Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DD4A8420D0926D97FB3843697FC4B592D7C823D66995F3C00000CFA2C5E4502B/0/323830333a366563303a3a2f33322d3332203d3e203532343638.roa
File:                     323830333a366563303a3a2f33322d3332203d3e203532343638.roa (raw, json)
Hash identifier:          OW/S9A49LtX0thyeeQyUuHCFn5v5rwUGXl2VLbyJGyM=
Subject key identifier:   38:0E:B6:77:6D:EB:FB:B5:F6:6C:09:E7:C0:19:16:CA:33:60:68:9C
Certificate issuer:       /CN=F1BC5A3AF8D77F603855EA8FCD43EAB619B5F518
Certificate serial:       5766885C4BBEBC8B9B396A094448E31F925497D0
Authority key identifier: F1:BC:5A:3A:F8:D7:7F:60:38:55:EA:8F:CD:43:EA:B6:19:B5:F5:18
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F1BC5A3AF8D77F603855EA8FCD43EAB619B5F518.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DD4A8420D0926D97FB3843697FC4B592D7C823D66995F3C00000CFA2C5E4502B/0/323830333a366563303a3a2f33322d3332203d3e203532343638.roa
Signing time:             Tue 04 Feb 2025 18:45:44 +0000
ROA not before:           Tue 04 Feb 2025 18:40:44 +0000
ROA not after:            Tue 03 Feb 2026 18:45:44 +0000
asID:                     52468
IP address blocks:        2803:6ec0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DD4A8420D0926D97FB3843697FC4B592D7C823D66995F3C00000CFA2C5E4502B/0/F1BC5A3AF8D77F603855EA8FCD43EAB619B5F518.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DD4A8420D0926D97FB3843697FC4B592D7C823D66995F3C00000CFA2C5E4502B/0/F1BC5A3AF8D77F603855EA8FCD43EAB619B5F518.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F1BC5A3AF8D77F603855EA8FCD43EAB619B5F518.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 06:04:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:66:88:5c:4b:be:bc:8b:9b:39:6a:09:44:48:e3:1f:92:54:97:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1BC5A3AF8D77F603855EA8FCD43EAB619B5F518
        Validity
            Not Before: Feb  4 18:40:44 2025 GMT
            Not After : Feb  3 18:45:44 2026 GMT
        Subject: CN=380EB6776DEBFBB5F66C09E7C01916CA3360689C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e0:4f:f5:7c:52:c6:a9:92:4f:01:be:2f:d0:
                    dd:f2:ac:bb:9f:6e:f3:e4:52:ac:af:80:c9:76:23:
                    78:7e:41:1f:12:57:ba:da:ed:7e:bc:64:c6:38:cb:
                    30:73:f0:18:af:c4:c2:a2:87:10:fb:15:39:11:75:
                    4c:b3:7d:df:7d:6f:f4:6d:0a:63:24:ec:a5:e1:95:
                    a1:7c:5e:12:0b:7c:83:fe:ca:c0:dd:2a:df:d4:ef:
                    fe:4c:05:6d:b6:e3:45:9d:2a:f6:60:66:89:1a:c1:
                    b1:ad:5c:36:e3:2b:da:bc:52:77:a8:4e:67:62:a1:
                    3b:81:66:8f:20:72:f7:a8:73:10:09:69:25:b2:35:
                    62:93:37:bc:31:e4:ac:09:b3:91:41:1a:d3:da:96:
                    4d:d9:fa:7b:47:34:9c:26:c4:53:27:9b:08:44:15:
                    9d:54:30:00:7e:33:4a:70:5f:1d:f3:c1:ae:ce:1b:
                    d4:39:18:44:aa:33:01:8d:d6:df:23:93:9b:55:6a:
                    b8:e8:49:77:29:dc:ee:eb:02:cd:14:12:5f:88:d2:
                    24:0a:9d:98:7a:51:40:29:c3:e8:be:f8:0c:ad:96:
                    9a:83:f6:94:c5:41:c8:e2:a3:70:96:d6:7c:02:3e:
                    e5:b4:0a:fe:17:e9:78:dc:ab:85:f5:a0:9f:40:34:
                    c6:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:0E:B6:77:6D:EB:FB:B5:F6:6C:09:E7:C0:19:16:CA:33:60:68:9C
            X509v3 Authority Key Identifier:
                keyid:F1:BC:5A:3A:F8:D7:7F:60:38:55:EA:8F:CD:43:EA:B6:19:B5:F5:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DD4A8420D0926D97FB3843697FC4B592D7C823D66995F3C00000CFA2C5E4502B/0/F1BC5A3AF8D77F603855EA8FCD43EAB619B5F518.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F1BC5A3AF8D77F603855EA8FCD43EAB619B5F518.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DD4A8420D0926D97FB3843697FC4B592D7C823D66995F3C00000CFA2C5E4502B/0/323830333a366563303a3a2f33322d3332203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6ec0::/32

    Signature Algorithm: sha256WithRSAEncryption
         8c:b6:b8:84:d3:0d:49:81:67:3a:b2:f6:5d:5b:d0:1a:60:32:
         82:65:91:0b:56:22:cd:e8:ca:c6:70:0f:53:fd:bd:a0:c0:57:
         4b:a6:20:f0:4f:91:ee:3f:f6:9b:a2:c7:de:2a:80:1e:d6:d6:
         19:0c:3f:6b:f9:58:02:20:be:2b:09:26:39:38:5f:98:b7:81:
         00:47:87:2c:ae:06:6b:12:c3:b9:b1:44:4a:51:5c:f6:9e:0b:
         bb:d7:2e:74:fe:00:03:f2:d7:a0:c4:a3:48:e7:c0:44:22:18:
         56:02:0e:55:4b:6a:c7:53:1e:1c:aa:83:ba:56:4e:27:1c:f0:
         a6:34:77:87:81:79:13:d9:79:89:df:8f:81:61:b0:0f:99:0d:
         fc:da:10:7a:f5:55:c2:d0:33:e6:6d:3f:cf:0a:db:1a:33:07:
         c8:b8:85:31:4f:d7:f8:d3:ff:6c:a0:67:b3:2a:51:73:58:aa:
         8e:85:f9:cd:74:8d:b9:2d:01:7f:a6:91:7a:39:54:94:da:11:
         4b:fd:a4:5d:25:57:d4:86:ad:20:8e:2e:d0:12:92:3d:c3:97:
         de:84:14:79:e1:35:56:2a:a0:bb:3c:06:52:1d:88:dd:44:a8:
         df:e8:6f:ab:f6:75:3b:ee:71:22:70:fd:a3:c9:69:85:8b:72:
         f9:47:ea:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 06:49:07 2025 by rpki-client