Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D233B807710758B592DE153A98CC3B3CE031BE2875C996CD8F7E46E3526AAF20/0/323830333a313138303a623a3a2f34382d3438203d3e20323633323432.roa
File:                     323830333a313138303a623a3a2f34382d3438203d3e20323633323432.roa (raw, json)
Hash identifier:          o3TyClgoPCcXbBg02Q9OFu2cHIF2AKQX6jBDSH8iwWA=
Subject key identifier:   60:CA:58:80:37:C2:8C:74:5D:E3:4E:F1:3E:ED:30:11:13:B3:51:04
Certificate issuer:       /CN=F84C64765934CC9A2CE97A1150E058489F19D535
Certificate serial:       6ED2961092354E4291AC7BBAF0C3E6F77651A9AF
Authority key identifier: F8:4C:64:76:59:34:CC:9A:2C:E9:7A:11:50:E0:58:48:9F:19:D5:35
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F84C64765934CC9A2CE97A1150E058489F19D535.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D233B807710758B592DE153A98CC3B3CE031BE2875C996CD8F7E46E3526AAF20/0/323830333a313138303a623a3a2f34382d3438203d3e20323633323432.roa
Signing time:             Fri 11 Apr 2025 16:14:33 +0000
ROA not before:           Fri 11 Apr 2025 16:09:33 +0000
ROA not after:            Fri 10 Apr 2026 16:14:33 +0000
asID:                     263242
IP address blocks:        2803:1180:b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D233B807710758B592DE153A98CC3B3CE031BE2875C996CD8F7E46E3526AAF20/0/F84C64765934CC9A2CE97A1150E058489F19D535.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D233B807710758B592DE153A98CC3B3CE031BE2875C996CD8F7E46E3526AAF20/0/F84C64765934CC9A2CE97A1150E058489F19D535.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F84C64765934CC9A2CE97A1150E058489F19D535.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 21 May 2025 01:23:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:d2:96:10:92:35:4e:42:91:ac:7b:ba:f0:c3:e6:f7:76:51:a9:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F84C64765934CC9A2CE97A1150E058489F19D535
        Validity
            Not Before: Apr 11 16:09:33 2025 GMT
            Not After : Apr 10 16:14:33 2026 GMT
        Subject: CN=60CA588037C28C745DE34EF13EED301113B35104
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:29:c7:f0:80:63:6d:25:a8:f2:7d:ba:5b:7c:
                    0a:3c:37:f8:ed:ea:d3:0b:52:b9:62:0e:fd:82:ad:
                    84:fd:d5:c0:9d:4b:1f:c4:5e:13:76:58:f1:39:c5:
                    4a:e7:f2:60:fd:41:00:e9:c2:5c:3c:22:67:25:c6:
                    54:c6:31:c7:70:39:20:01:2d:8f:be:cf:d7:74:c9:
                    c4:02:be:91:0e:cf:32:73:0d:fd:32:b4:b3:db:51:
                    a9:2f:ef:e1:0c:83:a5:79:7e:59:03:a6:66:c7:b3:
                    f5:0f:2d:ac:27:aa:5e:8e:90:59:2c:7e:49:74:79:
                    c9:00:7a:93:7a:0c:13:78:f2:39:66:df:87:ed:2e:
                    65:1d:a3:cd:4e:ad:64:f2:de:87:83:40:75:77:a6:
                    d2:db:b9:e2:fc:dc:97:ce:95:40:c1:db:d2:3d:02:
                    a4:e6:4e:a6:51:83:59:fd:54:e3:bc:cf:de:b7:2b:
                    dd:d2:29:a6:b2:5f:98:87:33:80:4f:11:15:49:8c:
                    8b:66:e4:d8:5b:4a:e9:f9:f8:3e:03:69:a5:03:eb:
                    a4:e7:d7:2c:03:72:c4:af:17:6c:c4:c7:53:1b:a2:
                    38:f8:a3:03:4d:96:6a:f8:02:0b:1d:1f:07:d4:fc:
                    b0:75:4b:f8:fb:42:5a:d6:15:84:a4:3a:58:63:96:
                    2a:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:CA:58:80:37:C2:8C:74:5D:E3:4E:F1:3E:ED:30:11:13:B3:51:04
            X509v3 Authority Key Identifier:
                keyid:F8:4C:64:76:59:34:CC:9A:2C:E9:7A:11:50:E0:58:48:9F:19:D5:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D233B807710758B592DE153A98CC3B3CE031BE2875C996CD8F7E46E3526AAF20/0/F84C64765934CC9A2CE97A1150E058489F19D535.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F84C64765934CC9A2CE97A1150E058489F19D535.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D233B807710758B592DE153A98CC3B3CE031BE2875C996CD8F7E46E3526AAF20/0/323830333a313138303a623a3a2f34382d3438203d3e20323633323432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1180:b::/48

    Signature Algorithm: sha256WithRSAEncryption
         a2:cb:40:46:fc:2c:84:76:56:83:e8:f6:75:a6:47:a6:4f:02:
         95:d2:cf:ca:a5:ce:03:13:26:f8:6c:2f:ea:f0:7e:77:2b:f3:
         94:46:b0:bb:23:52:77:01:96:50:15:51:27:77:b1:3e:1a:20:
         bf:c5:ef:04:c3:c8:15:ed:89:6f:39:bf:ec:a9:7a:8e:73:92:
         b6:5a:a1:36:1b:94:e7:46:e9:40:cd:92:ec:39:c4:71:e3:c5:
         91:48:7c:9f:b0:39:2f:57:3d:76:e4:88:a8:df:42:09:33:60:
         11:49:c7:96:f0:d5:44:0b:0e:c8:07:56:6b:0f:7a:60:1f:76:
         f2:8a:be:f5:ca:f1:29:b7:8b:ad:75:29:28:4b:fb:b1:84:b6:
         a3:84:f9:b1:6b:d6:88:b4:c7:5c:18:b2:e5:22:2c:fe:0d:eb:
         b5:bd:30:ee:4e:12:aa:6f:bb:88:58:b2:15:5b:12:1b:2e:e5:
         02:48:ad:f6:52:ce:ee:17:34:e7:03:28:cb:0b:ea:8c:ad:56:
         84:c1:1f:23:ef:65:86:a1:9c:76:94:90:c5:24:cb:7e:79:50:
         ae:9c:6b:9f:57:b3:62:74:00:7a:57:ac:af:97:b2:1b:23:c7:
         eb:75:a7:58:4d:69:34:3e:97:49:b1:7b:15:47:c9:cd:4f:d7:
         e7:73:d0:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 02:06:07 2025 by rpki-client