Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D233B807710758B592DE153A98CC3B3CE031BE2875C996CD8F7E46E3526AAF20/0/323830333a313138303a393a3a2f34382d3438203d3e20323633323432.roa
File:                     323830333a313138303a393a3a2f34382d3438203d3e20323633323432.roa (raw, json)
Hash identifier:          GUS188hqdS5xZm2HAFtWf/5C3w6kIkISR/xuerMybis=
Subject key identifier:   92:31:2B:D7:25:44:FB:09:0B:2B:EB:51:FA:9F:7F:3D:06:2D:DC:CE
Certificate issuer:       /CN=F84C64765934CC9A2CE97A1150E058489F19D535
Certificate serial:       37D3E7218498A643CE283C1A840BB9F2F58DC1B7
Authority key identifier: F8:4C:64:76:59:34:CC:9A:2C:E9:7A:11:50:E0:58:48:9F:19:D5:35
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F84C64765934CC9A2CE97A1150E058489F19D535.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D233B807710758B592DE153A98CC3B3CE031BE2875C996CD8F7E46E3526AAF20/0/323830333a313138303a393a3a2f34382d3438203d3e20323633323432.roa
Signing time:             Fri 11 Apr 2025 16:14:34 +0000
ROA not before:           Fri 11 Apr 2025 16:09:34 +0000
ROA not after:            Fri 10 Apr 2026 16:14:34 +0000
asID:                     263242
IP address blocks:        2803:1180:9::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D233B807710758B592DE153A98CC3B3CE031BE2875C996CD8F7E46E3526AAF20/0/F84C64765934CC9A2CE97A1150E058489F19D535.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D233B807710758B592DE153A98CC3B3CE031BE2875C996CD8F7E46E3526AAF20/0/F84C64765934CC9A2CE97A1150E058489F19D535.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F84C64765934CC9A2CE97A1150E058489F19D535.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 17:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:d3:e7:21:84:98:a6:43:ce:28:3c:1a:84:0b:b9:f2:f5:8d:c1:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F84C64765934CC9A2CE97A1150E058489F19D535
        Validity
            Not Before: Apr 11 16:09:34 2025 GMT
            Not After : Apr 10 16:14:34 2026 GMT
        Subject: CN=92312BD72544FB090B2BEB51FA9F7F3D062DDCCE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:e8:0f:46:12:43:27:13:b6:49:79:d5:bf:32:
                    d4:ee:26:fe:fb:47:74:81:cf:3a:bf:a1:98:7c:9d:
                    35:86:71:bc:b7:5a:7d:31:18:da:4c:85:c7:09:9d:
                    79:85:c3:c8:d0:ec:7b:4a:b4:65:ad:58:33:be:03:
                    92:52:00:9f:e8:aa:59:6b:8c:98:62:76:bf:36:65:
                    13:02:1e:a7:64:5a:2a:17:65:d5:08:bb:5f:35:a3:
                    d6:c4:81:09:19:3f:1a:c1:62:86:bf:7b:d6:e5:08:
                    6f:2b:fd:b2:28:95:a8:d7:f2:31:75:54:96:c1:22:
                    e6:07:2c:9d:40:79:38:cf:1e:b1:02:7f:27:99:aa:
                    f1:cb:cb:57:68:de:d6:bb:f2:f3:13:c2:da:62:b2:
                    df:ce:c4:c0:dd:ac:15:04:85:4a:59:f1:31:8d:e5:
                    3c:f9:16:c7:47:02:e6:c2:fe:59:88:5b:08:b3:bb:
                    79:16:59:2b:7a:20:ed:77:db:8a:b4:62:3e:f1:4f:
                    f0:16:a7:e2:a4:ef:5e:14:bc:0d:15:92:14:c3:66:
                    84:c7:c2:63:c9:cf:f7:78:9d:92:90:55:7b:5f:62:
                    7c:de:3d:a6:99:5d:d7:81:b2:1d:ca:79:93:0b:0f:
                    85:10:25:e0:60:9c:31:ee:4d:8f:51:5f:29:01:cb:
                    7f:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:31:2B:D7:25:44:FB:09:0B:2B:EB:51:FA:9F:7F:3D:06:2D:DC:CE
            X509v3 Authority Key Identifier:
                keyid:F8:4C:64:76:59:34:CC:9A:2C:E9:7A:11:50:E0:58:48:9F:19:D5:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D233B807710758B592DE153A98CC3B3CE031BE2875C996CD8F7E46E3526AAF20/0/F84C64765934CC9A2CE97A1150E058489F19D535.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F84C64765934CC9A2CE97A1150E058489F19D535.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D233B807710758B592DE153A98CC3B3CE031BE2875C996CD8F7E46E3526AAF20/0/323830333a313138303a393a3a2f34382d3438203d3e20323633323432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1180:9::/48

    Signature Algorithm: sha256WithRSAEncryption
         a0:4d:e0:3d:73:76:d9:25:59:2b:60:3d:34:7a:ba:97:06:40:
         fc:eb:e4:96:c5:b4:bf:33:9c:18:6f:77:ed:48:8f:df:48:98:
         0c:a0:c0:9b:33:c4:5f:98:29:fd:44:b7:ba:30:71:5b:d1:69:
         31:1c:f5:24:ae:df:bd:8c:79:96:e4:ed:9f:1c:c8:9d:92:8a:
         6e:6e:67:35:fe:d0:85:cf:90:d9:36:5a:57:c6:83:93:55:ae:
         15:7b:0a:12:1c:4a:fa:ee:11:cc:d4:5b:f7:52:9b:df:a4:37:
         a3:80:30:75:71:21:1c:5b:8a:28:85:7f:98:1b:9e:f2:54:25:
         34:59:a8:e4:5f:50:4b:27:bb:26:a7:2e:ae:24:9d:65:c2:21:
         e2:07:54:25:e7:17:32:f6:95:f4:2d:73:1f:a1:ef:91:7a:2a:
         2b:78:f4:83:a3:11:34:39:1a:87:3c:b1:74:7f:e2:3e:f6:4b:
         54:08:44:0a:6c:fe:a0:d3:76:41:6a:58:9a:b2:9a:b7:bd:eb:
         78:22:cc:7f:75:9e:07:88:c6:f6:9e:14:34:de:7d:e1:c2:39:
         44:82:8d:81:16:90:d2:77:2e:cf:bb:e7:20:37:44:9a:db:6b:
         9d:4a:71:8e:28:d3:91:8e:40:9a:e8:75:19:8a:af:92:94:e2:
         0e:af:82:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 13:49:00 2025 by rpki-client