Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F41DE5B6320238A27C8AE45A967621C8E37BE70F7397924BCF524D04C4BA7390/0/323830333a666236303a3a2f33322d3332203d3e20323639383135.roa
File:                     323830333a666236303a3a2f33322d3332203d3e20323639383135.roa (raw, json)
Hash identifier:          75LR4rMfqszYH2M8aUFcY4YB8mfsOrdlAl53fZapDGQ=
Subject key identifier:   BB:1E:21:91:B3:07:6D:BC:5C:15:F9:C1:87:7C:6D:2A:3D:A3:A9:61
Certificate issuer:       /CN=B0F0C9DD73F6C1475F1456103DA6BB622464669F
Certificate serial:       5F1E40891AC90484C033E5C1E9C66C0086766C14
Authority key identifier: B0:F0:C9:DD:73:F6:C1:47:5F:14:56:10:3D:A6:BB:62:24:64:66:9F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B0F0C9DD73F6C1475F1456103DA6BB622464669F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F41DE5B6320238A27C8AE45A967621C8E37BE70F7397924BCF524D04C4BA7390/0/323830333a666236303a3a2f33322d3332203d3e20323639383135.roa
Signing time:             Thu 06 Feb 2025 05:09:10 +0000
ROA not before:           Thu 06 Feb 2025 05:04:10 +0000
ROA not after:            Thu 05 Feb 2026 05:09:10 +0000
asID:                     269815
IP address blocks:        2803:fb60::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F41DE5B6320238A27C8AE45A967621C8E37BE70F7397924BCF524D04C4BA7390/0/B0F0C9DD73F6C1475F1456103DA6BB622464669F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F41DE5B6320238A27C8AE45A967621C8E37BE70F7397924BCF524D04C4BA7390/0/B0F0C9DD73F6C1475F1456103DA6BB622464669F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B0F0C9DD73F6C1475F1456103DA6BB622464669F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:1e:40:89:1a:c9:04:84:c0:33:e5:c1:e9:c6:6c:00:86:76:6c:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0F0C9DD73F6C1475F1456103DA6BB622464669F
        Validity
            Not Before: Feb  6 05:04:10 2025 GMT
            Not After : Feb  5 05:09:10 2026 GMT
        Subject: CN=BB1E2191B3076DBC5C15F9C1877C6D2A3DA3A961
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:35:30:29:40:62:dd:ad:c4:77:f8:ca:40:f7:
                    51:8a:33:87:a8:52:e7:ec:42:01:50:79:20:6c:80:
                    34:8a:50:01:36:c6:75:0c:1a:d8:7a:bb:8c:15:8e:
                    4f:fb:e4:96:23:98:68:22:fe:cc:a7:ae:d5:0b:ff:
                    3c:c3:a5:39:07:f8:11:d1:22:7b:7f:de:34:d4:18:
                    05:c8:c2:28:c3:97:c7:a2:b6:67:e3:ce:72:8f:33:
                    64:78:55:6b:66:11:25:b3:c7:b5:2c:33:ba:92:ba:
                    e5:40:c5:45:76:2a:b2:4b:2c:b3:e7:3b:b2:7a:98:
                    33:79:2e:bd:e6:af:0c:75:2c:77:b7:f7:1d:23:70:
                    8b:93:bd:32:52:b0:08:c0:17:cb:cd:d2:2e:b8:aa:
                    eb:c8:f4:d5:dc:09:eb:4b:69:e2:c2:29:ca:3d:7f:
                    2d:ce:bc:2d:00:ca:ef:eb:27:2c:6d:71:87:14:eb:
                    66:ee:de:d3:35:13:8d:97:21:3b:72:eb:bb:a7:57:
                    7d:51:c7:64:e6:7d:8e:42:27:ba:b0:67:5b:d1:dd:
                    33:9a:3e:01:9d:b1:f5:56:dd:b8:75:b9:37:20:f0:
                    84:0d:c5:26:ff:ba:7b:9a:0a:e2:bc:45:75:dc:60:
                    71:31:b8:ff:13:c6:a9:96:fa:f1:2d:61:ac:37:21:
                    df:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:1E:21:91:B3:07:6D:BC:5C:15:F9:C1:87:7C:6D:2A:3D:A3:A9:61
            X509v3 Authority Key Identifier:
                keyid:B0:F0:C9:DD:73:F6:C1:47:5F:14:56:10:3D:A6:BB:62:24:64:66:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F41DE5B6320238A27C8AE45A967621C8E37BE70F7397924BCF524D04C4BA7390/0/B0F0C9DD73F6C1475F1456103DA6BB622464669F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B0F0C9DD73F6C1475F1456103DA6BB622464669F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F41DE5B6320238A27C8AE45A967621C8E37BE70F7397924BCF524D04C4BA7390/0/323830333a666236303a3a2f33322d3332203d3e20323639383135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:fb60::/32

    Signature Algorithm: sha256WithRSAEncryption
         88:c3:b7:30:e1:e6:c2:09:49:18:d2:dd:a1:45:ec:ea:9c:ac:
         ef:ce:7f:97:25:a7:7c:23:d4:93:e1:31:d7:8f:5b:a9:14:b2:
         36:a6:c0:1c:20:77:8a:c6:30:f5:5d:2a:05:03:03:8d:60:5e:
         18:a8:21:83:de:b5:88:b7:7c:65:88:b9:e7:a2:4c:db:58:d5:
         36:6d:74:ab:2f:a2:80:e4:49:e5:14:10:2b:42:ef:7a:32:68:
         b9:91:01:35:5f:8c:e2:e9:0a:a0:81:3f:d1:c5:e9:25:79:36:
         36:8f:4b:85:a1:67:b6:3a:1e:88:0e:48:af:ca:d5:f1:94:c6:
         b4:18:9a:3b:61:cb:75:0b:ca:72:7a:a6:b0:41:2d:f9:42:f0:
         9e:4b:3d:d6:0f:c6:c4:76:13:1f:eb:5f:6d:5f:ff:72:e4:07:
         49:f0:54:a5:ce:7a:f2:b8:db:c8:91:71:e5:5c:9f:10:e0:50:
         a2:26:c3:09:2d:2f:26:78:b5:6f:bc:a8:70:ed:9e:e0:7e:6d:
         42:ec:25:00:4e:e3:da:79:7c:9c:14:63:b3:b6:e8:3c:de:ae:
         3b:4b:20:0c:b0:04:29:3f:50:1d:23:64:6c:04:f2:8c:5a:4a:
         f9:62:07:e0:d4:fe:03:fc:a7:ec:14:61:57:0b:5f:91:bd:8d:
         7a:54:8e:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:55:34 2025 by rpki-client