Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E8CFC117FB618BA5DCE1E251E113BF1DCE6C1BF6E9BF6F4914AE8095934C31E7/0/323830333a663863303a3a2f33322d3332203d3e20323634373530.roa
File:                     323830333a663863303a3a2f33322d3332203d3e20323634373530.roa (raw, json)
Hash identifier:          scbvJ8we0fwHOb4R6ULU04Bu6XYh3y3cZ3kyrVFgCNA=
Subject key identifier:   ED:19:44:40:7A:AF:DC:84:28:FC:5C:AF:ED:49:C4:94:5C:E5:05:CE
Certificate issuer:       /CN=4DE953D0DBB7E793914D04C32D69DD64097568ED
Certificate serial:       1F1F7CA88C7AC85A76DDCC465A4079E82BCAF620
Authority key identifier: 4D:E9:53:D0:DB:B7:E7:93:91:4D:04:C3:2D:69:DD:64:09:75:68:ED
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4DE953D0DBB7E793914D04C32D69DD64097568ED.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E8CFC117FB618BA5DCE1E251E113BF1DCE6C1BF6E9BF6F4914AE8095934C31E7/0/323830333a663863303a3a2f33322d3332203d3e20323634373530.roa
Signing time:             Tue 04 Feb 2025 18:05:32 +0000
ROA not before:           Tue 04 Feb 2025 18:00:32 +0000
ROA not after:            Tue 03 Feb 2026 18:05:32 +0000
asID:                     264750
IP address blocks:        2803:f8c0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E8CFC117FB618BA5DCE1E251E113BF1DCE6C1BF6E9BF6F4914AE8095934C31E7/0/4DE953D0DBB7E793914D04C32D69DD64097568ED.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E8CFC117FB618BA5DCE1E251E113BF1DCE6C1BF6E9BF6F4914AE8095934C31E7/0/4DE953D0DBB7E793914D04C32D69DD64097568ED.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4DE953D0DBB7E793914D04C32D69DD64097568ED.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 20 Feb 2025 14:15:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:1f:7c:a8:8c:7a:c8:5a:76:dd:cc:46:5a:40:79:e8:2b:ca:f6:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4DE953D0DBB7E793914D04C32D69DD64097568ED
        Validity
            Not Before: Feb  4 18:00:32 2025 GMT
            Not After : Feb  3 18:05:32 2026 GMT
        Subject: CN=ED1944407AAFDC8428FC5CAFED49C4945CE505CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:87:d2:bb:f7:a3:5d:f3:c7:9a:28:d5:a0:0e:
                    f2:77:4d:fa:17:b0:f0:87:64:fc:ed:86:8b:7b:c9:
                    eb:14:43:e7:fc:8f:bb:c8:07:8d:16:f3:ef:3d:bd:
                    e3:6d:47:5a:e2:46:04:94:32:0b:d5:e9:42:8b:6d:
                    9a:82:44:97:3a:4d:a1:92:00:c8:65:6d:5e:d6:e4:
                    2b:ca:31:00:d5:b0:95:01:79:3a:af:f2:6e:7d:54:
                    3e:2d:28:9d:07:64:99:ae:0c:c3:73:98:72:98:54:
                    bb:a3:11:54:55:22:e5:9f:c8:96:de:1f:be:08:fe:
                    08:07:49:39:b3:a5:10:e4:41:67:79:a8:98:57:e4:
                    b6:03:0a:9e:e2:85:3e:8c:99:e3:14:ce:8b:c5:7b:
                    98:a1:dd:3f:77:44:7e:53:19:5f:52:0c:37:66:46:
                    be:4f:be:ae:c0:48:9f:ba:cd:cc:f2:4b:7d:b2:e0:
                    3f:f5:be:a3:3b:ce:98:f2:66:2d:ad:ce:01:da:4b:
                    bf:69:92:68:7a:09:19:3f:cb:aa:6d:dd:52:c9:21:
                    78:61:6b:1d:69:6f:7a:13:d1:2b:80:6d:7c:83:3f:
                    30:ef:53:fc:26:5f:1d:5d:fa:a9:21:89:cc:a1:e6:
                    7f:85:95:55:53:df:ed:ea:53:87:34:dd:b0:98:36:
                    39:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:19:44:40:7A:AF:DC:84:28:FC:5C:AF:ED:49:C4:94:5C:E5:05:CE
            X509v3 Authority Key Identifier:
                keyid:4D:E9:53:D0:DB:B7:E7:93:91:4D:04:C3:2D:69:DD:64:09:75:68:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E8CFC117FB618BA5DCE1E251E113BF1DCE6C1BF6E9BF6F4914AE8095934C31E7/0/4DE953D0DBB7E793914D04C32D69DD64097568ED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4DE953D0DBB7E793914D04C32D69DD64097568ED.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E8CFC117FB618BA5DCE1E251E113BF1DCE6C1BF6E9BF6F4914AE8095934C31E7/0/323830333a663863303a3a2f33322d3332203d3e20323634373530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f8c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         12:cd:95:ee:e7:11:43:64:4f:34:5e:17:34:40:66:16:0a:7f:
         0a:62:20:8a:bc:fd:e6:10:82:d1:34:f7:8b:f6:0d:0b:55:b0:
         23:ca:d2:a8:7d:1f:22:17:63:36:8e:cd:3a:58:ff:67:78:98:
         24:53:61:c4:12:a7:86:da:0f:eb:7f:71:85:19:ea:a7:48:2a:
         35:82:29:ea:0e:8e:d4:fb:bd:ba:b1:f2:69:5f:3d:cd:6e:e8:
         ea:db:8b:93:4d:61:df:e4:24:5c:8e:89:0f:88:b3:c0:9b:88:
         c3:aa:89:c0:61:af:00:f5:60:9e:69:da:84:a8:eb:9a:f9:b5:
         00:83:29:41:2b:ea:cd:b5:f8:c1:34:3a:27:c0:5f:74:1a:6d:
         7a:ab:80:e4:25:70:ed:78:8c:e8:76:58:6a:d3:e7:1c:ba:3b:
         1b:a9:da:dd:f5:ea:5f:e4:98:9c:aa:c4:ab:9c:b3:17:b3:6c:
         50:f7:ac:ad:37:9e:57:77:d5:fd:5b:b9:8a:07:96:96:c2:93:
         63:f2:2c:d3:6d:8c:b7:a9:d9:11:53:4e:97:96:a7:43:b9:f9:
         4f:a2:4d:34:08:ab:aa:3a:09:2f:5f:79:b9:8e:ff:24:8c:bc:
         03:8a:7d:8b:94:5b:2d:34:95:c2:bb:51:fa:74:6a:48:ca:53:
         ab:1c:3b:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:26:40 2025 by rpki-client