Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FA1B459B0D6913521B2CD0B82F081D48976186FE369C8287C6BFFEE3837B4122/0/323830333a653130303a3a2f33322d3335203d3e203237393731.roa
File:                     323830333a653130303a3a2f33322d3335203d3e203237393731.roa (raw, json)
Hash identifier:          HH2RkPFSrqbsJD4zlJ5oxYJ1G3K/bvf4ReIqts5azag=
Subject key identifier:   A8:BC:BB:09:FD:BE:84:5B:97:80:CE:23:54:47:89:41:5D:46:1B:51
Certificate issuer:       /CN=186D48B8C1F30720B512B1F62C673FCFD9EDFAEE
Certificate serial:       7600558BA922019EA27528B97814F0001DA45A7A
Authority key identifier: 18:6D:48:B8:C1:F3:07:20:B5:12:B1:F6:2C:67:3F:CF:D9:ED:FA:EE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/186D48B8C1F30720B512B1F62C673FCFD9EDFAEE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FA1B459B0D6913521B2CD0B82F081D48976186FE369C8287C6BFFEE3837B4122/0/323830333a653130303a3a2f33322d3335203d3e203237393731.roa
Signing time:             Tue 04 Feb 2025 18:06:22 +0000
ROA not before:           Tue 04 Feb 2025 18:01:22 +0000
ROA not after:            Tue 03 Feb 2026 18:06:22 +0000
asID:                     27971
IP address blocks:        2803:e100::/32 maxlen: 35
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FA1B459B0D6913521B2CD0B82F081D48976186FE369C8287C6BFFEE3837B4122/0/186D48B8C1F30720B512B1F62C673FCFD9EDFAEE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FA1B459B0D6913521B2CD0B82F081D48976186FE369C8287C6BFFEE3837B4122/0/186D48B8C1F30720B512B1F62C673FCFD9EDFAEE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/186D48B8C1F30720B512B1F62C673FCFD9EDFAEE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Apr 2025 11:56:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:00:55:8b:a9:22:01:9e:a2:75:28:b9:78:14:f0:00:1d:a4:5a:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=186D48B8C1F30720B512B1F62C673FCFD9EDFAEE
        Validity
            Not Before: Feb  4 18:01:22 2025 GMT
            Not After : Feb  3 18:06:22 2026 GMT
        Subject: CN=A8BCBB09FDBE845B9780CE23544789415D461B51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:9f:1a:8f:a4:60:77:ec:9b:5b:cb:d3:f7:7b:
                    4e:e1:02:73:71:0b:de:36:2e:2a:f9:a3:3c:5d:cc:
                    8e:84:83:dd:ef:7f:ed:2e:2b:5b:9e:58:f8:8f:73:
                    15:83:ce:3f:50:0e:5c:4f:ae:52:a9:e9:51:c7:77:
                    f1:b3:9a:2d:bb:9a:b6:38:92:9b:68:f5:d5:fe:8b:
                    40:10:92:61:11:51:ef:c0:7c:fd:23:64:10:95:9e:
                    ba:a2:67:20:58:c1:fb:b9:38:73:fa:44:6d:99:1c:
                    a8:91:85:27:fc:62:de:b7:34:9e:37:18:a4:e1:62:
                    c6:30:ca:b7:56:68:f7:07:c4:76:18:59:a8:ab:b5:
                    0c:42:83:bf:0d:73:60:23:d8:2e:dc:e2:6f:46:26:
                    0b:84:1b:5b:38:3a:c4:2e:a7:e6:31:32:56:0d:a9:
                    7f:e5:1b:a4:07:7b:c7:1b:da:11:8b:21:97:d7:2c:
                    45:a4:6d:69:bc:d9:c0:d8:54:89:6d:95:b3:1d:b0:
                    e3:d7:37:4d:3a:bc:ee:71:60:a4:60:1c:70:29:25:
                    fc:83:d0:af:9c:5e:24:f3:76:73:14:57:6a:49:c8:
                    99:af:9b:cd:b8:d5:ad:9a:33:bb:20:5b:77:08:21:
                    d8:04:fc:d7:76:3f:0a:6b:a4:91:86:74:5b:14:12:
                    39:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:BC:BB:09:FD:BE:84:5B:97:80:CE:23:54:47:89:41:5D:46:1B:51
            X509v3 Authority Key Identifier:
                keyid:18:6D:48:B8:C1:F3:07:20:B5:12:B1:F6:2C:67:3F:CF:D9:ED:FA:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FA1B459B0D6913521B2CD0B82F081D48976186FE369C8287C6BFFEE3837B4122/0/186D48B8C1F30720B512B1F62C673FCFD9EDFAEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/186D48B8C1F30720B512B1F62C673FCFD9EDFAEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FA1B459B0D6913521B2CD0B82F081D48976186FE369C8287C6BFFEE3837B4122/0/323830333a653130303a3a2f33322d3335203d3e203237393731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e100::/32

    Signature Algorithm: sha256WithRSAEncryption
         4b:b5:77:d6:a9:84:9a:46:8b:9a:3e:09:55:87:ee:0d:77:9f:
         60:66:1b:13:50:d7:4a:f1:26:09:6d:1a:54:2c:b3:c3:43:41:
         ab:e1:fa:ee:e5:07:4c:7f:3f:d5:79:7d:ab:61:38:9c:cc:bd:
         bb:08:1f:18:ce:31:98:b4:69:1a:3c:15:63:82:0f:98:be:0b:
         3c:3c:ce:88:7b:3a:d2:12:1a:73:6b:b0:53:43:e0:98:29:52:
         95:ef:0e:ed:82:c5:19:78:1c:e7:bd:01:19:f6:b7:09:82:ed:
         9e:97:c5:a6:a0:82:ad:94:20:d0:f8:1c:e2:38:a4:21:54:62:
         3b:37:d8:fe:21:69:09:60:0c:64:f4:0e:92:da:c6:af:9f:4d:
         22:2f:24:19:50:27:90:f3:75:8b:ff:f6:5f:89:ff:97:19:3b:
         94:13:60:61:88:66:f9:87:06:b4:b7:c0:28:46:b3:a8:91:10:
         e2:45:85:33:ae:29:12:33:11:45:c7:01:17:af:1d:68:c9:19:
         2b:d6:85:e9:46:97:e1:7e:1c:88:cb:37:d2:03:2b:f5:c7:f2:
         1f:bb:4a:bb:6d:90:da:f5:76:7e:e4:7a:56:1c:62:12:76:42:
         b3:70:bb:d4:50:7b:e4:b7:f5:d1:d8:0c:45:8b:6c:8d:61:30:
         4e:8f:11:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:49:30 2025 by rpki-client