Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C99BB27200444D9319E263E7ABF4EF180127B095ED6BEC06DB468CF1AFB21D1F/0/323830333a663332303a3a2f33322d3332203d3e20323637393034.roa
File:                     323830333a663332303a3a2f33322d3332203d3e20323637393034.roa (raw, json)
Hash identifier:          cAPtgG9jChilbEN9kSQtNeRXaI7nVJKtcSEbcdfOQJU=
Subject key identifier:   D3:F4:08:8D:05:E1:29:35:59:85:DC:58:DD:A7:45:1B:63:2C:01:BC
Certificate issuer:       /CN=F65B01B638AFD77A8B5A796B7F900633983B48D6
Certificate serial:       2E38238FD653C7EDFB38CC4855153D492DEF5DE7
Authority key identifier: F6:5B:01:B6:38:AF:D7:7A:8B:5A:79:6B:7F:90:06:33:98:3B:48:D6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F65B01B638AFD77A8B5A796B7F900633983B48D6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C99BB27200444D9319E263E7ABF4EF180127B095ED6BEC06DB468CF1AFB21D1F/0/323830333a663332303a3a2f33322d3332203d3e20323637393034.roa
Signing time:             Tue 04 Feb 2025 18:44:00 +0000
ROA not before:           Tue 04 Feb 2025 18:39:00 +0000
ROA not after:            Tue 03 Feb 2026 18:44:00 +0000
asID:                     267904
IP address blocks:        2803:f320::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C99BB27200444D9319E263E7ABF4EF180127B095ED6BEC06DB468CF1AFB21D1F/0/F65B01B638AFD77A8B5A796B7F900633983B48D6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C99BB27200444D9319E263E7ABF4EF180127B095ED6BEC06DB468CF1AFB21D1F/0/F65B01B638AFD77A8B5A796B7F900633983B48D6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F65B01B638AFD77A8B5A796B7F900633983B48D6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 13:12:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:38:23:8f:d6:53:c7:ed:fb:38:cc:48:55:15:3d:49:2d:ef:5d:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F65B01B638AFD77A8B5A796B7F900633983B48D6
        Validity
            Not Before: Feb  4 18:39:00 2025 GMT
            Not After : Feb  3 18:44:00 2026 GMT
        Subject: CN=D3F4088D05E129355985DC58DDA7451B632C01BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:7a:e6:ca:15:c8:a3:59:75:98:a7:9b:c4:0e:
                    fb:20:4a:64:a1:5c:db:3d:6a:24:67:df:7a:61:14:
                    a6:24:c1:28:d0:9e:1e:b8:ac:13:64:be:d6:4b:af:
                    ed:b3:81:91:b0:99:da:8d:b3:3a:b7:57:f6:2f:28:
                    64:de:8f:a3:2a:28:d7:4b:32:21:52:34:e0:48:5b:
                    bd:3d:6f:dd:a5:98:fa:1a:cb:9c:a1:b8:26:6e:42:
                    e7:f5:3d:c2:ed:57:81:7b:37:8f:9e:23:05:15:ff:
                    a3:37:07:73:d5:da:d4:4d:19:c9:41:25:8b:33:0b:
                    7c:32:a4:f5:88:a7:2a:75:5c:13:6d:96:00:66:d9:
                    a7:12:5b:7f:b9:47:9e:b2:34:5c:fd:6d:d3:01:1f:
                    b6:c0:f1:2d:71:bf:62:94:d2:b3:73:db:8b:05:0d:
                    a8:1f:82:61:56:95:14:1e:a3:00:15:f9:9f:91:ae:
                    d1:f4:27:53:2d:8b:e6:29:11:cc:24:8b:e0:dc:47:
                    9a:ef:9d:eb:d4:02:02:22:54:c3:51:80:74:d7:38:
                    a3:64:23:9d:d8:16:6f:27:bd:4e:f4:25:ba:fd:bd:
                    02:29:55:f1:d8:cd:a7:86:6b:2b:0f:d0:65:46:a4:
                    ce:5a:18:03:e8:7d:76:59:e6:bd:dd:82:3a:8e:e8:
                    ba:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:F4:08:8D:05:E1:29:35:59:85:DC:58:DD:A7:45:1B:63:2C:01:BC
            X509v3 Authority Key Identifier:
                keyid:F6:5B:01:B6:38:AF:D7:7A:8B:5A:79:6B:7F:90:06:33:98:3B:48:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C99BB27200444D9319E263E7ABF4EF180127B095ED6BEC06DB468CF1AFB21D1F/0/F65B01B638AFD77A8B5A796B7F900633983B48D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F65B01B638AFD77A8B5A796B7F900633983B48D6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C99BB27200444D9319E263E7ABF4EF180127B095ED6BEC06DB468CF1AFB21D1F/0/323830333a663332303a3a2f33322d3332203d3e20323637393034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f320::/32

    Signature Algorithm: sha256WithRSAEncryption
         22:7b:51:6b:b9:62:8c:83:93:a1:28:16:74:8d:0c:37:55:4c:
         d2:63:48:91:37:e5:97:93:62:be:a3:87:80:d6:67:45:c3:ba:
         3d:3f:61:54:4f:be:c6:c2:e4:cd:11:dc:c2:3e:ea:06:bb:87:
         24:11:4d:88:ae:a3:89:bd:bc:b2:b4:e2:20:28:06:4e:fc:3c:
         dc:a8:c8:5c:7f:cf:81:9d:50:33:eb:bc:42:e4:5d:df:d7:4e:
         0c:76:30:92:48:e5:81:25:9c:48:d4:53:b5:ba:29:72:f3:9f:
         4e:de:7c:6e:43:cd:37:df:cb:4a:85:ef:f4:2c:af:98:e1:1b:
         97:0a:ab:c0:43:4e:cb:c4:43:0b:c7:6b:f3:24:6a:2b:bb:b8:
         c1:d9:67:81:20:e7:6e:c6:95:1d:2a:7c:b9:c6:91:31:53:ab:
         c5:b0:c5:46:f5:b5:3c:f5:1b:63:ce:34:80:52:e9:87:a9:6d:
         31:9a:02:09:2a:96:64:54:0c:29:5c:4e:48:d5:f5:af:7d:72:
         74:71:7d:62:00:4e:28:61:a4:bb:23:d2:33:69:ba:a6:c7:b4:
         e3:da:ce:bf:74:36:ec:0a:1d:71:01:cb:73:53:0e:9d:7c:39:
         9f:b6:e7:d3:0d:11:08:b5:98:b6:94:f9:42:41:a2:08:a8:ad:
         1f:4c:db:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 21:08:07 2025 by rpki-client