Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D03E1671E25486BC2C4EA6EB019714C150FB413CDC3CB17322824E7017771D8F/0/323830333a373739303a3a2f33322d3430203d3e20323733303639.roa
File:                     323830333a373739303a3a2f33322d3430203d3e20323733303639.roa (raw, json)
Hash identifier:          oqnsHh67Jc9ybOXWYFSFPmIjMFN52/LKI+KBo50wnxI=
Subject key identifier:   31:D4:7E:64:06:6B:33:CF:98:0D:E9:4B:9D:C6:0A:8A:33:95:85:D4
Certificate issuer:       /CN=7DEAF24C800146A2F77609AEE7A48330BA4AAE2B
Certificate serial:       7A3809D11F42B6A7835A1B42373EB51748674177
Authority key identifier: 7D:EA:F2:4C:80:01:46:A2:F7:76:09:AE:E7:A4:83:30:BA:4A:AE:2B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7DEAF24C800146A2F77609AEE7A48330BA4AAE2B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D03E1671E25486BC2C4EA6EB019714C150FB413CDC3CB17322824E7017771D8F/0/323830333a373739303a3a2f33322d3430203d3e20323733303639.roa
Signing time:             Mon 31 Mar 2025 15:15:00 +0000
ROA not before:           Mon 31 Mar 2025 15:10:00 +0000
ROA not after:            Mon 30 Mar 2026 15:15:00 +0000
asID:                     273069
IP address blocks:        2803:7790::/32 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D03E1671E25486BC2C4EA6EB019714C150FB413CDC3CB17322824E7017771D8F/0/7DEAF24C800146A2F77609AEE7A48330BA4AAE2B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D03E1671E25486BC2C4EA6EB019714C150FB413CDC3CB17322824E7017771D8F/0/7DEAF24C800146A2F77609AEE7A48330BA4AAE2B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7DEAF24C800146A2F77609AEE7A48330BA4AAE2B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Apr 2025 11:56:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:38:09:d1:1f:42:b6:a7:83:5a:1b:42:37:3e:b5:17:48:67:41:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7DEAF24C800146A2F77609AEE7A48330BA4AAE2B
        Validity
            Not Before: Mar 31 15:10:00 2025 GMT
            Not After : Mar 30 15:15:00 2026 GMT
        Subject: CN=31D47E64066B33CF980DE94B9DC60A8A339585D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:99:c8:06:ff:47:a4:26:5a:83:05:ec:54:85:
                    3b:1f:c2:4b:a5:c4:64:f4:e3:93:e4:73:4d:0d:e0:
                    35:02:26:d0:e6:37:19:62:99:33:61:12:aa:76:22:
                    2e:02:d8:dc:47:65:46:73:85:b7:33:b6:10:ea:9e:
                    c4:76:64:18:42:10:c8:94:ab:8a:f1:8c:38:ae:46:
                    bb:f3:09:a4:d5:a8:c6:09:30:7b:78:20:d1:dd:b6:
                    6d:e3:2c:26:2e:9f:01:f9:58:55:87:b3:d5:e7:24:
                    6f:4f:e1:95:cf:9e:d7:dc:58:9f:fb:fc:a9:ce:2e:
                    57:c6:f9:81:8e:f1:f6:39:e6:b1:35:25:8c:53:5f:
                    68:ea:4c:02:31:8c:1b:95:73:22:c2:db:bd:81:6b:
                    9f:89:2c:d9:8d:ed:e0:63:f6:6e:a1:01:f4:10:01:
                    03:de:e4:99:84:72:28:d4:02:8d:60:03:c2:e4:46:
                    78:c0:13:f5:c8:3b:9c:74:6c:de:2b:f2:79:ed:64:
                    78:c5:ba:ba:af:7a:e0:4e:5e:40:d8:eb:18:b3:0d:
                    fe:9c:f4:46:b3:e4:d7:87:85:87:be:03:70:fa:94:
                    a7:f8:2d:d1:30:68:cd:e5:50:47:de:29:43:f7:04:
                    67:84:a5:63:90:c3:31:68:6c:6c:86:8e:98:7a:2b:
                    f2:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:D4:7E:64:06:6B:33:CF:98:0D:E9:4B:9D:C6:0A:8A:33:95:85:D4
            X509v3 Authority Key Identifier:
                keyid:7D:EA:F2:4C:80:01:46:A2:F7:76:09:AE:E7:A4:83:30:BA:4A:AE:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D03E1671E25486BC2C4EA6EB019714C150FB413CDC3CB17322824E7017771D8F/0/7DEAF24C800146A2F77609AEE7A48330BA4AAE2B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7DEAF24C800146A2F77609AEE7A48330BA4AAE2B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D03E1671E25486BC2C4EA6EB019714C150FB413CDC3CB17322824E7017771D8F/0/323830333a373739303a3a2f33322d3430203d3e20323733303639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7790::/32

    Signature Algorithm: sha256WithRSAEncryption
         3a:24:a6:47:43:03:2d:a9:37:bb:46:32:e6:a5:b4:70:bf:5c:
         02:91:e5:52:de:25:05:a0:f3:af:f7:74:42:65:8f:85:8c:83:
         d3:f0:d2:91:0d:83:c4:c9:26:98:36:a8:db:5c:a8:53:ea:28:
         f9:4a:ab:ed:9d:9f:43:0b:06:35:db:15:b6:75:be:9c:bf:89:
         98:03:c1:63:21:8b:2a:e1:97:f8:ad:71:a3:76:ec:c8:61:0a:
         89:fd:d8:51:d2:fc:82:aa:8e:17:ec:36:b0:3a:4d:68:15:b9:
         78:db:66:92:0d:47:52:42:c9:d0:eb:4f:99:e5:c1:af:ce:49:
         9d:c6:98:30:72:d6:32:5d:dd:d6:1a:ff:c6:c1:91:f9:41:90:
         34:c1:c0:a8:0d:5f:af:6c:16:ea:9e:d9:0b:7c:32:13:1d:59:
         ff:f2:4a:a0:7d:a7:4b:b5:49:1b:31:58:87:1e:d0:c0:ca:21:
         11:e6:b6:39:5e:c3:81:be:8b:ae:ad:cf:81:18:65:c7:67:9c:
         73:88:56:ff:23:52:63:37:c0:bc:15:aa:96:90:31:92:fe:cd:
         a2:2f:f6:3e:0a:4f:5d:08:49:4d:81:6b:8d:fa:45:6f:e3:ad:
         37:c7:ae:b5:22:6a:65:21:66:19:25:60:d3:22:91:fd:ab:a3:
         5b:c7:86:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:12:43 2025 by rpki-client