Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F157BD59DABCB6D961AC0F2D00BA596759FAC82A0EAEDE7D129DF241CBEFBF19/0/323830303a3332303a383030333a3a2f34382d3438203d3e203237383832.roa
File:                     323830303a3332303a383030333a3a2f34382d3438203d3e203237383832.roa (raw, json)
Hash identifier:          AeNm0PZuyYRebCTRHpVgWIUTDNcyyWP0MDWB58ebqVM=
Subject key identifier:   A3:1E:0C:53:55:13:13:53:B4:35:E9:9C:82:34:AF:95:15:71:D3:0F
Certificate issuer:       /CN=B3866813178FF550E6FCABCD492387DD1D0E08A5
Certificate serial:       01DB083A5D35BBFF239166DE9C620D7AD4360B2D
Authority key identifier: B3:86:68:13:17:8F:F5:50:E6:FC:AB:CD:49:23:87:DD:1D:0E:08:A5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3866813178FF550E6FCABCD492387DD1D0E08A5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F157BD59DABCB6D961AC0F2D00BA596759FAC82A0EAEDE7D129DF241CBEFBF19/0/323830303a3332303a383030333a3a2f34382d3438203d3e203237383832.roa
Signing time:             Tue 04 Feb 2025 20:05:44 +0000
ROA not before:           Tue 04 Feb 2025 20:00:44 +0000
ROA not after:            Tue 03 Feb 2026 20:05:44 +0000
asID:                     27882
IP address blocks:        2800:320:8003::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F157BD59DABCB6D961AC0F2D00BA596759FAC82A0EAEDE7D129DF241CBEFBF19/0/B3866813178FF550E6FCABCD492387DD1D0E08A5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F157BD59DABCB6D961AC0F2D00BA596759FAC82A0EAEDE7D129DF241CBEFBF19/0/B3866813178FF550E6FCABCD492387DD1D0E08A5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3866813178FF550E6FCABCD492387DD1D0E08A5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 05:06:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:db:08:3a:5d:35:bb:ff:23:91:66:de:9c:62:0d:7a:d4:36:0b:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3866813178FF550E6FCABCD492387DD1D0E08A5
        Validity
            Not Before: Feb  4 20:00:44 2025 GMT
            Not After : Feb  3 20:05:44 2026 GMT
        Subject: CN=A31E0C5355131353B435E99C8234AF951571D30F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:6e:89:d7:ae:ed:61:ab:75:9b:81:c7:7d:8d:
                    44:28:09:5a:4d:5c:7a:a8:86:83:8a:d8:23:e2:27:
                    d5:00:cc:99:72:38:57:d9:64:f8:25:66:bb:47:9b:
                    e4:e6:ed:a1:3e:48:6d:4a:ae:5e:f1:05:13:91:d0:
                    77:25:7f:7f:04:4a:a9:4a:10:83:94:8c:ef:39:26:
                    ad:50:40:d7:52:6c:09:15:1a:54:d7:02:7d:24:12:
                    f3:43:34:d8:51:8d:57:4a:15:7b:83:e2:10:7d:f7:
                    78:49:fd:df:bd:e6:1f:ae:2e:45:e7:e3:2a:fa:25:
                    3a:71:d8:a6:b4:1b:3c:99:f1:6c:8c:23:71:a2:5f:
                    f5:95:5f:02:8f:bb:89:2c:f1:dd:ba:dd:ae:f3:79:
                    8d:9c:7f:72:7c:00:0b:7d:3e:3f:37:44:c8:62:97:
                    05:66:42:4c:cf:a7:25:8b:54:73:28:ec:ec:04:62:
                    cf:72:8a:0c:d7:07:20:98:c9:e9:ca:aa:dc:41:d4:
                    da:da:92:cf:ef:2f:cc:83:28:3f:60:35:4d:5a:6a:
                    54:9a:5f:70:53:94:fe:84:41:c1:b9:53:d2:d2:ff:
                    02:f7:86:e2:7a:7e:26:6f:94:47:90:5b:9d:49:64:
                    62:be:a7:70:2f:9e:8b:af:3c:f6:3e:3b:22:0b:55:
                    f7:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:1E:0C:53:55:13:13:53:B4:35:E9:9C:82:34:AF:95:15:71:D3:0F
            X509v3 Authority Key Identifier:
                keyid:B3:86:68:13:17:8F:F5:50:E6:FC:AB:CD:49:23:87:DD:1D:0E:08:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F157BD59DABCB6D961AC0F2D00BA596759FAC82A0EAEDE7D129DF241CBEFBF19/0/B3866813178FF550E6FCABCD492387DD1D0E08A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3866813178FF550E6FCABCD492387DD1D0E08A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F157BD59DABCB6D961AC0F2D00BA596759FAC82A0EAEDE7D129DF241CBEFBF19/0/323830303a3332303a383030333a3a2f34382d3438203d3e203237383832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:320:8003::/48

    Signature Algorithm: sha256WithRSAEncryption
         2f:8d:9f:f7:3b:9e:90:f3:9e:28:b6:bb:5e:9d:83:5e:97:25:
         af:ec:f3:41:f8:e2:c1:2d:cb:1f:c6:bc:91:e0:a2:13:b1:6a:
         4f:a1:2e:00:4c:3c:45:e6:7b:16:81:3b:51:83:40:0c:aa:b5:
         21:b2:68:60:0b:4f:81:e4:24:6e:31:ec:e9:81:8e:22:3c:51:
         99:bd:c2:40:b2:13:ab:1e:59:a6:a5:c2:0b:48:8f:db:0c:c9:
         65:a8:6c:fd:c1:4e:28:fe:42:97:e8:07:a7:38:d1:ec:e6:58:
         32:58:d9:63:c2:c0:5e:1a:e2:22:fb:7d:aa:23:00:85:12:8d:
         1f:a4:2d:bd:a4:ca:a5:b0:c5:f2:09:82:b0:dd:34:3d:6b:91:
         17:ed:d7:9e:cb:99:9a:d8:6b:67:20:ae:f7:14:2e:38:98:cc:
         f6:36:81:99:ff:42:54:c2:a2:14:a9:93:1a:21:84:5e:71:1f:
         44:91:2d:4f:00:ed:fd:01:81:9c:10:b3:ff:5a:ee:e0:ce:60:
         0c:17:18:5c:a6:a9:e0:54:be:ab:03:28:85:8d:6a:17:c4:1d:
         6e:5b:a5:1b:c0:aa:0e:42:c5:a4:de:ae:73:03:da:d0:0d:9d:
         a4:51:3c:9f:0f:b7:63:53:4c:cb:c9:38:76:6b:aa:2c:a8:08:
         3d:24:9c:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:00:17 2025 by rpki-client