Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/135269C8F045B34BA90C220DCF4BFB4E07D36616F1E344BCCA762FF8C89B7D6D/0/323830333a643665303a3a2f33322d3332203d3e20323639393638.roa
File:                     323830333a643665303a3a2f33322d3332203d3e20323639393638.roa (raw, json)
Hash identifier:          hCFtZYQYbwPpSZjzKnL5c/vwaRWoD016y6gAbav2FG4=
Subject key identifier:   C4:0B:07:FD:19:85:C1:3D:89:D8:B4:9B:F3:F1:A3:A2:21:26:CF:DE
Certificate issuer:       /CN=EAD2502C78405A42EC2C9FEF1E578B5FA16B75E0
Certificate serial:       03C0DABAC5FA3413F7DCDF54A7A057981DEB5DE7
Authority key identifier: EA:D2:50:2C:78:40:5A:42:EC:2C:9F:EF:1E:57:8B:5F:A1:6B:75:E0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EAD2502C78405A42EC2C9FEF1E578B5FA16B75E0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/135269C8F045B34BA90C220DCF4BFB4E07D36616F1E344BCCA762FF8C89B7D6D/0/323830333a643665303a3a2f33322d3332203d3e20323639393638.roa
Signing time:             Tue 04 Feb 2025 18:40:51 +0000
ROA not before:           Tue 04 Feb 2025 18:35:51 +0000
ROA not after:            Tue 03 Feb 2026 18:40:51 +0000
asID:                     269968
IP address blocks:        2803:d6e0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/135269C8F045B34BA90C220DCF4BFB4E07D36616F1E344BCCA762FF8C89B7D6D/0/EAD2502C78405A42EC2C9FEF1E578B5FA16B75E0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/135269C8F045B34BA90C220DCF4BFB4E07D36616F1E344BCCA762FF8C89B7D6D/0/EAD2502C78405A42EC2C9FEF1E578B5FA16B75E0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EAD2502C78405A42EC2C9FEF1E578B5FA16B75E0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 20 Feb 2025 03:11:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:c0:da:ba:c5:fa:34:13:f7:dc:df:54:a7:a0:57:98:1d:eb:5d:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EAD2502C78405A42EC2C9FEF1E578B5FA16B75E0
        Validity
            Not Before: Feb  4 18:35:51 2025 GMT
            Not After : Feb  3 18:40:51 2026 GMT
        Subject: CN=C40B07FD1985C13D89D8B49BF3F1A3A22126CFDE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:45:68:92:16:84:8b:7f:3b:48:16:9c:6c:ea:
                    c7:94:16:fb:a4:63:fd:44:b5:af:09:b8:52:d2:76:
                    15:68:da:eb:01:a5:f6:b6:56:77:e6:e2:b7:8a:d6:
                    c9:09:8f:24:28:40:11:20:4c:33:dd:88:05:65:f2:
                    71:97:c1:94:55:fd:51:87:86:10:eb:47:cb:cb:1a:
                    4f:86:bb:f4:6f:06:9f:d1:2b:23:41:65:cf:56:dd:
                    09:8f:b3:fc:72:48:18:1b:92:c6:d6:00:f2:b7:22:
                    98:39:00:24:06:4c:58:d1:84:83:83:49:03:b1:9d:
                    2f:38:b2:e9:ac:62:01:6e:82:44:95:bb:87:93:c8:
                    0b:25:0c:4f:e7:31:1d:50:bc:c9:93:0d:01:86:d8:
                    bd:a2:8c:59:e8:3a:62:fb:57:7a:cb:00:e3:a7:db:
                    9b:60:3b:65:b7:d0:8e:a4:ea:e3:bf:0e:a2:7a:db:
                    c8:7f:35:e8:b0:be:25:72:59:89:cd:e9:95:e0:84:
                    b2:fa:11:a4:28:3c:9a:be:5c:9f:df:63:22:2a:52:
                    1b:a5:0a:4c:2c:10:29:f6:66:2b:42:11:c2:f6:c7:
                    a3:f1:52:27:1a:83:0c:ec:ec:5d:7b:40:4c:d2:18:
                    cb:b2:ca:3f:04:4d:e0:99:d3:37:9a:ec:84:27:a5:
                    6d:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:0B:07:FD:19:85:C1:3D:89:D8:B4:9B:F3:F1:A3:A2:21:26:CF:DE
            X509v3 Authority Key Identifier:
                keyid:EA:D2:50:2C:78:40:5A:42:EC:2C:9F:EF:1E:57:8B:5F:A1:6B:75:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/135269C8F045B34BA90C220DCF4BFB4E07D36616F1E344BCCA762FF8C89B7D6D/0/EAD2502C78405A42EC2C9FEF1E578B5FA16B75E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EAD2502C78405A42EC2C9FEF1E578B5FA16B75E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/135269C8F045B34BA90C220DCF4BFB4E07D36616F1E344BCCA762FF8C89B7D6D/0/323830333a643665303a3a2f33322d3332203d3e20323639393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d6e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         6a:27:e9:c7:3f:00:f7:ca:40:53:c6:e9:53:e8:f3:83:fc:1c:
         e6:43:53:7d:01:a6:2a:62:69:93:d2:41:14:50:f2:9b:01:bb:
         7c:24:60:44:01:ee:25:d5:f4:1a:33:53:e4:15:96:2d:71:e4:
         ee:2b:62:36:d4:24:84:ee:ba:28:87:e0:b1:13:3d:e7:42:9b:
         1c:f3:c1:2b:d1:39:04:f1:61:d3:1b:99:1a:1e:07:cf:6e:9e:
         47:4b:20:48:2b:c3:cd:2d:8a:67:44:3f:c3:99:90:f4:bf:ce:
         59:34:db:62:eb:be:6a:f8:20:a1:26:6b:fb:6e:a1:2e:bc:6f:
         fe:84:a2:42:3c:66:78:9f:15:23:6a:8d:5d:c9:03:e9:a0:75:
         4b:58:98:58:83:9b:21:12:d9:26:63:c5:51:6c:04:15:41:d1:
         78:9c:68:5b:43:9a:74:02:c7:79:f6:eb:ef:b2:67:3c:92:0c:
         c8:99:5b:92:8a:9d:f1:71:51:9f:7c:e7:a9:01:92:1f:be:a3:
         a9:4c:08:0f:52:95:67:05:52:32:c8:ba:b2:5c:4c:39:32:50:
         49:c1:aa:ca:b0:dc:35:5e:52:c7:c4:e6:65:95:a9:dd:2b:25:
         b7:04:e9:bc:ad:70:a6:88:05:06:19:e4:45:db:22:40:ab:ba:
         25:af:44:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:25:13 2025 by rpki-client