Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D75A75B66B5C044C8E537C3F2BF84E0400EBEB5EECB72ADCD5687563CE4B218C/0/323830333a313761303a3a2f33322d3332203d3e20323637373737.roa
File:                     323830333a313761303a3a2f33322d3332203d3e20323637373737.roa (raw, json)
Hash identifier:          OsweeujZPfAtfSne/GUSrT5XBZXpCaL+t7C3O1x7wqc=
Subject key identifier:   B3:EF:15:BF:97:F8:03:EA:C4:06:69:6F:C8:96:FF:32:DA:73:B9:AD
Certificate issuer:       /CN=4CE9DD4ACA90E624B6F7B72C71A47D4541C7BB4E
Certificate serial:       6D66CA63984F09CA1E1AD8C321EE2BF180635BB5
Authority key identifier: 4C:E9:DD:4A:CA:90:E6:24:B6:F7:B7:2C:71:A4:7D:45:41:C7:BB:4E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CE9DD4ACA90E624B6F7B72C71A47D4541C7BB4E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D75A75B66B5C044C8E537C3F2BF84E0400EBEB5EECB72ADCD5687563CE4B218C/0/323830333a313761303a3a2f33322d3332203d3e20323637373737.roa
Signing time:             Tue 04 Feb 2025 18:25:02 +0000
ROA not before:           Tue 04 Feb 2025 18:20:02 +0000
ROA not after:            Tue 03 Feb 2026 18:25:02 +0000
asID:                     267777
IP address blocks:        2803:17a0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D75A75B66B5C044C8E537C3F2BF84E0400EBEB5EECB72ADCD5687563CE4B218C/0/4CE9DD4ACA90E624B6F7B72C71A47D4541C7BB4E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D75A75B66B5C044C8E537C3F2BF84E0400EBEB5EECB72ADCD5687563CE4B218C/0/4CE9DD4ACA90E624B6F7B72C71A47D4541C7BB4E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CE9DD4ACA90E624B6F7B72C71A47D4541C7BB4E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 16:34:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:66:ca:63:98:4f:09:ca:1e:1a:d8:c3:21:ee:2b:f1:80:63:5b:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4CE9DD4ACA90E624B6F7B72C71A47D4541C7BB4E
        Validity
            Not Before: Feb  4 18:20:02 2025 GMT
            Not After : Feb  3 18:25:02 2026 GMT
        Subject: CN=B3EF15BF97F803EAC406696FC896FF32DA73B9AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:75:70:14:c8:7a:20:83:49:7c:c2:43:4a:e0:
                    0a:ee:8c:eb:84:d3:59:54:02:66:30:a8:b8:3f:db:
                    5b:94:46:d1:b4:d3:86:0a:e6:54:07:83:bf:71:56:
                    62:8a:cc:4d:60:18:eb:d9:a9:ef:d9:8c:d3:b6:5c:
                    77:00:3a:5c:6d:a7:8d:06:b2:64:85:f6:64:d0:b4:
                    c8:9e:be:d9:61:4e:64:54:9a:f3:fb:60:ad:12:1a:
                    74:16:9b:9f:fd:53:9f:21:72:b3:97:c1:9c:7d:f4:
                    f8:56:90:4e:2f:78:0d:50:5d:6f:e6:7c:7a:84:6b:
                    7f:65:90:88:22:3a:e5:e6:52:d9:7a:96:63:bc:b4:
                    be:7a:4b:72:52:47:b2:2b:c5:84:57:a6:8a:ee:68:
                    1c:d9:66:46:c0:91:3f:c1:eb:3a:27:60:89:a8:3b:
                    98:bb:8b:0e:77:ec:16:63:ee:08:c7:41:dd:8d:c4:
                    10:3c:56:ef:1b:95:e1:35:0d:b3:c5:4a:fa:51:a3:
                    c3:2a:8f:7b:00:ca:14:22:24:83:65:5b:b6:6d:1e:
                    ce:e9:fb:49:55:61:81:55:39:29:6b:fb:2e:ac:83:
                    f7:9e:06:db:a8:a0:01:27:8b:0b:e5:ab:12:5a:37:
                    f5:dd:77:c3:a3:ac:9a:6d:a4:fd:dd:34:86:85:e3:
                    83:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:EF:15:BF:97:F8:03:EA:C4:06:69:6F:C8:96:FF:32:DA:73:B9:AD
            X509v3 Authority Key Identifier:
                keyid:4C:E9:DD:4A:CA:90:E6:24:B6:F7:B7:2C:71:A4:7D:45:41:C7:BB:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D75A75B66B5C044C8E537C3F2BF84E0400EBEB5EECB72ADCD5687563CE4B218C/0/4CE9DD4ACA90E624B6F7B72C71A47D4541C7BB4E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CE9DD4ACA90E624B6F7B72C71A47D4541C7BB4E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D75A75B66B5C044C8E537C3F2BF84E0400EBEB5EECB72ADCD5687563CE4B218C/0/323830333a313761303a3a2f33322d3332203d3e20323637373737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:17a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         52:7d:dd:e0:8d:58:83:55:4b:37:69:a5:db:86:3f:ab:67:9d:
         0c:8f:37:f5:b0:c0:5c:96:d5:95:f6:82:ea:1d:df:87:b0:1d:
         91:97:9f:f0:5b:99:99:f5:83:6d:06:54:b6:26:08:5b:d4:33:
         81:ea:c6:b2:ea:e2:1d:4e:f1:c1:bc:f9:45:d4:3c:81:ca:46:
         21:8a:cc:6e:3a:92:94:d0:9c:97:d2:81:3b:60:76:46:42:0d:
         92:21:e9:a9:ff:dd:46:bf:9f:40:d9:86:91:65:c6:73:40:e0:
         a5:60:d4:05:9d:9c:2c:0d:f6:3b:ed:c7:06:3d:66:c4:60:ae:
         df:01:b1:df:f7:fe:57:ea:07:81:60:f4:bc:e5:6d:d5:b9:70:
         d8:3a:75:5c:d4:26:9b:86:d2:4a:34:2b:ce:18:dc:62:8d:6e:
         b3:cc:89:07:4a:94:44:74:a1:3a:39:06:3e:38:34:ff:ca:ea:
         dc:fd:6a:ea:ab:68:4f:15:c4:27:9e:c5:68:81:99:c2:2a:be:
         c4:f0:d7:06:c0:63:81:f8:7d:50:40:67:dd:ba:a8:60:53:61:
         b4:89:11:6d:08:43:e2:d7:08:00:6a:d7:7d:da:ba:6a:af:ef:
         2e:68:25:5b:4c:3b:76:f5:eb:25:a3:f5:51:eb:df:be:b3:51:
         8b:5c:a4:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 19:39:21 2025 by rpki-client