Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/323830333a663038303a383063303a3a2f34332d3634203d3e203634313230.roa
File:                     323830333a663038303a383063303a3a2f34332d3634203d3e203634313230.roa (raw, json)
Hash identifier:          zw5bfV0Bg0jNJBNve86RRzmnPqxwIALY3Jv4caC713w=
Subject key identifier:   6C:58:1B:4A:82:A0:8F:10:B6:3A:56:CE:5D:E2:2F:C4:CB:B1:60:A1
Certificate issuer:       /CN=D6017AACFB785EAB7EA56D24337CDCD724EAC2AD
Certificate serial:       4C6BB111FA3DB99ADB2A68740687C44A09B3B428
Authority key identifier: D6:01:7A:AC:FB:78:5E:AB:7E:A5:6D:24:33:7C:DC:D7:24:EA:C2:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/323830333a663038303a383063303a3a2f34332d3634203d3e203634313230.roa
Signing time:             Tue 29 Apr 2025 03:17:05 +0000
ROA not before:           Tue 29 Apr 2025 03:12:05 +0000
ROA not after:            Tue 28 Apr 2026 03:17:05 +0000
asID:                     64120
IP address blocks:        2803:f080:80c0::/43 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 06 May 2025 14:36:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:6b:b1:11:fa:3d:b9:9a:db:2a:68:74:06:87:c4:4a:09:b3:b4:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6017AACFB785EAB7EA56D24337CDCD724EAC2AD
        Validity
            Not Before: Apr 29 03:12:05 2025 GMT
            Not After : Apr 28 03:17:05 2026 GMT
        Subject: CN=6C581B4A82A08F10B63A56CE5DE22FC4CBB160A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:36:2f:42:78:e2:39:cd:f1:1a:7d:07:2b:a9:
                    cc:82:2a:da:04:b9:b4:5a:b2:68:3e:38:dc:08:53:
                    73:ce:d7:57:4e:a6:1e:f9:08:6f:3a:35:74:80:f3:
                    bd:ee:bb:50:22:31:68:be:d0:9d:a8:6a:e2:b6:9d:
                    fe:01:7a:ae:67:5e:3e:19:b5:a7:d8:54:7e:e3:9c:
                    7e:5d:ed:2f:15:a9:3b:b2:f6:ad:12:a8:e0:f7:30:
                    47:31:95:80:34:8c:64:ca:92:48:74:04:3c:26:90:
                    8d:89:98:a0:b3:c1:90:52:04:71:c5:a8:fe:f2:d0:
                    16:16:78:ee:06:9b:2b:fd:31:5c:bc:4a:c7:90:e9:
                    ca:08:a4:2c:ea:75:fc:e1:f4:a8:ae:37:b7:d1:ca:
                    b3:f9:bf:56:96:90:f9:3c:18:99:5e:98:d5:90:91:
                    9c:29:b5:a6:b6:21:52:5c:29:9a:4f:50:22:0c:1b:
                    ab:50:42:92:eb:a1:40:87:9f:43:c1:f2:73:3a:17:
                    3e:54:16:e3:a1:b0:30:16:cb:e1:bb:68:9e:ee:f2:
                    8a:d3:a9:64:e7:33:a4:8b:b6:11:c3:16:e3:c9:7d:
                    a2:65:d2:13:99:e1:10:6f:1e:0d:91:e4:99:33:98:
                    1e:ad:13:80:09:51:80:11:cf:26:8e:c3:56:02:76:
                    16:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:58:1B:4A:82:A0:8F:10:B6:3A:56:CE:5D:E2:2F:C4:CB:B1:60:A1
            X509v3 Authority Key Identifier:
                keyid:D6:01:7A:AC:FB:78:5E:AB:7E:A5:6D:24:33:7C:DC:D7:24:EA:C2:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/323830333a663038303a383063303a3a2f34332d3634203d3e203634313230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f080:80c0::/43

    Signature Algorithm: sha256WithRSAEncryption
         83:28:76:78:1a:1a:cf:59:46:77:6c:0f:8f:86:75:02:e2:8b:
         33:40:a5:a2:a0:24:5c:38:fc:91:a6:95:e7:6f:b7:12:97:bb:
         dd:47:06:d9:46:ab:66:0c:ef:49:f4:0e:fa:7c:e7:67:83:71:
         36:37:5a:4e:5e:a7:cb:a9:99:04:77:ec:5b:6e:7a:d6:1c:9a:
         b7:90:a0:9c:f3:d2:25:62:9a:d1:01:1b:dd:e4:1d:84:82:30:
         33:93:2f:f4:d1:98:64:24:eb:cb:b2:b4:52:74:b6:62:c8:cc:
         76:a8:19:95:08:a3:b3:0c:09:57:d4:01:60:09:17:e5:f4:76:
         a9:53:00:d3:87:92:81:38:33:0c:66:11:93:e5:ea:a5:9d:06:
         9e:e7:46:ad:08:96:99:03:d1:cf:24:e5:78:b9:5b:1d:94:f2:
         2c:18:04:ac:6c:dc:4e:8b:87:bb:bb:0b:ca:69:c7:4e:07:9c:
         87:99:80:9e:a9:76:e5:6e:dd:82:38:ab:bb:c7:56:4d:68:bc:
         3d:8e:27:02:c4:96:44:78:06:12:05:e9:b7:33:0e:fd:40:37:
         84:00:31:f7:ed:b4:61:f9:b0:0a:dc:dc:cf:85:4e:ce:81:1e:
         70:b9:11:3a:3d:a2:67:8e:b0:50:11:7f:fd:65:e9:a8:a5:ff:
         dd:5c:ca:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 04:22:29 2025 by rpki-client