Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/117E0F28D7B109643382134A928ADB7D8C131972702EA42A048C2764C80DC7C1/0/323830333a623263303a3a2f33322d3438203d3e203132393536.roa
File:                     323830333a623263303a3a2f33322d3438203d3e203132393536.roa (raw, json)
Hash identifier:          r9HRMnWiyty0Ot3j1ORr3wjDrr1Lr/ocUP8HIbxzZvQ=
Subject key identifier:   80:5E:C2:62:BC:6B:DB:53:D9:8C:9B:95:F5:FC:8F:81:98:2D:C8:E8
Certificate issuer:       /CN=CBE72B8D815E9A3D3D87C10B39ED4169A84AB68F
Certificate serial:       54D4A8647D197A56D279DA7E13CE1026C6639E3E
Authority key identifier: CB:E7:2B:8D:81:5E:9A:3D:3D:87:C1:0B:39:ED:41:69:A8:4A:B6:8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBE72B8D815E9A3D3D87C10B39ED4169A84AB68F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/117E0F28D7B109643382134A928ADB7D8C131972702EA42A048C2764C80DC7C1/0/323830333a623263303a3a2f33322d3438203d3e203132393536.roa
Signing time:             Tue 04 Feb 2025 18:16:46 +0000
ROA not before:           Tue 04 Feb 2025 18:11:46 +0000
ROA not after:            Tue 03 Feb 2026 18:16:46 +0000
asID:                     12956
IP address blocks:        2803:b2c0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/117E0F28D7B109643382134A928ADB7D8C131972702EA42A048C2764C80DC7C1/0/CBE72B8D815E9A3D3D87C10B39ED4169A84AB68F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/117E0F28D7B109643382134A928ADB7D8C131972702EA42A048C2764C80DC7C1/0/CBE72B8D815E9A3D3D87C10B39ED4169A84AB68F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBE72B8D815E9A3D3D87C10B39ED4169A84AB68F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:d4:a8:64:7d:19:7a:56:d2:79:da:7e:13:ce:10:26:c6:63:9e:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBE72B8D815E9A3D3D87C10B39ED4169A84AB68F
        Validity
            Not Before: Feb  4 18:11:46 2025 GMT
            Not After : Feb  3 18:16:46 2026 GMT
        Subject: CN=805EC262BC6BDB53D98C9B95F5FC8F81982DC8E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:55:4b:53:7f:76:9f:0e:0a:2f:4e:38:56:2b:
                    99:cf:20:c1:9e:02:d3:73:3c:ef:f5:ff:4d:02:ce:
                    84:ac:2c:4d:4d:aa:4b:81:94:d6:08:1a:54:3c:ba:
                    a6:68:a7:ce:01:df:6f:5f:c6:ce:a7:78:29:54:95:
                    46:83:7c:63:96:04:dc:18:ff:e4:90:e0:0a:f5:b2:
                    3d:1f:6a:23:13:d5:2c:85:2b:17:96:0c:76:d9:1a:
                    6a:9f:13:3b:10:13:41:e3:ef:99:05:0e:d8:28:c8:
                    2e:f3:50:a6:b9:e1:a2:be:a3:4c:c6:05:3c:ca:5d:
                    bd:09:06:53:92:bc:ac:74:b1:0e:ec:2d:0d:62:06:
                    9e:c4:4d:ac:26:eb:17:44:e5:e1:d3:e4:d3:d3:24:
                    bc:b9:f5:bf:35:7f:c8:19:71:cf:55:b1:1e:12:3e:
                    d6:ff:18:58:ce:27:e7:41:20:7b:ff:35:83:3e:cb:
                    e5:ba:c4:04:cb:27:c8:f9:7e:be:96:e2:59:b3:ef:
                    d6:65:25:d5:60:12:a3:e2:c3:66:09:92:f4:cc:93:
                    23:9c:63:b4:1e:2f:7b:f6:10:ce:74:fc:2a:20:8d:
                    bd:23:04:e3:af:a2:45:22:76:10:3a:9e:ed:87:84:
                    66:e9:11:7f:21:cb:7b:90:ab:ef:1a:eb:8f:96:2e:
                    69:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:5E:C2:62:BC:6B:DB:53:D9:8C:9B:95:F5:FC:8F:81:98:2D:C8:E8
            X509v3 Authority Key Identifier:
                keyid:CB:E7:2B:8D:81:5E:9A:3D:3D:87:C1:0B:39:ED:41:69:A8:4A:B6:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/117E0F28D7B109643382134A928ADB7D8C131972702EA42A048C2764C80DC7C1/0/CBE72B8D815E9A3D3D87C10B39ED4169A84AB68F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBE72B8D815E9A3D3D87C10B39ED4169A84AB68F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/117E0F28D7B109643382134A928ADB7D8C131972702EA42A048C2764C80DC7C1/0/323830333a623263303a3a2f33322d3438203d3e203132393536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b2c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         31:53:e9:1b:b8:33:8e:1c:7c:39:85:fa:2c:52:8c:81:8d:c6:
         1d:8b:cf:5a:20:6e:40:51:e6:8d:20:ee:2b:25:c9:32:bf:89:
         b8:a4:38:77:3d:87:89:23:1e:81:f1:83:c8:80:99:2c:7f:46:
         bb:5a:cf:15:e8:69:48:4e:19:3e:52:a4:75:96:55:c8:d4:6b:
         55:78:11:63:22:a0:6b:40:38:ce:a6:dd:5e:b0:f8:49:50:40:
         3e:f3:bd:32:38:cc:bb:b2:af:59:f9:f4:28:c1:c8:77:20:d6:
         0d:f6:b2:82:f6:b3:bf:7b:aa:2f:79:70:06:f5:27:87:82:f5:
         22:e1:ca:92:3e:77:fc:99:76:49:87:8d:87:d6:10:a8:8b:86:
         e5:d6:60:a2:3e:22:8c:e6:a1:ed:40:8d:0f:03:a7:0c:c4:10:
         45:a7:68:d3:6b:26:2f:c7:6a:b2:2c:cf:7b:bc:57:06:7f:78:
         f6:f4:85:db:77:74:12:c1:d2:31:46:a6:3a:54:db:1e:11:c7:
         d5:0c:d5:35:a2:7a:0d:94:94:d0:42:1d:bb:1f:fb:4f:0b:b7:
         99:6e:21:a6:70:d5:14:bc:65:c9:ec:01:da:30:26:5b:cc:3e:
         7f:3b:60:92:0b:11:45:37:c6:1a:da:ea:8a:c2:39:15:a5:3c:
         c8:cf:30:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:08:51 2025 by rpki-client