Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0ED570F71042EEB79C050EFB767669D1C4C6A31B4E36AD73FA77AF2F6577E7CA/0/323830333a333161303a3a2f33322d3332203d3e20323637383431.roa
File:                     323830333a333161303a3a2f33322d3332203d3e20323637383431.roa (raw, json)
Hash identifier:          n4TCvUZZv4nH+ZuN5TI7OIBH0yuk4ZJKGTULrMTI2+k=
Subject key identifier:   87:D9:80:D1:85:EB:E2:9E:6E:46:B9:D8:92:21:C0:65:CD:21:4D:18
Certificate issuer:       /CN=B83212ED5241F8A76D1955EDB09C991FF777815E
Certificate serial:       568AA7A909DCB12CC8A73FDD021BC28949794EC8
Authority key identifier: B8:32:12:ED:52:41:F8:A7:6D:19:55:ED:B0:9C:99:1F:F7:77:81:5E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B83212ED5241F8A76D1955EDB09C991FF777815E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0ED570F71042EEB79C050EFB767669D1C4C6A31B4E36AD73FA77AF2F6577E7CA/0/323830333a333161303a3a2f33322d3332203d3e20323637383431.roa
Signing time:             Tue 04 Feb 2025 19:56:47 +0000
ROA not before:           Tue 04 Feb 2025 19:51:47 +0000
ROA not after:            Tue 03 Feb 2026 19:56:47 +0000
asID:                     267841
IP address blocks:        2803:31a0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0ED570F71042EEB79C050EFB767669D1C4C6A31B4E36AD73FA77AF2F6577E7CA/0/B83212ED5241F8A76D1955EDB09C991FF777815E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0ED570F71042EEB79C050EFB767669D1C4C6A31B4E36AD73FA77AF2F6577E7CA/0/B83212ED5241F8A76D1955EDB09C991FF777815E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B83212ED5241F8A76D1955EDB09C991FF777815E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 17:14:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:8a:a7:a9:09:dc:b1:2c:c8:a7:3f:dd:02:1b:c2:89:49:79:4e:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B83212ED5241F8A76D1955EDB09C991FF777815E
        Validity
            Not Before: Feb  4 19:51:47 2025 GMT
            Not After : Feb  3 19:56:47 2026 GMT
        Subject: CN=87D980D185EBE29E6E46B9D89221C065CD214D18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:c5:55:ef:d2:35:0a:39:1a:f3:14:30:76:98:
                    32:73:2f:7b:5e:57:bb:f3:50:ce:a3:9e:8b:82:57:
                    59:f9:d8:0c:db:f8:6e:8c:ae:42:88:cc:05:c2:86:
                    a4:de:af:86:01:ca:27:c2:02:f5:b4:1d:d9:a8:7c:
                    92:2f:5c:e1:71:da:b8:7f:ca:ee:cf:7d:6e:9f:4c:
                    69:5f:15:c0:93:c1:cb:34:cc:ca:ef:0a:30:2a:be:
                    10:d5:0a:10:08:04:b3:40:12:42:83:d9:d6:bc:4a:
                    db:45:f1:68:8c:04:88:94:75:ee:7f:d5:32:88:eb:
                    4a:06:88:f5:d4:7f:71:ee:1b:3f:80:5f:26:30:8e:
                    f8:77:40:61:29:b3:86:ab:9b:8b:85:cc:88:9b:65:
                    a8:fa:6d:1d:28:56:7d:18:26:9c:27:c7:c6:de:78:
                    94:8a:37:33:7b:fc:b6:2b:a9:ff:4c:6f:f3:16:6c:
                    b9:82:56:c2:34:c7:a7:46:1f:45:01:08:e6:76:34:
                    62:e6:b4:d5:9b:10:06:64:ab:12:2e:eb:81:1b:2e:
                    98:b7:54:a7:8b:05:f7:74:24:d1:9f:b8:21:e1:56:
                    56:0e:0a:9f:d0:8e:e0:1c:48:09:bb:08:67:15:f7:
                    dd:76:37:fc:95:fe:71:ad:83:36:c6:d7:51:b5:0f:
                    2f:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:D9:80:D1:85:EB:E2:9E:6E:46:B9:D8:92:21:C0:65:CD:21:4D:18
            X509v3 Authority Key Identifier:
                keyid:B8:32:12:ED:52:41:F8:A7:6D:19:55:ED:B0:9C:99:1F:F7:77:81:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0ED570F71042EEB79C050EFB767669D1C4C6A31B4E36AD73FA77AF2F6577E7CA/0/B83212ED5241F8A76D1955EDB09C991FF777815E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B83212ED5241F8A76D1955EDB09C991FF777815E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0ED570F71042EEB79C050EFB767669D1C4C6A31B4E36AD73FA77AF2F6577E7CA/0/323830333a333161303a3a2f33322d3332203d3e20323637383431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:31a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         93:d8:f4:9a:58:5a:c6:61:63:1d:dc:a9:1a:b2:1d:94:ad:bf:
         bc:7c:5d:2a:83:7b:3d:29:5d:dc:c6:7b:fb:ec:67:a9:da:ef:
         69:8a:d0:15:27:86:38:7e:f2:95:5e:29:4a:59:7c:97:bb:c7:
         37:33:cf:e6:5b:f7:3d:76:8f:f9:c8:72:5c:67:f9:9d:d2:ef:
         ca:c9:b8:b5:bb:f8:46:ee:88:d3:0e:45:c0:7f:2b:d8:c5:ca:
         1c:fa:0d:57:0d:21:86:32:fe:59:64:99:56:d1:e4:a5:0a:01:
         80:b6:4f:1f:5f:fb:1e:1e:05:af:17:f1:47:76:7e:fa:df:75:
         23:e6:f8:59:5a:c2:92:d5:e4:1e:56:52:3b:9b:fb:61:b0:09:
         40:48:dd:25:06:f5:f4:a6:16:35:8a:83:5c:0b:11:32:bc:20:
         09:31:8b:14:15:ac:85:21:1c:f7:6b:7f:7d:37:84:08:e1:22:
         50:30:85:f0:56:da:fd:9c:a4:eb:47:93:25:5a:b6:c7:c4:b0:
         40:cc:94:07:31:b9:0e:3d:cb:d8:0c:50:3a:a3:ae:9b:f5:72:
         a5:17:cb:41:83:e8:18:a7:ed:91:e7:56:81:f2:b6:69:e4:84:
         64:78:02:ae:89:fa:85:0a:0f:11:c7:5d:3b:c9:7c:20:71:1c:
         32:ab:8a:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:00:20 2025 by rpki-client