Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EA35D463C57BF025EE23F25DC3EB3E16FE139BF5A61C573F1AD011E8BE68CA1B/0/323830333a613663303a3a2f33322d3332203d3e20323632323432.roa
File:                     323830333a613663303a3a2f33322d3332203d3e20323632323432.roa (raw, json)
Hash identifier:          hkYoTmVXOJYIvtjZuQRYQl0AyhNbZjMdnKMEJwQcv/g=
Subject key identifier:   7F:7B:15:F0:DE:4F:17:E9:A2:9A:FF:A0:D6:E8:51:E6:30:11:00:C7
Certificate issuer:       /CN=BAB763D78A27788C4136E1E1F000F960EF242B72
Certificate serial:       79A99612256D8BD40B3D60D3D8CDB30C1E94AE20
Authority key identifier: BA:B7:63:D7:8A:27:78:8C:41:36:E1:E1:F0:00:F9:60:EF:24:2B:72
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BAB763D78A27788C4136E1E1F000F960EF242B72.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EA35D463C57BF025EE23F25DC3EB3E16FE139BF5A61C573F1AD011E8BE68CA1B/0/323830333a613663303a3a2f33322d3332203d3e20323632323432.roa
Signing time:             Tue 04 Feb 2025 19:58:03 +0000
ROA not before:           Tue 04 Feb 2025 19:53:03 +0000
ROA not after:            Tue 03 Feb 2026 19:58:03 +0000
asID:                     262242
IP address blocks:        2803:a6c0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EA35D463C57BF025EE23F25DC3EB3E16FE139BF5A61C573F1AD011E8BE68CA1B/0/BAB763D78A27788C4136E1E1F000F960EF242B72.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EA35D463C57BF025EE23F25DC3EB3E16FE139BF5A61C573F1AD011E8BE68CA1B/0/BAB763D78A27788C4136E1E1F000F960EF242B72.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BAB763D78A27788C4136E1E1F000F960EF242B72.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 17 Apr 2025 15:22:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:a9:96:12:25:6d:8b:d4:0b:3d:60:d3:d8:cd:b3:0c:1e:94:ae:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BAB763D78A27788C4136E1E1F000F960EF242B72
        Validity
            Not Before: Feb  4 19:53:03 2025 GMT
            Not After : Feb  3 19:58:03 2026 GMT
        Subject: CN=7F7B15F0DE4F17E9A29AFFA0D6E851E6301100C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:78:cc:88:ce:a6:c4:5b:b3:59:29:4b:5f:36:
                    3c:8d:9b:5b:5b:fd:38:2f:1f:4c:cb:b1:4c:25:ac:
                    18:df:0c:cf:5b:92:9f:5b:4f:71:48:91:f8:ce:c6:
                    e7:21:9e:eb:26:a5:69:9d:81:d6:13:02:43:28:8d:
                    d6:12:79:4f:33:11:0d:ab:98:ac:5b:45:89:17:d9:
                    3a:b6:ba:66:2e:31:51:b7:54:38:cc:56:84:fd:76:
                    63:eb:64:94:f2:29:07:73:51:e1:11:a8:a8:8c:b7:
                    af:73:49:84:36:f2:79:ca:11:d6:cd:b3:1e:12:87:
                    8b:69:ae:e7:24:5b:46:02:12:7f:c0:aa:89:89:18:
                    8e:33:e8:b9:10:17:e3:b4:b5:4a:d2:d7:97:78:cf:
                    e5:c8:9d:a3:b4:04:ec:32:ac:86:51:46:2f:de:ee:
                    9b:59:22:57:d8:b5:e5:16:13:7b:09:82:2a:24:0d:
                    49:fe:69:28:99:d6:83:fb:f0:99:af:9a:01:4b:81:
                    de:9e:76:68:03:ab:6e:6e:20:27:a4:3e:5a:d8:2a:
                    34:27:40:f4:99:1b:12:1d:42:58:18:91:31:46:e0:
                    ed:ff:94:56:08:e7:14:7e:6d:83:93:d6:1c:81:59:
                    ea:0d:71:f6:fa:a2:e7:72:ed:30:9b:16:ac:9a:59:
                    ba:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:7B:15:F0:DE:4F:17:E9:A2:9A:FF:A0:D6:E8:51:E6:30:11:00:C7
            X509v3 Authority Key Identifier:
                keyid:BA:B7:63:D7:8A:27:78:8C:41:36:E1:E1:F0:00:F9:60:EF:24:2B:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EA35D463C57BF025EE23F25DC3EB3E16FE139BF5A61C573F1AD011E8BE68CA1B/0/BAB763D78A27788C4136E1E1F000F960EF242B72.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BAB763D78A27788C4136E1E1F000F960EF242B72.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EA35D463C57BF025EE23F25DC3EB3E16FE139BF5A61C573F1AD011E8BE68CA1B/0/323830333a613663303a3a2f33322d3332203d3e20323632323432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:a6c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         ca:68:3e:ae:42:1a:e2:f6:c4:ba:2b:62:06:4c:aa:83:40:63:
         e8:49:68:66:50:d5:a6:76:37:67:05:04:4f:50:bb:bd:45:f6:
         6b:6e:ee:62:ea:36:d4:09:c4:22:b9:a4:fb:a7:77:70:94:cd:
         f2:46:51:59:ca:70:48:d2:da:3b:92:67:42:d4:41:0e:fd:40:
         68:e2:35:be:df:3c:65:56:1b:4a:75:1b:9b:62:47:ab:d4:de:
         3c:29:d6:e1:30:e3:70:b9:53:af:89:44:49:c5:be:f1:b4:51:
         2f:00:03:01:e1:21:31:f1:e0:d1:5e:c7:d0:f2:fa:82:d6:e3:
         4d:33:4e:21:ac:8e:56:46:d8:16:09:60:f4:02:7f:19:9a:a3:
         7d:73:b7:b7:07:c3:d2:1a:68:93:3e:2d:3f:55:94:19:b9:e3:
         f8:82:3a:91:b0:e8:8c:2c:c1:d7:c7:a7:01:39:1e:f2:ab:1e:
         a2:21:55:59:86:fb:18:29:5f:9d:97:76:9f:ae:d6:5e:d3:70:
         41:71:f9:8d:29:3f:24:91:a4:38:dd:e8:5d:0e:c3:21:42:77:
         cf:e6:d8:d4:5a:79:b0:19:70:ed:9e:3f:ac:de:e0:8d:06:49:
         b0:1e:d5:fb:ce:de:c0:6d:f8:ab:bd:50:47:0d:db:60:53:93:
         20:68:74:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 13:57:10 2025 by rpki-client