Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0224E820BEF78B3B0B35B89B491CEBF2D8FD674034C6478CF53BF5647F6FCAD9/0/323830333a366565303a3a2f33322d3438203d3e203237393634.roa
File:                     323830333a366565303a3a2f33322d3438203d3e203237393634.roa (raw, json)
Hash identifier:          oC2Y/qGxr3mmnMJZK8raiiOSODNpXQIE0xZM/mghaVg=
Subject key identifier:   E4:3A:04:F4:5D:7C:9A:E9:BE:1F:52:B6:61:8B:36:26:B7:04:BC:0D
Certificate issuer:       /CN=696560FC9F340B2A7EF395599D9F7FC5D9619C58
Certificate serial:       1D186D3290D8557E91D33B84D45CE5946A7A10E1
Authority key identifier: 69:65:60:FC:9F:34:0B:2A:7E:F3:95:59:9D:9F:7F:C5:D9:61:9C:58
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/696560FC9F340B2A7EF395599D9F7FC5D9619C58.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0224E820BEF78B3B0B35B89B491CEBF2D8FD674034C6478CF53BF5647F6FCAD9/0/323830333a366565303a3a2f33322d3438203d3e203237393634.roa
Signing time:             Mon 19 May 2025 16:19:35 +0000
ROA not before:           Mon 19 May 2025 16:14:35 +0000
ROA not after:            Mon 18 May 2026 16:19:35 +0000
asID:                     27964
IP address blocks:        2803:6ee0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0224E820BEF78B3B0B35B89B491CEBF2D8FD674034C6478CF53BF5647F6FCAD9/0/696560FC9F340B2A7EF395599D9F7FC5D9619C58.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0224E820BEF78B3B0B35B89B491CEBF2D8FD674034C6478CF53BF5647F6FCAD9/0/696560FC9F340B2A7EF395599D9F7FC5D9619C58.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/696560FC9F340B2A7EF395599D9F7FC5D9619C58.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 08 Jun 2025 03:04:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:18:6d:32:90:d8:55:7e:91:d3:3b:84:d4:5c:e5:94:6a:7a:10:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=696560FC9F340B2A7EF395599D9F7FC5D9619C58
        Validity
            Not Before: May 19 16:14:35 2025 GMT
            Not After : May 18 16:19:35 2026 GMT
        Subject: CN=E43A04F45D7C9AE9BE1F52B6618B3626B704BC0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:0f:4e:a7:bf:dc:92:ea:a5:a8:18:84:07:e3:
                    01:ef:9c:4c:eb:9f:05:43:03:12:97:a3:d0:f6:0d:
                    dd:51:e4:8b:3c:cc:d6:59:ee:54:3a:96:f5:de:bb:
                    d7:7c:02:b2:eb:58:28:45:0a:8f:d3:47:7e:cc:e9:
                    bc:c6:71:85:73:a2:45:b7:6e:21:5c:4a:0c:39:9a:
                    42:e3:7b:8a:a6:2a:74:64:40:e4:15:8b:61:af:6c:
                    44:b4:ee:44:22:cf:b9:53:23:91:e3:33:61:67:2b:
                    09:ed:c0:72:58:8c:8b:12:dd:bb:6a:11:64:27:07:
                    eb:8a:5a:02:7d:c8:b3:35:ef:95:c8:64:f1:68:ab:
                    19:c2:a2:b0:9e:06:cb:e9:d4:b5:82:93:00:28:9c:
                    f7:b9:df:3a:85:1c:fa:75:7f:8f:14:3e:5b:50:0d:
                    9f:53:9f:34:9c:c9:3d:42:8a:b3:98:73:23:66:a5:
                    e5:d0:c1:0f:48:55:73:63:ab:61:21:70:f7:c2:84:
                    eb:c3:7f:4f:8e:b9:2f:a8:13:7d:1d:85:1d:94:58:
                    d7:34:86:19:00:6d:f4:1b:33:1c:d4:1c:3b:cc:ce:
                    83:4e:bd:3d:8b:05:c5:e4:e5:8d:59:dc:58:42:22:
                    90:12:1e:7b:9c:f0:ed:6d:98:cd:2b:89:bb:be:fe:
                    9c:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:3A:04:F4:5D:7C:9A:E9:BE:1F:52:B6:61:8B:36:26:B7:04:BC:0D
            X509v3 Authority Key Identifier:
                keyid:69:65:60:FC:9F:34:0B:2A:7E:F3:95:59:9D:9F:7F:C5:D9:61:9C:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0224E820BEF78B3B0B35B89B491CEBF2D8FD674034C6478CF53BF5647F6FCAD9/0/696560FC9F340B2A7EF395599D9F7FC5D9619C58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/696560FC9F340B2A7EF395599D9F7FC5D9619C58.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0224E820BEF78B3B0B35B89B491CEBF2D8FD674034C6478CF53BF5647F6FCAD9/0/323830333a366565303a3a2f33322d3438203d3e203237393634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6ee0::/32

    Signature Algorithm: sha256WithRSAEncryption
         a4:48:72:4b:0f:ef:1c:ff:d1:b1:b6:df:58:f2:90:31:a5:f3:
         48:46:cd:3b:56:a7:5f:d3:5d:d7:47:3b:35:df:fc:7b:c8:a2:
         46:0e:48:b1:a5:1e:7d:2c:16:24:99:c5:d5:4e:62:49:ca:97:
         7a:70:82:ef:8a:db:f0:49:7b:a9:b6:2f:7a:7f:35:2a:bb:4f:
         d9:8f:a8:8b:d6:1c:9a:9e:5a:68:26:d2:3b:35:aa:7b:a6:31:
         68:ea:ff:66:6e:ba:f3:e3:53:03:8b:60:0c:58:ac:14:8e:d9:
         d6:ec:2e:50:b5:e7:b4:d4:5a:6c:c1:a5:e1:a3:3a:21:45:9c:
         b5:eb:58:b0:68:f4:bc:7b:71:dd:c4:02:2c:72:a8:fd:9e:17:
         33:35:82:7a:ae:6a:1d:36:c2:a6:e3:96:43:e6:6d:f8:c0:7d:
         ac:24:5c:fb:85:df:93:cc:89:4a:dd:de:93:42:4c:fe:e5:5a:
         d8:13:4b:eb:ae:9d:38:a7:dc:e1:03:ff:34:95:61:9f:58:e3:
         f5:84:60:6a:c0:24:1d:c6:d8:19:e2:73:94:3f:99:fe:69:d0:
         cc:16:4f:4c:f8:6e:0a:69:81:a9:71:4d:28:1e:ae:43:23:13:
         6f:bc:59:fa:ab:8e:42:4a:4e:6e:11:e4:88:92:fd:5b:89:af:
         2c:4a:48:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 14:06:35 2025 by rpki-client