Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1EE90629661992A654272218DB8596F9D62BE08C6FCDA49802727E2D5E1CDB26/0/323830333a663263303a3a2f33322d3332203d3e203532343638.roa
File:                     323830333a663263303a3a2f33322d3332203d3e203532343638.roa (raw, json)
Hash identifier:          wnLorrA/ZXrikK2UlkLOjSkLgnZuSZz9fdjOLSzs91c=
Subject key identifier:   3E:58:E6:16:1C:2A:EE:FA:66:8D:65:93:F8:5B:E3:B4:40:F7:B0:3F
Certificate issuer:       /CN=D4A2D9881591DD14F59AE3D35AB8827CEDBE788A
Certificate serial:       1FAD0F0F7D7DCC808A9AD5477668C8E772B15495
Authority key identifier: D4:A2:D9:88:15:91:DD:14:F5:9A:E3:D3:5A:B8:82:7C:ED:BE:78:8A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D4A2D9881591DD14F59AE3D35AB8827CEDBE788A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1EE90629661992A654272218DB8596F9D62BE08C6FCDA49802727E2D5E1CDB26/0/323830333a663263303a3a2f33322d3332203d3e203532343638.roa
Signing time:             Tue 04 Feb 2025 19:57:56 +0000
ROA not before:           Tue 04 Feb 2025 19:52:56 +0000
ROA not after:            Tue 03 Feb 2026 19:57:56 +0000
asID:                     52468
IP address blocks:        2803:f2c0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1EE90629661992A654272218DB8596F9D62BE08C6FCDA49802727E2D5E1CDB26/0/D4A2D9881591DD14F59AE3D35AB8827CEDBE788A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1EE90629661992A654272218DB8596F9D62BE08C6FCDA49802727E2D5E1CDB26/0/D4A2D9881591DD14F59AE3D35AB8827CEDBE788A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D4A2D9881591DD14F59AE3D35AB8827CEDBE788A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:ad:0f:0f:7d:7d:cc:80:8a:9a:d5:47:76:68:c8:e7:72:b1:54:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D4A2D9881591DD14F59AE3D35AB8827CEDBE788A
        Validity
            Not Before: Feb  4 19:52:56 2025 GMT
            Not After : Feb  3 19:57:56 2026 GMT
        Subject: CN=3E58E6161C2AEEFA668D6593F85BE3B440F7B03F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:ab:a5:e2:9e:e9:59:01:e6:3a:1a:44:8e:15:
                    7e:eb:89:8f:77:bc:34:e4:9a:f0:eb:65:ea:d3:06:
                    41:53:74:cc:13:c2:d2:70:ee:9b:77:53:3f:12:92:
                    61:63:4e:65:9b:08:6b:d5:b7:76:e7:5d:0b:ee:c7:
                    d3:54:03:2b:d5:24:8d:30:4e:83:5c:6a:33:6b:ca:
                    28:49:7e:6c:34:33:62:2d:28:a3:ad:59:89:3a:e9:
                    4f:2e:9a:9a:b8:b1:4c:c2:93:c8:ea:10:2c:d4:a3:
                    85:44:d8:b5:b5:5b:d3:05:72:32:b9:46:0d:e6:55:
                    93:aa:16:f3:46:47:34:19:56:96:d6:13:97:b0:0f:
                    e3:d5:de:ae:40:9d:a3:7c:8e:ae:09:ef:31:1c:95:
                    9f:c3:28:16:19:50:cd:97:49:9a:d2:57:c3:6d:45:
                    8a:a7:05:db:ab:c0:00:86:51:77:94:40:bd:43:82:
                    72:c5:af:0d:23:f5:91:34:94:b5:33:6e:8c:2a:75:
                    5c:67:73:a6:33:34:98:fe:29:de:ac:df:ba:16:8c:
                    73:6c:f3:b8:0f:a1:b1:d5:67:64:95:5a:38:5e:20:
                    05:25:fd:f8:d4:85:f8:64:7e:20:94:d5:59:71:9d:
                    d7:aa:74:b8:70:c3:ce:fb:3b:76:2d:38:26:ea:64:
                    91:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:58:E6:16:1C:2A:EE:FA:66:8D:65:93:F8:5B:E3:B4:40:F7:B0:3F
            X509v3 Authority Key Identifier:
                keyid:D4:A2:D9:88:15:91:DD:14:F5:9A:E3:D3:5A:B8:82:7C:ED:BE:78:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1EE90629661992A654272218DB8596F9D62BE08C6FCDA49802727E2D5E1CDB26/0/D4A2D9881591DD14F59AE3D35AB8827CEDBE788A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D4A2D9881591DD14F59AE3D35AB8827CEDBE788A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1EE90629661992A654272218DB8596F9D62BE08C6FCDA49802727E2D5E1CDB26/0/323830333a663263303a3a2f33322d3332203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f2c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         9e:9d:dd:62:cf:47:37:1c:0f:0c:d3:84:6f:88:53:3d:ec:7c:
         8a:0e:12:20:e2:eb:f8:eb:4e:c5:2b:1b:0a:c4:32:cb:2b:78:
         a8:36:cb:14:78:ab:64:a2:53:42:bd:c9:56:7d:21:98:6e:3e:
         5c:25:3d:49:0b:1a:20:66:b3:c5:b0:05:e0:e0:db:06:f1:b2:
         34:53:0b:fb:ba:9f:3f:10:d9:40:61:e9:b3:cc:e1:52:a5:1c:
         c7:64:bb:8b:a5:8b:34:23:04:ac:6b:96:f6:bd:63:4c:49:13:
         f8:81:b8:89:c7:ea:5a:76:26:be:fb:0c:f8:fc:11:0c:dd:b5:
         1c:51:3f:db:cb:9a:11:dd:05:74:8a:47:c6:da:45:75:6c:b4:
         4a:32:19:ff:35:36:72:23:19:58:fa:1d:98:ad:ba:a0:58:ac:
         21:e8:f3:39:71:00:1d:db:5b:89:f5:02:f2:cc:5e:60:a7:af:
         e0:bc:89:10:e3:0e:cf:a8:f0:5e:45:e8:2c:53:5b:39:22:d1:
         c4:e5:21:ed:f4:07:e5:49:6c:da:1c:22:2c:c2:4d:f2:7c:eb:
         38:0a:e1:80:29:6a:10:81:a4:b1:15:ad:f1:26:30:d8:fe:b6:
         a8:33:ad:15:16:d8:7f:a4:4d:b0:f0:78:38:2a:37:89:f2:5f:
         43:fc:a9:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:59:11 2025 by rpki-client