Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EF0BB2FE3AF34DF6F12C1A30AFC354508771CE61DC8C6132A2BAA313A2228037/0/323830333a313231303a3a2f33322d3438203d3e20323731393038.roa
File:                     323830333a313231303a3a2f33322d3438203d3e20323731393038.roa (raw, json)
Hash identifier:          BoFyiCjzdRc0sUNZpjeLpzt7fH1h4E/UFZq7KD1uU40=
Subject key identifier:   E8:AA:17:45:E2:4A:8E:73:79:EA:75:3F:C8:15:42:AE:E3:93:76:34
Certificate issuer:       /CN=C63FB072C318744286AE683521DFED7AF1E0B944
Certificate serial:       431BD14F182DE4DA85A855A1C020A4F79D071B45
Authority key identifier: C6:3F:B0:72:C3:18:74:42:86:AE:68:35:21:DF:ED:7A:F1:E0:B9:44
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C63FB072C318744286AE683521DFED7AF1E0B944.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EF0BB2FE3AF34DF6F12C1A30AFC354508771CE61DC8C6132A2BAA313A2228037/0/323830333a313231303a3a2f33322d3438203d3e20323731393038.roa
Signing time:             Mon 21 Apr 2025 06:05:00 +0000
ROA not before:           Mon 21 Apr 2025 06:00:00 +0000
ROA not after:            Mon 20 Apr 2026 06:05:00 +0000
asID:                     271908
IP address blocks:        2803:1210::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EF0BB2FE3AF34DF6F12C1A30AFC354508771CE61DC8C6132A2BAA313A2228037/0/C63FB072C318744286AE683521DFED7AF1E0B944.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EF0BB2FE3AF34DF6F12C1A30AFC354508771CE61DC8C6132A2BAA313A2228037/0/C63FB072C318744286AE683521DFED7AF1E0B944.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C63FB072C318744286AE683521DFED7AF1E0B944.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 20 May 2025 07:22:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:1b:d1:4f:18:2d:e4:da:85:a8:55:a1:c0:20:a4:f7:9d:07:1b:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C63FB072C318744286AE683521DFED7AF1E0B944
        Validity
            Not Before: Apr 21 06:00:00 2025 GMT
            Not After : Apr 20 06:05:00 2026 GMT
        Subject: CN=E8AA1745E24A8E7379EA753FC81542AEE3937634
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:fb:99:c5:e0:ff:af:f1:65:b3:8e:3d:e0:35:
                    4a:97:b9:97:b7:6f:99:d5:90:bf:f5:05:d6:25:2a:
                    a8:53:c7:f9:e9:a5:36:1b:79:f8:fb:26:c2:23:f2:
                    a7:c1:10:57:e0:0a:98:b5:51:33:f0:d9:37:05:50:
                    03:e3:c8:3f:e8:58:40:9a:97:1f:57:f9:cf:3b:96:
                    52:d9:9b:be:72:3d:21:16:78:53:fc:26:db:9b:9e:
                    f1:f1:0e:d9:c0:0e:81:7b:bf:17:cf:de:dc:27:e5:
                    b6:7d:b2:32:32:47:a0:a9:25:53:e9:45:5a:70:21:
                    4e:4c:a1:9b:4f:36:e3:03:2c:72:91:d3:d8:75:72:
                    07:01:29:1a:4f:ef:51:63:5e:a5:de:db:f7:56:99:
                    74:1a:c5:4e:b8:a6:da:b5:96:6a:f3:39:c2:fc:4a:
                    55:6a:9c:c2:62:33:e0:e3:e0:b5:31:38:6b:0e:4f:
                    45:c9:cc:c4:bc:95:0a:c8:bd:3d:e8:ab:47:4f:5f:
                    7e:09:54:5a:60:ba:ac:9d:d7:d0:09:eb:69:7c:14:
                    80:38:03:54:27:e7:05:41:d0:88:19:05:b6:c2:f3:
                    21:82:72:9c:79:81:c9:8f:2c:16:aa:3d:d5:68:ae:
                    46:5f:9f:f9:bb:d2:bb:36:65:7e:b1:ed:40:a1:0c:
                    01:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:AA:17:45:E2:4A:8E:73:79:EA:75:3F:C8:15:42:AE:E3:93:76:34
            X509v3 Authority Key Identifier:
                keyid:C6:3F:B0:72:C3:18:74:42:86:AE:68:35:21:DF:ED:7A:F1:E0:B9:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EF0BB2FE3AF34DF6F12C1A30AFC354508771CE61DC8C6132A2BAA313A2228037/0/C63FB072C318744286AE683521DFED7AF1E0B944.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C63FB072C318744286AE683521DFED7AF1E0B944.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EF0BB2FE3AF34DF6F12C1A30AFC354508771CE61DC8C6132A2BAA313A2228037/0/323830333a313231303a3a2f33322d3438203d3e20323731393038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1210::/32

    Signature Algorithm: sha256WithRSAEncryption
         94:ba:87:81:6f:c9:4a:31:f5:9a:f9:b1:d1:c4:1a:ba:63:04:
         38:df:57:5b:b3:6e:b6:9f:7e:6b:70:4e:ae:b6:3d:da:4e:55:
         b6:b5:48:a0:4e:cc:70:f7:5c:34:25:21:fb:dd:33:c1:78:55:
         3d:3e:4f:84:e7:df:f7:80:29:46:6d:c8:78:67:3b:17:d5:fa:
         53:d3:96:b8:47:3c:9b:74:07:51:5d:00:65:32:27:81:f1:a5:
         84:03:ee:5c:bc:f9:2a:37:4f:b6:90:55:76:27:b7:39:cd:ea:
         7c:b1:17:41:78:98:b8:7c:d5:e9:69:a7:e8:d2:8d:29:36:a5:
         be:d2:fb:39:51:29:29:22:6f:8e:76:0b:0f:82:a5:26:19:f4:
         47:e2:7e:e5:87:64:13:9d:39:e9:2d:a3:13:ac:4d:ab:fc:d4:
         ee:5a:8f:cd:73:06:81:02:29:6f:56:bc:19:b8:06:7d:9e:3e:
         ae:66:d4:a1:82:b0:78:ec:99:56:1f:9e:b2:7d:92:c1:da:42:
         b6:ac:3b:cc:ef:ed:3f:00:62:4e:3a:17:99:a8:6e:fc:18:10:
         86:62:c1:1e:da:a0:65:7e:a1:96:92:75:60:e4:2a:f0:39:3a:
         ae:cd:05:e7:60:ce:d0:30:cb:5f:5c:37:df:5c:55:7b:49:69:
         22:60:bd:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 03:45:13 2025 by rpki-client