Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0B4592EA1FBE99BB0E6E1524335D45CE6025A2A7399D3206FDF8C111D7D90E45/0/323830333a613532303a3a2f33322d3332203d3e20323636363835.roa
File:                     323830333a613532303a3a2f33322d3332203d3e20323636363835.roa (raw, json)
Hash identifier:          8OYPm6egC/xPCxzAdHFsb85NJAWAodHGgS8xQz6LYdM=
Subject key identifier:   43:58:7B:4D:6D:0B:04:B6:77:2A:F9:0E:41:7D:20:AF:11:BE:F8:60
Certificate issuer:       /CN=A91EA82506B0E7F6BACFA600950807C98CE9C2B3
Certificate serial:       14674B0694B0EF3137C27D6754CEA76C007358B2
Authority key identifier: A9:1E:A8:25:06:B0:E7:F6:BA:CF:A6:00:95:08:07:C9:8C:E9:C2:B3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A91EA82506B0E7F6BACFA600950807C98CE9C2B3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0B4592EA1FBE99BB0E6E1524335D45CE6025A2A7399D3206FDF8C111D7D90E45/0/323830333a613532303a3a2f33322d3332203d3e20323636363835.roa
Signing time:             Tue 04 Feb 2025 18:41:54 +0000
ROA not before:           Tue 04 Feb 2025 18:36:54 +0000
ROA not after:            Tue 03 Feb 2026 18:41:54 +0000
asID:                     266685
IP address blocks:        2803:a520::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0B4592EA1FBE99BB0E6E1524335D45CE6025A2A7399D3206FDF8C111D7D90E45/0/A91EA82506B0E7F6BACFA600950807C98CE9C2B3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0B4592EA1FBE99BB0E6E1524335D45CE6025A2A7399D3206FDF8C111D7D90E45/0/A91EA82506B0E7F6BACFA600950807C98CE9C2B3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A91EA82506B0E7F6BACFA600950807C98CE9C2B3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:67:4b:06:94:b0:ef:31:37:c2:7d:67:54:ce:a7:6c:00:73:58:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EA82506B0E7F6BACFA600950807C98CE9C2B3
        Validity
            Not Before: Feb  4 18:36:54 2025 GMT
            Not After : Feb  3 18:41:54 2026 GMT
        Subject: CN=43587B4D6D0B04B6772AF90E417D20AF11BEF860
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:60:5d:8e:5d:b9:d9:83:e8:2b:d6:63:60:c2:
                    2b:ff:20:93:d1:76:9f:5c:78:ad:7e:20:64:cb:ed:
                    2e:27:64:44:25:80:96:3c:67:8a:37:26:83:09:e1:
                    46:97:81:7b:91:76:09:0c:5f:37:18:dd:95:14:38:
                    89:79:72:e6:9d:c7:1a:85:0c:4f:92:c1:08:eb:3d:
                    8f:ff:93:7d:73:6d:04:74:99:2a:e8:ff:7d:81:de:
                    d5:8d:35:94:d3:a5:29:25:79:11:8a:c7:f2:7f:87:
                    9b:1c:2c:12:1d:4a:ac:f6:d6:d4:f3:bd:71:07:be:
                    66:db:d1:57:3b:df:39:6e:dc:a3:40:2d:a6:7c:d6:
                    7b:f0:83:bc:98:29:31:83:f9:90:d1:31:5b:33:8a:
                    7b:27:94:65:13:7e:ed:fa:51:35:06:6a:88:98:0a:
                    79:34:6d:7e:80:bd:8e:ce:22:e1:fc:55:dc:6b:9d:
                    1c:a3:a8:37:51:15:fe:e1:7b:d4:5a:af:b0:10:18:
                    87:4d:85:af:04:54:1c:a1:1e:f5:87:95:82:fc:15:
                    d8:7f:ab:3c:cf:5a:a1:9a:3f:41:81:3f:d5:d4:a9:
                    35:15:76:44:2b:8d:cb:58:78:68:c1:28:aa:21:b5:
                    4e:06:ab:cb:65:ae:50:67:1f:29:2d:43:d7:fb:57:
                    89:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:58:7B:4D:6D:0B:04:B6:77:2A:F9:0E:41:7D:20:AF:11:BE:F8:60
            X509v3 Authority Key Identifier:
                keyid:A9:1E:A8:25:06:B0:E7:F6:BA:CF:A6:00:95:08:07:C9:8C:E9:C2:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0B4592EA1FBE99BB0E6E1524335D45CE6025A2A7399D3206FDF8C111D7D90E45/0/A91EA82506B0E7F6BACFA600950807C98CE9C2B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A91EA82506B0E7F6BACFA600950807C98CE9C2B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0B4592EA1FBE99BB0E6E1524335D45CE6025A2A7399D3206FDF8C111D7D90E45/0/323830333a613532303a3a2f33322d3332203d3e20323636363835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:a520::/32

    Signature Algorithm: sha256WithRSAEncryption
         5c:90:af:fb:33:a3:0f:1e:c9:7a:52:ce:4c:75:85:b1:02:a5:
         a5:4a:01:76:e6:43:aa:fa:40:f5:93:3a:bd:b3:d2:67:fe:42:
         2a:71:31:d1:ab:24:97:61:3f:4e:ef:03:ac:2d:c2:3e:95:07:
         5e:e9:5c:2f:78:9e:b2:fb:2f:b3:5a:e8:50:8e:c0:9b:01:a0:
         3f:64:da:7d:ea:91:2b:59:39:7a:56:06:e9:88:0f:87:9c:17:
         86:1d:de:11:db:4e:ff:8b:12:ad:24:5a:25:f6:f5:ef:1e:96:
         0f:49:b1:24:2f:3c:08:32:f1:0f:5d:99:13:ff:db:ba:cb:6d:
         99:f9:96:6e:6e:d4:fc:90:58:f1:ce:ce:cd:d8:ae:dc:29:49:
         16:4c:87:99:2b:2c:64:48:05:d1:bd:8a:52:09:99:c4:ef:e8:
         89:cf:24:a6:bd:43:51:54:f6:1c:88:6f:aa:aa:27:77:69:1f:
         47:c5:54:2e:4b:19:44:3d:09:41:ea:90:c9:f6:d8:71:fd:19:
         fe:4b:d5:c5:22:2a:33:53:ee:8c:fb:20:84:54:0d:3b:2f:fd:
         df:fa:b4:e2:88:28:c1:ff:18:d2:d6:b8:e4:1f:5b:0a:4e:42:
         1d:c5:11:50:14:b5:e8:42:be:3f:de:8f:fc:1e:dc:ad:aa:e9:
         e7:9c:58:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:17:55 2025 by rpki-client