Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D32457C60040A0E442725E9DD552499F352781FBCB56149E6B210EE7C4F75EE2/0/323830333a383031303a3a2f33322d3634203d3e20323731373937.roa
File:                     323830333a383031303a3a2f33322d3634203d3e20323731373937.roa (raw, json)
Hash identifier:          tCQysc2zwLNAdPlVGQz/xrTg21tY6T6ot/1uBbP+VsQ=
Subject key identifier:   F1:E2:2E:D0:E6:CE:A5:41:B7:CF:09:38:8D:63:55:B7:AF:E8:2E:BB
Certificate issuer:       /CN=98432974DFA0347371D335D3A9EF625584C48F45
Certificate serial:       69CC57ADC4714B11AD84C1144A0D5195D1A88089
Authority key identifier: 98:43:29:74:DF:A0:34:73:71:D3:35:D3:A9:EF:62:55:84:C4:8F:45
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/98432974DFA0347371D335D3A9EF625584C48F45.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D32457C60040A0E442725E9DD552499F352781FBCB56149E6B210EE7C4F75EE2/0/323830333a383031303a3a2f33322d3634203d3e20323731373937.roa
Signing time:             Tue 04 Feb 2025 18:23:41 +0000
ROA not before:           Tue 04 Feb 2025 18:18:41 +0000
ROA not after:            Tue 03 Feb 2026 18:23:41 +0000
asID:                     271797
IP address blocks:        2803:8010::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D32457C60040A0E442725E9DD552499F352781FBCB56149E6B210EE7C4F75EE2/0/98432974DFA0347371D335D3A9EF625584C48F45.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D32457C60040A0E442725E9DD552499F352781FBCB56149E6B210EE7C4F75EE2/0/98432974DFA0347371D335D3A9EF625584C48F45.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/98432974DFA0347371D335D3A9EF625584C48F45.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 12 Apr 2025 00:47:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:cc:57:ad:c4:71:4b:11:ad:84:c1:14:4a:0d:51:95:d1:a8:80:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98432974DFA0347371D335D3A9EF625584C48F45
        Validity
            Not Before: Feb  4 18:18:41 2025 GMT
            Not After : Feb  3 18:23:41 2026 GMT
        Subject: CN=F1E22ED0E6CEA541B7CF09388D6355B7AFE82EBB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:60:38:ac:f7:64:a7:89:1c:80:53:8e:9b:84:
                    db:47:b1:90:cf:1b:26:cf:9e:2c:4d:70:c5:f3:33:
                    f3:d2:19:6f:da:f3:44:bb:ae:8a:61:9f:79:21:a8:
                    22:9e:4c:42:fb:e7:37:bf:64:a2:83:1c:c5:65:92:
                    fc:3b:6d:5e:4f:6d:af:55:d8:79:ab:ac:c5:34:6c:
                    6c:08:10:9f:8c:57:4e:d9:e0:9d:3c:79:6c:40:7d:
                    45:b2:53:4e:fd:66:c6:88:a2:b7:0b:c6:af:30:a2:
                    92:59:67:76:b4:26:88:fc:71:4c:9b:da:d4:29:7a:
                    0b:c1:aa:4a:de:02:e6:b8:9e:e4:97:65:d1:2d:c8:
                    71:45:05:33:d0:bf:76:1c:6b:8d:52:11:66:4f:0c:
                    19:45:bb:82:af:dd:e1:d9:ef:dc:84:eb:6b:f8:b4:
                    70:0f:41:30:c2:78:aa:ec:85:c1:53:d2:66:6f:6e:
                    08:f4:0b:5d:ed:e9:98:28:10:83:a4:79:b2:0d:b8:
                    47:8a:3d:4e:90:68:37:93:c3:69:04:55:6a:e8:a6:
                    b0:b2:93:bc:a1:77:f0:8b:bf:6b:dd:a0:35:7b:fb:
                    ca:58:64:07:fb:80:c3:18:f6:52:ef:25:22:ad:60:
                    bd:73:79:ec:ee:54:d3:ce:a7:2d:2e:a6:b2:b7:32:
                    db:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:E2:2E:D0:E6:CE:A5:41:B7:CF:09:38:8D:63:55:B7:AF:E8:2E:BB
            X509v3 Authority Key Identifier:
                keyid:98:43:29:74:DF:A0:34:73:71:D3:35:D3:A9:EF:62:55:84:C4:8F:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D32457C60040A0E442725E9DD552499F352781FBCB56149E6B210EE7C4F75EE2/0/98432974DFA0347371D335D3A9EF625584C48F45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/98432974DFA0347371D335D3A9EF625584C48F45.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D32457C60040A0E442725E9DD552499F352781FBCB56149E6B210EE7C4F75EE2/0/323830333a383031303a3a2f33322d3634203d3e20323731373937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8010::/32

    Signature Algorithm: sha256WithRSAEncryption
         42:e2:fd:dc:3d:40:f7:50:ac:26:c1:a5:a8:56:83:12:d3:ac:
         b4:d9:48:30:9c:4d:0c:4a:71:2c:cf:d6:8a:00:cf:92:8e:46:
         7d:19:1a:f0:de:10:fc:03:b7:c2:a6:f2:ed:87:1d:1f:cc:f8:
         e9:55:7f:a8:31:e0:c6:54:e7:72:35:bc:2b:b4:b0:4a:b7:37:
         d8:18:83:d5:ef:cb:a4:b8:ff:d7:8a:08:d1:e9:6e:2a:8e:97:
         30:15:92:bd:ac:06:ab:bb:5a:dc:06:d7:4f:75:55:29:4f:a5:
         44:0c:4a:c3:e5:a8:8f:48:b3:c0:57:2d:1f:1d:25:af:f2:6f:
         26:f5:a2:33:41:c1:c1:f3:79:8e:e9:2d:93:08:0a:71:5c:fc:
         1e:c2:ab:bc:d1:86:64:43:09:4f:22:74:84:f8:b7:a6:d8:cd:
         13:4e:50:20:ba:37:cb:6f:9d:54:42:56:4f:9b:31:8b:82:f0:
         bc:1a:ad:4d:5e:6b:c4:16:9b:5b:43:26:61:10:90:97:07:9f:
         e5:1d:90:72:5d:62:fd:71:be:8f:e8:09:fc:20:4f:67:a0:00:
         4d:c9:47:fe:ec:ed:a9:1a:15:64:39:12:5b:79:e2:cc:13:50:
         6a:cc:b7:b1:e1:fc:7a:d2:f3:f1:b6:95:95:67:ca:8f:b7:68:
         0c:bc:00:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 21:58:53 2025 by rpki-client