Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0627E99CAEC297092C2385E68F5CEFFBBC5FBAFFC25DDE2489AC16FC0C6BA5CD/0/323830333a313665303a3a2f33322d3332203d3e20323639393735.roa
File:                     323830333a313665303a3a2f33322d3332203d3e20323639393735.roa (raw, json)
Hash identifier:          TuyvlxPzujVQVZVGXJhsVllJe9xBHJw3kUTqHA280fo=
Subject key identifier:   FE:BF:FF:73:FE:C1:6E:D3:3F:14:5C:92:C3:40:13:70:DB:71:B1:C0
Certificate issuer:       /CN=2EBECFED7CABD811E5DEDAFA739FDB2CF0EEC12E
Certificate serial:       657A9309717C85E4C69A691085D22527E0407E83
Authority key identifier: 2E:BE:CF:ED:7C:AB:D8:11:E5:DE:DA:FA:73:9F:DB:2C:F0:EE:C1:2E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2EBECFED7CABD811E5DEDAFA739FDB2CF0EEC12E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0627E99CAEC297092C2385E68F5CEFFBBC5FBAFFC25DDE2489AC16FC0C6BA5CD/0/323830333a313665303a3a2f33322d3332203d3e20323639393735.roa
Signing time:             Tue 04 Feb 2025 20:06:35 +0000
ROA not before:           Tue 04 Feb 2025 20:01:35 +0000
ROA not after:            Tue 03 Feb 2026 20:06:35 +0000
asID:                     269975
IP address blocks:        2803:16e0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0627E99CAEC297092C2385E68F5CEFFBBC5FBAFFC25DDE2489AC16FC0C6BA5CD/0/2EBECFED7CABD811E5DEDAFA739FDB2CF0EEC12E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0627E99CAEC297092C2385E68F5CEFFBBC5FBAFFC25DDE2489AC16FC0C6BA5CD/0/2EBECFED7CABD811E5DEDAFA739FDB2CF0EEC12E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2EBECFED7CABD811E5DEDAFA739FDB2CF0EEC12E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:7a:93:09:71:7c:85:e4:c6:9a:69:10:85:d2:25:27:e0:40:7e:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2EBECFED7CABD811E5DEDAFA739FDB2CF0EEC12E
        Validity
            Not Before: Feb  4 20:01:35 2025 GMT
            Not After : Feb  3 20:06:35 2026 GMT
        Subject: CN=FEBFFF73FEC16ED33F145C92C3401370DB71B1C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:30:64:e4:67:54:91:1e:94:f9:f1:9d:3a:db:
                    88:0d:1a:09:b1:00:52:73:8a:64:d6:02:2c:1c:d1:
                    0d:2f:09:e2:bf:34:8b:f4:1f:4b:04:99:ff:71:ad:
                    51:14:e0:e5:be:d3:48:af:fc:92:bb:c7:a1:e3:f2:
                    7d:9d:d2:49:09:c1:b3:db:68:4c:54:3e:30:a6:b3:
                    5d:5d:8b:5a:a6:7a:07:cd:f8:21:88:40:0e:26:58:
                    18:33:47:c2:1a:a4:b1:4c:7e:f2:68:91:96:8d:c3:
                    46:c5:6c:ce:a9:8b:ac:10:4d:9e:fe:4f:c2:40:a2:
                    5b:02:59:a8:8e:76:02:9f:cf:c7:7c:7c:4a:42:47:
                    7f:48:f3:cd:cd:be:b8:27:fd:51:e1:fe:87:07:64:
                    67:e5:87:25:ee:cb:f0:64:62:b6:7c:ab:cc:90:78:
                    bf:45:c5:47:e5:b4:ba:ab:fb:13:66:cb:89:6c:2b:
                    d6:e1:38:69:9e:fe:1d:f9:b1:a9:b8:58:bf:7a:68:
                    bb:57:4b:9b:5e:0d:01:f6:b0:d1:a6:1a:5e:37:41:
                    15:2c:8f:30:9d:29:da:ac:a6:ab:66:9b:6e:7c:3e:
                    32:42:a7:df:d4:06:1f:9d:ad:c2:10:ca:44:4d:85:
                    33:64:55:1d:64:f4:2b:80:a1:f5:ae:10:2e:59:c2:
                    58:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:BF:FF:73:FE:C1:6E:D3:3F:14:5C:92:C3:40:13:70:DB:71:B1:C0
            X509v3 Authority Key Identifier:
                keyid:2E:BE:CF:ED:7C:AB:D8:11:E5:DE:DA:FA:73:9F:DB:2C:F0:EE:C1:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0627E99CAEC297092C2385E68F5CEFFBBC5FBAFFC25DDE2489AC16FC0C6BA5CD/0/2EBECFED7CABD811E5DEDAFA739FDB2CF0EEC12E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2EBECFED7CABD811E5DEDAFA739FDB2CF0EEC12E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0627E99CAEC297092C2385E68F5CEFFBBC5FBAFFC25DDE2489AC16FC0C6BA5CD/0/323830333a313665303a3a2f33322d3332203d3e20323639393735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:16e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         44:81:ee:21:92:4f:c5:a8:d3:e0:f6:62:1a:a5:34:72:63:8b:
         cc:5b:64:7a:04:ea:84:04:39:f8:50:04:9d:b5:93:8f:bf:51:
         fd:6a:70:45:a7:cb:e7:35:83:5a:a5:1c:67:3c:40:3d:cc:0f:
         16:c8:0c:ec:06:33:1c:7e:9f:13:d3:1f:86:ea:a4:ef:39:f9:
         c1:f4:dd:69:b9:8d:e2:5f:be:4c:4c:c4:bd:72:cb:ce:ad:49:
         c8:aa:ef:71:9e:73:34:dc:cd:46:0a:4b:ab:ce:c8:0d:28:fb:
         6e:a4:95:a2:35:e7:fa:97:46:2f:de:b9:c0:2c:68:86:41:be:
         e5:a2:79:80:75:a4:a7:c4:71:91:04:1a:8f:6c:5f:a0:8c:a6:
         a1:6b:93:c4:5e:ef:d7:10:c2:a9:8d:d7:aa:67:fe:0a:c1:5c:
         0f:ae:17:fc:46:88:0f:26:d8:30:c0:a8:6e:11:1d:7d:82:15:
         44:3e:ee:8d:f7:ed:16:4e:12:e0:d3:b6:7f:02:16:09:00:f5:
         fd:4a:a0:68:43:cd:c8:9a:86:1a:ee:f6:08:7e:a1:96:f8:ad:
         e3:64:c7:ed:e1:52:3f:14:61:d2:3f:b3:de:ff:e9:fc:4b:0c:
         10:26:de:dc:85:6e:eb:c9:0a:43:ce:76:24:08:60:3b:10:d5:
         68:47:b6:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:59:59 2025 by rpki-client