Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0FFCA767638A4DD39C6A6D7E2BA39772CDA296DEE6BF36A333C7FDCE89D7F225/0/323830333a383132303a3a2f33322d3332203d3e20323636363533.roa
File:                     323830333a383132303a3a2f33322d3332203d3e20323636363533.roa (raw, json)
Hash identifier:          XgijXp/bTFYwtb3VJSgYKcM+7zzqAemjfJaCZ2TqAnU=
Subject key identifier:   5E:97:35:E2:EE:CF:83:BC:87:AF:5C:3B:8F:CD:06:D9:AC:B7:B4:CA
Certificate issuer:       /CN=FFBA5106E70D91E3861B5395B2D156C56E9589E4
Certificate serial:       0B401A46441D51FCE077A4F86B1C07BD993AE4AA
Authority key identifier: FF:BA:51:06:E7:0D:91:E3:86:1B:53:95:B2:D1:56:C5:6E:95:89:E4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FFBA5106E70D91E3861B5395B2D156C56E9589E4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0FFCA767638A4DD39C6A6D7E2BA39772CDA296DEE6BF36A333C7FDCE89D7F225/0/323830333a383132303a3a2f33322d3332203d3e20323636363533.roa
Signing time:             Tue 04 Feb 2025 18:39:16 +0000
ROA not before:           Tue 04 Feb 2025 18:34:16 +0000
ROA not after:            Tue 03 Feb 2026 18:39:16 +0000
asID:                     266653
IP address blocks:        2803:8120::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0FFCA767638A4DD39C6A6D7E2BA39772CDA296DEE6BF36A333C7FDCE89D7F225/0/FFBA5106E70D91E3861B5395B2D156C56E9589E4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0FFCA767638A4DD39C6A6D7E2BA39772CDA296DEE6BF36A333C7FDCE89D7F225/0/FFBA5106E70D91E3861B5395B2D156C56E9589E4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FFBA5106E70D91E3861B5395B2D156C56E9589E4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 23:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:40:1a:46:44:1d:51:fc:e0:77:a4:f8:6b:1c:07:bd:99:3a:e4:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FFBA5106E70D91E3861B5395B2D156C56E9589E4
        Validity
            Not Before: Feb  4 18:34:16 2025 GMT
            Not After : Feb  3 18:39:16 2026 GMT
        Subject: CN=5E9735E2EECF83BC87AF5C3B8FCD06D9ACB7B4CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:5a:43:68:38:6d:a9:9b:8a:93:e1:c7:9e:35:
                    0d:b7:4c:0d:d8:7c:f7:64:a7:01:62:00:68:f2:89:
                    4b:06:be:fc:9f:98:72:11:a1:57:b8:90:ba:d3:00:
                    9e:b2:8b:72:d8:3d:5b:81:14:17:31:3a:57:27:f1:
                    93:f5:bb:5a:06:57:b5:7b:0e:6a:cc:44:aa:45:72:
                    52:e8:92:ff:46:39:5d:86:45:09:19:9c:66:b4:43:
                    50:2d:be:dd:72:eb:f3:e6:c5:6f:c7:6e:b1:e0:17:
                    10:aa:de:f2:78:c8:fd:12:9b:a0:2c:c9:44:b5:b6:
                    5a:78:b0:8d:22:97:fc:87:ac:09:9b:65:70:a7:d3:
                    61:eb:c5:c7:40:5e:65:7c:a6:42:b5:b8:e3:87:a7:
                    aa:75:4c:55:92:ab:fa:1a:2a:2f:30:c0:d1:5f:0a:
                    55:ee:e5:c3:67:3c:8a:12:bf:32:82:37:d9:05:2e:
                    1a:4a:c4:20:09:3f:35:28:e8:c1:21:f3:a3:eb:c9:
                    0e:bd:e1:8a:5d:45:37:59:71:7a:62:c1:be:99:1f:
                    7c:ac:77:27:f1:44:b3:b7:82:dc:9c:c3:59:40:1c:
                    f5:7e:7b:4b:42:c3:5c:c3:e7:81:52:9d:01:00:e9:
                    14:d4:b9:8f:c7:99:af:60:9f:07:b8:00:77:e7:a5:
                    63:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:97:35:E2:EE:CF:83:BC:87:AF:5C:3B:8F:CD:06:D9:AC:B7:B4:CA
            X509v3 Authority Key Identifier:
                keyid:FF:BA:51:06:E7:0D:91:E3:86:1B:53:95:B2:D1:56:C5:6E:95:89:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0FFCA767638A4DD39C6A6D7E2BA39772CDA296DEE6BF36A333C7FDCE89D7F225/0/FFBA5106E70D91E3861B5395B2D156C56E9589E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FFBA5106E70D91E3861B5395B2D156C56E9589E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0FFCA767638A4DD39C6A6D7E2BA39772CDA296DEE6BF36A333C7FDCE89D7F225/0/323830333a383132303a3a2f33322d3332203d3e20323636363533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8120::/32

    Signature Algorithm: sha256WithRSAEncryption
         08:27:a1:a4:79:05:b4:8f:14:8e:1f:42:9d:61:63:5a:cb:12:
         fe:30:b1:2a:57:8e:f1:6c:72:af:25:a6:db:fb:2b:6a:60:c2:
         f0:66:eb:cf:ad:44:01:8c:51:18:eb:a8:4d:56:a5:73:44:7e:
         5a:3f:e4:7c:ff:3b:01:1a:90:09:db:71:01:9e:ea:34:a6:af:
         b6:6f:5e:89:57:49:d2:21:b1:3a:6f:c2:08:4e:b7:39:0e:e5:
         c4:fb:c0:13:3f:1a:8d:a0:c9:0f:ac:da:d8:c1:55:2d:3d:bc:
         fe:bc:37:f1:19:e7:9c:29:2d:5e:08:ab:81:36:8c:9f:48:6e:
         02:20:3f:71:ae:c2:c8:f6:88:29:55:ba:30:e2:38:96:a6:64:
         7e:03:bf:eb:d6:06:c2:51:08:88:0a:8e:fa:89:50:e2:bc:2f:
         1e:9f:83:40:74:cb:a4:d5:30:a1:b0:42:8e:36:8d:5b:d1:87:
         81:4a:01:91:77:08:ea:a2:e2:d5:95:83:2e:37:5e:4d:04:a5:
         d8:92:14:77:06:eb:28:ea:19:85:bd:2d:8c:a6:33:d4:b3:e6:
         b2:01:ff:fc:da:35:17:13:5d:e9:82:3a:3b:94:89:72:9e:40:
         8e:31:02:f3:42:1b:56:1d:dc:6a:79:ee:5e:8e:62:09:97:92:
         e0:b7:bb:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 20:16:33 2025 by rpki-client