Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F84BF1192E1AE6D6FBF6D32F5902B00642687D0E3E60B591E38106CBEEF636D3/0/323830333a383264303a3a2f33322d3438203d3e20323632313739.roa
File:                     323830333a383264303a3a2f33322d3438203d3e20323632313739.roa (raw, json)
Hash identifier:          vS7SMv8+cL5mUJWmNF/UDq+qDLqo8j9TnIvg9H6T+sw=
Subject key identifier:   C9:8D:67:4B:43:A0:D5:53:DD:EF:69:A3:FA:65:4A:14:8A:DB:97:70
Certificate issuer:       /CN=D8E53775DE6664A536DB2F4E9AD28CC62ABDE9B9
Certificate serial:       40225EBCACD55166C970585CFD7CAB50601873E8
Authority key identifier: D8:E5:37:75:DE:66:64:A5:36:DB:2F:4E:9A:D2:8C:C6:2A:BD:E9:B9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8E53775DE6664A536DB2F4E9AD28CC62ABDE9B9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F84BF1192E1AE6D6FBF6D32F5902B00642687D0E3E60B591E38106CBEEF636D3/0/323830333a383264303a3a2f33322d3438203d3e20323632313739.roa
Signing time:             Sat 03 May 2025 18:00:00 +0000
ROA not before:           Sat 03 May 2025 17:55:00 +0000
ROA not after:            Sat 02 May 2026 18:00:00 +0000
asID:                     262179
IP address blocks:        2803:82d0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F84BF1192E1AE6D6FBF6D32F5902B00642687D0E3E60B591E38106CBEEF636D3/0/D8E53775DE6664A536DB2F4E9AD28CC62ABDE9B9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F84BF1192E1AE6D6FBF6D32F5902B00642687D0E3E60B591E38106CBEEF636D3/0/D8E53775DE6664A536DB2F4E9AD28CC62ABDE9B9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8E53775DE6664A536DB2F4E9AD28CC62ABDE9B9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 May 2025 00:40:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:22:5e:bc:ac:d5:51:66:c9:70:58:5c:fd:7c:ab:50:60:18:73:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8E53775DE6664A536DB2F4E9AD28CC62ABDE9B9
        Validity
            Not Before: May  3 17:55:00 2025 GMT
            Not After : May  2 18:00:00 2026 GMT
        Subject: CN=C98D674B43A0D553DDEF69A3FA654A148ADB9770
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b7:d3:c0:8b:c3:ed:e7:2b:cb:f1:04:24:fb:
                    9d:f4:66:cd:e3:16:90:94:25:46:0b:14:33:23:5d:
                    7f:cc:54:57:d1:d7:3f:dc:ef:24:d9:a8:34:51:7e:
                    e1:31:09:77:f3:f4:4d:95:d7:7f:26:df:9e:95:75:
                    f6:9b:88:ce:02:62:4d:55:0e:0e:c1:c4:8e:7d:31:
                    fe:46:b7:c9:24:ab:4d:3d:a9:0d:a3:25:fc:6d:92:
                    3f:1d:e2:9b:3c:3e:d4:3e:9e:f8:8a:21:f9:25:c4:
                    bd:e9:27:4f:b4:07:c7:d9:b7:c4:24:49:9c:53:1a:
                    f7:87:55:4f:73:f4:de:e5:11:30:81:59:89:ad:66:
                    d8:e9:e8:7b:8a:41:dd:d7:71:5c:fe:db:e4:5f:8f:
                    a0:f9:f9:3b:f7:01:5d:b8:a6:b4:74:de:c0:32:ed:
                    15:95:84:a4:79:d3:58:70:3d:57:18:64:94:c5:00:
                    80:ea:19:e4:59:8d:cb:22:33:8c:92:94:e8:6d:bd:
                    83:ac:a9:ab:8b:df:12:85:e7:df:6b:27:e8:c4:4d:
                    b6:79:b3:1f:99:ec:37:3e:fb:51:72:35:2f:96:3f:
                    4a:b7:2d:f0:ce:79:28:4a:13:c1:16:e1:aa:fa:3a:
                    d9:d8:d4:ae:9a:38:c7:6b:de:04:aa:ac:55:db:f1:
                    cd:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:8D:67:4B:43:A0:D5:53:DD:EF:69:A3:FA:65:4A:14:8A:DB:97:70
            X509v3 Authority Key Identifier:
                keyid:D8:E5:37:75:DE:66:64:A5:36:DB:2F:4E:9A:D2:8C:C6:2A:BD:E9:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F84BF1192E1AE6D6FBF6D32F5902B00642687D0E3E60B591E38106CBEEF636D3/0/D8E53775DE6664A536DB2F4E9AD28CC62ABDE9B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8E53775DE6664A536DB2F4E9AD28CC62ABDE9B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F84BF1192E1AE6D6FBF6D32F5902B00642687D0E3E60B591E38106CBEEF636D3/0/323830333a383264303a3a2f33322d3438203d3e20323632313739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:82d0::/32

    Signature Algorithm: sha256WithRSAEncryption
         0c:21:66:fd:41:8d:5a:f0:a3:e2:e9:df:e3:cf:f8:59:8f:b7:
         4b:9a:5d:47:25:52:bf:f8:83:12:85:ac:78:29:f2:fc:e9:55:
         07:af:66:6a:1c:31:3a:05:dc:92:45:91:95:7b:23:a8:0b:d4:
         e3:c9:bc:e5:cc:b6:d3:ff:df:82:5b:93:44:1e:ef:34:1a:57:
         f9:d6:23:d4:3a:30:2c:f8:93:98:3d:c5:c4:37:00:eb:6f:48:
         6a:32:30:9b:6f:6c:6e:6f:b9:e9:f9:e2:4e:cd:30:61:b5:5c:
         73:a9:3e:2b:80:e8:ce:fd:de:a3:76:25:9a:c1:f6:4c:f0:78:
         1c:83:5f:96:c3:c3:3d:e7:99:4c:68:65:71:82:2e:8e:fc:f7:
         c3:a8:c4:0a:76:f7:99:87:9e:1b:02:c0:91:61:5c:20:c0:89:
         15:fd:31:1f:4d:0e:c8:cf:14:03:47:58:ba:19:01:f8:1b:c7:
         29:8e:dc:a4:0b:97:9b:a5:cc:aa:5b:1b:b3:74:94:9c:e4:74:
         2e:12:d9:fb:9c:50:99:65:a4:14:67:18:a7:b2:02:88:8f:a2:
         41:26:11:19:1a:b9:a7:e9:5a:67:c6:8d:7a:95:a5:01:f6:6f:
         87:fc:8c:2b:5e:da:e2:22:ef:3c:b8:13:9f:55:01:d1:4e:fe:
         ab:e0:27:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:47:19 2025 by rpki-client