Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CBD96401DE4D7188856DD4964F02A94BC693C863352C2C186F6237F91268715E/0/323830333a323332303a3a2f33322d3438203d3e20323636373231.roa
File:                     323830333a323332303a3a2f33322d3438203d3e20323636373231.roa (raw, json)
Hash identifier:          PrWzXIRq05udcjHUwt5ohrbYi2iwnorvbs6feaqe8jQ=
Subject key identifier:   65:48:83:06:03:32:52:7C:83:D0:C4:78:52:F4:CC:02:5B:EB:C6:70
Certificate issuer:       /CN=E84F144969E820C9D6A078340F2D2DFBB8604F63
Certificate serial:       6D2377958B74A73DF20448490C6319A51C5DCCB6
Authority key identifier: E8:4F:14:49:69:E8:20:C9:D6:A0:78:34:0F:2D:2D:FB:B8:60:4F:63
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E84F144969E820C9D6A078340F2D2DFBB8604F63.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CBD96401DE4D7188856DD4964F02A94BC693C863352C2C186F6237F91268715E/0/323830333a323332303a3a2f33322d3438203d3e20323636373231.roa
Signing time:             Tue 04 Feb 2025 20:08:20 +0000
ROA not before:           Tue 04 Feb 2025 20:03:20 +0000
ROA not after:            Tue 03 Feb 2026 20:08:20 +0000
asID:                     266721
IP address blocks:        2803:2320::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CBD96401DE4D7188856DD4964F02A94BC693C863352C2C186F6237F91268715E/0/E84F144969E820C9D6A078340F2D2DFBB8604F63.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CBD96401DE4D7188856DD4964F02A94BC693C863352C2C186F6237F91268715E/0/E84F144969E820C9D6A078340F2D2DFBB8604F63.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E84F144969E820C9D6A078340F2D2DFBB8604F63.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 18:19:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:23:77:95:8b:74:a7:3d:f2:04:48:49:0c:63:19:a5:1c:5d:cc:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E84F144969E820C9D6A078340F2D2DFBB8604F63
        Validity
            Not Before: Feb  4 20:03:20 2025 GMT
            Not After : Feb  3 20:08:20 2026 GMT
        Subject: CN=654883060332527C83D0C47852F4CC025BEBC670
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:b3:52:e9:25:8d:5f:74:cb:0e:28:37:5b:ce:
                    d1:37:12:84:51:c8:7a:92:cb:81:ce:31:01:41:c0:
                    34:ad:b1:f0:33:df:16:72:11:7d:0a:eb:43:07:13:
                    06:2e:88:e4:e5:43:1b:66:c7:db:41:40:77:0a:0a:
                    56:dd:4a:ab:40:24:8a:30:d2:f5:bb:bd:06:8a:1b:
                    d5:d8:21:3c:75:91:ff:46:84:ee:1a:59:32:a5:b3:
                    b4:1d:bf:01:d3:0d:be:a6:e3:30:3d:84:18:77:d2:
                    32:76:4d:73:bd:57:17:c9:d5:0f:f3:0a:d7:f3:87:
                    d1:83:12:bd:72:6b:98:d5:a3:03:ed:47:fa:cf:8f:
                    18:c8:37:ba:69:38:53:6b:63:f9:b8:03:83:a3:f0:
                    a7:df:05:83:b0:ec:0f:97:f9:21:ca:99:18:cd:f7:
                    2c:78:ce:4e:e2:e8:68:36:a6:e2:d7:66:c6:c9:7a:
                    a4:01:c7:3f:c2:85:bc:de:58:df:bb:9b:9f:6e:a2:
                    51:70:34:38:90:d5:59:de:b1:e1:da:36:9b:e3:e0:
                    55:75:a4:b6:20:a7:05:c4:db:fd:61:e0:c1:16:58:
                    8a:47:18:91:d4:0b:0c:87:04:eb:2c:56:2e:62:80:
                    c4:2b:94:5e:d2:36:da:86:82:79:43:d1:0b:b1:61:
                    1f:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:48:83:06:03:32:52:7C:83:D0:C4:78:52:F4:CC:02:5B:EB:C6:70
            X509v3 Authority Key Identifier:
                keyid:E8:4F:14:49:69:E8:20:C9:D6:A0:78:34:0F:2D:2D:FB:B8:60:4F:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CBD96401DE4D7188856DD4964F02A94BC693C863352C2C186F6237F91268715E/0/E84F144969E820C9D6A078340F2D2DFBB8604F63.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E84F144969E820C9D6A078340F2D2DFBB8604F63.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CBD96401DE4D7188856DD4964F02A94BC693C863352C2C186F6237F91268715E/0/323830333a323332303a3a2f33322d3438203d3e20323636373231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2320::/32

    Signature Algorithm: sha256WithRSAEncryption
         28:fc:d2:a4:ad:cd:43:bc:e5:4d:1f:57:0a:bc:9f:88:97:37:
         4a:df:51:81:b3:38:76:8e:68:a0:91:40:d4:7c:c8:a2:3a:56:
         8f:be:7a:fb:5b:16:5f:55:be:b9:c4:59:dc:cb:1f:bb:e0:da:
         53:47:36:48:aa:78:68:a9:1f:9e:28:7d:57:d3:04:88:86:3e:
         28:63:f0:0c:4f:b6:9f:3b:82:04:8b:d4:58:09:b6:27:76:23:
         07:1f:49:07:04:42:83:48:6f:df:46:88:20:16:77:6f:83:07:
         5f:20:33:cd:ac:ba:39:6f:6a:51:43:0a:3d:eb:8a:b0:ea:4d:
         45:f7:c2:b1:98:b6:9a:e5:95:4e:23:d4:9d:ff:67:0f:ee:e2:
         26:1e:30:d5:cf:ca:b3:72:f1:21:93:6c:47:60:53:79:e6:62:
         80:f6:75:2b:6b:27:ef:a2:46:66:fa:93:0c:43:a1:8a:69:5d:
         19:94:bc:21:09:a8:c3:ad:61:ac:03:9e:8d:6a:99:2f:72:1b:
         2a:29:ec:a4:38:26:35:4b:42:3f:eb:41:39:32:48:02:3c:4f:
         28:f5:68:61:fa:a4:f4:35:29:b6:2d:9f:39:85:57:d1:a1:38:
         03:c4:f5:e9:4f:63:7f:13:a0:e0:59:ac:5c:af:b7:5b:5b:58:
         97:34:26:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:24:47 2025 by rpki-client