Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CF416BA52A17B78F7D57F16A98E5D9A0B7DC328D02D2CC14A9D7467235748F04/0/323830333a646630303a3a2f33322d3332203d3e20323632313939.roa
File:                     323830333a646630303a3a2f33322d3332203d3e20323632313939.roa (raw, json)
Hash identifier:          yzUKwBVMX2yVJmFETaQt8UDC9USBxovjPze5PeISebE=
Subject key identifier:   47:BF:32:D3:1D:04:94:B4:5C:33:46:FE:50:9A:66:43:48:FC:22:14
Certificate issuer:       /CN=B38BDE76E463241532282B264A16F479CD7D0224
Certificate serial:       028DD299704BA8DFB0C86CDECE13AB89568C6455
Authority key identifier: B3:8B:DE:76:E4:63:24:15:32:28:2B:26:4A:16:F4:79:CD:7D:02:24
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B38BDE76E463241532282B264A16F479CD7D0224.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CF416BA52A17B78F7D57F16A98E5D9A0B7DC328D02D2CC14A9D7467235748F04/0/323830333a646630303a3a2f33322d3332203d3e20323632313939.roa
Signing time:             Tue 04 Feb 2025 18:39:51 +0000
ROA not before:           Tue 04 Feb 2025 18:34:51 +0000
ROA not after:            Tue 03 Feb 2026 18:39:51 +0000
asID:                     262199
IP address blocks:        2803:df00::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CF416BA52A17B78F7D57F16A98E5D9A0B7DC328D02D2CC14A9D7467235748F04/0/B38BDE76E463241532282B264A16F479CD7D0224.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CF416BA52A17B78F7D57F16A98E5D9A0B7DC328D02D2CC14A9D7467235748F04/0/B38BDE76E463241532282B264A16F479CD7D0224.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B38BDE76E463241532282B264A16F479CD7D0224.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 21:54:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:8d:d2:99:70:4b:a8:df:b0:c8:6c:de:ce:13:ab:89:56:8c:64:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B38BDE76E463241532282B264A16F479CD7D0224
        Validity
            Not Before: Feb  4 18:34:51 2025 GMT
            Not After : Feb  3 18:39:51 2026 GMT
        Subject: CN=47BF32D31D0494B45C3346FE509A664348FC2214
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:98:3f:c5:59:4f:bb:1f:90:6d:91:93:a7:ce:
                    7d:15:85:39:14:d1:90:07:8a:cc:b4:ca:e2:cc:68:
                    d3:b4:c1:d2:8c:f9:dc:26:1a:d2:0c:0e:a1:e6:63:
                    eb:38:fb:0c:a0:3f:1b:92:4e:87:39:f2:58:c4:a2:
                    76:86:4c:e1:5c:01:6f:91:4d:9f:da:50:74:6d:c7:
                    3a:6d:64:40:01:3e:7e:d0:9b:2e:d0:98:38:02:9b:
                    13:2b:e6:4a:ec:18:c4:0a:6b:b8:d4:9f:2b:49:89:
                    4b:69:07:9a:79:df:94:bb:9d:dc:f8:61:47:10:e0:
                    47:1d:94:61:d5:a1:13:4a:93:c8:93:4e:0e:25:dd:
                    3c:21:39:7f:94:5d:fe:5e:05:cd:b1:57:de:a5:86:
                    34:bc:3d:0d:71:f7:fa:8c:ac:c1:d7:61:a2:13:77:
                    15:c8:3a:7b:73:1d:7d:ff:b8:8f:75:44:49:a6:0d:
                    02:ae:8f:5c:80:3a:96:ef:29:1e:8d:4a:b5:9a:25:
                    32:20:65:76:9c:4f:60:a2:c3:3e:54:c7:ba:c5:94:
                    6e:68:68:86:da:c4:3b:21:86:4e:4d:42:0c:2d:47:
                    02:f3:95:97:2e:8f:d2:21:61:54:99:dc:c1:f7:dd:
                    af:a6:7e:65:ce:c0:4d:1c:1f:8f:9b:ca:d9:66:52:
                    d5:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:BF:32:D3:1D:04:94:B4:5C:33:46:FE:50:9A:66:43:48:FC:22:14
            X509v3 Authority Key Identifier:
                keyid:B3:8B:DE:76:E4:63:24:15:32:28:2B:26:4A:16:F4:79:CD:7D:02:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CF416BA52A17B78F7D57F16A98E5D9A0B7DC328D02D2CC14A9D7467235748F04/0/B38BDE76E463241532282B264A16F479CD7D0224.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B38BDE76E463241532282B264A16F479CD7D0224.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CF416BA52A17B78F7D57F16A98E5D9A0B7DC328D02D2CC14A9D7467235748F04/0/323830333a646630303a3a2f33322d3332203d3e20323632313939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:df00::/32

    Signature Algorithm: sha256WithRSAEncryption
         2c:09:dd:0e:bb:fa:60:9d:f2:a1:3a:b1:84:3e:dc:a0:2d:dd:
         cd:c5:60:21:ed:16:8a:95:82:5f:ef:60:8b:19:e7:57:7e:92:
         b0:d6:d7:18:82:16:d8:26:c9:80:e1:fe:f0:83:0f:e9:c2:5d:
         2e:7e:2a:8c:34:14:56:02:7f:15:4e:ee:2e:01:54:ef:60:9d:
         6d:68:27:93:2a:17:96:cd:42:2e:ce:81:e9:8c:63:1f:38:12:
         3f:15:2e:34:a3:7e:b0:84:b2:52:45:bf:1c:fa:68:c4:c0:45:
         28:22:75:cd:d2:d3:95:46:4a:37:2b:e7:41:c2:91:b3:ec:02:
         83:6a:c0:d9:e2:f2:3f:1c:05:6d:37:bb:0f:16:e5:ce:24:f0:
         a4:6d:87:88:25:e4:cb:2b:d2:e6:fe:c1:a1:af:c4:26:37:16:
         a2:45:d2:e2:c1:84:ad:f7:43:e7:3b:3c:b9:1c:8b:53:38:0d:
         62:f4:34:7a:d2:ad:e6:89:7d:d1:8b:f6:b2:51:63:5c:55:2d:
         ae:d1:c8:16:49:1b:4f:d2:84:35:ba:fe:02:bb:53:e8:9e:8e:
         1f:30:18:df:dc:52:1b:70:62:ba:6b:85:b4:d5:3e:e8:76:e6:
         f9:78:23:f3:ee:14:7c:a7:b8:d0:20:31:bb:98:67:29:86:64:
         11:08:2e:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:16:06 2025 by rpki-client