Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DF71DA80B542C583081AEBBB46A5FB11E44BFA3A1558EE5752389C9D7165A89D/0/323830333a343332303a3a2f33322d3332203d3e20323636373334.roa
File:                     323830333a343332303a3a2f33322d3332203d3e20323636373334.roa (raw, json)
Hash identifier:          l0oX26DHaxqdRQ5ANoKHfcri464rbrV3JLxKIIdiXuQ=
Subject key identifier:   D5:21:7B:46:18:61:3A:0B:64:A8:0D:45:2A:9C:75:3E:63:57:BE:BC
Certificate issuer:       /CN=17635987A6691105242D437D62AE03F09EC477A5
Certificate serial:       661E6FA8FD798DDE413ADA60C25A8BF71F977AE2
Authority key identifier: 17:63:59:87:A6:69:11:05:24:2D:43:7D:62:AE:03:F0:9E:C4:77:A5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/17635987A6691105242D437D62AE03F09EC477A5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DF71DA80B542C583081AEBBB46A5FB11E44BFA3A1558EE5752389C9D7165A89D/0/323830333a343332303a3a2f33322d3332203d3e20323636373334.roa
Signing time:             Tue 04 Feb 2025 18:52:21 +0000
ROA not before:           Tue 04 Feb 2025 18:47:21 +0000
ROA not after:            Tue 03 Feb 2026 18:52:21 +0000
asID:                     266734
IP address blocks:        2803:4320::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DF71DA80B542C583081AEBBB46A5FB11E44BFA3A1558EE5752389C9D7165A89D/0/17635987A6691105242D437D62AE03F09EC477A5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DF71DA80B542C583081AEBBB46A5FB11E44BFA3A1558EE5752389C9D7165A89D/0/17635987A6691105242D437D62AE03F09EC477A5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/17635987A6691105242D437D62AE03F09EC477A5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 04:49:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:1e:6f:a8:fd:79:8d:de:41:3a:da:60:c2:5a:8b:f7:1f:97:7a:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17635987A6691105242D437D62AE03F09EC477A5
        Validity
            Not Before: Feb  4 18:47:21 2025 GMT
            Not After : Feb  3 18:52:21 2026 GMT
        Subject: CN=D5217B4618613A0B64A80D452A9C753E6357BEBC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:96:e2:e8:04:71:3e:a3:09:10:0e:e1:eb:05:
                    a1:e3:d0:59:18:39:a3:77:07:2b:72:27:a9:a3:f6:
                    59:c8:12:4c:20:d4:e9:e0:7f:19:5f:a7:30:f9:c9:
                    c1:21:7e:20:01:eb:fe:e9:a3:1a:b1:b9:13:88:1b:
                    96:1a:9c:c3:e6:92:a8:f7:1b:1e:c8:fd:41:95:86:
                    8f:bf:d6:af:2b:90:39:b4:f1:7c:bd:32:98:ae:22:
                    69:85:56:f3:78:3e:84:f7:03:34:6d:4d:4c:b8:92:
                    ef:c9:6e:22:92:d4:1d:4d:03:5d:c2:7f:cf:9e:3c:
                    7f:59:a8:4f:ff:42:41:d0:f7:15:5d:e7:89:44:0e:
                    c6:ae:76:0a:19:79:84:0f:14:19:8a:e1:12:f2:f7:
                    5a:78:9b:e5:20:11:85:fb:78:7a:d1:61:6f:e6:21:
                    8d:ad:fd:8a:d3:80:4e:2f:41:c7:6a:76:0f:c7:65:
                    df:99:64:83:c4:3e:09:6b:53:5c:8c:ff:2b:43:68:
                    27:a3:b7:41:ab:77:89:db:60:0f:f4:76:13:2f:c0:
                    7d:0b:1f:f3:b2:ad:74:8d:44:b5:ea:b6:80:93:6a:
                    b1:ad:ee:58:15:eb:37:5a:42:f5:a7:65:33:99:a5:
                    a0:0b:5b:23:ec:13:61:c7:cc:eb:43:e2:08:0d:4c:
                    46:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:21:7B:46:18:61:3A:0B:64:A8:0D:45:2A:9C:75:3E:63:57:BE:BC
            X509v3 Authority Key Identifier:
                keyid:17:63:59:87:A6:69:11:05:24:2D:43:7D:62:AE:03:F0:9E:C4:77:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DF71DA80B542C583081AEBBB46A5FB11E44BFA3A1558EE5752389C9D7165A89D/0/17635987A6691105242D437D62AE03F09EC477A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/17635987A6691105242D437D62AE03F09EC477A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DF71DA80B542C583081AEBBB46A5FB11E44BFA3A1558EE5752389C9D7165A89D/0/323830333a343332303a3a2f33322d3332203d3e20323636373334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4320::/32

    Signature Algorithm: sha256WithRSAEncryption
         0a:f7:ea:23:99:74:fb:78:84:29:d9:c8:0e:41:ef:4c:06:9c:
         49:6d:ba:f0:03:a6:9a:ae:6b:3d:4d:30:21:f1:26:e9:1c:61:
         e4:5c:4a:da:3f:d4:b6:0c:57:a9:ce:b5:f2:cc:d9:9d:d8:f4:
         1c:de:9e:80:f8:57:f6:45:32:3a:b1:49:2d:c3:b0:80:a9:50:
         2a:6b:38:7b:4e:b2:d2:ad:65:77:61:f3:0a:5d:d1:e5:b0:ab:
         04:1c:54:8c:fb:3f:1b:6a:30:af:5b:2a:78:98:e9:c8:66:87:
         1a:e2:e0:c4:d5:5c:73:0d:d4:a6:dc:00:8a:f0:aa:92:34:5a:
         f0:db:4e:88:3d:1f:8c:ca:d0:61:e9:71:84:86:99:a4:e8:99:
         64:c9:2f:e5:06:b2:e6:4a:0f:ae:e8:80:a1:34:a8:b3:f2:9f:
         d3:5f:34:f5:11:4a:49:b5:a8:77:c5:f1:91:24:6b:7d:7b:d1:
         af:00:e0:20:50:6a:65:a0:30:ca:43:9d:33:b5:b0:3c:cd:f1:
         a5:70:04:fa:c2:77:03:4d:e1:8e:e1:a3:61:36:4e:14:f2:5b:
         b4:62:8f:8e:24:d7:77:17:54:30:4c:78:ca:64:7c:65:af:77:
         d5:f2:bf:1e:a1:c0:d1:1b:22:85:f0:61:40:d9:f0:fe:87:94:
         af:ef:68:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 22:17:01 2025 by rpki-client