Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ECFAF658C8C32CE263DD54C900F5D06264C438464CF92632DCEDBBA291229C1F/0/323830333a383163303a3a2f33322d3634203d3e20323633323338.roa
File:                     323830333a383163303a3a2f33322d3634203d3e20323633323338.roa (raw, json)
Hash identifier:          cvjQScn6aHoxs4gj6TPgDkBySS8YC/HGOdL98eWYUls=
Subject key identifier:   B3:BC:8B:E5:58:11:D7:C2:56:07:2A:96:38:15:2C:F2:2F:7C:43:E1
Certificate issuer:       /CN=74CB08D6E0688F8E499DD91190E49000CC837759
Certificate serial:       53F4B05D9AAE1E40135E454C5BBB098CB19C46B3
Authority key identifier: 74:CB:08:D6:E0:68:8F:8E:49:9D:D9:11:90:E4:90:00:CC:83:77:59
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/74CB08D6E0688F8E499DD91190E49000CC837759.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ECFAF658C8C32CE263DD54C900F5D06264C438464CF92632DCEDBBA291229C1F/0/323830333a383163303a3a2f33322d3634203d3e20323633323338.roa
Signing time:             Tue 04 Feb 2025 20:07:30 +0000
ROA not before:           Tue 04 Feb 2025 20:02:30 +0000
ROA not after:            Tue 03 Feb 2026 20:07:30 +0000
asID:                     263238
IP address blocks:        2803:81c0::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/ECFAF658C8C32CE263DD54C900F5D06264C438464CF92632DCEDBBA291229C1F/0/74CB08D6E0688F8E499DD91190E49000CC837759.crl
                          rsync://repository.lacnic.net/rpki/lacnic/ECFAF658C8C32CE263DD54C900F5D06264C438464CF92632DCEDBBA291229C1F/0/74CB08D6E0688F8E499DD91190E49000CC837759.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/74CB08D6E0688F8E499DD91190E49000CC837759.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:f4:b0:5d:9a:ae:1e:40:13:5e:45:4c:5b:bb:09:8c:b1:9c:46:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74CB08D6E0688F8E499DD91190E49000CC837759
        Validity
            Not Before: Feb  4 20:02:30 2025 GMT
            Not After : Feb  3 20:07:30 2026 GMT
        Subject: CN=B3BC8BE55811D7C256072A9638152CF22F7C43E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:f7:26:22:0e:95:f9:e1:f3:1a:b2:59:1d:22:
                    7c:08:d2:14:70:92:3f:13:96:e4:39:8d:87:fb:6c:
                    54:0f:bf:f9:00:d2:06:ff:fe:d6:8b:b5:18:17:32:
                    67:08:c0:5c:5c:c8:bf:d2:2f:28:81:0f:2a:de:56:
                    e8:f5:9f:48:f3:22:b3:5d:61:68:64:a6:0d:ff:cf:
                    fd:28:0e:e7:b7:1f:37:06:b2:12:dd:49:3a:0a:04:
                    4f:53:ec:70:00:0f:8a:be:35:42:39:35:17:c7:66:
                    43:93:92:62:46:c7:00:c2:0e:a5:03:ed:6c:91:08:
                    f1:42:73:04:43:dd:fe:89:56:9f:d6:ba:c2:66:28:
                    45:b4:87:60:8e:f5:cb:77:24:d1:d4:5e:3c:11:df:
                    5e:b1:fd:47:0f:cd:b8:5b:97:bd:62:99:a7:05:f0:
                    a5:ec:94:61:27:f9:f6:c4:69:06:2c:0e:86:98:dd:
                    1e:75:39:cf:59:60:34:90:49:a5:44:e9:ff:91:4a:
                    cd:e3:b0:a8:35:7c:0b:18:b7:d0:1d:fc:a1:25:52:
                    86:20:a5:8a:06:2b:9b:a5:85:55:39:66:6d:5e:ce:
                    be:e2:cd:9b:49:d6:23:a5:93:2a:d4:5f:8d:c2:7c:
                    fc:0f:41:9a:07:10:ab:75:ea:19:f1:b2:7b:ee:df:
                    fc:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:BC:8B:E5:58:11:D7:C2:56:07:2A:96:38:15:2C:F2:2F:7C:43:E1
            X509v3 Authority Key Identifier:
                keyid:74:CB:08:D6:E0:68:8F:8E:49:9D:D9:11:90:E4:90:00:CC:83:77:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ECFAF658C8C32CE263DD54C900F5D06264C438464CF92632DCEDBBA291229C1F/0/74CB08D6E0688F8E499DD91190E49000CC837759.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/74CB08D6E0688F8E499DD91190E49000CC837759.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ECFAF658C8C32CE263DD54C900F5D06264C438464CF92632DCEDBBA291229C1F/0/323830333a383163303a3a2f33322d3634203d3e20323633323338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:81c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         28:73:c7:dc:e4:93:42:4b:30:ce:68:42:ef:f1:1e:28:5b:87:
         a6:82:5c:4a:c1:9a:40:15:44:ab:a4:aa:97:03:ee:8b:92:3e:
         88:9a:95:c8:f7:4d:a6:5e:a2:c4:52:43:b9:5d:d4:7c:e6:ee:
         ce:92:36:e0:be:f6:df:24:5d:55:c2:44:bd:bb:83:4b:e1:b6:
         41:35:32:79:51:e6:43:03:7b:f5:48:de:9f:fd:df:f3:a8:dd:
         0b:e9:b1:fa:4e:cd:f0:07:bf:c3:f0:d5:0a:34:a6:69:f1:cc:
         d2:82:5d:aa:a2:0e:eb:64:59:ae:e4:f2:e7:44:cf:9d:aa:3b:
         21:fa:1f:88:d3:70:42:6c:ff:ed:24:52:57:6d:6b:37:77:6f:
         50:2b:23:de:78:83:52:25:3f:15:51:6d:f7:b1:8f:7b:b6:5a:
         d9:4e:df:17:8b:e5:26:ae:41:80:ac:9e:72:54:06:60:ad:a6:
         6a:48:c2:4d:52:f4:59:e7:d1:52:f9:d1:fa:65:c2:b1:79:cb:
         e9:bf:e7:55:36:6a:a1:a8:b9:56:67:d5:3a:c1:4f:07:f8:bc:
         91:d2:57:21:22:27:cf:b0:73:27:19:10:7d:99:b2:21:c1:1b:
         c9:51:6e:d7:b6:a1:59:75:4d:29:30:6c:72:7e:24:d7:a9:73:
         e4:4e:b7:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:30:55 2025 by rpki-client