Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0D8377B8F810E69B1E6DE3F229848AB344FB7864942F76CCCCBE5C256B23D6BF/0/323830333a393831303a3a2f33322d3438203d3e203134353933.roa
File:                     323830333a393831303a3a2f33322d3438203d3e203134353933.roa (raw, json)
Hash identifier:          M68tF9BWQ7izkO+Rp+UU4T8mjONb1jOQH0fKAisuCsA=
Subject key identifier:   8B:18:05:26:E3:9D:5D:EA:96:EA:88:76:1B:1D:DF:A1:6F:B2:25:72
Certificate issuer:       /CN=15DA171D5AE09E55A7280DC227610D82A2AB0356
Certificate serial:       0E58BCB871E47345A7BF6291427FADC6C5B3706E
Authority key identifier: 15:DA:17:1D:5A:E0:9E:55:A7:28:0D:C2:27:61:0D:82:A2:AB:03:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/15DA171D5AE09E55A7280DC227610D82A2AB0356.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0D8377B8F810E69B1E6DE3F229848AB344FB7864942F76CCCCBE5C256B23D6BF/0/323830333a393831303a3a2f33322d3438203d3e203134353933.roa
Signing time:             Tue 04 Feb 2025 18:14:00 +0000
ROA not before:           Tue 04 Feb 2025 18:09:00 +0000
ROA not after:            Tue 03 Feb 2026 18:14:00 +0000
asID:                     14593
IP address blocks:        2803:9810::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0D8377B8F810E69B1E6DE3F229848AB344FB7864942F76CCCCBE5C256B23D6BF/0/15DA171D5AE09E55A7280DC227610D82A2AB0356.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0D8377B8F810E69B1E6DE3F229848AB344FB7864942F76CCCCBE5C256B23D6BF/0/15DA171D5AE09E55A7280DC227610D82A2AB0356.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/15DA171D5AE09E55A7280DC227610D82A2AB0356.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:58:bc:b8:71:e4:73:45:a7:bf:62:91:42:7f:ad:c6:c5:b3:70:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15DA171D5AE09E55A7280DC227610D82A2AB0356
        Validity
            Not Before: Feb  4 18:09:00 2025 GMT
            Not After : Feb  3 18:14:00 2026 GMT
        Subject: CN=8B180526E39D5DEA96EA88761B1DDFA16FB22572
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:6d:38:f8:4b:a8:f7:a7:22:6e:ec:e6:b1:bf:
                    e6:55:46:fa:ad:6c:da:d4:de:6a:de:ab:ca:b7:96:
                    19:34:d0:50:7a:27:2b:33:ec:32:4e:c7:41:39:fd:
                    0b:de:f0:0d:f2:00:1c:e1:5a:4b:c6:b6:59:82:ee:
                    13:d8:d0:80:bb:a9:01:b5:df:b2:16:a1:fb:0e:e3:
                    b6:ab:17:07:a2:ea:97:90:a8:e7:c7:15:5b:24:ae:
                    24:93:d8:59:9b:75:e1:b9:93:8b:49:15:fc:a3:c2:
                    a9:28:3e:37:ae:6e:5e:90:5c:f1:61:7c:65:35:43:
                    82:5b:0f:a2:3a:a6:ec:be:13:ed:1b:18:a2:74:4a:
                    3b:cb:8a:d4:8d:c3:4e:56:9a:8a:33:f8:b6:ec:67:
                    e4:2d:3e:d9:52:ca:1f:50:7c:1f:74:57:2d:6e:26:
                    f7:05:8d:81:6e:8b:d1:a7:9a:5a:1c:99:dd:8e:a5:
                    db:67:f0:a1:fd:09:e5:5b:ca:50:59:92:db:dc:7f:
                    34:b0:9e:13:e7:a2:0a:8d:64:94:79:8b:e2:0b:5b:
                    c4:cb:1e:2d:1c:8a:0a:c9:1b:24:80:72:b1:16:5c:
                    da:2d:2d:a0:bf:92:9d:9c:0f:07:0b:7f:d3:b4:eb:
                    0b:80:48:57:a9:71:5d:f9:8b:5f:8c:d0:a0:21:38:
                    f4:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:18:05:26:E3:9D:5D:EA:96:EA:88:76:1B:1D:DF:A1:6F:B2:25:72
            X509v3 Authority Key Identifier:
                keyid:15:DA:17:1D:5A:E0:9E:55:A7:28:0D:C2:27:61:0D:82:A2:AB:03:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0D8377B8F810E69B1E6DE3F229848AB344FB7864942F76CCCCBE5C256B23D6BF/0/15DA171D5AE09E55A7280DC227610D82A2AB0356.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/15DA171D5AE09E55A7280DC227610D82A2AB0356.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0D8377B8F810E69B1E6DE3F229848AB344FB7864942F76CCCCBE5C256B23D6BF/0/323830333a393831303a3a2f33322d3438203d3e203134353933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9810::/32

    Signature Algorithm: sha256WithRSAEncryption
         b8:21:26:77:c0:c1:46:f9:a4:71:f5:4a:14:d8:6c:08:9b:ed:
         9c:90:f9:d8:1f:cf:be:22:3f:29:4a:55:8f:5b:4a:5c:0c:55:
         73:08:26:a0:29:35:4e:c2:9f:8b:9a:2b:d4:6f:f4:2f:d3:f6:
         50:a4:53:ef:58:f9:e0:42:0f:f3:36:26:40:03:e1:dc:dc:c6:
         a0:d5:2c:49:14:73:6c:e2:0e:1d:cd:68:b2:14:0d:87:31:63:
         e6:d3:4a:79:14:b6:09:d2:53:a4:2c:a3:ab:6b:9b:ac:8c:ef:
         1d:ab:31:c0:b1:bc:b2:df:f0:da:8a:b4:93:c6:18:59:51:d2:
         50:c7:42:0f:66:4b:87:7b:89:cc:f3:76:95:e9:07:a9:f6:e4:
         c9:44:3f:e3:1e:06:66:ad:93:20:de:ab:3b:fb:ee:cb:bd:ac:
         88:3f:21:dd:6b:35:70:a1:1c:a9:50:86:56:6e:b1:74:20:15:
         21:4b:d8:f4:9f:e9:a5:d0:ba:de:56:d9:46:68:4b:2b:21:3c:
         de:8f:d5:fc:88:ed:c2:d4:67:6f:55:0e:de:a7:d0:4c:cd:66:
         4b:1c:4a:50:48:98:54:d3:02:41:dd:96:6d:82:c9:51:d1:fc:
         28:d7:4b:c4:f3:e5:71:3f:86:1a:6a:83:24:3b:4a:0d:c5:fa:
         db:6a:b5:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:04:59 2025 by rpki-client