Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1A3CA72BDD4EE0A8063F5E760AC11D5F39CF8BC92BCA9661668EF51697F21EC6/0/323830333a333531303a3a2f33322d3332203d3e20323732303331.roa
File:                     323830333a333531303a3a2f33322d3332203d3e20323732303331.roa (raw, json)
Hash identifier:          lW8zRM6Q/VGqpkwrC9lqvB/efv+pxIYD2pR//2mJJqc=
Subject key identifier:   05:48:80:1A:7D:F2:1A:21:67:3F:D7:6C:CE:F8:21:75:9B:FE:48:7E
Certificate issuer:       /CN=1E0307467F6E7691E7E576722E5D0EE6A42EDB86
Certificate serial:       11A23F8E4B79A6B028462E2111B3906C8BA63381
Authority key identifier: 1E:03:07:46:7F:6E:76:91:E7:E5:76:72:2E:5D:0E:E6:A4:2E:DB:86
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1E0307467F6E7691E7E576722E5D0EE6A42EDB86.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1A3CA72BDD4EE0A8063F5E760AC11D5F39CF8BC92BCA9661668EF51697F21EC6/0/323830333a333531303a3a2f33322d3332203d3e20323732303331.roa
Signing time:             Tue 04 Feb 2025 18:01:19 +0000
ROA not before:           Tue 04 Feb 2025 17:56:19 +0000
ROA not after:            Tue 03 Feb 2026 18:01:19 +0000
asID:                     272031
IP address blocks:        2803:3510::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1A3CA72BDD4EE0A8063F5E760AC11D5F39CF8BC92BCA9661668EF51697F21EC6/0/1E0307467F6E7691E7E576722E5D0EE6A42EDB86.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1A3CA72BDD4EE0A8063F5E760AC11D5F39CF8BC92BCA9661668EF51697F21EC6/0/1E0307467F6E7691E7E576722E5D0EE6A42EDB86.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1E0307467F6E7691E7E576722E5D0EE6A42EDB86.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 16:28:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:a2:3f:8e:4b:79:a6:b0:28:46:2e:21:11:b3:90:6c:8b:a6:33:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E0307467F6E7691E7E576722E5D0EE6A42EDB86
        Validity
            Not Before: Feb  4 17:56:19 2025 GMT
            Not After : Feb  3 18:01:19 2026 GMT
        Subject: CN=0548801A7DF21A21673FD76CCEF821759BFE487E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:2a:59:10:9c:23:4a:5c:95:40:3b:78:6f:a1:
                    03:a0:8b:6a:d8:8d:d5:ef:6c:dd:d9:7a:61:a6:bf:
                    4d:fd:92:3c:4c:0d:da:f3:65:7f:11:34:62:e6:6d:
                    b3:51:80:55:d7:77:95:31:0f:8d:d2:8a:13:bc:02:
                    3f:03:36:1e:55:75:b4:f7:67:f8:c2:df:1c:44:6e:
                    ec:c7:8d:c1:96:d7:18:20:df:39:17:fd:56:cc:51:
                    07:91:54:a0:92:53:d5:06:08:68:a7:c5:92:eb:92:
                    0c:5a:6b:f7:38:4c:ac:2e:40:d0:67:f7:01:08:09:
                    15:16:a8:fa:49:94:bf:87:a0:52:e1:0b:3b:6e:69:
                    da:f2:bd:c2:74:17:2f:a3:d1:e9:1b:2e:c1:81:2c:
                    e1:d2:45:d2:7d:58:95:34:fd:8e:d7:4a:b3:f4:66:
                    7a:38:64:f9:c4:3e:90:0f:40:74:59:e1:4d:ca:e0:
                    e1:da:21:88:b9:e9:1f:c6:e0:64:a3:1e:a4:32:27:
                    0d:f5:28:a1:39:72:84:51:c8:49:97:09:2a:8c:f7:
                    f3:d9:d8:ef:f2:6a:01:6b:75:0e:e0:3c:63:1c:0d:
                    b9:04:71:77:49:c5:95:de:e6:de:50:bf:54:78:23:
                    cf:5d:d7:1d:b6:df:75:88:3d:a7:f1:a3:31:3b:bc:
                    54:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:48:80:1A:7D:F2:1A:21:67:3F:D7:6C:CE:F8:21:75:9B:FE:48:7E
            X509v3 Authority Key Identifier:
                keyid:1E:03:07:46:7F:6E:76:91:E7:E5:76:72:2E:5D:0E:E6:A4:2E:DB:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1A3CA72BDD4EE0A8063F5E760AC11D5F39CF8BC92BCA9661668EF51697F21EC6/0/1E0307467F6E7691E7E576722E5D0EE6A42EDB86.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1E0307467F6E7691E7E576722E5D0EE6A42EDB86.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1A3CA72BDD4EE0A8063F5E760AC11D5F39CF8BC92BCA9661668EF51697F21EC6/0/323830333a333531303a3a2f33322d3332203d3e20323732303331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3510::/32

    Signature Algorithm: sha256WithRSAEncryption
         71:9d:a0:3e:53:92:51:92:a0:34:b0:1e:e0:9b:d6:70:ed:ad:
         22:fe:a9:e4:d9:a4:f6:1b:ef:91:99:cb:72:a6:bf:f6:f0:b9:
         1f:85:2e:ba:1d:aa:da:3b:92:06:85:d7:97:0a:14:91:e5:0c:
         2b:50:48:93:c0:0e:19:64:7f:72:5b:80:9a:79:3d:28:c3:c5:
         4b:a3:2b:f8:68:52:b3:ce:4f:52:4a:97:5c:bd:48:f4:bb:47:
         46:c5:d8:c2:e3:e0:cb:b0:f7:6f:89:55:1a:e4:8d:2c:a8:26:
         b2:08:eb:6f:a5:6f:df:a5:64:e7:29:9c:ef:26:81:7b:02:ea:
         39:a6:ed:2b:72:82:6a:a8:ef:16:52:25:be:ea:56:65:d7:5b:
         11:01:47:a8:31:87:db:24:f6:1f:0c:93:8b:3d:ff:6c:f3:64:
         26:95:87:99:6b:d4:36:d7:2e:52:c2:84:7d:eb:04:42:f1:f6:
         cb:fa:5b:6b:06:1b:93:63:6a:d2:4a:fb:78:e9:d3:aa:dc:54:
         2d:86:91:3f:5c:66:3f:02:d8:b6:6e:cf:f0:5b:be:4b:bf:5b:
         6c:55:6d:7b:32:41:45:5a:94:d9:74:3b:ed:ce:ee:c6:d8:e7:
         9e:1e:61:9e:3f:6d:9e:2a:4c:fc:94:08:21:09:d9:f3:96:03:
         0f:eb:9f:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 21:40:46 2025 by rpki-client