Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CFA05B91C0B6502F383C73BCCE72873D13422A0C22B0BC4A30AE1FF53B4B2833/0/323830333a326565303a3a2f33322d3438203d3e20323639393833.roa
File:                     323830333a326565303a3a2f33322d3438203d3e20323639393833.roa (raw, json)
Hash identifier:          20dhYSeJNmiJ0gq0ycna7RczAtYwTwSv/nYb0+F/uUs=
Subject key identifier:   2B:75:6A:0C:DE:51:59:18:49:7F:E1:6A:27:AC:7D:63:D8:5B:9D:57
Certificate issuer:       /CN=C1C868DAE462CF1EFAC4EF35B251505AC4C7F982
Certificate serial:       0B3E0C7F6422B0F914EE9BEA7214296777FB1567
Authority key identifier: C1:C8:68:DA:E4:62:CF:1E:FA:C4:EF:35:B2:51:50:5A:C4:C7:F9:82
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C1C868DAE462CF1EFAC4EF35B251505AC4C7F982.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CFA05B91C0B6502F383C73BCCE72873D13422A0C22B0BC4A30AE1FF53B4B2833/0/323830333a326565303a3a2f33322d3438203d3e20323639393833.roa
Signing time:             Tue 04 Feb 2025 19:59:53 +0000
ROA not before:           Tue 04 Feb 2025 19:54:53 +0000
ROA not after:            Tue 03 Feb 2026 19:59:53 +0000
asID:                     269983
IP address blocks:        2803:2ee0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CFA05B91C0B6502F383C73BCCE72873D13422A0C22B0BC4A30AE1FF53B4B2833/0/C1C868DAE462CF1EFAC4EF35B251505AC4C7F982.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CFA05B91C0B6502F383C73BCCE72873D13422A0C22B0BC4A30AE1FF53B4B2833/0/C1C868DAE462CF1EFAC4EF35B251505AC4C7F982.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C1C868DAE462CF1EFAC4EF35B251505AC4C7F982.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:3e:0c:7f:64:22:b0:f9:14:ee:9b:ea:72:14:29:67:77:fb:15:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C1C868DAE462CF1EFAC4EF35B251505AC4C7F982
        Validity
            Not Before: Feb  4 19:54:53 2025 GMT
            Not After : Feb  3 19:59:53 2026 GMT
        Subject: CN=2B756A0CDE515918497FE16A27AC7D63D85B9D57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:de:66:cf:49:7f:3b:f3:39:77:07:e8:83:66:
                    16:75:0b:b7:d3:25:35:20:27:83:ae:0d:ad:74:9e:
                    37:39:9c:39:d9:18:be:d6:74:6b:ae:aa:2d:44:43:
                    62:d8:46:0a:22:69:e4:de:60:3b:76:40:3f:f1:58:
                    5d:d1:8a:3f:e7:af:dc:1a:b3:59:6c:9f:81:74:3a:
                    e6:1b:d3:37:17:ec:9b:4d:a7:9b:49:ce:39:bc:59:
                    cf:96:2e:74:2a:19:1d:0e:f8:92:3d:1e:32:15:8c:
                    0d:dc:75:4d:bb:91:47:ee:89:35:cd:80:01:84:84:
                    f7:4c:b1:5c:1d:ec:7b:d7:0c:e5:01:9d:de:6c:7c:
                    f8:85:3b:e5:e0:ba:b0:66:7b:ff:73:6d:6b:a6:7d:
                    29:04:32:8c:b2:1b:0a:8a:57:77:91:5e:2e:c0:59:
                    90:a2:27:c5:8b:d4:27:fa:6a:1e:2c:cf:0a:62:15:
                    8f:2a:19:6b:92:72:01:f1:7a:16:36:b4:8d:9e:1e:
                    e9:34:9f:25:99:6b:48:72:82:13:ce:a9:6d:1a:d4:
                    a4:1c:ea:9f:df:fe:5c:c5:8a:d9:0f:f5:76:cc:a5:
                    82:85:8f:0d:b4:ba:38:e2:07:b5:61:13:41:c3:f5:
                    95:dd:59:60:f2:2a:b1:7b:81:a9:4a:11:97:4f:c2:
                    49:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:75:6A:0C:DE:51:59:18:49:7F:E1:6A:27:AC:7D:63:D8:5B:9D:57
            X509v3 Authority Key Identifier:
                keyid:C1:C8:68:DA:E4:62:CF:1E:FA:C4:EF:35:B2:51:50:5A:C4:C7:F9:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CFA05B91C0B6502F383C73BCCE72873D13422A0C22B0BC4A30AE1FF53B4B2833/0/C1C868DAE462CF1EFAC4EF35B251505AC4C7F982.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C1C868DAE462CF1EFAC4EF35B251505AC4C7F982.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CFA05B91C0B6502F383C73BCCE72873D13422A0C22B0BC4A30AE1FF53B4B2833/0/323830333a326565303a3a2f33322d3438203d3e20323639393833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2ee0::/32

    Signature Algorithm: sha256WithRSAEncryption
         65:77:77:fa:96:7b:eb:8b:1a:77:08:53:a5:68:83:d6:2c:c1:
         00:84:3b:da:8f:68:17:33:32:a2:74:bc:04:08:bb:8f:ea:c1:
         f4:a0:e8:43:8c:dc:40:de:1b:2a:9f:f0:0c:62:75:3d:18:48:
         90:58:7e:43:65:bc:36:c5:c7:ba:35:04:32:5c:ac:94:24:7e:
         16:df:c9:11:1b:a9:35:05:52:c6:ce:a9:65:78:8f:0c:72:9e:
         b4:0b:3f:07:b1:cc:8a:94:62:aa:91:b6:6a:be:2b:b9:76:88:
         f0:8b:84:f2:b7:82:2a:b2:3a:4c:d9:32:db:d2:a1:14:40:72:
         6c:2c:b4:71:35:60:07:ac:36:86:d8:5f:d3:08:e8:a3:a2:c6:
         16:d8:db:16:14:46:7b:3e:e9:7f:9d:f3:19:d4:62:74:4e:ca:
         97:d1:5a:0f:57:00:77:0a:9d:ba:45:5a:11:4b:5d:59:b3:2f:
         61:20:bd:6a:1d:30:fa:52:20:64:47:8d:87:57:6d:78:f8:51:
         b9:1b:ec:34:ac:4f:8e:f1:29:16:b7:4e:2d:aa:fe:1a:63:e3:
         59:b1:06:56:f9:0a:f1:21:46:9a:e0:1c:f7:8d:a3:14:e4:f7:
         c0:ae:ac:44:61:d2:f5:d0:51:f7:65:3b:02:14:e0:76:b3:53:
         25:a3:00:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:24:16 2025 by rpki-client