Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/04EDDEE6B6F88EA17E6C2CD56C55F29A1937EB8745DD56F3E71B340A9FF830A6/0/323830333a323565303a3a2f33322d3336203d3e203238303332.roa
File:                     323830333a323565303a3a2f33322d3336203d3e203238303332.roa (raw, json)
Hash identifier:          NveS6qbrjhVyjyB60dQ6OiVTKjcTd2GaZHfhFSi8D4s=
Subject key identifier:   31:58:AC:6F:DB:FE:13:95:43:99:5E:8A:9C:E6:AE:65:16:2F:9B:E6
Certificate issuer:       /CN=25E2A43494D13C6F2ABA675D1A57C4D00A108B2B
Certificate serial:       7EC2DD5322A5F9DB822B70B652111357C7A54B80
Authority key identifier: 25:E2:A4:34:94:D1:3C:6F:2A:BA:67:5D:1A:57:C4:D0:0A:10:8B:2B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25E2A43494D13C6F2ABA675D1A57C4D00A108B2B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/04EDDEE6B6F88EA17E6C2CD56C55F29A1937EB8745DD56F3E71B340A9FF830A6/0/323830333a323565303a3a2f33322d3336203d3e203238303332.roa
Signing time:             Tue 04 Feb 2025 18:44:56 +0000
ROA not before:           Tue 04 Feb 2025 18:39:56 +0000
ROA not after:            Tue 03 Feb 2026 18:44:56 +0000
asID:                     28032
IP address blocks:        2803:25e0::/32 maxlen: 36
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/04EDDEE6B6F88EA17E6C2CD56C55F29A1937EB8745DD56F3E71B340A9FF830A6/0/25E2A43494D13C6F2ABA675D1A57C4D00A108B2B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/04EDDEE6B6F88EA17E6C2CD56C55F29A1937EB8745DD56F3E71B340A9FF830A6/0/25E2A43494D13C6F2ABA675D1A57C4D00A108B2B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25E2A43494D13C6F2ABA675D1A57C4D00A108B2B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 04:49:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:c2:dd:53:22:a5:f9:db:82:2b:70:b6:52:11:13:57:c7:a5:4b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25E2A43494D13C6F2ABA675D1A57C4D00A108B2B
        Validity
            Not Before: Feb  4 18:39:56 2025 GMT
            Not After : Feb  3 18:44:56 2026 GMT
        Subject: CN=3158AC6FDBFE139543995E8A9CE6AE65162F9BE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:bd:d1:59:9b:c3:71:ff:34:31:5d:a2:df:5e:
                    0d:18:1b:81:18:71:e1:40:17:ba:67:df:0e:3a:ae:
                    83:53:c3:de:5c:07:b2:6f:72:52:44:60:c2:44:60:
                    90:20:49:09:9c:12:9d:54:16:b6:a4:5f:3d:89:67:
                    3c:01:36:a1:e8:db:aa:0b:c7:c4:9f:b4:fd:d8:a2:
                    db:73:39:11:71:df:9a:a8:77:8d:22:56:19:2a:89:
                    c1:39:19:2b:a8:66:9b:17:53:91:3d:b7:26:99:dd:
                    87:a0:ae:8e:9d:a0:c7:c7:88:0e:fb:31:63:ef:6a:
                    c6:0a:6e:6d:2e:bc:2e:2d:72:9f:9e:ec:f9:6b:7f:
                    3e:3a:bb:50:12:a2:54:15:63:95:45:19:b8:63:2c:
                    66:0e:71:a2:e4:3e:e9:7d:4e:d4:f2:34:2f:db:c8:
                    38:12:64:c4:e9:12:0e:7f:12:03:6f:6f:7e:1c:6f:
                    3c:2e:94:89:3d:63:f4:f2:e9:32:46:72:48:0c:b3:
                    10:fa:a4:e0:21:f1:53:ed:ae:b0:1e:e3:a2:69:24:
                    c5:d6:6e:0f:2f:b5:a6:f0:40:1b:07:1c:31:16:13:
                    43:a6:07:41:1f:a3:e3:94:de:bb:75:86:6b:c4:94:
                    8a:26:8b:64:0d:6e:d7:82:b8:1f:68:54:07:1a:05:
                    00:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:58:AC:6F:DB:FE:13:95:43:99:5E:8A:9C:E6:AE:65:16:2F:9B:E6
            X509v3 Authority Key Identifier:
                keyid:25:E2:A4:34:94:D1:3C:6F:2A:BA:67:5D:1A:57:C4:D0:0A:10:8B:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/04EDDEE6B6F88EA17E6C2CD56C55F29A1937EB8745DD56F3E71B340A9FF830A6/0/25E2A43494D13C6F2ABA675D1A57C4D00A108B2B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25E2A43494D13C6F2ABA675D1A57C4D00A108B2B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/04EDDEE6B6F88EA17E6C2CD56C55F29A1937EB8745DD56F3E71B340A9FF830A6/0/323830333a323565303a3a2f33322d3336203d3e203238303332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:25e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         98:09:1e:bb:55:e0:f9:e7:07:87:86:55:9d:55:0b:97:e8:31:
         00:ca:7f:23:7f:9d:42:f8:09:32:b4:ee:32:09:b8:59:de:e0:
         a7:b3:de:3e:69:d0:6d:92:62:94:73:87:87:ba:a7:ff:bc:c0:
         f9:7a:d5:b5:49:87:97:83:b5:48:4a:9c:19:65:b6:aa:82:05:
         5b:ac:5e:ff:bb:a9:4b:88:c4:30:3a:5e:88:79:ee:02:7a:9b:
         cc:b4:ea:50:fc:fc:71:8a:a0:df:c3:fa:b5:16:5c:8d:43:72:
         bd:10:bd:83:8e:7d:c2:47:0b:79:c6:4a:af:ba:7b:fb:3d:95:
         ce:5a:e9:67:7c:6b:fa:fc:80:d8:e6:32:86:9e:a8:8d:77:1c:
         a0:10:36:e3:72:6f:b8:fb:a9:d0:ae:06:c4:67:6f:e8:4b:6c:
         05:76:25:cd:17:13:4f:c1:6c:65:7a:06:c1:bf:68:28:a7:0e:
         59:2a:60:37:28:bf:e1:7b:bb:51:69:43:c9:c5:5b:21:f2:a4:
         78:04:b6:3f:a9:78:59:d9:bd:21:79:17:05:17:09:9f:04:95:
         55:eb:f4:e7:ff:13:8e:dd:ed:87:5e:6c:a8:ea:ff:92:5f:08:
         0b:46:0b:a3:77:d9:20:b3:0b:ed:64:3c:6a:c4:67:fb:0b:40:
         3d:7b:5a:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:06:12 2025 by rpki-client