Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C93BD0C3E3A7B3D66E8412CBCB6BB212360244FD495BAF9B59613AD8A1F5E162/0/323830333a653336303a3530303a3a2f34302d3430203d3e20323634383234.roa
File:                     323830333a653336303a3530303a3a2f34302d3430203d3e20323634383234.roa (raw, json)
Hash identifier:          soFJjIvXycmhLhA9RsCT0ByEQX9WnCUYpIZ30Ntxzk4=
Subject key identifier:   A7:FD:32:EC:8D:6E:ED:63:18:1B:6B:B9:14:BC:4F:BE:A5:77:5B:1C
Certificate issuer:       /CN=2C06B6FA6CB2B8122FB58DC52543671093B05FAA
Certificate serial:       34148F159155C5F82FFB635AB423E22BEECF97B6
Authority key identifier: 2C:06:B6:FA:6C:B2:B8:12:2F:B5:8D:C5:25:43:67:10:93:B0:5F:AA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C06B6FA6CB2B8122FB58DC52543671093B05FAA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C93BD0C3E3A7B3D66E8412CBCB6BB212360244FD495BAF9B59613AD8A1F5E162/0/323830333a653336303a3530303a3a2f34302d3430203d3e20323634383234.roa
Signing time:             Tue 04 Feb 2025 18:04:32 +0000
ROA not before:           Tue 04 Feb 2025 17:59:32 +0000
ROA not after:            Tue 03 Feb 2026 18:04:32 +0000
asID:                     264824
IP address blocks:        2803:e360:500::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C93BD0C3E3A7B3D66E8412CBCB6BB212360244FD495BAF9B59613AD8A1F5E162/0/2C06B6FA6CB2B8122FB58DC52543671093B05FAA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C93BD0C3E3A7B3D66E8412CBCB6BB212360244FD495BAF9B59613AD8A1F5E162/0/2C06B6FA6CB2B8122FB58DC52543671093B05FAA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C06B6FA6CB2B8122FB58DC52543671093B05FAA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 14:41:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:14:8f:15:91:55:c5:f8:2f:fb:63:5a:b4:23:e2:2b:ee:cf:97:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C06B6FA6CB2B8122FB58DC52543671093B05FAA
        Validity
            Not Before: Feb  4 17:59:32 2025 GMT
            Not After : Feb  3 18:04:32 2026 GMT
        Subject: CN=A7FD32EC8D6EED63181B6BB914BC4FBEA5775B1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:45:ac:ee:69:5a:24:0b:cc:e0:d6:89:85:0e:
                    ef:da:6b:b0:a7:77:06:d7:39:3b:75:64:28:8f:a2:
                    31:b3:3f:c2:d3:1d:70:fe:36:ed:3d:2b:9e:da:11:
                    8d:e1:23:c8:d2:af:17:4a:1c:ef:dc:89:39:ae:b3:
                    fa:46:29:c6:dc:fa:2b:89:26:de:ae:00:a1:6c:44:
                    ab:92:7a:cb:95:1d:e8:5a:d2:65:1e:4c:19:96:c8:
                    d2:fa:70:1c:f0:32:77:ae:dc:f6:60:f7:c5:61:99:
                    5e:f3:cb:39:f0:9c:a7:0c:e2:de:e7:29:48:6e:4a:
                    6a:e9:a8:60:0f:bf:d5:eb:20:e1:e1:f5:8a:e3:ce:
                    69:02:77:23:e8:71:5b:da:66:41:be:9d:61:65:85:
                    64:8a:12:7e:c1:ce:ef:df:d6:bd:63:c0:31:e9:eb:
                    12:8c:14:16:dd:92:c2:86:28:9f:00:7f:d8:aa:5f:
                    68:43:2b:58:cd:95:9f:d7:3a:2d:88:44:89:98:5e:
                    3b:27:99:0b:43:6b:30:8e:5b:d7:f1:c5:6b:31:cb:
                    16:af:de:75:7a:dd:c2:2e:da:0d:33:2d:a4:7f:2f:
                    4a:18:6c:f9:a9:7b:43:8b:d9:cd:f9:58:b7:d9:7c:
                    d3:4b:17:b8:ad:01:ba:83:94:19:c1:d4:ff:55:c6:
                    4c:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:FD:32:EC:8D:6E:ED:63:18:1B:6B:B9:14:BC:4F:BE:A5:77:5B:1C
            X509v3 Authority Key Identifier:
                keyid:2C:06:B6:FA:6C:B2:B8:12:2F:B5:8D:C5:25:43:67:10:93:B0:5F:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C93BD0C3E3A7B3D66E8412CBCB6BB212360244FD495BAF9B59613AD8A1F5E162/0/2C06B6FA6CB2B8122FB58DC52543671093B05FAA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C06B6FA6CB2B8122FB58DC52543671093B05FAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C93BD0C3E3A7B3D66E8412CBCB6BB212360244FD495BAF9B59613AD8A1F5E162/0/323830333a653336303a3530303a3a2f34302d3430203d3e20323634383234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e360:500::/40

    Signature Algorithm: sha256WithRSAEncryption
         33:86:7b:c0:c7:8e:e8:3e:db:2b:d7:76:fb:26:4c:3a:3f:a3:
         fe:35:82:e4:63:3c:b5:95:13:24:35:da:93:dc:ba:6a:ae:d7:
         fd:11:f8:4a:76:6d:f3:14:62:ae:a3:29:8d:07:1f:1b:61:03:
         2d:92:1a:42:8f:75:13:5e:b8:d0:f3:d1:1f:05:d9:16:18:15:
         3f:f9:a2:38:9d:53:43:c8:c4:25:83:a7:76:74:eb:0d:96:2f:
         74:bf:c3:6a:96:56:45:31:c8:17:14:a7:42:05:2f:5a:42:61:
         45:31:7f:2a:f8:52:19:c8:52:b3:b7:70:7a:04:e1:0f:0e:7d:
         68:55:28:6f:8e:26:df:97:f3:12:5c:2f:c8:4c:85:91:2e:8f:
         56:63:c3:d0:a3:de:96:91:a4:dd:cc:c8:2f:1b:d2:9f:3d:28:
         a4:55:1a:c7:19:60:fb:4b:d0:37:12:3c:9a:56:08:3a:90:20:
         cb:e9:c4:3b:cf:86:da:27:8a:82:61:d9:bf:35:0f:af:6f:f0:
         78:79:5c:59:df:16:94:a3:62:60:fe:e3:7e:16:e2:4e:14:69:
         be:fd:0f:59:62:84:eb:fb:79:ab:d3:af:be:a4:e9:06:5b:dc:
         43:b0:d1:93:cf:c7:c1:62:a4:14:9c:0c:ab:9f:1b:20:70:65:
         34:05:15:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 12:52:25 2025 by rpki-client