Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D879A81743CEA7853AE47393DC1C20614AE29205215430AB8C0942A28CD1C64E/0/323830333a366665303a3a2f33322d3634203d3e20323731373739.roa
File:                     323830333a366665303a3a2f33322d3634203d3e20323731373739.roa (raw, json)
Hash identifier:          HVr1ANyFfA+HfikcTwqvffaXliuG9fkfLKdSaes0OFI=
Subject key identifier:   FD:6E:18:4E:2F:8B:F8:D5:3F:35:11:5D:AE:CC:8A:11:6F:D0:73:D7
Certificate issuer:       /CN=6947D5FD9ADEAB385611F86AE68248A0E982D6D5
Certificate serial:       2E5EDCCE80C4F344E2580ACF01C9BD9C28285B14
Authority key identifier: 69:47:D5:FD:9A:DE:AB:38:56:11:F8:6A:E6:82:48:A0:E9:82:D6:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6947D5FD9ADEAB385611F86AE68248A0E982D6D5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D879A81743CEA7853AE47393DC1C20614AE29205215430AB8C0942A28CD1C64E/0/323830333a366665303a3a2f33322d3634203d3e20323731373739.roa
Signing time:             Tue 04 Feb 2025 18:47:31 +0000
ROA not before:           Tue 04 Feb 2025 18:42:31 +0000
ROA not after:            Tue 03 Feb 2026 18:47:31 +0000
asID:                     271779
IP address blocks:        2803:6fe0::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D879A81743CEA7853AE47393DC1C20614AE29205215430AB8C0942A28CD1C64E/0/6947D5FD9ADEAB385611F86AE68248A0E982D6D5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D879A81743CEA7853AE47393DC1C20614AE29205215430AB8C0942A28CD1C64E/0/6947D5FD9ADEAB385611F86AE68248A0E982D6D5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6947D5FD9ADEAB385611F86AE68248A0E982D6D5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:5e:dc:ce:80:c4:f3:44:e2:58:0a:cf:01:c9:bd:9c:28:28:5b:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6947D5FD9ADEAB385611F86AE68248A0E982D6D5
        Validity
            Not Before: Feb  4 18:42:31 2025 GMT
            Not After : Feb  3 18:47:31 2026 GMT
        Subject: CN=FD6E184E2F8BF8D53F35115DAECC8A116FD073D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:06:d9:fe:1e:e1:62:d7:c6:f7:b6:77:16:69:
                    97:b0:cc:22:d0:eb:8a:fc:d4:9c:43:22:59:24:58:
                    d2:3b:65:8b:d2:77:8a:e7:b4:13:ab:95:b6:de:78:
                    30:e2:60:28:d5:40:f4:cc:b2:c2:c6:15:56:c2:d7:
                    72:1e:98:e8:0b:51:2f:ba:54:36:54:88:06:92:ba:
                    0f:d9:d3:20:72:38:b6:f2:0c:8d:96:90:85:a1:fd:
                    8f:01:59:54:0c:d3:79:5f:71:de:63:af:46:0f:f8:
                    f7:3f:0e:a2:c6:cb:dd:34:4f:67:fe:bc:bc:c9:09:
                    f0:7f:56:ab:d9:fd:90:39:49:9a:03:c3:aa:0e:4a:
                    8a:6c:3c:6a:3a:77:bb:2f:4a:11:a7:94:4b:ec:d4:
                    88:a6:a2:bb:7e:51:fc:69:6b:d9:8e:99:48:20:54:
                    79:a8:d8:11:84:bb:5c:67:3c:4e:69:05:23:2c:95:
                    c7:3f:a0:3a:04:36:d0:b0:e9:83:fc:d7:43:79:89:
                    e4:6f:b5:ba:45:a2:6b:b0:00:9e:e9:c8:55:21:f9:
                    95:66:de:de:e0:29:1a:0b:f4:b1:45:b8:6f:46:76:
                    c9:cb:2a:4b:e0:ae:f2:66:2e:08:27:a9:49:f7:4b:
                    8e:17:15:39:d7:c6:78:ea:44:03:7f:c4:48:c0:e5:
                    43:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:6E:18:4E:2F:8B:F8:D5:3F:35:11:5D:AE:CC:8A:11:6F:D0:73:D7
            X509v3 Authority Key Identifier:
                keyid:69:47:D5:FD:9A:DE:AB:38:56:11:F8:6A:E6:82:48:A0:E9:82:D6:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D879A81743CEA7853AE47393DC1C20614AE29205215430AB8C0942A28CD1C64E/0/6947D5FD9ADEAB385611F86AE68248A0E982D6D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6947D5FD9ADEAB385611F86AE68248A0E982D6D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D879A81743CEA7853AE47393DC1C20614AE29205215430AB8C0942A28CD1C64E/0/323830333a366665303a3a2f33322d3634203d3e20323731373739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6fe0::/32

    Signature Algorithm: sha256WithRSAEncryption
         85:6d:b2:b2:f4:5f:cb:64:10:49:73:b7:dc:3f:67:a6:07:ae:
         c3:db:43:26:54:90:9b:ff:88:36:82:ea:94:06:a6:1a:74:23:
         03:9a:cc:30:e5:b7:f2:49:18:e2:f9:f6:aa:68:ee:8d:ad:e5:
         b1:7e:d0:6d:fe:b9:77:04:53:17:db:38:6c:a1:72:50:eb:39:
         fa:a1:1f:80:f5:6f:b7:8a:28:83:ef:59:25:48:c3:9c:fa:21:
         89:15:90:39:fc:0c:21:7f:0f:63:33:d9:6e:53:c3:66:0d:44:
         b8:05:25:7d:b6:b8:b8:66:ac:69:ab:4e:da:ac:5f:db:74:67:
         a0:b7:84:0d:68:4b:6f:80:54:6b:dc:de:dd:0b:99:55:2b:22:
         32:81:67:6b:d1:ad:2f:3c:0b:65:0b:dd:ec:2e:08:c6:51:fd:
         22:8d:b7:b1:3e:f2:e5:82:16:ce:20:aa:d4:bd:fd:63:70:33:
         f4:fc:b0:13:3a:6e:a5:7f:64:79:b8:3b:af:e0:f3:94:80:bb:
         a3:0e:a0:03:5b:82:63:6f:d8:05:34:7d:7e:79:33:25:f6:d7:
         21:e5:5b:88:25:1e:5c:b3:83:1e:06:27:10:b7:7f:5d:4b:ed:
         4f:53:e5:21:83:a8:43:10:10:3b:0d:3c:62:61:92:56:72:9f:
         b6:c7:94:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:55:21 2025 by rpki-client