Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/417D22770EA478544655959E65B0DAD6A398357FA67309A764AAD71A4D3941A2/0/323830333a633532303a3a2f33322d3332203d3e20323636363833.roa
File:                     323830333a633532303a3a2f33322d3332203d3e20323636363833.roa (raw, json)
Hash identifier:          TcgV6mtjjloQjIvzBRFOv1JoqMuMEj3Bn1ytUI3aoR8=
Subject key identifier:   88:1F:E8:F7:0D:5D:A1:C2:76:F3:F6:B7:BD:44:86:E1:10:07:63:CC
Certificate issuer:       /CN=67695A57A246E7FEEC5E99692566E43D7F039663
Certificate serial:       63866EA8523D662CA58DAD8E017CF8783CA3C625
Authority key identifier: 67:69:5A:57:A2:46:E7:FE:EC:5E:99:69:25:66:E4:3D:7F:03:96:63
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/67695A57A246E7FEEC5E99692566E43D7F039663.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/417D22770EA478544655959E65B0DAD6A398357FA67309A764AAD71A4D3941A2/0/323830333a633532303a3a2f33322d3332203d3e20323636363833.roa
Signing time:             Mon 12 May 2025 23:18:34 +0000
ROA not before:           Mon 12 May 2025 23:13:34 +0000
ROA not after:            Mon 11 May 2026 23:18:34 +0000
asID:                     266683
IP address blocks:        2803:c520::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/417D22770EA478544655959E65B0DAD6A398357FA67309A764AAD71A4D3941A2/0/67695A57A246E7FEEC5E99692566E43D7F039663.crl
                          rsync://repository.lacnic.net/rpki/lacnic/417D22770EA478544655959E65B0DAD6A398357FA67309A764AAD71A4D3941A2/0/67695A57A246E7FEEC5E99692566E43D7F039663.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/67695A57A246E7FEEC5E99692566E43D7F039663.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 21 May 2025 17:20:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:86:6e:a8:52:3d:66:2c:a5:8d:ad:8e:01:7c:f8:78:3c:a3:c6:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67695A57A246E7FEEC5E99692566E43D7F039663
        Validity
            Not Before: May 12 23:13:34 2025 GMT
            Not After : May 11 23:18:34 2026 GMT
        Subject: CN=881FE8F70D5DA1C276F3F6B7BD4486E1100763CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:f1:aa:37:2b:7d:81:c9:12:a1:bd:a2:fd:6c:
                    17:80:48:ae:9a:f6:f5:66:80:fa:5e:e0:83:9b:ee:
                    7e:34:45:d9:ed:fd:8a:43:a1:d9:09:e4:55:09:e2:
                    91:ee:65:70:08:ab:23:c8:17:17:ea:cf:65:47:65:
                    64:69:ed:52:4f:4c:dc:92:c0:d0:44:b4:ad:a3:21:
                    9f:27:74:91:21:f8:d3:94:e0:12:1f:c9:44:d0:c6:
                    b3:17:6f:a1:db:bf:df:65:da:c0:65:76:ce:44:c9:
                    4a:40:a3:b3:b2:bf:f3:ba:9b:30:66:cc:ab:1f:53:
                    82:58:f7:ab:28:21:d8:91:2a:e9:23:ee:b6:eb:48:
                    cc:38:c8:81:d5:a8:a0:ab:c6:a3:ab:93:55:ac:92:
                    84:80:0b:f1:b1:26:da:e6:1f:82:d2:1c:29:70:7c:
                    5f:1b:68:df:30:3e:c7:e1:7d:31:65:23:6a:dd:24:
                    7c:3c:5c:74:c3:04:30:6f:f0:d5:02:d2:f4:1e:1c:
                    a8:44:97:08:f2:d9:1d:06:fd:3c:a8:5a:cb:7a:db:
                    f1:bf:a6:fe:d3:56:f5:7c:80:2d:f9:8b:b4:5d:1c:
                    51:4e:bb:b9:58:84:83:5e:18:f9:53:b7:0f:31:cb:
                    7f:de:59:ce:2f:a5:a0:e2:dc:d3:c9:94:72:b7:e6:
                    fb:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:1F:E8:F7:0D:5D:A1:C2:76:F3:F6:B7:BD:44:86:E1:10:07:63:CC
            X509v3 Authority Key Identifier:
                keyid:67:69:5A:57:A2:46:E7:FE:EC:5E:99:69:25:66:E4:3D:7F:03:96:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/417D22770EA478544655959E65B0DAD6A398357FA67309A764AAD71A4D3941A2/0/67695A57A246E7FEEC5E99692566E43D7F039663.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/67695A57A246E7FEEC5E99692566E43D7F039663.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/417D22770EA478544655959E65B0DAD6A398357FA67309A764AAD71A4D3941A2/0/323830333a633532303a3a2f33322d3332203d3e20323636363833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c520::/32

    Signature Algorithm: sha256WithRSAEncryption
         2a:8a:d7:1d:0e:d4:2d:2f:08:cc:ef:26:66:3f:2b:59:31:82:
         ca:97:41:86:29:84:9d:d3:37:5d:30:a4:09:45:29:af:62:04:
         de:82:a5:d3:fa:fd:a7:4e:0f:14:b3:c0:b4:ba:45:02:bc:3b:
         74:c4:13:58:5f:75:f5:60:25:49:93:fd:10:d4:49:06:71:f4:
         3e:e9:22:25:b0:41:19:c7:56:ec:30:8a:86:db:5e:38:7a:69:
         7f:ae:ee:fc:2e:cc:4d:45:e8:97:1d:03:a0:68:54:1a:c5:27:
         a6:bc:2f:0e:8a:05:dc:d0:ef:04:06:08:4e:54:78:08:0b:76:
         73:82:8c:ad:f2:c3:bc:23:58:1c:bb:52:93:c1:30:da:7f:c0:
         0c:28:22:d4:ee:73:53:88:59:73:ff:61:46:c7:b5:94:f5:28:
         be:97:7a:a2:1f:28:bf:5d:c6:a2:41:61:13:2f:1f:75:59:34:
         12:de:da:0c:57:de:e7:41:25:70:dd:28:70:95:ac:c0:b7:b6:
         bc:00:b3:f4:09:42:fe:45:a3:3e:a9:c9:95:0e:e0:45:f6:1f:
         db:34:3c:4f:f4:d0:ce:d1:6f:05:70:38:3d:92:7a:81:4e:eb:
         70:c9:bb:90:cc:bf:55:2b:73:fe:de:9e:0b:b8:f8:6d:04:69:
         1b:62:e1:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 07:30:57 2025 by rpki-client