Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DB8FBAD3B58CE8C74C7D9478839C726662CDA5E4B9F8771A9B26FEAA41E50944/0/323830333a346261303a3a2f33322d3438203d3e203232343131.roa
File:                     323830333a346261303a3a2f33322d3438203d3e203232343131.roa (raw, json)
Hash identifier:          MHItBEY/0wIjjt04xue0h9XaJGQKcQcJodiN4MbOJG4=
Subject key identifier:   30:9C:1E:B4:E6:25:0B:A2:9C:C1:86:D4:ED:17:43:DA:52:6F:50:36
Certificate issuer:       /CN=F79E4BCAD42FC962E569A02BC9E230F581A7397F
Certificate serial:       74B99BB6D60806E00321769EED68E6DDFE68A034
Authority key identifier: F7:9E:4B:CA:D4:2F:C9:62:E5:69:A0:2B:C9:E2:30:F5:81:A7:39:7F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F79E4BCAD42FC962E569A02BC9E230F581A7397F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DB8FBAD3B58CE8C74C7D9478839C726662CDA5E4B9F8771A9B26FEAA41E50944/0/323830333a346261303a3a2f33322d3438203d3e203232343131.roa
Signing time:             Tue 04 Feb 2025 18:47:28 +0000
ROA not before:           Tue 04 Feb 2025 18:42:28 +0000
ROA not after:            Tue 03 Feb 2026 18:47:28 +0000
asID:                     22411
IP address blocks:        2803:4ba0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DB8FBAD3B58CE8C74C7D9478839C726662CDA5E4B9F8771A9B26FEAA41E50944/0/F79E4BCAD42FC962E569A02BC9E230F581A7397F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DB8FBAD3B58CE8C74C7D9478839C726662CDA5E4B9F8771A9B26FEAA41E50944/0/F79E4BCAD42FC962E569A02BC9E230F581A7397F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F79E4BCAD42FC962E569A02BC9E230F581A7397F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 02:54:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:b9:9b:b6:d6:08:06:e0:03:21:76:9e:ed:68:e6:dd:fe:68:a0:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F79E4BCAD42FC962E569A02BC9E230F581A7397F
        Validity
            Not Before: Feb  4 18:42:28 2025 GMT
            Not After : Feb  3 18:47:28 2026 GMT
        Subject: CN=309C1EB4E6250BA29CC186D4ED1743DA526F5036
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:99:2c:a9:ac:b6:b0:d6:5e:87:aa:bf:b1:2c:
                    0c:73:d8:0a:2d:e7:68:35:7b:c4:e0:83:be:c5:2d:
                    2e:39:67:f1:f5:94:c9:80:57:0b:8d:b6:bc:da:ad:
                    c7:7e:2f:df:1f:4c:ca:31:b3:5f:63:3a:52:2d:11:
                    3a:ea:14:af:86:7b:24:5f:c2:ca:58:ee:df:36:ad:
                    cd:ff:44:c0:94:2d:44:08:4e:24:61:88:6c:be:7c:
                    dc:37:d9:33:91:bf:d8:78:b6:76:32:b0:57:51:ef:
                    b9:45:4c:d8:45:7b:d9:e7:92:e0:2d:d1:eb:d5:6e:
                    c2:43:e9:c3:6c:58:53:d6:90:ba:94:3f:21:ea:ff:
                    e7:5c:2a:16:50:3f:50:9f:81:63:63:ba:8b:84:47:
                    a6:67:65:e1:94:4d:a7:bd:07:d1:01:85:c9:d4:24:
                    f6:b0:45:51:9f:00:2d:09:3f:1c:d8:c6:7f:b1:4f:
                    8a:87:f4:82:94:e0:61:a4:cb:4a:fc:e4:a4:0b:a5:
                    0b:38:29:01:b5:8c:fd:75:fd:38:d4:82:06:a0:a8:
                    ed:88:71:a5:37:f5:8b:cd:82:6f:42:d6:38:d8:90:
                    60:4c:83:ba:9d:24:64:33:d3:bb:81:15:ec:2c:9c:
                    f7:bf:49:67:45:df:12:fe:f5:25:38:e5:ec:f7:1e:
                    5b:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:9C:1E:B4:E6:25:0B:A2:9C:C1:86:D4:ED:17:43:DA:52:6F:50:36
            X509v3 Authority Key Identifier:
                keyid:F7:9E:4B:CA:D4:2F:C9:62:E5:69:A0:2B:C9:E2:30:F5:81:A7:39:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DB8FBAD3B58CE8C74C7D9478839C726662CDA5E4B9F8771A9B26FEAA41E50944/0/F79E4BCAD42FC962E569A02BC9E230F581A7397F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F79E4BCAD42FC962E569A02BC9E230F581A7397F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DB8FBAD3B58CE8C74C7D9478839C726662CDA5E4B9F8771A9B26FEAA41E50944/0/323830333a346261303a3a2f33322d3438203d3e203232343131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4ba0::/32

    Signature Algorithm: sha256WithRSAEncryption
         1b:49:e2:b4:43:b8:e8:43:f4:6d:a7:60:c1:00:da:7e:f8:1a:
         c1:3a:7f:49:67:4e:b2:cf:97:ac:47:48:e3:14:20:b1:75:eb:
         3b:58:3b:13:70:d1:72:f4:56:b2:98:99:ae:20:49:94:1e:95:
         a2:e9:e9:10:15:b2:f1:e8:3b:34:6a:b2:8b:b3:32:c6:06:2f:
         38:59:f5:4d:83:e7:57:24:02:a1:d7:f7:8c:1b:ff:3d:dc:79:
         42:a4:2a:cc:40:3e:b3:20:2f:00:d0:df:d1:45:76:88:d3:d0:
         84:bf:ed:46:a6:02:e7:fc:58:ce:6a:2c:f6:51:fc:f7:06:17:
         26:b9:91:89:ae:6c:1e:a4:6f:86:08:52:ba:fd:d0:f8:1c:10:
         0c:67:4d:0f:64:7c:70:90:83:d7:18:44:4e:a6:fd:f5:23:7f:
         e3:76:93:5d:51:21:3b:a2:a0:6c:7e:02:ee:bc:5e:2d:4c:58:
         8c:c9:ef:21:e2:e3:0a:58:67:04:a5:0d:ec:d5:04:0c:b3:fd:
         b1:4d:0c:e4:d8:c1:c8:5f:99:1a:b7:31:ee:17:ad:1e:21:ec:
         f8:fd:64:56:a6:3b:2c:4c:f9:3b:78:f1:86:ce:c0:94:af:1d:
         07:2e:7e:4a:ae:b8:3e:83:94:eb:b5:f0:7c:b6:53:eb:4e:33:
         2c:c6:28:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:04:34 2025 by rpki-client