Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F41CFB095DDD0BDFA5013B95E4836DB0F8C161785486FBC8DA3C182E10A32964/0/323830333a616632303a3a2f33322d313238203d3e20323636373732.roa
File:                     323830333a616632303a3a2f33322d313238203d3e20323636373732.roa (raw, json)
Hash identifier:          jVNR6eU0ZFa5N51f26hxysfjhRB0yvN2L0FFxQOe/fk=
Subject key identifier:   75:7F:DF:1E:DF:B7:7A:D4:3C:BE:F7:9F:67:F1:99:FD:0F:DE:2F:84
Certificate issuer:       /CN=C59D456B5A7958D801EFD7AD79135F812D7051FD
Certificate serial:       437E8B2DF736EE0ED529CBAD6FA31B82FD9CF4BE
Authority key identifier: C5:9D:45:6B:5A:79:58:D8:01:EF:D7:AD:79:13:5F:81:2D:70:51:FD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C59D456B5A7958D801EFD7AD79135F812D7051FD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F41CFB095DDD0BDFA5013B95E4836DB0F8C161785486FBC8DA3C182E10A32964/0/323830333a616632303a3a2f33322d313238203d3e20323636373732.roa
Signing time:             Tue 04 Feb 2025 18:23:22 +0000
ROA not before:           Tue 04 Feb 2025 18:18:22 +0000
ROA not after:            Tue 03 Feb 2026 18:23:22 +0000
asID:                     266772
IP address blocks:        2803:af20::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F41CFB095DDD0BDFA5013B95E4836DB0F8C161785486FBC8DA3C182E10A32964/0/C59D456B5A7958D801EFD7AD79135F812D7051FD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F41CFB095DDD0BDFA5013B95E4836DB0F8C161785486FBC8DA3C182E10A32964/0/C59D456B5A7958D801EFD7AD79135F812D7051FD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C59D456B5A7958D801EFD7AD79135F812D7051FD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 02:59:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:7e:8b:2d:f7:36:ee:0e:d5:29:cb:ad:6f:a3:1b:82:fd:9c:f4:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C59D456B5A7958D801EFD7AD79135F812D7051FD
        Validity
            Not Before: Feb  4 18:18:22 2025 GMT
            Not After : Feb  3 18:23:22 2026 GMT
        Subject: CN=757FDF1EDFB77AD43CBEF79F67F199FD0FDE2F84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c4:c4:ec:c0:69:37:d2:93:20:55:9d:62:48:
                    69:41:4d:23:4f:f5:da:9a:e2:34:b2:fb:f7:7c:23:
                    aa:3d:ad:a0:7f:9f:91:eb:9d:76:a6:2f:36:ef:b2:
                    3e:13:ae:ad:5e:f8:7b:a3:6c:96:78:6b:5f:ec:8f:
                    e3:bf:71:92:8a:f6:e4:56:92:94:31:94:08:dc:e3:
                    a6:14:a4:a1:a6:f9:22:7a:ee:89:f9:c0:d6:3b:0b:
                    ce:1d:75:13:ea:e9:17:fc:d8:c6:a6:af:15:c8:43:
                    24:0d:40:98:06:7f:03:d5:49:6b:6a:6c:9c:c9:ca:
                    11:fa:84:53:fc:57:d4:09:a1:25:3c:67:8b:df:2f:
                    74:77:10:14:80:10:38:cf:5e:57:7c:5b:3b:9c:92:
                    65:38:10:de:25:8a:53:04:53:8c:f0:8c:f2:26:19:
                    b7:c7:2e:4c:99:50:08:28:4e:02:34:44:5d:54:a1:
                    72:a0:2c:b4:bc:14:0a:82:cb:1b:02:2b:a6:e3:63:
                    e4:84:e5:79:d8:64:93:01:2e:5d:d5:06:67:49:44:
                    85:7c:79:40:d9:32:58:51:e6:fb:8d:f2:e4:b4:43:
                    9b:09:2a:2f:6b:55:f2:ac:07:72:9c:eb:2f:f9:95:
                    3c:bd:dc:e5:4f:d0:b3:34:88:ed:72:4b:88:d7:1e:
                    f6:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:7F:DF:1E:DF:B7:7A:D4:3C:BE:F7:9F:67:F1:99:FD:0F:DE:2F:84
            X509v3 Authority Key Identifier:
                keyid:C5:9D:45:6B:5A:79:58:D8:01:EF:D7:AD:79:13:5F:81:2D:70:51:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F41CFB095DDD0BDFA5013B95E4836DB0F8C161785486FBC8DA3C182E10A32964/0/C59D456B5A7958D801EFD7AD79135F812D7051FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C59D456B5A7958D801EFD7AD79135F812D7051FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F41CFB095DDD0BDFA5013B95E4836DB0F8C161785486FBC8DA3C182E10A32964/0/323830333a616632303a3a2f33322d313238203d3e20323636373732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:af20::/32

    Signature Algorithm: sha256WithRSAEncryption
         13:40:4e:92:c1:e8:3f:70:ba:03:96:5b:7b:d4:cf:5f:52:6a:
         80:22:4a:9a:5d:85:71:e2:60:ff:2c:32:e0:45:2e:54:d2:46:
         66:e5:0b:64:e7:8b:0d:92:29:99:df:4e:41:68:da:44:0c:f1:
         42:4a:64:88:1d:11:86:2a:cf:e4:23:27:52:90:70:15:a3:c9:
         68:50:00:09:6e:d0:41:b2:37:15:93:27:4e:ca:d1:4b:70:28:
         de:f3:48:b3:d5:56:b1:14:22:dd:a1:02:eb:ca:e6:3b:d1:c1:
         52:13:74:08:13:29:cc:b2:41:62:5c:5c:3d:ce:c6:cf:b3:21:
         f3:c1:a4:f7:c1:d9:5f:97:a3:74:be:ea:46:88:e3:86:aa:66:
         42:a1:22:f2:60:73:f3:4f:ab:29:d4:c9:fb:c1:9d:67:61:91:
         e4:fb:99:62:08:ba:54:f7:b4:10:06:4e:b8:8a:e9:74:ad:7d:
         01:51:1f:40:46:ef:2c:2c:ff:0b:47:52:71:8f:cd:91:be:be:
         84:58:f4:18:5c:99:a7:07:bd:ae:3d:2d:e8:ac:19:58:f5:d2:
         c9:5e:90:46:90:4d:be:a8:66:3f:10:ec:f0:52:2d:4d:aa:ae:
         da:06:e7:e7:01:31:d7:f1:a2:0a:b4:76:08:78:5b:d5:d3:ec:
         c6:7a:cd:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:07:41 2025 by rpki-client