Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F2FBDDF082FF729B54EFDCCA2A3D51B564E0CE1EFBAF03FF876B903975DB375B/0/323830333a653639303a3a2f33322d3332203d3e20323732383937.roa
File:                     323830333a653639303a3a2f33322d3332203d3e20323732383937.roa (raw, json)
Hash identifier:          cMFPaVr4DHtx376KCr7XpFlInrV4GmhSTifuw/fUnmY=
Subject key identifier:   B9:65:FF:D8:72:7E:85:C2:47:83:93:A4:D2:2B:8C:9D:E6:29:1C:F4
Certificate issuer:       /CN=B6952BE619B99ACF569A91F05562F8563A3766D1
Certificate serial:       6144008B4AED33CD96A0EA7C927706D327B72684
Authority key identifier: B6:95:2B:E6:19:B9:9A:CF:56:9A:91:F0:55:62:F8:56:3A:37:66:D1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6952BE619B99ACF569A91F05562F8563A3766D1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F2FBDDF082FF729B54EFDCCA2A3D51B564E0CE1EFBAF03FF876B903975DB375B/0/323830333a653639303a3a2f33322d3332203d3e20323732383937.roa
Signing time:             Tue 04 Feb 2025 18:49:23 +0000
ROA not before:           Tue 04 Feb 2025 18:44:23 +0000
ROA not after:            Tue 03 Feb 2026 18:49:23 +0000
asID:                     272897
IP address blocks:        2803:e690::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F2FBDDF082FF729B54EFDCCA2A3D51B564E0CE1EFBAF03FF876B903975DB375B/0/B6952BE619B99ACF569A91F05562F8563A3766D1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F2FBDDF082FF729B54EFDCCA2A3D51B564E0CE1EFBAF03FF876B903975DB375B/0/B6952BE619B99ACF569A91F05562F8563A3766D1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6952BE619B99ACF569A91F05562F8563A3766D1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:44:00:8b:4a:ed:33:cd:96:a0:ea:7c:92:77:06:d3:27:b7:26:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6952BE619B99ACF569A91F05562F8563A3766D1
        Validity
            Not Before: Feb  4 18:44:23 2025 GMT
            Not After : Feb  3 18:49:23 2026 GMT
        Subject: CN=B965FFD8727E85C2478393A4D22B8C9DE6291CF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:7a:1b:a5:78:8d:f8:05:bc:3c:1b:68:62:d7:
                    80:b2:ea:8e:b3:f7:7e:bb:ac:18:e8:25:f8:09:5c:
                    5a:14:17:98:ad:89:75:45:f2:c7:e8:7b:3d:5a:e7:
                    d0:9a:4e:fe:75:14:61:7c:12:bc:8d:74:c1:67:8b:
                    33:93:ac:75:fb:bf:70:f3:27:06:62:73:de:a7:af:
                    2a:0c:05:f7:ec:49:eb:6c:50:52:49:3c:9a:67:b0:
                    77:08:90:ec:87:ac:ed:4b:b7:89:4d:76:ec:ca:63:
                    0e:d0:fc:96:8d:94:d3:6f:fa:01:7b:5e:90:b8:8f:
                    2f:5d:56:98:43:bc:9f:78:09:a6:5d:91:76:17:ce:
                    c7:bf:0d:ad:2c:8b:4b:5a:3b:21:bc:7c:86:dd:63:
                    7e:43:7b:e5:97:f4:04:d7:73:c3:f1:8d:18:5f:8e:
                    8e:f2:fe:9a:44:12:ae:45:a4:ef:f6:7a:7d:49:3f:
                    dd:92:f9:6d:cc:be:f5:d6:f0:f1:d8:93:83:b0:76:
                    75:d3:1a:89:46:3a:cb:80:de:e7:a2:11:10:04:0c:
                    ca:a8:1a:74:90:96:cb:1c:da:cb:14:1a:fa:13:a4:
                    74:60:6c:41:29:e0:19:f4:50:77:1c:4a:30:0b:b2:
                    2b:8e:55:06:3b:25:5c:52:66:2e:28:9a:87:28:1b:
                    73:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:65:FF:D8:72:7E:85:C2:47:83:93:A4:D2:2B:8C:9D:E6:29:1C:F4
            X509v3 Authority Key Identifier:
                keyid:B6:95:2B:E6:19:B9:9A:CF:56:9A:91:F0:55:62:F8:56:3A:37:66:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F2FBDDF082FF729B54EFDCCA2A3D51B564E0CE1EFBAF03FF876B903975DB375B/0/B6952BE619B99ACF569A91F05562F8563A3766D1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6952BE619B99ACF569A91F05562F8563A3766D1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F2FBDDF082FF729B54EFDCCA2A3D51B564E0CE1EFBAF03FF876B903975DB375B/0/323830333a653639303a3a2f33322d3332203d3e20323732383937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e690::/32

    Signature Algorithm: sha256WithRSAEncryption
         51:8f:9d:8a:2b:b1:93:87:94:86:90:50:d6:8e:f5:60:ec:52:
         0b:85:97:78:78:9f:21:aa:5a:87:51:40:9e:8c:92:24:40:9e:
         e7:b1:ce:ce:f4:79:3d:f7:f6:71:fa:e7:e8:80:96:e7:96:3f:
         01:3a:a7:a4:56:0f:b8:9f:db:a7:f5:9d:35:5f:90:76:de:13:
         72:91:97:90:58:35:28:ce:59:09:88:ed:98:47:2f:c0:5e:39:
         8f:8e:b6:e9:09:c0:f6:e8:97:00:bf:59:40:ed:b0:1c:a6:0d:
         a9:61:82:93:7d:91:ec:16:80:60:0a:7f:22:c6:c2:90:48:a9:
         54:00:56:85:ed:16:90:72:a5:55:84:6e:09:8d:b8:70:47:05:
         b7:9c:78:a1:2a:19:3f:c0:b5:6f:b0:19:35:62:da:15:22:2f:
         7d:1a:3d:29:2b:4c:ed:8a:e3:67:94:c9:a9:a1:0e:42:cf:5f:
         66:75:6d:6a:41:9d:bb:96:f9:a9:d5:d1:4a:a3:9e:66:b3:60:
         e1:f4:f6:05:e7:b1:df:3d:d0:cb:29:ae:e3:99:52:b0:08:17:
         ea:4f:72:58:b8:54:33:74:9c:a8:a1:7a:17:f9:08:ae:0c:a9:
         03:10:17:97:ee:66:c2:28:06:e6:9a:e2:06:f5:20:5d:05:1e:
         e3:db:92:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 03:06:20 2025 by rpki-client