Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F2F7CEF2E5D3E6174FBF75865C0FB6A876A6DAE999F1A306C236F263E42E507E/0/323830333a323531303a3a2f33322d3338203d3e20323732303234.roa
File:                     323830333a323531303a3a2f33322d3338203d3e20323732303234.roa (raw, json)
Hash identifier:          8bD6L9W9CQmPmmg6L/LdYUPjSL5F2cOPxwc2Z9Das/I=
Subject key identifier:   07:93:4B:35:0C:34:D8:D7:C8:4B:1D:A7:90:7A:A2:13:72:7E:B8:AA
Certificate issuer:       /CN=16A1CCBDCED46FDD8D58690BFED9A8490AA67C0A
Certificate serial:       75969A42B6449B3625DDBFBA3370652AE78D3D4E
Authority key identifier: 16:A1:CC:BD:CE:D4:6F:DD:8D:58:69:0B:FE:D9:A8:49:0A:A6:7C:0A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/16A1CCBDCED46FDD8D58690BFED9A8490AA67C0A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F2F7CEF2E5D3E6174FBF75865C0FB6A876A6DAE999F1A306C236F263E42E507E/0/323830333a323531303a3a2f33322d3338203d3e20323732303234.roa
Signing time:             Tue 04 Feb 2025 18:29:39 +0000
ROA not before:           Tue 04 Feb 2025 18:24:39 +0000
ROA not after:            Tue 03 Feb 2026 18:29:39 +0000
asID:                     272024
IP address blocks:        2803:2510::/32 maxlen: 38
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F2F7CEF2E5D3E6174FBF75865C0FB6A876A6DAE999F1A306C236F263E42E507E/0/16A1CCBDCED46FDD8D58690BFED9A8490AA67C0A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F2F7CEF2E5D3E6174FBF75865C0FB6A876A6DAE999F1A306C236F263E42E507E/0/16A1CCBDCED46FDD8D58690BFED9A8490AA67C0A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/16A1CCBDCED46FDD8D58690BFED9A8490AA67C0A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:96:9a:42:b6:44:9b:36:25:dd:bf:ba:33:70:65:2a:e7:8d:3d:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16A1CCBDCED46FDD8D58690BFED9A8490AA67C0A
        Validity
            Not Before: Feb  4 18:24:39 2025 GMT
            Not After : Feb  3 18:29:39 2026 GMT
        Subject: CN=07934B350C34D8D7C84B1DA7907AA213727EB8AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:e6:3d:a5:35:1b:bf:6e:80:00:bf:66:36:a7:
                    f9:f4:84:7b:ba:63:50:a4:38:b1:aa:e8:53:57:b7:
                    6d:df:08:3c:3b:f9:9b:c5:82:3e:32:aa:f6:8d:54:
                    43:db:e8:25:52:22:1e:74:d9:d7:f6:86:32:93:b2:
                    e0:20:80:b5:f2:f3:f7:4d:88:25:42:aa:70:17:a0:
                    60:87:e7:b2:d3:5d:ea:e7:ab:12:2c:8f:51:a7:a8:
                    8f:4b:b3:1d:b2:65:0e:62:6e:1a:97:e8:c0:bb:88:
                    78:85:bf:2a:43:b6:93:da:e0:63:a7:49:77:79:06:
                    f2:f9:85:de:bc:45:77:5b:6b:96:40:2f:53:5c:c7:
                    3d:8b:37:a6:a9:70:2d:4f:26:ce:d0:91:8f:c1:c7:
                    76:dd:bc:95:51:9e:16:e4:fe:5b:38:ad:b6:f6:1f:
                    a3:1f:d5:76:80:04:ce:d2:b1:64:e6:6e:e6:6d:cc:
                    bc:c0:01:18:f3:82:fa:1a:eb:cd:2a:3f:6f:1c:74:
                    11:f7:b3:23:e3:a2:1b:3e:89:04:d9:53:ae:33:99:
                    ee:29:ba:ed:ea:f2:04:4f:1b:eb:61:6b:18:0c:67:
                    b7:ba:a0:af:b4:be:36:82:06:cd:19:8c:f3:be:58:
                    e2:9e:93:f0:ba:13:fd:41:de:ed:cb:b5:40:b9:d1:
                    19:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:93:4B:35:0C:34:D8:D7:C8:4B:1D:A7:90:7A:A2:13:72:7E:B8:AA
            X509v3 Authority Key Identifier:
                keyid:16:A1:CC:BD:CE:D4:6F:DD:8D:58:69:0B:FE:D9:A8:49:0A:A6:7C:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F2F7CEF2E5D3E6174FBF75865C0FB6A876A6DAE999F1A306C236F263E42E507E/0/16A1CCBDCED46FDD8D58690BFED9A8490AA67C0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/16A1CCBDCED46FDD8D58690BFED9A8490AA67C0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F2F7CEF2E5D3E6174FBF75865C0FB6A876A6DAE999F1A306C236F263E42E507E/0/323830333a323531303a3a2f33322d3338203d3e20323732303234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2510::/32

    Signature Algorithm: sha256WithRSAEncryption
         07:4e:42:51:74:0c:88:c3:cc:01:5e:d3:45:9d:46:14:9e:e6:
         c5:ac:b1:5a:c3:b1:67:39:90:07:72:cf:95:78:ff:ea:63:cf:
         07:22:b9:52:25:a5:9d:0a:cb:b6:e9:ca:e8:40:d0:f0:56:7e:
         df:74:a9:be:d8:39:94:c2:74:9f:9a:40:dc:4a:e4:58:6b:ae:
         b5:34:30:d1:cc:b8:0b:59:81:30:95:2f:2b:ee:0f:d4:ec:d6:
         ef:fe:a4:65:36:53:a5:b5:49:23:7e:18:b4:ee:c9:0e:55:01:
         2f:66:39:6f:22:7e:53:b9:a1:bf:86:88:0b:73:0b:15:80:2d:
         14:bb:04:ad:8f:71:d4:c1:09:00:9c:ec:f9:4a:ba:87:54:19:
         3e:b0:41:d7:66:4c:a4:21:4b:43:78:ba:bb:26:da:30:17:ba:
         7a:5d:54:55:bd:e9:8a:82:2b:ba:07:f7:96:e7:2b:f5:36:61:
         bc:01:e1:ab:a0:12:a0:47:98:38:f3:31:20:61:d3:5c:83:a5:
         e2:cb:11:a7:1f:08:01:1f:26:93:3c:59:52:fc:0c:a3:ab:b6:
         76:34:d9:44:37:dd:20:78:d7:0e:0c:03:5c:bc:3d:0b:86:16:
         1b:bc:51:e7:a5:76:f3:6d:4c:73:9d:68:e0:f1:f3:d9:2d:ea:
         83:ae:52:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:21:11 2025 by rpki-client