Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/417D22770EA478544655959E65B0DAD6A398357FA67309A764AAD71A4D3941A2/0/323830333a633532303a3939303a3a2f34342d3434203d3e20323636363833.roa
File:                     323830333a633532303a3939303a3a2f34342d3434203d3e20323636363833.roa (raw, json)
Hash identifier:          YQlmtjB0qhYoEukOQzyRWndcEVqVMFMCNvu+xMlrYN8=
Subject key identifier:   92:3B:1F:A8:A6:EA:B6:38:8B:B4:99:9B:12:F5:A0:C1:15:D6:14:41
Certificate issuer:       /CN=67695A57A246E7FEEC5E99692566E43D7F039663
Certificate serial:       423082534966DF01AD089AC1042C5DC876491682
Authority key identifier: 67:69:5A:57:A2:46:E7:FE:EC:5E:99:69:25:66:E4:3D:7F:03:96:63
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/67695A57A246E7FEEC5E99692566E43D7F039663.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/417D22770EA478544655959E65B0DAD6A398357FA67309A764AAD71A4D3941A2/0/323830333a633532303a3939303a3a2f34342d3434203d3e20323636363833.roa
Signing time:             Fri 16 May 2025 15:19:11 +0000
ROA not before:           Fri 16 May 2025 15:14:11 +0000
ROA not after:            Fri 15 May 2026 15:19:11 +0000
asID:                     266683
IP address blocks:        2803:c520:990::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/417D22770EA478544655959E65B0DAD6A398357FA67309A764AAD71A4D3941A2/0/67695A57A246E7FEEC5E99692566E43D7F039663.crl
                          rsync://repository.lacnic.net/rpki/lacnic/417D22770EA478544655959E65B0DAD6A398357FA67309A764AAD71A4D3941A2/0/67695A57A246E7FEEC5E99692566E43D7F039663.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/67695A57A246E7FEEC5E99692566E43D7F039663.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 21 May 2025 17:20:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:30:82:53:49:66:df:01:ad:08:9a:c1:04:2c:5d:c8:76:49:16:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67695A57A246E7FEEC5E99692566E43D7F039663
        Validity
            Not Before: May 16 15:14:11 2025 GMT
            Not After : May 15 15:19:11 2026 GMT
        Subject: CN=923B1FA8A6EAB6388BB4999B12F5A0C115D61441
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:41:3b:3c:74:9e:32:7b:76:5f:9f:0b:1b:80:
                    b7:39:ad:7a:84:0e:8e:df:ba:c1:17:83:ba:cf:cb:
                    0c:91:91:4a:25:ac:49:52:f1:83:ba:98:c9:a7:a5:
                    0b:68:41:e0:22:71:21:22:ba:19:33:f3:03:91:6b:
                    c3:d1:b1:0c:21:6d:2f:83:84:80:b5:6c:bc:b4:31:
                    06:a6:89:f3:a5:30:02:39:88:49:85:b1:62:aa:6c:
                    ce:58:e9:c5:2a:41:36:94:4a:01:c1:3c:96:da:e7:
                    f2:ea:c1:5e:e4:b0:97:94:ba:ce:d6:f2:85:c4:f4:
                    7d:58:1c:3e:da:95:b2:e3:fb:f5:52:47:53:89:30:
                    34:75:c2:ae:5b:46:a7:e5:5d:1c:84:6e:b3:6a:11:
                    90:e7:1a:29:af:56:c2:57:b3:74:6b:7e:31:f5:fd:
                    6f:7d:f0:fb:98:b8:44:3d:9c:0a:1b:28:7e:50:80:
                    a1:38:bf:42:ac:41:ae:d4:f1:e0:60:4f:a2:ec:11:
                    f8:f6:59:eb:3b:43:84:9c:6e:73:61:77:b1:bd:a6:
                    b6:51:19:fe:b4:48:95:47:21:e1:8f:b3:7e:e2:82:
                    10:1b:37:61:1c:2b:f5:88:dc:1b:de:42:e5:9d:12:
                    98:f7:1a:5e:92:47:ef:45:e1:66:3e:3a:18:2e:e9:
                    8f:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:3B:1F:A8:A6:EA:B6:38:8B:B4:99:9B:12:F5:A0:C1:15:D6:14:41
            X509v3 Authority Key Identifier:
                keyid:67:69:5A:57:A2:46:E7:FE:EC:5E:99:69:25:66:E4:3D:7F:03:96:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/417D22770EA478544655959E65B0DAD6A398357FA67309A764AAD71A4D3941A2/0/67695A57A246E7FEEC5E99692566E43D7F039663.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/67695A57A246E7FEEC5E99692566E43D7F039663.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/417D22770EA478544655959E65B0DAD6A398357FA67309A764AAD71A4D3941A2/0/323830333a633532303a3939303a3a2f34342d3434203d3e20323636363833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c520:990::/44

    Signature Algorithm: sha256WithRSAEncryption
         08:fc:fb:54:82:e9:0e:a1:4d:ff:24:9f:28:4d:e5:cc:94:a4:
         35:ee:f2:dc:27:d1:c2:76:cc:5d:fd:38:4e:b0:40:8a:b8:25:
         af:97:bf:d1:21:58:c3:69:46:a7:24:4e:20:5b:3c:fc:6a:f3:
         91:a0:89:50:63:13:0d:bd:47:29:cc:c4:8f:11:5c:8d:9c:dd:
         e7:3c:10:55:21:ce:ee:d8:e9:f2:3d:89:b0:ff:9c:db:8c:45:
         49:25:08:31:15:5f:0c:43:91:04:03:41:a7:6a:c6:1d:45:74:
         b3:d8:a7:6f:55:11:50:06:d0:7e:eb:dc:4d:c9:03:91:af:2e:
         45:6e:d3:58:5f:49:72:c1:14:f5:99:31:36:04:b5:6e:39:8c:
         fa:a2:2c:ed:f8:60:48:dd:d5:cc:5b:06:26:e4:e9:75:c5:38:
         82:ca:89:71:10:38:92:fc:8f:9a:6d:e4:8c:ef:7a:b7:0d:26:
         d6:7a:60:c9:20:21:ff:b2:a2:ba:92:f9:5a:87:4c:58:dd:49:
         20:d0:7d:d7:30:b1:5a:90:29:b9:88:41:69:df:69:3f:b3:64:
         b8:11:dc:ac:d7:0f:4a:79:b0:a5:78:8b:15:bb:17:59:71:ab:
         fe:d7:20:8f:92:52:26:73:16:45:fa:66:37:03:8e:07:a1:c5:
         65:66:21:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 06:03:58 2025 by rpki-client