Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E02B0C6895894B6BCA21D3E7E09A9D7D304886998A3E330F7FCD1665550CDF21/0/323830333a633438303a3a2f33322d3634203d3e20323633313934.roa
File:                     323830333a633438303a3a2f33322d3634203d3e20323633313934.roa (raw, json)
Hash identifier:          Yp4gDVnO3OwG/In2sf5lV/vU/OXPQ67QnAPNDL/ySO0=
Subject key identifier:   3A:EF:37:71:CE:65:67:CA:25:6A:DF:BF:A2:CF:05:49:0B:DE:C6:25
Certificate issuer:       /CN=21711620AC4F377630443FF5BDD3C78255256F48
Certificate serial:       28EAD0B520171633ED6EDF01030BFA23F2458E61
Authority key identifier: 21:71:16:20:AC:4F:37:76:30:44:3F:F5:BD:D3:C7:82:55:25:6F:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21711620AC4F377630443FF5BDD3C78255256F48.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E02B0C6895894B6BCA21D3E7E09A9D7D304886998A3E330F7FCD1665550CDF21/0/323830333a633438303a3a2f33322d3634203d3e20323633313934.roa
Signing time:             Tue 04 Feb 2025 18:00:02 +0000
ROA not before:           Tue 04 Feb 2025 17:55:02 +0000
ROA not after:            Tue 03 Feb 2026 18:00:02 +0000
asID:                     263194
IP address blocks:        2803:c480::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E02B0C6895894B6BCA21D3E7E09A9D7D304886998A3E330F7FCD1665550CDF21/0/21711620AC4F377630443FF5BDD3C78255256F48.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E02B0C6895894B6BCA21D3E7E09A9D7D304886998A3E330F7FCD1665550CDF21/0/21711620AC4F377630443FF5BDD3C78255256F48.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21711620AC4F377630443FF5BDD3C78255256F48.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 20 Feb 2025 14:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:ea:d0:b5:20:17:16:33:ed:6e:df:01:03:0b:fa:23:f2:45:8e:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21711620AC4F377630443FF5BDD3C78255256F48
        Validity
            Not Before: Feb  4 17:55:02 2025 GMT
            Not After : Feb  3 18:00:02 2026 GMT
        Subject: CN=3AEF3771CE6567CA256ADFBFA2CF05490BDEC625
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:26:95:92:57:6e:ea:5a:c9:19:68:72:c0:c5:
                    20:04:53:82:67:c0:3a:97:e4:4b:9a:7e:8c:32:6d:
                    e7:23:08:7d:16:cc:f1:99:fc:68:04:29:b4:e4:76:
                    1f:81:34:f1:f0:7f:d3:78:96:37:d9:e8:23:85:ad:
                    ed:a3:3d:b5:10:b2:37:80:5e:3a:95:66:8e:80:3a:
                    80:c4:18:9e:b1:0d:a0:d3:41:cc:a3:26:9b:7b:da:
                    a5:e0:2f:7c:4a:c9:4c:6d:4b:27:19:c9:58:5d:5d:
                    49:73:27:f6:52:b0:bd:fd:50:6a:f6:57:c9:88:dc:
                    ef:2d:f2:19:02:81:17:aa:78:a6:00:8b:2a:f0:d3:
                    88:98:7e:9b:b7:ea:50:22:f6:81:7a:5f:46:12:dc:
                    51:d2:a2:cf:79:08:a6:8a:d0:0e:80:56:29:64:ba:
                    a8:02:5c:0d:6c:82:a3:64:26:eb:33:41:36:88:c6:
                    8c:d2:7c:05:e9:15:a8:23:10:a4:8c:0a:d1:23:15:
                    fd:22:d9:d8:0a:dc:c2:cc:8e:11:a6:81:42:c1:8d:
                    f1:15:f8:31:da:04:29:23:94:c7:19:3c:d2:26:db:
                    38:ee:51:46:7d:b2:99:4e:8f:37:b2:bf:72:fd:43:
                    da:fe:30:b6:4c:50:78:58:95:db:0e:da:7b:79:b5:
                    36:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:EF:37:71:CE:65:67:CA:25:6A:DF:BF:A2:CF:05:49:0B:DE:C6:25
            X509v3 Authority Key Identifier:
                keyid:21:71:16:20:AC:4F:37:76:30:44:3F:F5:BD:D3:C7:82:55:25:6F:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E02B0C6895894B6BCA21D3E7E09A9D7D304886998A3E330F7FCD1665550CDF21/0/21711620AC4F377630443FF5BDD3C78255256F48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21711620AC4F377630443FF5BDD3C78255256F48.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E02B0C6895894B6BCA21D3E7E09A9D7D304886998A3E330F7FCD1665550CDF21/0/323830333a633438303a3a2f33322d3634203d3e20323633313934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c480::/32

    Signature Algorithm: sha256WithRSAEncryption
         76:83:4a:4a:ef:fe:0e:4d:89:96:b2:5b:90:70:79:eb:3a:0a:
         8b:dc:20:d1:58:27:98:5a:83:ba:31:90:bc:e0:8f:4a:b2:2a:
         74:c5:92:34:fe:c7:44:24:e9:8e:6c:84:18:06:19:00:7f:5b:
         c9:6e:8b:c4:be:37:0a:87:32:63:8e:86:0e:2a:ce:25:c2:ba:
         98:21:09:28:a1:da:72:2c:65:18:d3:14:13:48:f3:03:95:a4:
         d6:a3:28:0c:2c:38:51:a0:99:7c:ff:d1:5c:fb:0b:76:a6:96:
         7b:d1:fe:f5:57:09:de:fe:8f:fc:0d:1d:1c:aa:dc:4c:e3:f2:
         81:7d:23:a8:4b:59:d0:fd:4c:f1:fc:c6:3e:f1:39:59:cf:cc:
         ed:77:73:96:a2:a8:70:d9:54:71:35:bf:3c:30:5a:9f:bc:49:
         26:e5:8b:88:a7:cb:7f:75:13:74:ad:23:3b:47:55:c8:25:44:
         b4:fe:b8:a5:cb:02:7e:79:2a:de:45:4d:49:81:d6:e4:fb:ec:
         6b:57:bf:58:af:82:78:55:13:6a:2f:93:41:d1:6a:5a:2c:1a:
         5e:81:86:b0:12:17:55:5e:2a:99:b6:ea:7c:b5:d7:2c:f8:2e:
         d8:a9:c3:e9:59:19:e4:44:d8:0e:ea:b0:46:fc:bb:93:c2:dc:
         1e:a2:87:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:25:41 2025 by rpki-client