Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DCC6696BF619F80A53ED89E14649C67327E748F3E4323585AC27CCCCF1F45FC6/0/323830333a346331303a3a2f33322d3438203d3e20323731383639.roa
File:                     323830333a346331303a3a2f33322d3438203d3e20323731383639.roa (raw, json)
Hash identifier:          kgEeIrOE7Vb7eRBwmwUXmg8B2/nqx9CgVJmM/J46xHw=
Subject key identifier:   FD:04:43:97:14:C4:24:03:22:AA:1C:D4:C0:4F:9C:C6:9A:A6:93:6D
Certificate issuer:       /CN=11CB020AECE3C0AAF4EE297A9AFD12BEEA6265DA
Certificate serial:       29717526673618BF771D0D8B451AC4690E8F5C83
Authority key identifier: 11:CB:02:0A:EC:E3:C0:AA:F4:EE:29:7A:9A:FD:12:BE:EA:62:65:DA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11CB020AECE3C0AAF4EE297A9AFD12BEEA6265DA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DCC6696BF619F80A53ED89E14649C67327E748F3E4323585AC27CCCCF1F45FC6/0/323830333a346331303a3a2f33322d3438203d3e20323731383639.roa
Signing time:             Wed 14 May 2025 21:18:58 +0000
ROA not before:           Wed 14 May 2025 21:13:58 +0000
ROA not after:            Wed 13 May 2026 21:18:58 +0000
asID:                     271869
IP address blocks:        2803:4c10::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DCC6696BF619F80A53ED89E14649C67327E748F3E4323585AC27CCCCF1F45FC6/0/11CB020AECE3C0AAF4EE297A9AFD12BEEA6265DA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DCC6696BF619F80A53ED89E14649C67327E748F3E4323585AC27CCCCF1F45FC6/0/11CB020AECE3C0AAF4EE297A9AFD12BEEA6265DA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11CB020AECE3C0AAF4EE297A9AFD12BEEA6265DA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 21 May 2025 01:23:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:71:75:26:67:36:18:bf:77:1d:0d:8b:45:1a:c4:69:0e:8f:5c:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11CB020AECE3C0AAF4EE297A9AFD12BEEA6265DA
        Validity
            Not Before: May 14 21:13:58 2025 GMT
            Not After : May 13 21:18:58 2026 GMT
        Subject: CN=FD04439714C4240322AA1CD4C04F9CC69AA6936D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:b4:b9:76:13:2a:09:83:52:50:05:56:cb:48:
                    1e:d8:5e:b2:ed:d8:ee:bb:bc:18:06:5c:6b:9c:a1:
                    18:df:43:ef:ff:4b:cf:7c:ca:fe:2e:d6:36:d2:98:
                    ee:3b:f6:0b:5a:21:e8:8e:cb:4b:b7:55:7c:ba:55:
                    72:54:0d:a0:d5:21:aa:88:09:89:46:7d:dd:66:17:
                    57:96:26:27:20:86:ff:9a:f2:51:19:9f:bd:ad:e3:
                    25:c0:4f:ed:e3:bb:f2:92:59:db:05:23:89:ee:49:
                    90:f8:73:02:8e:f1:cc:d7:fe:92:6d:ae:25:50:42:
                    fa:4c:fe:ae:6b:8c:65:07:59:57:aa:f7:d0:db:db:
                    51:c1:1a:11:a8:9e:d0:52:cd:58:73:5d:2e:f1:b9:
                    e3:4f:24:69:b2:c4:08:c1:0b:3e:87:f3:6e:3f:d2:
                    a1:08:90:6e:0d:06:96:9c:06:aa:36:9d:f5:8b:ec:
                    26:e5:e8:65:ac:14:3a:b9:c9:c6:41:df:5c:e0:d4:
                    2d:ea:76:49:15:5c:78:60:1b:6b:16:cc:b4:09:78:
                    9b:8f:0c:97:34:f4:28:b6:a4:1d:00:ae:92:bf:7b:
                    c9:07:45:98:bb:e5:d8:ab:44:3f:5f:6c:9f:cd:e7:
                    55:d1:45:7f:8d:6a:ef:df:dc:9e:67:08:b9:b4:8c:
                    10:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:04:43:97:14:C4:24:03:22:AA:1C:D4:C0:4F:9C:C6:9A:A6:93:6D
            X509v3 Authority Key Identifier:
                keyid:11:CB:02:0A:EC:E3:C0:AA:F4:EE:29:7A:9A:FD:12:BE:EA:62:65:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DCC6696BF619F80A53ED89E14649C67327E748F3E4323585AC27CCCCF1F45FC6/0/11CB020AECE3C0AAF4EE297A9AFD12BEEA6265DA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11CB020AECE3C0AAF4EE297A9AFD12BEEA6265DA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DCC6696BF619F80A53ED89E14649C67327E748F3E4323585AC27CCCCF1F45FC6/0/323830333a346331303a3a2f33322d3438203d3e20323731383639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4c10::/32

    Signature Algorithm: sha256WithRSAEncryption
         1a:ab:f3:20:d7:df:a1:9d:7e:cc:ba:6e:da:f8:c2:93:14:dc:
         bc:55:f9:c2:5d:de:44:04:74:b5:89:aa:23:b3:84:07:13:71:
         0d:9b:ae:0a:61:d8:2d:97:68:bf:2f:99:dc:9d:4b:4f:d1:e4:
         83:f1:93:d9:5b:a4:c1:ad:63:80:e4:c0:4f:b7:b6:a3:fc:27:
         60:62:7f:4e:70:d0:bf:09:d0:5a:57:14:52:75:ed:c9:5a:b3:
         20:75:c4:67:7c:ca:28:8c:3c:83:7b:0a:29:6e:92:38:19:bb:
         d8:ac:0d:1d:b3:47:06:28:93:e0:c4:c3:c8:33:4e:5a:0b:66:
         4e:2d:8a:d1:a0:34:26:77:ea:6b:5e:30:8d:26:d1:0f:7f:b7:
         0f:24:05:b4:f3:cb:eb:8a:00:69:4b:2b:d9:dc:da:8c:6e:40:
         53:5e:d3:95:da:a0:dd:43:4c:ab:12:94:41:87:c2:0b:17:b3:
         81:9c:14:06:76:1b:b8:42:c6:4e:4a:20:12:bb:2c:01:7a:d0:
         05:92:22:6e:21:66:e7:13:c1:6c:71:ff:8a:43:5e:d8:0d:89:
         8b:d0:5c:8b:f0:c5:48:0f:50:f2:c4:53:db:49:9e:26:ff:c3:
         2f:98:ea:15:28:a5:fa:30:75:71:60:1a:43:a1:0d:41:fe:56:
         6a:f6:74:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 10:24:51 2025 by rpki-client