Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D233B807710758B592DE153A98CC3B3CE031BE2875C996CD8F7E46E3526AAF20/0/323830333a313138303a323a3a2f34382d3438203d3e20323633323432.roa
File:                     323830333a313138303a323a3a2f34382d3438203d3e20323633323432.roa (raw, json)
Hash identifier:          SnuAmI6n2DY8/LqrjVKrsqGLHVWC7o+5zQDprmE/2V8=
Subject key identifier:   5F:FA:40:C6:66:77:D0:3A:6D:CC:C1:60:C2:A0:D6:AA:0D:42:52:C9
Certificate issuer:       /CN=F84C64765934CC9A2CE97A1150E058489F19D535
Certificate serial:       012AE3E587BE7474E1C631A7FD6491D88B3BB3D8
Authority key identifier: F8:4C:64:76:59:34:CC:9A:2C:E9:7A:11:50:E0:58:48:9F:19:D5:35
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F84C64765934CC9A2CE97A1150E058489F19D535.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D233B807710758B592DE153A98CC3B3CE031BE2875C996CD8F7E46E3526AAF20/0/323830333a313138303a323a3a2f34382d3438203d3e20323633323432.roa
Signing time:             Fri 11 Apr 2025 16:14:36 +0000
ROA not before:           Fri 11 Apr 2025 16:09:36 +0000
ROA not after:            Fri 10 Apr 2026 16:14:36 +0000
asID:                     263242
IP address blocks:        2803:1180:2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D233B807710758B592DE153A98CC3B3CE031BE2875C996CD8F7E46E3526AAF20/0/F84C64765934CC9A2CE97A1150E058489F19D535.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D233B807710758B592DE153A98CC3B3CE031BE2875C996CD8F7E46E3526AAF20/0/F84C64765934CC9A2CE97A1150E058489F19D535.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F84C64765934CC9A2CE97A1150E058489F19D535.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 21 May 2025 01:23:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:2a:e3:e5:87:be:74:74:e1:c6:31:a7:fd:64:91:d8:8b:3b:b3:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F84C64765934CC9A2CE97A1150E058489F19D535
        Validity
            Not Before: Apr 11 16:09:36 2025 GMT
            Not After : Apr 10 16:14:36 2026 GMT
        Subject: CN=5FFA40C66677D03A6DCCC160C2A0D6AA0D4252C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:93:ec:b9:41:27:b5:9b:74:ec:ea:82:4d:0c:
                    8f:95:b4:ce:9f:2b:2c:7f:b9:63:47:46:38:b7:2f:
                    09:81:81:c3:ec:cf:03:fc:0c:8b:66:8e:be:c4:83:
                    56:9d:40:b3:9e:21:94:49:27:9c:93:5e:50:8b:b0:
                    2f:ae:5d:01:eb:3e:b0:1c:28:ea:0e:92:86:c6:c2:
                    73:d8:3a:84:2e:d4:1a:48:87:7e:0c:94:fc:60:b6:
                    19:32:41:df:d4:09:61:88:cd:23:8a:50:5d:0c:e7:
                    16:3b:49:34:1f:6e:62:03:fa:cd:c8:c3:97:72:88:
                    96:d7:44:4d:33:ba:92:dc:91:4f:d8:55:d9:1f:6d:
                    ef:da:32:26:09:c3:5b:22:c6:c5:94:19:d3:52:09:
                    c8:32:58:12:f0:1b:26:1a:0e:c4:b1:3d:92:4e:2b:
                    8b:cb:8f:53:61:45:57:b4:97:91:ab:7c:9d:df:a1:
                    5f:c5:1e:a0:9a:f8:68:32:13:5a:a0:d6:9e:8b:aa:
                    d6:48:48:83:9a:06:aa:17:39:05:82:c0:b2:a7:38:
                    ab:61:54:d8:f2:f7:19:64:89:83:ac:9c:f8:7a:2d:
                    d7:32:6b:84:78:21:4a:78:fe:c5:a0:0d:4b:34:6d:
                    47:32:9c:45:83:e0:67:2b:29:d9:bf:18:e8:47:e3:
                    aa:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:FA:40:C6:66:77:D0:3A:6D:CC:C1:60:C2:A0:D6:AA:0D:42:52:C9
            X509v3 Authority Key Identifier:
                keyid:F8:4C:64:76:59:34:CC:9A:2C:E9:7A:11:50:E0:58:48:9F:19:D5:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D233B807710758B592DE153A98CC3B3CE031BE2875C996CD8F7E46E3526AAF20/0/F84C64765934CC9A2CE97A1150E058489F19D535.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F84C64765934CC9A2CE97A1150E058489F19D535.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D233B807710758B592DE153A98CC3B3CE031BE2875C996CD8F7E46E3526AAF20/0/323830333a313138303a323a3a2f34382d3438203d3e20323633323432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1180:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         9c:50:a3:ed:c8:e2:01:19:10:27:f2:e1:5b:e1:28:c5:03:f1:
         75:4d:22:2a:81:37:df:f6:32:dc:e4:97:b5:fc:b7:a3:cd:60:
         ee:e3:7c:cd:98:a4:27:21:f1:f3:24:26:6e:0e:f5:cd:5c:7d:
         29:7c:da:7f:5b:a8:fd:b0:b9:28:11:9e:ac:7e:cd:87:5d:d6:
         55:b4:2e:38:c8:65:39:b7:ec:a4:39:86:73:49:1e:94:bf:9c:
         8f:0b:77:0b:d2:22:de:60:ce:bc:9f:93:56:ed:5e:ef:04:86:
         68:91:36:57:b1:12:d3:31:f6:63:e6:41:e6:db:3c:ae:a0:33:
         4d:36:6d:9d:e3:c9:93:66:51:53:cd:fe:c5:98:00:3c:6f:68:
         88:c0:fe:54:f2:df:78:f6:f8:58:39:90:a8:7b:5e:e6:54:6e:
         66:1e:b9:8a:2a:c0:b5:27:e1:96:59:a6:90:2c:af:36:3f:a9:
         5e:3f:48:be:26:17:aa:ae:66:05:e6:4c:ba:a0:4e:33:5a:5a:
         91:16:0f:67:f2:c3:f7:68:45:2e:6c:e5:24:92:ab:a3:43:e3:
         bb:1e:9d:b9:2b:b0:65:e0:7d:29:c6:f7:aa:f4:e3:22:11:5e:
         1b:e5:93:ab:cf:c9:0e:2c:c4:78:c2:34:ff:4a:04:66:62:af:
         b6:02:25:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 09:36:32 2025 by rpki-client