Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E3B703CE181ECF7F6FB57DCF57631196AFF0BD14D1AAA086F67972C822083B6E/0/323830333a393463303a3a2f33322d3332203d3e20323635373638.roa
File:                     323830333a393463303a3a2f33322d3332203d3e20323635373638.roa (raw, json)
Hash identifier:          IrzkNKOl8GifU2c1ewfAaS8yVzV5YUkmGQ6eXNkSbN0=
Subject key identifier:   9C:3E:F8:BE:65:19:F7:3C:6B:5A:97:3D:E8:EA:94:00:BD:74:1C:60
Certificate issuer:       /CN=9F485C5CD6355EFB6BDAF1E22E7424D21ADC6C9F
Certificate serial:       4ADE004F07B48B198C14044976F520CFBEC69AC4
Authority key identifier: 9F:48:5C:5C:D6:35:5E:FB:6B:DA:F1:E2:2E:74:24:D2:1A:DC:6C:9F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F485C5CD6355EFB6BDAF1E22E7424D21ADC6C9F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E3B703CE181ECF7F6FB57DCF57631196AFF0BD14D1AAA086F67972C822083B6E/0/323830333a393463303a3a2f33322d3332203d3e20323635373638.roa
Signing time:             Tue 04 Feb 2025 18:47:52 +0000
ROA not before:           Tue 04 Feb 2025 18:42:52 +0000
ROA not after:            Tue 03 Feb 2026 18:47:52 +0000
asID:                     265768
IP address blocks:        2803:94c0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E3B703CE181ECF7F6FB57DCF57631196AFF0BD14D1AAA086F67972C822083B6E/0/9F485C5CD6355EFB6BDAF1E22E7424D21ADC6C9F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E3B703CE181ECF7F6FB57DCF57631196AFF0BD14D1AAA086F67972C822083B6E/0/9F485C5CD6355EFB6BDAF1E22E7424D21ADC6C9F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F485C5CD6355EFB6BDAF1E22E7424D21ADC6C9F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 19:54:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:de:00:4f:07:b4:8b:19:8c:14:04:49:76:f5:20:cf:be:c6:9a:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F485C5CD6355EFB6BDAF1E22E7424D21ADC6C9F
        Validity
            Not Before: Feb  4 18:42:52 2025 GMT
            Not After : Feb  3 18:47:52 2026 GMT
        Subject: CN=9C3EF8BE6519F73C6B5A973DE8EA9400BD741C60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e7:bd:28:d3:72:49:0f:fa:16:38:ae:d0:37:
                    5b:ae:80:d8:e6:8b:70:d5:00:e0:c5:db:2b:db:fe:
                    ee:a8:42:1e:63:2b:47:41:a3:1f:6b:64:91:63:62:
                    5a:89:45:61:4a:1e:95:1c:d9:2d:e6:4f:a0:68:66:
                    3b:83:fe:96:d9:ba:b8:b6:9b:1c:3d:f3:a9:65:ad:
                    c1:d0:1a:17:44:87:c2:35:a1:40:f0:ca:d1:a1:15:
                    bb:eb:c5:bf:b5:5e:00:b3:de:67:69:bf:fc:bc:0e:
                    bd:ce:14:54:14:36:2e:8c:41:1b:4c:d8:17:c2:51:
                    fc:f7:e3:99:e2:d7:be:14:b0:d3:a5:c4:6e:00:cd:
                    28:68:70:89:18:5f:3f:15:d4:1b:6e:67:a7:04:35:
                    2e:fa:f0:9a:27:93:b9:cc:0a:e4:bf:c2:c4:99:b2:
                    88:b2:69:ed:22:9c:c3:17:37:65:a3:9c:d6:c4:d8:
                    c2:37:cf:f9:40:f3:24:68:42:df:8f:bd:5a:e6:7b:
                    ba:32:a8:df:b0:1b:e1:a3:7f:24:8d:b2:2a:84:21:
                    3e:52:72:7f:f3:59:c9:ad:c2:8b:2c:44:89:a8:39:
                    97:aa:46:69:c9:d0:4e:1b:29:51:69:0b:cc:a2:89:
                    51:1a:20:c6:14:3a:93:39:4a:65:ad:cc:7c:ec:f7:
                    8e:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:3E:F8:BE:65:19:F7:3C:6B:5A:97:3D:E8:EA:94:00:BD:74:1C:60
            X509v3 Authority Key Identifier:
                keyid:9F:48:5C:5C:D6:35:5E:FB:6B:DA:F1:E2:2E:74:24:D2:1A:DC:6C:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E3B703CE181ECF7F6FB57DCF57631196AFF0BD14D1AAA086F67972C822083B6E/0/9F485C5CD6355EFB6BDAF1E22E7424D21ADC6C9F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F485C5CD6355EFB6BDAF1E22E7424D21ADC6C9F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E3B703CE181ECF7F6FB57DCF57631196AFF0BD14D1AAA086F67972C822083B6E/0/323830333a393463303a3a2f33322d3332203d3e20323635373638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:94c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         aa:81:1b:f7:58:2e:cb:c6:b6:51:31:5f:40:cc:4a:61:4b:28:
         01:ed:66:9e:56:e6:c0:19:2c:bd:4a:d1:6b:81:fc:56:19:2f:
         2c:50:13:96:7c:cc:d4:7c:aa:51:a5:20:cd:24:06:ef:20:dc:
         b9:03:e3:70:d9:32:8d:b0:bd:98:1e:ca:f1:32:c5:6b:ff:f1:
         73:6b:cb:45:89:2e:4f:80:11:75:2c:31:5b:b0:39:70:53:01:
         50:79:8d:11:15:32:6d:47:20:e4:5d:1b:26:e8:7f:3e:ee:43:
         6a:bb:90:95:97:65:22:11:af:f4:71:ee:36:d6:30:e7:2d:99:
         23:fb:49:b3:df:b8:73:aa:18:98:dd:8d:84:5c:a7:b4:81:46:
         c3:af:3a:ed:58:fd:51:54:0f:15:c2:8e:7f:7f:37:cc:02:c3:
         ad:b0:e1:84:54:0c:cc:ef:f3:95:e9:b5:0d:8b:43:b6:13:ba:
         37:e6:f4:ea:1b:fd:93:d2:c8:dc:38:ae:83:21:35:5a:f3:ac:
         38:00:02:1c:97:d2:08:5b:b0:4f:ab:e9:f3:3b:ce:6d:56:57:
         ec:72:48:ca:f4:60:b4:47:ff:f6:72:c8:30:e4:bc:87:0d:64:
         2f:64:4e:d2:e1:c5:25:19:f7:fe:28:b1:c3:3d:91:fa:3d:ef:
         15:1f:65:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 20:15:07 2025 by rpki-client