF9B59613AD8A1F5E162/0/2C06B6FA6CB2B8122FB58DC52543671093B05FAA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C06B6FA6CB2B8122FB58DC52543671093B05FAA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 17 Apr 2025 16:33:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:f8:f5:d3:ab:50:58:25:2d:ff:92:3a:e0:93:9a:f9:a1:93:9d:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C06B6FA6CB2B8122FB58DC52543671093B05FAA
        Validity
            Not Before: Feb  4 17:59:26 2025 GMT
            Not After : Feb  3 18:04:26 2026 GMT
        Subject: CN=3187A571F49EA9B61CA6D2FB588D0A520E131DEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:79:b6:41:ed:11:69:fd:61:08:5e:c2:38:f7:
                    f4:ff:00:fa:d0:17:ff:23:64:e3:86:33:3f:4d:ff:
                    47:e2:1d:47:fe:5a:38:bd:3f:93:92:94:36:3b:7a:
                    0e:92:4a:42:d0:b4:fb:a6:93:93:46:23:23:18:7d:
                    ca:b5:42:2d:1f:b8:2f:be:c2:d2:2a:19:7d:fc:c8:
                    ca:83:09:92:24:22:6a:06:05:50:bd:cf:03:b3:62:
                    a7:92:d7:98:62:11:81:35:ff:89:c1:b3:5e:7f:f9:
                    e4:7f:2d:90:95:9a:67:49:a7:be:a7:24:9e:01:0b:
                    3b:de:65:0f:58:a3:49:1b:e9:d1:0a:12:f0:5a:fd:
                    e9:93:f9:e2:b1:9f:dd:85:05:1b:23:c0:8b:6d:00:
                    fd:43:a7:b1:87:7b:f4:63:3b:ac:c3:68:ce:03:a4:
                    a9:5b:cb:7a:7b:a5:4a:d3:42:13:1d:c6:2a:37:19:
                    c0:bd:a9:0d:4f:b2:9b:a8:4d:58:f5:88:e4:51:2c:
                    4c:9b:97:39:eb:61:68:f5:43:f6:41:06:0b:da:45:
                    1b:af:12:2e:7d:92:f2:ab:23:45:88:f4:dd:b9:88:
                    5f:61:6d:06:68:fc:a8:db:36:9c:aa:9a:f5:5c:2d:
                    9f:48:4b:8e:1b:e3:b8:af:9f:72:0f:8d:f2:6e:a4:
                    89:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:87:A5:71:F4:9E:A9:B6:1C:A6:D2:FB:58:8D:0A:52:0E:13:1D:EB
            X509v3 Authority Key Identifier:
                keyid:2C:06:B6:FA:6C:B2:B8:12:2F:B5:8D:C5:25:43:67:10:93:B0:5F:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C93BD0C3E3A7B3D66E8412CBCB6BB212360244FD495BAF9B59613AD8A1F5E162/0/2C06B6FA6CB2B8122FB58DC52543671093B05FAA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C06B6FA6CB2B8122FB58DC52543671093B05FAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C93BD0C3E3A7B3D66E8412CBCB6BB212360244FD495BAF9B59613AD8A1F5E162/0/323830333a653336303a313330303a3a2f34302d3430203d3e20323634383234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e360:1300::/40

    Signature Algorithm: sha256WithRSAEncryption
         56:cc:16:67:0b:b0:a8:80:e4:ba:47:d2:82:00:c1:2b:49:ee:
         e9:32:4b:83:2b:ec:4d:94:7a:1b:4c:d3:3c:e1:94:43:42:16:
         a5:d3:6c:61:97:ce:34:9c:d3:61:b0:59:7d:ac:58:67:1e:72:
         48:ca:9d:cf:5d:7c:5b:e5:a6:13:37:8f:9d:56:c8:60:5d:35:
         58:0d:60:d2:07:da:eb:82:ce:d1:fe:64:58:c1:fd:bf:8e:68:
         f5:82:2d:5f:d5:81:8b:a6:ed:b3:ed:5f:0b:d2:e2:ea:a4:60:
         a4:23:b0:d3:19:f6:24:1a:71:b7:04:d4:dd:f7:fb:6c:92:8d:
         4f:81:36:6d:ef:45:02:c2:99:9c:e9:88:89:0a:ee:dd:78:b5:
         cc:64:b3:e4:08:79:f8:34:b0:7f:3a:d2:6d:7b:8f:13:42:3c:
         aa:2f:69:21:95:08:5b:8f:87:7e:35:29:45:99:7c:2b:32:3a:
         48:35:f6:e0:e8:13:34:8e:72:80:cd:52:11:d9:9e:8f:bb:b2:
         8f:73:2d:b1:8d:cd:ed:5a:a3:98:e7:6b:58:2f:50:4e:49:c9:
         25:da:60:8f:be:3c:3b:76:c7:92:8f:b5:20:c7:bc:3c:f1:c5:
         3e:f3:52:96:d0:da:c0:7e:a6:20:00:3f:f3:7f:6e:9b:8b:69:
         73:87:9d:a4
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 14 10:41:25 2025 by rpki-client