Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1EDA414F342F11CF67E9733027D6DE98ACC0B35E8DD72DBF4868DA584B9E4375/0/323830333a313730303a3a2f33322d3332203d3e203532343836.roa
File:                     323830333a313730303a3a2f33322d3332203d3e203532343836.roa (raw, json)
Hash identifier:          J/wdwiUCiURsTcFr8lzklnLrcu27YQbt8w0jfu+IApw=
Subject key identifier:   6A:5B:B3:E5:84:64:A0:FF:95:D5:EF:4D:FF:D8:43:9A:32:16:32:AC
Certificate issuer:       /CN=D2153B62E49F8ABC50BE582BB8297728599A91FD
Certificate serial:       5655366DC2C02508C008BC2E99B426C79C8ED19A
Authority key identifier: D2:15:3B:62:E4:9F:8A:BC:50:BE:58:2B:B8:29:77:28:59:9A:91:FD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2153B62E49F8ABC50BE582BB8297728599A91FD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1EDA414F342F11CF67E9733027D6DE98ACC0B35E8DD72DBF4868DA584B9E4375/0/323830333a313730303a3a2f33322d3332203d3e203532343836.roa
Signing time:             Tue 04 Feb 2025 18:26:10 +0000
ROA not before:           Tue 04 Feb 2025 18:21:10 +0000
ROA not after:            Tue 03 Feb 2026 18:26:10 +0000
asID:                     52486
IP address blocks:        2803:1700::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1EDA414F342F11CF67E9733027D6DE98ACC0B35E8DD72DBF4868DA584B9E4375/0/D2153B62E49F8ABC50BE582BB8297728599A91FD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1EDA414F342F11CF67E9733027D6DE98ACC0B35E8DD72DBF4868DA584B9E4375/0/D2153B62E49F8ABC50BE582BB8297728599A91FD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2153B62E49F8ABC50BE582BB8297728599A91FD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 20:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:55:36:6d:c2:c0:25:08:c0:08:bc:2e:99:b4:26:c7:9c:8e:d1:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2153B62E49F8ABC50BE582BB8297728599A91FD
        Validity
            Not Before: Feb  4 18:21:10 2025 GMT
            Not After : Feb  3 18:26:10 2026 GMT
        Subject: CN=6A5BB3E58464A0FF95D5EF4DFFD8439A321632AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:d0:53:59:09:67:ae:e1:45:38:84:8a:01:ac:
                    7d:ad:b5:4a:fd:ff:a1:ac:82:01:e7:b7:0c:a9:e7:
                    09:2e:d3:ed:c9:6f:90:52:a6:d9:fa:d1:f4:6c:46:
                    68:de:23:40:40:37:73:a2:15:7b:e3:e0:7b:e6:d9:
                    3c:d9:f3:e9:4e:3e:57:86:da:04:34:e0:65:06:bf:
                    60:f2:89:09:0f:f9:19:d7:c5:27:c2:cd:a7:4a:81:
                    4d:15:02:09:51:15:a9:b6:bc:42:3b:c0:3b:0c:fa:
                    03:0f:00:3f:89:5e:82:71:55:33:3b:f5:4a:7e:85:
                    63:49:37:91:a2:8d:ba:b1:0f:a5:0d:65:e7:7a:8e:
                    af:c7:1d:f3:8f:d4:7d:16:21:73:c0:c7:74:a3:6d:
                    51:43:94:2b:da:a7:6d:49:92:22:38:2f:94:4e:25:
                    ce:64:a1:10:d3:8a:57:d8:3d:59:81:10:4b:ff:57:
                    08:5f:2e:55:58:39:4a:c6:d7:60:3f:af:4e:51:11:
                    85:f2:86:da:99:13:9b:c4:13:d8:d4:2e:8e:b0:9c:
                    e7:64:8a:d0:31:fd:39:4c:79:be:87:8c:55:27:43:
                    ce:f4:8d:74:69:27:92:18:7c:a8:0f:8c:5d:2b:54:
                    c2:9b:27:d6:b1:6e:31:23:7e:e9:6d:00:b8:3c:f0:
                    11:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:5B:B3:E5:84:64:A0:FF:95:D5:EF:4D:FF:D8:43:9A:32:16:32:AC
            X509v3 Authority Key Identifier:
                keyid:D2:15:3B:62:E4:9F:8A:BC:50:BE:58:2B:B8:29:77:28:59:9A:91:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1EDA414F342F11CF67E9733027D6DE98ACC0B35E8DD72DBF4868DA584B9E4375/0/D2153B62E49F8ABC50BE582BB8297728599A91FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2153B62E49F8ABC50BE582BB8297728599A91FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1EDA414F342F11CF67E9733027D6DE98ACC0B35E8DD72DBF4868DA584B9E4375/0/323830333a313730303a3a2f33322d3332203d3e203532343836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1700::/32

    Signature Algorithm: sha256WithRSAEncryption
         12:6b:9f:a2:2a:65:32:c3:57:98:95:8d:1e:fd:e6:6b:a8:9a:
         13:1d:3a:9b:e0:18:f4:56:fc:46:86:49:95:29:50:6d:00:ba:
         ae:5d:98:d2:88:3e:33:ed:30:03:3d:ac:0c:47:aa:26:59:6e:
         d0:c0:e9:33:3f:4d:4b:38:ca:3a:ef:d9:dc:36:1a:21:37:2e:
         0c:5a:e3:36:64:75:9f:42:82:2a:6a:3c:f1:5e:4d:78:35:bb:
         c6:06:a0:9c:86:2e:fa:67:7c:89:19:84:18:ad:ff:a8:07:88:
         a0:ef:76:a8:c8:74:f7:d4:c6:c8:a9:7e:df:ed:1b:89:a1:f5:
         da:c2:80:8c:8c:df:c2:e9:39:3f:fb:1f:20:05:d2:d6:12:5b:
         74:d4:b7:50:a9:e3:38:93:d0:89:f4:83:b2:ea:de:b2:5f:ac:
         2d:21:02:5d:46:3c:57:54:39:4c:f9:5e:62:68:3f:49:66:f7:
         37:f7:16:99:2e:96:0a:5b:a4:5f:fb:6a:5d:3b:29:ae:b1:a2:
         08:75:a9:ea:6d:bc:72:6e:d0:8c:01:b8:0d:cd:65:89:a2:e3:
         11:7a:fb:57:f2:28:ff:23:34:c7:3b:64:8a:64:ea:ea:86:8f:
         b4:74:50:fe:42:66:26:55:93:ad:58:4e:8a:c3:b9:79:f5:45:
         59:e2:8e:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 21:50:23 2025 by rpki-client