Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/08089B08E57EFC288CDCFA6CC18F751FFD6A46E07EE22B416601A44F44F710F0/0/323830333a356431303a3a2f33322d3332203d3e20323732303533.roa
File:                     323830333a356431303a3a2f33322d3332203d3e20323732303533.roa (raw, json)
Hash identifier:          Iq1OkrvpWm7ArBOOaJg/NCNVUycf+NabqbZr2hgZ19g=
Subject key identifier:   21:91:FD:64:C0:A3:F2:AE:98:C1:80:38:B5:3A:B5:91:20:1D:59:A7
Certificate issuer:       /CN=F3C2B582A38A773B6A755BF6D6E3026584CAF2F1
Certificate serial:       56B2D19D473BCEDCB9E1B5A18B9B62E516D74D15
Authority key identifier: F3:C2:B5:82:A3:8A:77:3B:6A:75:5B:F6:D6:E3:02:65:84:CA:F2:F1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F3C2B582A38A773B6A755BF6D6E3026584CAF2F1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/08089B08E57EFC288CDCFA6CC18F751FFD6A46E07EE22B416601A44F44F710F0/0/323830333a356431303a3a2f33322d3332203d3e20323732303533.roa
Signing time:             Mon 26 May 2025 22:05:00 +0000
ROA not before:           Mon 26 May 2025 22:00:00 +0000
ROA not after:            Mon 25 May 2026 22:05:00 +0000
asID:                     272053
IP address blocks:        2803:5d10::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/08089B08E57EFC288CDCFA6CC18F751FFD6A46E07EE22B416601A44F44F710F0/0/F3C2B582A38A773B6A755BF6D6E3026584CAF2F1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/08089B08E57EFC288CDCFA6CC18F751FFD6A46E07EE22B416601A44F44F710F0/0/F3C2B582A38A773B6A755BF6D6E3026584CAF2F1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F3C2B582A38A773B6A755BF6D6E3026584CAF2F1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 08:22:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:b2:d1:9d:47:3b:ce:dc:b9:e1:b5:a1:8b:9b:62:e5:16:d7:4d:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3C2B582A38A773B6A755BF6D6E3026584CAF2F1
        Validity
            Not Before: May 26 22:00:00 2025 GMT
            Not After : May 25 22:05:00 2026 GMT
        Subject: CN=2191FD64C0A3F2AE98C18038B53AB591201D59A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:7e:3e:af:d5:6e:d0:68:5c:ee:11:69:4d:c5:
                    1c:68:be:2b:43:a7:94:f7:94:62:da:23:4e:33:26:
                    ee:72:4a:0a:e9:10:f6:59:59:ed:ed:39:e9:54:f7:
                    42:f6:28:a4:4d:fb:59:06:e7:35:c3:e8:c9:31:ae:
                    82:e8:e1:aa:f4:33:d6:4c:b5:86:ef:46:22:58:d1:
                    88:ec:c0:9f:42:22:a0:7d:5e:c7:4b:e5:81:28:28:
                    ec:0b:aa:e6:2f:73:b1:85:3c:2c:f7:07:85:5b:c3:
                    5e:44:86:39:67:47:e1:9a:77:a7:1a:18:65:ba:91:
                    35:af:0b:bb:f3:8d:70:4f:2b:f1:26:05:ce:ec:0c:
                    0e:12:3e:c7:ca:2d:91:c4:45:47:3b:0b:06:d5:28:
                    bd:9a:cb:83:1b:e0:a7:66:f1:ee:b6:99:e2:d1:85:
                    a4:62:39:f1:2c:ab:10:df:fe:2b:e1:ce:96:37:cc:
                    90:01:4c:74:26:f8:d1:4e:bb:95:bb:b6:7c:b1:36:
                    18:0d:c7:bb:3f:ad:a8:2b:f6:2a:6c:19:a3:0d:b3:
                    71:a1:da:83:45:06:28:51:f6:f7:d6:9f:d7:94:8b:
                    5c:79:31:99:7c:83:86:d9:a7:90:cf:c3:e9:ba:42:
                    89:de:e2:47:f3:a3:10:88:ab:37:45:a1:f2:a0:3a:
                    cd:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:91:FD:64:C0:A3:F2:AE:98:C1:80:38:B5:3A:B5:91:20:1D:59:A7
            X509v3 Authority Key Identifier:
                keyid:F3:C2:B5:82:A3:8A:77:3B:6A:75:5B:F6:D6:E3:02:65:84:CA:F2:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/08089B08E57EFC288CDCFA6CC18F751FFD6A46E07EE22B416601A44F44F710F0/0/F3C2B582A38A773B6A755BF6D6E3026584CAF2F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F3C2B582A38A773B6A755BF6D6E3026584CAF2F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/08089B08E57EFC288CDCFA6CC18F751FFD6A46E07EE22B416601A44F44F710F0/0/323830333a356431303a3a2f33322d3332203d3e20323732303533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5d10::/32

    Signature Algorithm: sha256WithRSAEncryption
         45:8e:a0:7c:88:2d:c8:a9:95:00:ce:6e:69:95:27:cf:17:89:
         be:d5:62:dd:f6:9e:97:73:f1:eb:ea:4f:58:ed:da:5c:cc:75:
         13:7e:59:44:d0:e4:b3:89:56:3b:81:b4:fb:2a:09:92:f7:be:
         1c:32:d2:8e:fe:2b:2e:1c:87:11:6f:b1:5f:de:0d:14:05:3f:
         ed:f5:06:2c:fa:17:80:76:b4:66:78:a1:fd:05:6c:91:ae:e7:
         e8:8e:97:e0:0b:1a:0f:25:d0:7c:2d:48:f2:fa:1c:79:84:f0:
         89:6b:b8:9e:a9:fc:af:b0:2e:92:2c:a4:ec:80:fb:a8:61:45:
         b3:7a:25:cf:21:18:e9:47:bb:75:71:9c:95:21:cb:29:d7:49:
         80:c0:e7:39:b8:3b:79:9b:77:82:42:83:4b:e8:c9:ab:50:fb:
         1d:58:04:38:de:5a:74:82:e5:9f:c7:9a:57:9a:a2:1b:47:c3:
         87:d0:af:eb:28:3c:f9:25:c6:2c:4d:da:bd:d7:25:a0:09:23:
         c1:13:04:c0:c8:c2:aa:f6:33:6f:fd:7e:dc:55:2b:d1:60:ac:
         a0:e8:4f:36:9f:ac:18:2c:a8:12:e7:d6:05:f9:8a:cb:2a:32:
         18:3a:ea:39:0e:a6:b2:dc:06:de:f1:6c:f1:f8:0f:9c:91:62:
         a1:8e:2c:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 20:23:17 2025 by rpki-client