Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B3E92E6AD40AA0C9FEAB99AC81E2F2FE4F89BCFF80B8AE8F38912B295F0E9914/0/323830333a623561303a343030633a3a2f34382d3438203d3e20323636373337.roa
File:                     323830333a623561303a343030633a3a2f34382d3438203d3e20323636373337.roa (raw, json)
Hash identifier:          Oc1VVmGg9gXioYOJTsovMQ4mpkMWA517lOE934jDoSQ=
Subject key identifier:   16:7A:95:8F:5E:DC:D0:A0:0D:DC:6E:E0:82:BE:6C:DC:FD:46:82:41
Certificate issuer:       /CN=6CFC0CD36DE83898AFE4634C103FE1CF06563CF4
Certificate serial:       28A7F0180C11304784CC34CA46AF6FD12E46D626
Authority key identifier: 6C:FC:0C:D3:6D:E8:38:98:AF:E4:63:4C:10:3F:E1:CF:06:56:3C:F4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CFC0CD36DE83898AFE4634C103FE1CF06563CF4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B3E92E6AD40AA0C9FEAB99AC81E2F2FE4F89BCFF80B8AE8F38912B295F0E9914/0/323830333a623561303a343030633a3a2f34382d3438203d3e20323636373337.roa
Signing time:             Wed 30 Apr 2025 03:00:00 +0000
ROA not before:           Wed 30 Apr 2025 02:55:00 +0000
ROA not after:            Wed 29 Apr 2026 03:00:00 +0000
asID:                     266737
IP address blocks:        2803:b5a0:400c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B3E92E6AD40AA0C9FEAB99AC81E2F2FE4F89BCFF80B8AE8F38912B295F0E9914/0/6CFC0CD36DE83898AFE4634C103FE1CF06563CF4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B3E92E6AD40AA0C9FEAB99AC81E2F2FE4F89BCFF80B8AE8F38912B295F0E9914/0/6CFC0CD36DE83898AFE4634C103FE1CF06563CF4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CFC0CD36DE83898AFE4634C103FE1CF06563CF4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 18 May 2025 16:33:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:a7:f0:18:0c:11:30:47:84:cc:34:ca:46:af:6f:d1:2e:46:d6:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6CFC0CD36DE83898AFE4634C103FE1CF06563CF4
        Validity
            Not Before: Apr 30 02:55:00 2025 GMT
            Not After : Apr 29 03:00:00 2026 GMT
        Subject: CN=167A958F5EDCD0A00DDC6EE082BE6CDCFD468241
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ad:32:be:b6:8e:e9:df:13:a4:04:72:99:fd:
                    e8:fd:7c:c5:10:13:72:48:7c:71:60:54:58:a0:01:
                    a0:f1:10:9d:80:81:70:2a:3c:5b:bd:c2:aa:02:e8:
                    b1:19:a0:53:81:97:e1:72:69:d9:38:c9:5f:3d:eb:
                    14:95:c8:a8:76:41:41:bd:e6:bf:f3:0b:fe:57:12:
                    da:b3:c4:1e:7d:a2:ab:60:4a:e7:09:88:9e:2b:72:
                    6f:6b:06:7c:42:01:43:57:e4:90:f1:01:e3:03:10:
                    a1:77:9b:d8:fe:4c:20:95:e5:62:6a:8f:53:7b:96:
                    26:cc:37:de:d3:b6:df:d1:33:54:01:79:c0:f4:eb:
                    46:c9:d1:33:04:3c:9e:e6:d0:bb:db:09:86:58:63:
                    de:b3:8f:c3:f1:2a:3d:22:b5:39:16:71:0e:c5:49:
                    9b:bc:46:78:da:92:97:e5:0c:b1:31:f5:eb:4d:e9:
                    ca:9e:b6:8a:3b:c8:50:f1:f3:01:47:3a:eb:a7:ca:
                    cc:53:28:11:bf:8d:40:76:b6:22:04:b7:1b:91:4f:
                    22:df:07:6f:7c:87:80:9b:c2:af:a1:41:6c:ee:4f:
                    5c:57:c8:6b:48:34:7c:c9:6b:91:21:44:22:dd:ba:
                    d0:37:ab:ef:c3:52:41:a6:38:d8:fd:8c:81:74:30:
                    29:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:7A:95:8F:5E:DC:D0:A0:0D:DC:6E:E0:82:BE:6C:DC:FD:46:82:41
            X509v3 Authority Key Identifier:
                keyid:6C:FC:0C:D3:6D:E8:38:98:AF:E4:63:4C:10:3F:E1:CF:06:56:3C:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B3E92E6AD40AA0C9FEAB99AC81E2F2FE4F89BCFF80B8AE8F38912B295F0E9914/0/6CFC0CD36DE83898AFE4634C103FE1CF06563CF4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CFC0CD36DE83898AFE4634C103FE1CF06563CF4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B3E92E6AD40AA0C9FEAB99AC81E2F2FE4F89BCFF80B8AE8F38912B295F0E9914/0/323830333a623561303a343030633a3a2f34382d3438203d3e20323636373337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b5a0:400c::/48

    Signature Algorithm: sha256WithRSAEncryption
         94:27:06:d0:11:02:c6:02:f1:8c:dc:cd:f0:21:c6:a1:90:56:
         7d:73:2a:dd:ba:2e:12:76:de:bb:92:82:ba:ff:f1:48:5d:e2:
         97:fe:f0:ce:50:4a:fa:ce:6a:c9:42:2e:65:5f:da:fd:35:4c:
         eb:e1:4f:91:fb:5e:2d:c1:7c:5b:d0:bd:ec:86:8f:05:06:4a:
         e8:4c:af:16:80:5f:b3:f6:54:d1:ef:a2:72:e5:21:e5:a5:2d:
         ba:33:00:10:8b:b4:d1:c3:44:97:c2:85:eb:dd:fc:80:bb:28:
         3b:29:41:10:eb:84:3c:dd:dd:29:75:0c:f8:0e:b1:ea:50:79:
         9f:4b:54:e9:d9:a1:28:cd:56:2b:62:c2:66:14:23:22:44:ce:
         56:ff:3a:8e:3c:fc:f5:81:2b:31:ab:cc:f0:86:c6:63:fa:65:
         66:16:7f:ae:e9:37:d0:bf:f1:71:e0:5b:83:97:02:20:f8:d0:
         e4:2e:26:af:ea:3f:78:85:4f:00:a2:31:19:39:0b:05:92:58:
         9b:0e:13:d2:e0:ca:c1:e2:77:88:d7:b7:62:23:6d:70:a2:20:
         b2:47:89:60:59:10:85:45:d8:8f:74:79:42:7b:2b:76:58:55:
         e7:9e:3d:c3:68:16:f5:f0:68:cd:60:95:82:a8:02:36:9a:22:
         c1:92:05:7b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 14 20:49:43 2025 by rpki-client