Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F68E217F69DE99D52AB3B6385D134B93C3D4D8260F1E24C0231493E89C2FF10F/0/323830333a313734303a3a2f33322d3332203d3e203333333932.roa
File:                     323830333a313734303a3a2f33322d3332203d3e203333333932.roa (raw, json)
Hash identifier:          Soe9sUaIgKPlFrUea6XdQEgZ8+GLcSBATZ+S9lvYQwU=
Subject key identifier:   A3:AE:56:BB:71:2D:31:BB:AC:03:06:B2:4B:C2:42:CC:77:BA:3B:F9
Certificate issuer:       /CN=9651F1E4B6480D19626E784CA1A8F0ABC94C1487
Certificate serial:       3758014D79F56E85E8B1B5A59DC60FF2A9B18E72
Authority key identifier: 96:51:F1:E4:B6:48:0D:19:62:6E:78:4C:A1:A8:F0:AB:C9:4C:14:87
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9651F1E4B6480D19626E784CA1A8F0ABC94C1487.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F68E217F69DE99D52AB3B6385D134B93C3D4D8260F1E24C0231493E89C2FF10F/0/323830333a313734303a3a2f33322d3332203d3e203333333932.roa
Signing time:             Fri 04 Apr 2025 14:13:57 +0000
ROA not before:           Fri 04 Apr 2025 14:08:57 +0000
ROA not after:            Fri 03 Apr 2026 14:13:57 +0000
asID:                     33392
IP address blocks:        2803:1740::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F68E217F69DE99D52AB3B6385D134B93C3D4D8260F1E24C0231493E89C2FF10F/0/9651F1E4B6480D19626E784CA1A8F0ABC94C1487.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F68E217F69DE99D52AB3B6385D134B93C3D4D8260F1E24C0231493E89C2FF10F/0/9651F1E4B6480D19626E784CA1A8F0ABC94C1487.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9651F1E4B6480D19626E784CA1A8F0ABC94C1487.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 04:49:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:58:01:4d:79:f5:6e:85:e8:b1:b5:a5:9d:c6:0f:f2:a9:b1:8e:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9651F1E4B6480D19626E784CA1A8F0ABC94C1487
        Validity
            Not Before: Apr  4 14:08:57 2025 GMT
            Not After : Apr  3 14:13:57 2026 GMT
        Subject: CN=A3AE56BB712D31BBAC0306B24BC242CC77BA3BF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:44:68:ed:b2:00:7c:f2:9e:12:b1:b4:46:02:
                    28:e4:3d:48:cc:b2:7a:81:1e:fa:80:f6:52:bb:52:
                    33:72:1d:36:86:ac:4f:1f:df:fc:ee:5c:73:62:49:
                    c9:95:4f:a8:3e:11:18:8d:b9:52:02:9e:ba:60:c0:
                    e9:7c:6a:11:c1:63:60:e5:77:65:7f:45:ab:1d:29:
                    23:d5:e5:ce:7c:19:0d:a6:a2:6b:af:28:a9:9b:c3:
                    7d:f4:fe:9e:0e:13:6c:1e:40:48:49:30:c5:d1:f1:
                    31:8a:bc:20:11:4f:74:d3:7c:b7:42:65:43:da:4d:
                    1e:31:32:8d:04:ef:fc:67:b6:a3:02:ab:c6:17:25:
                    a6:78:d1:c0:3e:7e:67:ba:6c:30:28:1c:38:da:57:
                    89:36:f1:08:fa:e5:91:a9:3d:93:fd:29:b8:a6:f0:
                    e3:1d:61:a5:81:d3:2d:5c:72:bb:24:85:07:dd:c9:
                    80:02:df:70:6b:bc:72:87:9a:ec:e1:07:40:2b:31:
                    e5:fb:9e:ef:32:ce:ec:c1:04:05:09:d8:94:f8:0b:
                    60:ef:a0:47:3a:54:91:56:77:eb:e4:4a:55:21:e6:
                    42:4d:5f:99:fc:f0:c2:c2:87:49:7d:05:3d:d7:f4:
                    f7:a2:56:bf:48:3e:7e:32:b5:da:83:30:6f:e1:ab:
                    3b:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:AE:56:BB:71:2D:31:BB:AC:03:06:B2:4B:C2:42:CC:77:BA:3B:F9
            X509v3 Authority Key Identifier:
                keyid:96:51:F1:E4:B6:48:0D:19:62:6E:78:4C:A1:A8:F0:AB:C9:4C:14:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F68E217F69DE99D52AB3B6385D134B93C3D4D8260F1E24C0231493E89C2FF10F/0/9651F1E4B6480D19626E784CA1A8F0ABC94C1487.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9651F1E4B6480D19626E784CA1A8F0ABC94C1487.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F68E217F69DE99D52AB3B6385D134B93C3D4D8260F1E24C0231493E89C2FF10F/0/323830333a313734303a3a2f33322d3332203d3e203333333932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1740::/32

    Signature Algorithm: sha256WithRSAEncryption
         67:74:90:76:34:e1:bb:39:ba:d5:0e:d4:94:7a:21:41:09:13:
         01:3f:44:1b:c2:9d:3f:ea:a5:94:92:9b:b6:90:2e:c3:02:e7:
         a3:13:c5:34:c7:74:f9:9a:f9:1a:67:a1:e1:b1:59:cb:1e:c5:
         7c:02:22:df:5c:1b:ce:e4:c6:12:ed:07:7c:f1:59:bc:4b:cd:
         0c:37:f1:64:af:4c:7e:57:e1:a1:80:03:d4:e9:4e:95:5f:cb:
         c4:bc:32:0c:5d:81:48:5b:e0:7e:39:bb:4a:5d:41:71:18:27:
         24:1b:20:6e:30:a3:93:f3:b1:cc:77:d1:ec:8a:84:ec:77:b7:
         9d:04:e6:bf:6e:4f:32:e7:e9:0c:d1:6a:75:6d:84:8f:0a:8b:
         03:0a:1f:46:fe:de:dd:5a:58:91:ae:04:ce:ab:47:5b:d6:0b:
         04:cd:f9:80:99:db:6d:35:f4:f2:eb:34:59:8e:11:28:cc:e2:
         53:c2:7b:00:f2:9b:18:06:40:11:53:fd:a4:9a:8d:81:e0:0b:
         5c:57:a7:15:1b:84:76:8d:28:e8:46:76:3e:8d:3f:35:6b:41:
         14:d8:a3:0e:11:1f:49:09:9b:a6:5b:27:e5:a6:c5:3e:dc:ee:
         6a:8e:80:f7:6c:20:46:87:02:29:6c:44:37:52:06:11:f4:ce:
         bd:66:9b:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:38:51 2025 by rpki-client