Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EE664F72D9B391E53BD233E258BF0C2E97193405A4F8BAC8A6D7BD823EA3C9A6/0/323830333a353130303a3a2f33322d3332203d3e20323633373631.roa
File:                     323830333a353130303a3a2f33322d3332203d3e20323633373631.roa (raw, json)
Hash identifier:          AawmP4kBHYuIUFy8uwvdeQoUouu836CYCHEmr0HfkP4=
Subject key identifier:   91:94:91:FA:DA:6D:6B:25:A7:6A:10:DA:F5:D2:E0:CA:0F:29:D8:94
Certificate issuer:       /CN=F279D661C4E03FF0C843C0E122E4839565933C7C
Certificate serial:       162B9FD8C282CAC2C8582FDCF0AF6265EC392B66
Authority key identifier: F2:79:D6:61:C4:E0:3F:F0:C8:43:C0:E1:22:E4:83:95:65:93:3C:7C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F279D661C4E03FF0C843C0E122E4839565933C7C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EE664F72D9B391E53BD233E258BF0C2E97193405A4F8BAC8A6D7BD823EA3C9A6/0/323830333a353130303a3a2f33322d3332203d3e20323633373631.roa
Signing time:             Tue 04 Feb 2025 18:00:18 +0000
ROA not before:           Tue 04 Feb 2025 17:55:18 +0000
ROA not after:            Tue 03 Feb 2026 18:00:18 +0000
asID:                     263761
IP address blocks:        2803:5100::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EE664F72D9B391E53BD233E258BF0C2E97193405A4F8BAC8A6D7BD823EA3C9A6/0/F279D661C4E03FF0C843C0E122E4839565933C7C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EE664F72D9B391E53BD233E258BF0C2E97193405A4F8BAC8A6D7BD823EA3C9A6/0/F279D661C4E03FF0C843C0E122E4839565933C7C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F279D661C4E03FF0C843C0E122E4839565933C7C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 23:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:2b:9f:d8:c2:82:ca:c2:c8:58:2f:dc:f0:af:62:65:ec:39:2b:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F279D661C4E03FF0C843C0E122E4839565933C7C
        Validity
            Not Before: Feb  4 17:55:18 2025 GMT
            Not After : Feb  3 18:00:18 2026 GMT
        Subject: CN=919491FADA6D6B25A76A10DAF5D2E0CA0F29D894
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:e7:d4:75:e7:b4:ac:83:74:f1:70:da:8e:51:
                    fd:75:f7:76:6b:8f:0c:b2:4a:61:40:2d:80:b1:8d:
                    9e:af:d7:c1:e6:53:2d:d3:4b:cb:ba:d8:21:ec:3e:
                    e1:ea:09:a8:c8:a8:cb:91:56:cf:32:ba:53:6c:a0:
                    6f:a3:fd:bf:c9:84:30:e3:8d:cb:70:c7:ce:e1:51:
                    01:26:9d:9c:b6:b4:07:d2:b9:72:9c:5b:cd:c2:c3:
                    04:3e:20:15:75:60:e8:89:80:f8:77:ae:20:fa:81:
                    d0:65:01:b3:60:bc:15:14:86:25:41:2d:fc:33:ac:
                    16:33:c6:18:45:7e:30:be:18:d4:50:8d:a2:5b:2c:
                    a4:a3:79:0a:f8:8d:cb:3b:1f:e9:95:37:56:ef:e2:
                    ef:59:79:ce:f0:4b:96:24:92:3d:ff:f8:97:e5:3a:
                    ab:47:37:fc:fc:c9:f3:23:49:14:4e:d8:64:c4:00:
                    18:23:cb:84:09:be:41:7a:e2:d3:3f:c8:ae:bc:80:
                    f9:61:17:d2:74:b3:e0:4d:38:e0:bd:62:c3:97:fc:
                    97:70:87:5a:51:1d:98:b8:2b:4d:c7:03:82:d8:fe:
                    02:32:61:07:8a:bb:e8:3c:1f:70:fe:a9:5d:6e:ba:
                    29:5b:b9:70:c5:7f:ab:19:60:38:7a:f1:93:a7:a1:
                    db:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:94:91:FA:DA:6D:6B:25:A7:6A:10:DA:F5:D2:E0:CA:0F:29:D8:94
            X509v3 Authority Key Identifier:
                keyid:F2:79:D6:61:C4:E0:3F:F0:C8:43:C0:E1:22:E4:83:95:65:93:3C:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EE664F72D9B391E53BD233E258BF0C2E97193405A4F8BAC8A6D7BD823EA3C9A6/0/F279D661C4E03FF0C843C0E122E4839565933C7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F279D661C4E03FF0C843C0E122E4839565933C7C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EE664F72D9B391E53BD233E258BF0C2E97193405A4F8BAC8A6D7BD823EA3C9A6/0/323830333a353130303a3a2f33322d3332203d3e20323633373631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5100::/32

    Signature Algorithm: sha256WithRSAEncryption
         2b:3f:9f:b1:e3:f0:df:9e:be:e0:53:c2:2d:75:0e:f7:2e:36:
         ba:0f:c0:ea:dc:ab:e9:08:66:5a:93:84:5d:ff:74:40:5f:28:
         1c:b9:36:60:c7:a1:40:9b:0c:eb:92:bf:28:bb:f3:c5:21:7b:
         89:a1:72:27:89:02:7d:26:9e:dd:60:e0:17:5a:56:0c:ea:17:
         f5:9d:e3:b1:bd:66:75:a1:44:a3:82:f9:98:cf:e7:05:5d:aa:
         fb:c4:d1:98:b1:66:b6:3f:09:e9:5e:2a:28:e6:fd:d3:95:2b:
         10:a9:02:d6:d6:96:7e:19:8b:2f:d1:d0:ee:bf:14:1f:08:78:
         76:a6:6b:21:34:0f:c6:f9:17:73:19:aa:bf:34:9f:79:b1:d7:
         2a:35:ff:f8:fc:65:17:90:a3:3e:f8:72:de:4c:0a:4d:4e:12:
         e6:3a:ec:aa:39:0e:14:15:89:93:36:ef:4e:7f:fa:4d:8b:7a:
         79:9a:11:af:1f:71:ac:02:89:6e:40:94:c4:6f:70:88:2c:ab:
         f8:9d:aa:cc:85:b7:8c:05:a7:dc:f8:33:0a:f9:d8:19:e0:fc:
         f8:de:f4:ac:a5:51:df:7a:e9:39:4d:75:4a:25:7f:fe:e3:ce:
         0d:60:03:fc:01:e5:37:b4:0a:0f:a1:7f:0f:1b:a9:26:5f:37:
         c6:68:50:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 20:18:17 2025 by rpki-client