Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D233B807710758B592DE153A98CC3B3CE031BE2875C996CD8F7E46E3526AAF20/0/323830333a313138303a643a3a2f34382d3438203d3e20323633323432.roa
File:                     323830333a313138303a643a3a2f34382d3438203d3e20323633323432.roa (raw, json)
Hash identifier:          h+JtqzE5sQfn7nPevttJvoGM4camjnUvd5b2DZFRiYw=
Subject key identifier:   D9:33:51:6C:BA:1C:83:C1:F7:88:53:32:D3:04:51:16:F9:6F:71:89
Certificate issuer:       /CN=F84C64765934CC9A2CE97A1150E058489F19D535
Certificate serial:       03C6FEC177B0EC914D3D4E77282CE2D544F1466A
Authority key identifier: F8:4C:64:76:59:34:CC:9A:2C:E9:7A:11:50:E0:58:48:9F:19:D5:35
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F84C64765934CC9A2CE97A1150E058489F19D535.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D233B807710758B592DE153A98CC3B3CE031BE2875C996CD8F7E46E3526AAF20/0/323830333a313138303a643a3a2f34382d3438203d3e20323633323432.roa
Signing time:             Fri 11 Apr 2025 16:14:36 +0000
ROA not before:           Fri 11 Apr 2025 16:09:36 +0000
ROA not after:            Fri 10 Apr 2026 16:14:36 +0000
asID:                     263242
IP address blocks:        2803:1180:d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D233B807710758B592DE153A98CC3B3CE031BE2875C996CD8F7E46E3526AAF20/0/F84C64765934CC9A2CE97A1150E058489F19D535.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D233B807710758B592DE153A98CC3B3CE031BE2875C996CD8F7E46E3526AAF20/0/F84C64765934CC9A2CE97A1150E058489F19D535.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F84C64765934CC9A2CE97A1150E058489F19D535.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 17:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:c6:fe:c1:77:b0:ec:91:4d:3d:4e:77:28:2c:e2:d5:44:f1:46:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F84C64765934CC9A2CE97A1150E058489F19D535
        Validity
            Not Before: Apr 11 16:09:36 2025 GMT
            Not After : Apr 10 16:14:36 2026 GMT
        Subject: CN=D933516CBA1C83C1F7885332D3045116F96F7189
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:0b:a3:8c:b2:bd:9c:27:7d:7c:75:0d:d0:cf:
                    cb:d9:92:c0:ee:35:91:de:40:c3:8f:dd:b7:70:c0:
                    65:3f:a0:ef:bd:8f:46:0f:1f:2f:54:d4:ed:f4:a8:
                    e6:3c:58:31:9d:25:17:51:d9:cb:63:7c:0a:22:1e:
                    b6:c9:b0:cb:1f:ac:4b:a3:3b:87:27:b2:7e:6d:ce:
                    d5:dd:db:93:40:f7:7e:60:a7:18:de:95:af:71:31:
                    a5:0a:15:0d:dd:04:6d:d7:d5:79:3d:6a:00:dc:d4:
                    b4:55:79:6d:14:e5:01:c1:b4:37:fd:98:41:79:fa:
                    77:e1:6a:68:fd:20:10:4e:76:e7:f5:35:bb:85:6b:
                    c6:f8:98:a1:8e:0c:df:de:70:04:2e:cb:63:15:90:
                    27:bf:2d:ca:51:d0:f2:d2:66:32:74:93:56:98:a5:
                    d0:dd:53:be:57:38:7c:4c:8d:6b:c7:a4:64:2c:73:
                    76:e7:b7:ff:24:cc:49:fe:eb:68:f1:13:a0:09:98:
                    93:44:38:19:97:88:60:26:be:c1:e2:80:7a:9b:e6:
                    ac:02:7a:61:66:8f:4a:0e:c0:dc:af:ec:1c:d3:a6:
                    22:6b:d6:4f:ef:5a:ba:4f:4a:cb:f4:d3:ea:48:e2:
                    19:03:99:fe:5b:95:00:a4:8e:08:75:50:dd:68:9a:
                    41:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:33:51:6C:BA:1C:83:C1:F7:88:53:32:D3:04:51:16:F9:6F:71:89
            X509v3 Authority Key Identifier:
                keyid:F8:4C:64:76:59:34:CC:9A:2C:E9:7A:11:50:E0:58:48:9F:19:D5:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D233B807710758B592DE153A98CC3B3CE031BE2875C996CD8F7E46E3526AAF20/0/F84C64765934CC9A2CE97A1150E058489F19D535.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F84C64765934CC9A2CE97A1150E058489F19D535.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D233B807710758B592DE153A98CC3B3CE031BE2875C996CD8F7E46E3526AAF20/0/323830333a313138303a643a3a2f34382d3438203d3e20323633323432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1180:d::/48

    Signature Algorithm: sha256WithRSAEncryption
         27:fb:6c:7b:63:fe:3e:0b:51:1e:31:12:65:1e:5f:a4:d1:3f:
         22:19:c6:25:e7:a7:6c:ce:73:b6:9b:0d:b8:d1:b5:6b:3d:8a:
         f2:ed:85:24:93:d6:e0:e4:b4:b5:ed:02:b4:9b:8c:73:78:00:
         d8:5e:ce:9c:6a:f1:de:b9:8d:f4:cc:87:ac:92:35:27:bb:a4:
         75:29:02:05:f7:17:05:db:5d:09:0d:2c:94:b2:99:66:c9:6b:
         fc:08:9a:f0:c3:9f:df:90:7a:3f:29:e8:db:17:4a:89:85:81:
         0f:eb:df:fa:1f:86:92:a2:2f:0b:de:9c:da:04:b4:f9:ee:4c:
         9a:4c:6b:35:65:8f:57:72:df:0f:e9:46:6f:74:e6:0c:fd:a7:
         c5:24:1c:0f:93:e9:6e:99:6d:fc:bb:a7:87:c9:c8:fb:90:b5:
         01:fa:9c:56:72:9b:a4:7f:d1:de:69:47:ab:05:a2:a9:98:9c:
         15:be:c8:1d:30:d6:77:eb:b1:50:ee:9f:86:c0:2b:68:5c:e5:
         e0:7e:bd:aa:6a:16:ef:b0:c0:3f:1c:1e:e3:d4:72:54:8f:db:
         17:46:a5:6e:95:2c:ad:74:85:35:db:bc:b7:75:e3:2f:2d:2b:
         5c:08:a2:67:13:9a:dc:73:de:c4:bf:07:a4:c2:61:60:5b:0d:
         a1:1b:ba:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 04:06:06 2025 by rpki-client