Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/04EDDEE6B6F88EA17E6C2CD56C55F29A1937EB8745DD56F3E71B340A9FF830A6/0/323830333a323565303a3a2f33322d3336203d3e203238303332.roa
File:                     323830333a323565303a3a2f33322d3336203d3e203238303332.roa (raw, json)
Hash identifier:          JSUxWrsFg7V6iT2CtxEXkkYnSHz7ZH6osD37kQdImn4=
Subject key identifier:   98:65:AC:22:5E:D7:D2:2F:E4:53:BD:9F:98:F4:B8:89:65:CF:DB:BC
Certificate issuer:       /CN=25E2A43494D13C6F2ABA675D1A57C4D00A108B2B
Certificate serial:       1469BF11DD3041ED5160BF671BF0A41068FF051D
Authority key identifier: 25:E2:A4:34:94:D1:3C:6F:2A:BA:67:5D:1A:57:C4:D0:0A:10:8B:2B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25E2A43494D13C6F2ABA675D1A57C4D00A108B2B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/04EDDEE6B6F88EA17E6C2CD56C55F29A1937EB8745DD56F3E71B340A9FF830A6/0/323830333a323565303a3a2f33322d3336203d3e203238303332.roa
Signing time:             Tue 05 Mar 2024 18:09:43 +0000
ROA not before:           Tue 05 Mar 2024 18:04:43 +0000
ROA not after:            Tue 04 Mar 2025 18:09:43 +0000
asID:                     28032
IP address blocks:        2803:25e0::/32 maxlen: 36

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/04EDDEE6B6F88EA17E6C2CD56C55F29A1937EB8745DD56F3E71B340A9FF830A6/0/25E2A43494D13C6F2ABA675D1A57C4D00A108B2B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/04EDDEE6B6F88EA17E6C2CD56C55F29A1937EB8745DD56F3E71B340A9FF830A6/0/25E2A43494D13C6F2ABA675D1A57C4D00A108B2B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25E2A43494D13C6F2ABA675D1A57C4D00A108B2B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:69:bf:11:dd:30:41:ed:51:60:bf:67:1b:f0:a4:10:68:ff:05:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25E2A43494D13C6F2ABA675D1A57C4D00A108B2B
        Validity
            Not Before: Mar  5 18:04:43 2024 GMT
            Not After : Mar  4 18:09:43 2025 GMT
        Subject: CN=9865AC225ED7D22FE453BD9F98F4B88965CFDBBC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:85:90:6d:cc:bd:5f:90:87:bd:58:98:41:8d:
                    93:4f:df:e1:75:51:a7:49:d1:ed:6e:a7:df:4f:1f:
                    6e:6d:57:b0:b5:b6:45:0b:46:42:80:71:d5:a1:49:
                    2b:db:1b:5a:49:a6:d8:62:8d:e5:5f:05:02:61:f4:
                    a2:e8:eb:99:93:7c:30:2b:4f:43:f2:ec:80:d3:02:
                    ba:0d:a4:dd:1b:a3:34:95:74:2f:83:cc:00:7c:8d:
                    81:b6:db:05:e1:9d:3e:df:b6:24:24:f9:19:a3:22:
                    f6:7d:01:c5:1b:4d:70:48:6b:88:7d:e2:67:ff:40:
                    fd:76:42:56:6f:d3:92:21:09:f2:b3:9b:22:a0:1f:
                    2d:42:df:10:4a:db:68:6b:1b:50:ea:84:77:87:cd:
                    b6:1a:fd:2e:5e:a4:d2:76:52:5d:69:20:0e:20:92:
                    b2:b1:26:8c:c4:c7:ec:33:48:dc:22:fc:e0:0e:00:
                    e9:f4:46:b6:90:bf:9e:9b:63:8f:4c:a2:e7:69:af:
                    0a:39:41:42:dc:a7:b4:e3:81:08:2e:e6:a4:72:f0:
                    c3:b4:ba:05:a6:1c:12:04:75:a4:cb:a9:8d:fd:59:
                    79:fd:f3:63:09:ad:eb:ce:53:c8:8e:27:10:c6:ab:
                    3c:1d:fa:f7:fd:e4:5c:18:3c:d5:d8:5e:02:77:f9:
                    75:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:65:AC:22:5E:D7:D2:2F:E4:53:BD:9F:98:F4:B8:89:65:CF:DB:BC
            X509v3 Authority Key Identifier:
                keyid:25:E2:A4:34:94:D1:3C:6F:2A:BA:67:5D:1A:57:C4:D0:0A:10:8B:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/04EDDEE6B6F88EA17E6C2CD56C55F29A1937EB8745DD56F3E71B340A9FF830A6/0/25E2A43494D13C6F2ABA675D1A57C4D00A108B2B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25E2A43494D13C6F2ABA675D1A57C4D00A108B2B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/04EDDEE6B6F88EA17E6C2CD56C55F29A1937EB8745DD56F3E71B340A9FF830A6/0/323830333a323565303a3a2f33322d3336203d3e203238303332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:25e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         9a:b8:80:e2:42:50:29:8e:59:78:d3:6e:f8:71:e5:b2:56:65:
         82:8a:16:b9:4f:0a:34:87:84:7a:27:bc:ce:62:19:e4:92:c0:
         79:19:8e:57:7d:f3:bf:63:7f:54:b9:5b:f1:b4:e7:10:ef:da:
         3c:90:cd:5c:c7:a5:b9:7a:6a:e3:ed:29:8b:af:0f:71:35:93:
         c1:e7:25:4a:96:7d:fd:fc:3d:b7:e0:b8:4e:0c:ab:09:1c:d3:
         19:3e:4c:54:97:a4:ae:47:ba:50:3d:fe:50:38:6a:39:97:be:
         cf:1e:1c:b2:91:4e:50:de:1a:a4:cb:7b:ef:c7:77:a8:d4:cd:
         f7:31:d2:08:1e:e1:d6:20:62:2b:f0:b7:41:7c:17:e4:1e:94:
         f0:6b:33:a9:44:32:b7:a0:58:5e:5f:8a:21:d0:e7:6c:5e:a4:
         39:0a:e4:c4:13:75:b9:34:52:08:33:61:6b:a5:76:64:40:80:
         fe:12:8f:09:d0:0e:3d:ea:ee:be:23:fd:73:6e:d1:0d:bf:90:
         6a:ba:c9:36:61:f2:48:e8:b6:89:8e:73:36:ed:69:8d:d4:70:
         65:db:28:26:e9:e8:ea:13:94:a0:1d:b4:0e:c4:f2:0d:f0:20:
         c6:2c:4b:2c:b6:0d:32:a2:4a:36:74:b3:97:cb:b0:12:7a:ee:
         2b:76:bc:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 06:48:40 2024 by rpki-client on console-fra.rpki-client.org