Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E64F98E9FF3571310A202169D8D46F0FFE4486FC4B6364B625044D86CBE3CD91/0/323830333a656465303a383030303a3a2f33332d3333203d3e20323730303532.roa
File:                     323830333a656465303a383030303a3a2f33332d3333203d3e20323730303532.roa (raw, json)
Hash identifier:          jjne+If3g4gNtTVFPeUJENKQ0IpcVLv2lCHRyuRquTo=
Subject key identifier:   68:AF:7B:63:5B:6E:9C:3C:6A:58:29:15:A5:CE:09:97:8B:C4:2A:7D
Certificate issuer:       /CN=69FD3EB23E910C40C36B84893BA0E5D72631240F
Certificate serial:       67C0CB29588D14672D59FFD348788FC44C0632A5
Authority key identifier: 69:FD:3E:B2:3E:91:0C:40:C3:6B:84:89:3B:A0:E5:D7:26:31:24:0F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/69FD3EB23E910C40C36B84893BA0E5D72631240F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E64F98E9FF3571310A202169D8D46F0FFE4486FC4B6364B625044D86CBE3CD91/0/323830333a656465303a383030303a3a2f33332d3333203d3e20323730303532.roa
Signing time:             Tue 04 Feb 2025 18:34:24 +0000
ROA not before:           Tue 04 Feb 2025 18:29:24 +0000
ROA not after:            Tue 03 Feb 2026 18:34:24 +0000
asID:                     270052
IP address blocks:        2803:ede0:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E64F98E9FF3571310A202169D8D46F0FFE4486FC4B6364B625044D86CBE3CD91/0/69FD3EB23E910C40C36B84893BA0E5D72631240F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E64F98E9FF3571310A202169D8D46F0FFE4486FC4B6364B625044D86CBE3CD91/0/69FD3EB23E910C40C36B84893BA0E5D72631240F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/69FD3EB23E910C40C36B84893BA0E5D72631240F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 21:29:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:c0:cb:29:58:8d:14:67:2d:59:ff:d3:48:78:8f:c4:4c:06:32:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69FD3EB23E910C40C36B84893BA0E5D72631240F
        Validity
            Not Before: Feb  4 18:29:24 2025 GMT
            Not After : Feb  3 18:34:24 2026 GMT
        Subject: CN=68AF7B635B6E9C3C6A582915A5CE09978BC42A7D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:69:5c:a4:f4:80:d1:fc:0f:d2:d8:b9:c1:12:
                    4d:85:64:30:73:3b:10:36:af:18:a3:eb:d4:bd:33:
                    ca:fe:be:0e:d0:ef:28:aa:ea:34:0a:a2:e4:46:c5:
                    03:54:71:32:37:a8:88:b2:d7:95:03:48:54:9b:cc:
                    8b:89:7f:cc:e4:64:c8:59:5e:f4:25:6e:74:0c:3f:
                    1a:23:12:36:96:57:a0:a8:6b:e2:62:ab:4c:91:4b:
                    b2:9a:27:a5:58:cf:71:cc:49:8e:b4:fe:2d:0d:64:
                    98:eb:1d:de:fc:df:ba:04:f4:9f:10:b5:75:34:3d:
                    33:19:82:6c:f4:22:8f:fc:ef:fc:e0:eb:e9:65:85:
                    73:1d:2c:a9:6d:89:38:5a:eb:01:2f:bd:98:6d:e2:
                    f4:9d:40:55:67:6c:b6:6e:5e:a8:cc:59:ed:6e:bc:
                    aa:1f:0b:fe:0a:a2:93:42:da:94:c4:7c:43:18:cd:
                    9b:f0:f1:28:dd:1c:e1:59:9f:a0:c2:ee:9f:c1:f2:
                    05:82:ed:71:fa:d3:6f:80:87:a5:da:13:39:b6:5f:
                    78:a4:8b:f2:fd:ad:3f:a0:69:5e:95:d0:56:f7:67:
                    ce:f9:0e:b7:00:e2:f8:f2:cc:74:8e:79:f3:e9:6d:
                    c0:dc:4b:0f:aa:00:94:ae:86:59:6b:9e:58:74:fd:
                    66:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:AF:7B:63:5B:6E:9C:3C:6A:58:29:15:A5:CE:09:97:8B:C4:2A:7D
            X509v3 Authority Key Identifier:
                keyid:69:FD:3E:B2:3E:91:0C:40:C3:6B:84:89:3B:A0:E5:D7:26:31:24:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E64F98E9FF3571310A202169D8D46F0FFE4486FC4B6364B625044D86CBE3CD91/0/69FD3EB23E910C40C36B84893BA0E5D72631240F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/69FD3EB23E910C40C36B84893BA0E5D72631240F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E64F98E9FF3571310A202169D8D46F0FFE4486FC4B6364B625044D86CBE3CD91/0/323830333a656465303a383030303a3a2f33332d3333203d3e20323730303532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ede0:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         54:4a:44:a7:08:8c:0f:3b:f7:03:96:98:8f:34:af:a8:56:b5:
         42:47:a4:fa:ef:e4:31:7e:c3:1c:a0:b2:e2:8f:89:36:94:b2:
         4e:19:7d:ca:18:23:67:a5:99:10:e5:77:c8:1e:e7:03:cf:32:
         15:ff:40:5a:9a:a2:bd:05:55:dd:71:2b:d4:d1:05:69:75:59:
         c6:45:30:f5:f5:c2:47:bd:c3:29:40:54:c4:66:08:2e:23:48:
         a2:05:e2:ea:08:6d:26:83:5c:15:f8:13:15:73:bd:15:fb:c2:
         85:54:49:31:db:19:03:6f:69:c7:7f:88:2f:38:c1:ae:0f:29:
         de:c4:d1:3c:e9:c0:a1:11:d1:a2:7d:6a:30:0a:c3:2f:58:ec:
         16:c9:27:f5:9a:91:15:34:d4:ff:02:17:29:69:4c:4b:df:07:
         8e:a2:bb:0e:d3:41:60:5f:fe:18:71:b2:70:61:13:52:b8:39:
         37:33:98:f1:cf:54:3e:89:d5:f7:ee:03:86:67:12:04:6e:49:
         73:a2:53:36:e2:39:02:45:87:b1:5d:50:14:24:3e:d8:73:db:
         cc:52:96:d0:92:ad:ad:41:23:d2:46:96:15:32:92:b0:74:28:
         cf:e3:ad:d9:33:86:3b:38:93:48:8f:ce:09:85:dc:e1:4b:32:
         7f:cc:8f:a0
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 5 15:07:36 2025 by rpki-client