Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F0CDE723D82FA920B88EAAFDCC612A1728AAE76F6ECCBDAA52C3D699FF78D069/0/323830333a613634303a3a2f33322d3536203d3e203237383936.roa
File:                     323830333a613634303a3a2f33322d3536203d3e203237383936.roa (raw, json)
Hash identifier:          B+utkw2BCRRGP7WVCnBbBQJkPWUUr3vvKGJPQqOESlI=
Subject key identifier:   26:F8:C8:0F:FB:37:C2:CE:65:6B:AE:2C:8D:9A:E0:25:CD:BA:80:BE
Certificate issuer:       /CN=70B51DCC347573651055FC72DB19C170524018CC
Certificate serial:       2007ACE0F4EFC106144D8145A68E6828310DE929
Authority key identifier: 70:B5:1D:CC:34:75:73:65:10:55:FC:72:DB:19:C1:70:52:40:18:CC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/70B51DCC347573651055FC72DB19C170524018CC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F0CDE723D82FA920B88EAAFDCC612A1728AAE76F6ECCBDAA52C3D699FF78D069/0/323830333a613634303a3a2f33322d3536203d3e203237383936.roa
Signing time:             Tue 04 Feb 2025 18:15:46 +0000
ROA not before:           Tue 04 Feb 2025 18:10:46 +0000
ROA not after:            Tue 03 Feb 2026 18:15:46 +0000
asID:                     27896
IP address blocks:        2803:a640::/32 maxlen: 56
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F0CDE723D82FA920B88EAAFDCC612A1728AAE76F6ECCBDAA52C3D699FF78D069/0/70B51DCC347573651055FC72DB19C170524018CC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F0CDE723D82FA920B88EAAFDCC612A1728AAE76F6ECCBDAA52C3D699FF78D069/0/70B51DCC347573651055FC72DB19C170524018CC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/70B51DCC347573651055FC72DB19C170524018CC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:07:ac:e0:f4:ef:c1:06:14:4d:81:45:a6:8e:68:28:31:0d:e9:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70B51DCC347573651055FC72DB19C170524018CC
        Validity
            Not Before: Feb  4 18:10:46 2025 GMT
            Not After : Feb  3 18:15:46 2026 GMT
        Subject: CN=26F8C80FFB37C2CE656BAE2C8D9AE025CDBA80BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:7d:45:42:62:24:69:5d:65:ff:0a:05:33:0c:
                    0f:24:93:85:80:c2:5c:58:7b:5a:d5:2a:7a:9e:ed:
                    be:bb:cc:48:c2:1f:2b:1b:85:8f:90:21:cc:6a:f4:
                    02:d5:13:89:55:83:e6:50:f4:52:c3:30:f4:46:ed:
                    ad:f7:18:11:9f:4e:cc:f8:1e:f6:8e:48:5c:d9:75:
                    a6:b2:58:a2:25:3b:7f:d4:c2:b4:2a:c1:48:d2:7d:
                    84:4a:bc:f5:94:85:a5:ba:f2:8a:04:1a:08:66:43:
                    2f:a1:90:ea:11:80:33:d5:b7:97:62:78:ed:26:85:
                    d2:05:7e:8b:75:d5:ae:31:9d:1c:a4:77:2b:ef:6d:
                    7d:5c:97:fd:94:95:1a:7e:c4:e2:a3:14:27:e5:5d:
                    21:28:82:c9:01:ee:37:7c:ec:c8:a5:28:2c:74:2f:
                    14:7a:f6:62:b7:16:45:d3:42:64:09:6f:45:e5:a1:
                    0f:d0:cf:07:d6:5e:92:ab:ec:03:e6:1b:36:64:cd:
                    a6:90:95:a9:29:5a:ec:3e:58:8d:4a:46:dc:9c:c3:
                    f5:47:d2:ba:d8:ea:22:b9:c3:cc:25:df:8a:ce:70:
                    40:6a:75:d2:e5:84:f6:4e:2d:18:52:71:b0:63:7a:
                    57:10:d7:b2:7d:e3:c1:2a:00:10:38:7f:6b:1c:33:
                    76:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:F8:C8:0F:FB:37:C2:CE:65:6B:AE:2C:8D:9A:E0:25:CD:BA:80:BE
            X509v3 Authority Key Identifier:
                keyid:70:B5:1D:CC:34:75:73:65:10:55:FC:72:DB:19:C1:70:52:40:18:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F0CDE723D82FA920B88EAAFDCC612A1728AAE76F6ECCBDAA52C3D699FF78D069/0/70B51DCC347573651055FC72DB19C170524018CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/70B51DCC347573651055FC72DB19C170524018CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F0CDE723D82FA920B88EAAFDCC612A1728AAE76F6ECCBDAA52C3D699FF78D069/0/323830333a613634303a3a2f33322d3536203d3e203237383936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:a640::/32

    Signature Algorithm: sha256WithRSAEncryption
         52:24:ad:12:4c:31:b2:4b:67:30:e5:c7:13:dc:21:de:54:91:
         2b:5c:83:05:f9:41:15:5b:97:d8:b2:d2:f9:17:f9:d4:7c:6c:
         49:9e:ee:2f:6d:c3:35:d3:c3:a5:4e:d4:5b:79:05:c1:97:60:
         41:58:5d:13:38:6e:de:24:17:c4:3e:08:7f:09:df:96:2d:35:
         ee:b0:1f:1d:e9:65:78:0c:93:78:02:a0:71:be:75:43:18:a7:
         04:8d:58:2b:29:4d:d9:64:77:21:ef:9e:7e:a2:c8:80:0e:ee:
         67:2c:1b:0f:31:d6:d6:38:e0:3e:08:93:45:20:0a:fa:ca:d6:
         7d:c1:d3:07:c4:06:35:80:2d:64:2d:b3:43:d7:2b:75:3e:7c:
         d6:74:33:13:ca:19:82:46:08:d0:b7:49:d7:6c:9a:ba:46:6c:
         3e:73:db:cf:e6:65:41:7e:4e:ee:93:f8:cb:2a:a4:d7:d4:86:
         a3:05:0c:4c:62:8b:af:75:53:c1:f0:b3:21:47:ad:1f:41:06:
         32:96:94:4a:c1:da:06:53:63:45:8f:fb:b6:76:99:aa:f4:7f:
         0c:b1:73:03:f5:22:ef:e5:47:f0:73:a2:ec:64:7e:58:7a:ac:
         9e:7e:0c:8b:30:68:cb:3e:02:e7:1e:1f:7b:91:eb:90:84:a9:
         1d:05:ed:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:53:59 2025 by rpki-client