Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DD69AF6E88228B38A0B4AD4348080109D188BF614AE140AE9A0107EFC33061FA/0/323830333a633763303a3a2f33322d3332203d3e20323635373637.roa
File:                     323830333a633763303a3a2f33322d3332203d3e20323635373637.roa (raw, json)
Hash identifier:          xJ/bZuUTvmqVswc+uRDTf47gVkhLRqfQcf2qD3qZrRM=
Subject key identifier:   59:00:EC:E2:02:1F:EF:DA:C4:A7:28:AE:8D:16:81:1A:80:24:69:06
Certificate issuer:       /CN=C70069EFF2F9CA7E54ED5E13065838E0D870A845
Certificate serial:       2C5D3E33138F6AF6DDDD6AC7C9D39751835CFA82
Authority key identifier: C7:00:69:EF:F2:F9:CA:7E:54:ED:5E:13:06:58:38:E0:D8:70:A8:45
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C70069EFF2F9CA7E54ED5E13065838E0D870A845.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DD69AF6E88228B38A0B4AD4348080109D188BF614AE140AE9A0107EFC33061FA/0/323830333a633763303a3a2f33322d3332203d3e20323635373637.roa
Signing time:             Tue 04 Feb 2025 18:36:07 +0000
ROA not before:           Tue 04 Feb 2025 18:31:07 +0000
ROA not after:            Tue 03 Feb 2026 18:36:07 +0000
asID:                     265767
IP address blocks:        2803:c7c0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DD69AF6E88228B38A0B4AD4348080109D188BF614AE140AE9A0107EFC33061FA/0/C70069EFF2F9CA7E54ED5E13065838E0D870A845.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DD69AF6E88228B38A0B4AD4348080109D188BF614AE140AE9A0107EFC33061FA/0/C70069EFF2F9CA7E54ED5E13065838E0D870A845.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C70069EFF2F9CA7E54ED5E13065838E0D870A845.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 20:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:5d:3e:33:13:8f:6a:f6:dd:dd:6a:c7:c9:d3:97:51:83:5c:fa:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C70069EFF2F9CA7E54ED5E13065838E0D870A845
        Validity
            Not Before: Feb  4 18:31:07 2025 GMT
            Not After : Feb  3 18:36:07 2026 GMT
        Subject: CN=5900ECE2021FEFDAC4A728AE8D16811A80246906
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:d2:1b:4f:1c:75:5d:e6:8c:80:79:a9:2f:23:
                    b2:02:0d:d1:14:f4:93:fd:ab:1f:42:a4:ea:3b:5b:
                    ad:71:98:8c:6f:c8:e4:6e:ab:41:bd:97:f4:29:10:
                    71:1c:44:e7:d5:29:33:b4:51:9e:cd:54:f7:74:77:
                    83:72:ee:66:71:8b:de:05:98:d2:2c:93:bb:73:45:
                    44:67:34:f1:0f:18:4a:2b:b2:a2:41:ba:7b:7a:ed:
                    f9:31:d5:9b:6c:10:86:78:06:84:25:e6:b6:59:73:
                    e9:c5:91:1e:92:d5:40:64:84:94:2e:f7:a6:5a:37:
                    56:c2:c5:e2:e6:25:52:b1:ea:03:88:fa:af:2f:a0:
                    37:4f:4e:2e:84:bf:7b:ec:31:9c:8d:e5:9a:19:17:
                    05:f9:b7:f7:f8:ab:32:17:46:72:7f:a3:8c:78:29:
                    3c:d3:d0:cc:45:24:ca:d1:be:8c:56:e0:64:ea:57:
                    d3:b2:0b:4c:4d:21:a3:5c:3d:cc:48:31:20:2a:58:
                    00:56:b3:d8:11:d3:c6:ea:c8:09:6b:47:a5:89:e6:
                    c4:24:cb:64:a7:5b:03:bd:85:dc:e8:83:cc:0e:17:
                    7b:39:b5:0d:5a:2d:14:12:f3:5e:fb:66:df:d7:c5:
                    86:78:06:1b:7a:c3:41:c6:07:82:ae:15:b5:4f:22:
                    ac:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:00:EC:E2:02:1F:EF:DA:C4:A7:28:AE:8D:16:81:1A:80:24:69:06
            X509v3 Authority Key Identifier:
                keyid:C7:00:69:EF:F2:F9:CA:7E:54:ED:5E:13:06:58:38:E0:D8:70:A8:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DD69AF6E88228B38A0B4AD4348080109D188BF614AE140AE9A0107EFC33061FA/0/C70069EFF2F9CA7E54ED5E13065838E0D870A845.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C70069EFF2F9CA7E54ED5E13065838E0D870A845.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DD69AF6E88228B38A0B4AD4348080109D188BF614AE140AE9A0107EFC33061FA/0/323830333a633763303a3a2f33322d3332203d3e20323635373637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c7c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         98:a5:1a:65:e3:20:f6:71:04:7a:9a:b1:10:a9:88:e4:34:8f:
         6e:b7:3d:77:c1:cb:9e:1c:92:d2:e4:15:34:3f:b9:89:58:66:
         28:1f:70:77:ae:22:5c:b3:44:6c:c3:31:13:c9:65:02:a6:91:
         b8:34:17:d0:dc:e1:0f:ad:bb:5e:d1:dd:51:9f:34:2c:6d:64:
         a5:5c:d3:ef:ba:3f:48:02:f6:c8:a7:9c:8c:ef:98:75:f5:09:
         77:64:ad:5f:08:f9:d7:f6:d0:03:3c:e1:56:be:39:37:8b:5c:
         1d:93:e4:10:d9:12:d7:15:f4:b5:a7:af:6b:ca:e1:ec:54:74:
         f7:b5:be:41:80:3a:17:4f:ec:4b:60:ae:04:12:36:cb:01:8a:
         12:dc:a9:ef:a9:0f:94:72:5a:61:6d:c7:78:58:f3:e6:4b:b0:
         2b:5b:9b:aa:80:39:57:0c:8e:90:7b:23:85:3e:e0:84:9d:c3:
         31:d9:f9:4c:c8:85:2e:39:b5:9f:bb:c4:09:0f:40:36:56:47:
         79:64:a5:63:a9:5b:84:48:21:a5:6d:a2:4a:bd:75:a2:bf:91:
         ea:7c:4e:cc:5f:8f:12:ac:3d:e5:49:fe:11:79:7a:98:c6:07:
         61:a4:0e:89:a5:0f:54:af:4f:79:b6:da:0f:69:3e:8d:15:ec:
         d5:98:a6:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:47:55 2025 by rpki-client