Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8BFB3407966ED0F87C23F67BAE10670D51BE118F22FBADB9AAAD079A706E8B8F/0/323830333a663938303a3a2f33322d3332203d3e20333938373730.roa
File:                     323830333a663938303a3a2f33322d3332203d3e20333938373730.roa (raw, json)
Hash identifier:          N2hQWgi2o3pVcpjhM7NRheKkHZrVqo58+UCJYW1bNyU=
Subject key identifier:   0E:CE:FD:2C:4F:3A:5D:41:A1:E0:D2:A5:4F:7A:53:DD:2C:31:FA:0B
Certificate issuer:       /CN=185E96C80DFA32CF38CB2E537542AD1FB5A2BDA0
Certificate serial:       39C14814845E05EB91E944FF3DD67986E8D1E0AE
Authority key identifier: 18:5E:96:C8:0D:FA:32:CF:38:CB:2E:53:75:42:AD:1F:B5:A2:BD:A0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/185E96C80DFA32CF38CB2E537542AD1FB5A2BDA0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8BFB3407966ED0F87C23F67BAE10670D51BE118F22FBADB9AAAD079A706E8B8F/0/323830333a663938303a3a2f33322d3332203d3e20333938373730.roa
Signing time:             Fri 16 May 2025 22:50:00 +0000
ROA not before:           Fri 16 May 2025 22:45:00 +0000
ROA not after:            Fri 15 May 2026 22:50:00 +0000
asID:                     398770
IP address blocks:        2803:f980::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8BFB3407966ED0F87C23F67BAE10670D51BE118F22FBADB9AAAD079A706E8B8F/0/185E96C80DFA32CF38CB2E537542AD1FB5A2BDA0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8BFB3407966ED0F87C23F67BAE10670D51BE118F22FBADB9AAAD079A706E8B8F/0/185E96C80DFA32CF38CB2E537542AD1FB5A2BDA0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/185E96C80DFA32CF38CB2E537542AD1FB5A2BDA0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 21 May 2025 01:23:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:c1:48:14:84:5e:05:eb:91:e9:44:ff:3d:d6:79:86:e8:d1:e0:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=185E96C80DFA32CF38CB2E537542AD1FB5A2BDA0
        Validity
            Not Before: May 16 22:45:00 2025 GMT
            Not After : May 15 22:50:00 2026 GMT
        Subject: CN=0ECEFD2C4F3A5D41A1E0D2A54F7A53DD2C31FA0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a7:e8:c4:84:a9:c6:53:42:e7:9d:d7:a3:4b:
                    ef:e5:9a:1d:ed:0a:f7:bb:38:79:b9:f3:e2:28:56:
                    c8:eb:0d:38:b2:18:4d:58:f2:8e:ab:cc:6a:36:e0:
                    08:46:8f:c2:c8:d5:76:ae:e9:87:c6:9e:cc:4f:51:
                    fc:ab:ce:cb:49:23:b1:09:6f:5f:8b:81:b1:ba:e1:
                    ae:b7:be:af:53:ef:6c:61:c8:cf:80:00:c6:f7:7c:
                    8e:38:ce:2a:01:92:b7:23:bc:78:d1:de:2a:3b:66:
                    5f:5a:12:8c:fa:fe:b2:d1:5e:c3:72:03:fc:af:28:
                    00:a6:36:e6:04:15:a8:9e:72:3f:5d:cf:59:c2:31:
                    a1:58:6c:25:c6:79:f5:ee:df:6d:f3:bc:b7:2d:4c:
                    99:bd:e5:ba:bc:91:4a:50:b0:40:e2:7b:63:55:fb:
                    9d:53:15:c5:c5:15:c4:d8:04:09:10:07:77:94:05:
                    f1:ba:dc:0d:a0:f0:a6:b2:03:6f:d6:86:d9:82:02:
                    0a:4f:48:42:8d:2c:3e:ae:fa:f9:d7:68:98:04:cc:
                    0b:8e:65:de:b4:58:c2:a2:69:ca:fa:c9:f6:4b:3a:
                    23:de:55:51:f8:aa:6e:9b:0e:97:b9:8e:6f:cd:59:
                    8e:2a:44:b0:05:40:ab:08:ee:cd:e0:83:be:01:93:
                    f1:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:CE:FD:2C:4F:3A:5D:41:A1:E0:D2:A5:4F:7A:53:DD:2C:31:FA:0B
            X509v3 Authority Key Identifier:
                keyid:18:5E:96:C8:0D:FA:32:CF:38:CB:2E:53:75:42:AD:1F:B5:A2:BD:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8BFB3407966ED0F87C23F67BAE10670D51BE118F22FBADB9AAAD079A706E8B8F/0/185E96C80DFA32CF38CB2E537542AD1FB5A2BDA0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/185E96C80DFA32CF38CB2E537542AD1FB5A2BDA0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8BFB3407966ED0F87C23F67BAE10670D51BE118F22FBADB9AAAD079A706E8B8F/0/323830333a663938303a3a2f33322d3332203d3e20333938373730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f980::/32

    Signature Algorithm: sha256WithRSAEncryption
         3f:d8:90:26:db:40:76:30:3f:fa:13:f7:24:60:ff:c5:d6:44:
         25:77:da:19:c2:eb:87:e6:ef:51:a9:78:e4:df:60:5c:49:92:
         e5:64:f9:05:b0:4a:39:49:91:eb:3b:03:bc:31:69:20:bc:e9:
         3f:6e:b8:5a:25:3d:60:87:4f:49:fa:c1:bf:ff:ba:95:65:3d:
         53:8e:08:3e:2c:85:85:05:a4:e2:e6:19:d8:a5:35:cf:01:9d:
         37:fd:ef:5e:23:49:da:44:04:17:38:a2:6c:63:8a:4d:be:25:
         f0:ca:90:56:07:2c:08:70:27:c2:25:9b:bd:f2:e0:ce:9a:7d:
         1f:17:ae:98:00:c6:71:3c:9c:b7:3a:86:aa:c0:ce:97:1e:10:
         c5:37:2e:2c:99:16:0f:33:55:0f:09:59:21:30:f2:51:7e:f9:
         ec:e0:92:65:2d:9e:12:84:34:4c:d5:fe:fa:79:05:ca:ef:b8:
         11:6c:52:5c:34:28:56:a8:a3:64:27:37:0c:46:e1:96:3b:f1:
         04:f9:02:ef:be:e7:47:62:63:42:75:c6:c6:7c:53:10:b9:a9:
         a7:7d:c5:8b:b6:f7:99:f8:a0:8e:77:eb:8c:b6:cd:13:57:5a:
         ed:41:4b:f1:f5:fa:1c:49:0a:ca:d0:c8:43:e7:0f:5b:bd:1b:
         9b:6d:0a:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 23:48:45 2025 by rpki-client