Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/202AE065427DF9282787E39EE5CEB5D37B4A740A7AB5741B39AB2D3D35040834/0/323830333a643035303a3a2f33322d3332203d3e20323733313030.roa
File:                     323830333a643035303a3a2f33322d3332203d3e20323733313030.roa (raw, json)
Hash identifier:          e99mmmYFiqbsjSaV2n1Vt5h2pJa/CBYA0isNUpMZK00=
Subject key identifier:   51:04:D7:FC:5D:19:6A:04:69:B5:26:1A:CD:E9:2B:DB:D1:B1:50:D3
Certificate issuer:       /CN=1B2A6A5061D78DC153F8E9B4C452394FD08E89DC
Certificate serial:       4269B3C4D816A50F3C63A353BD8941FB9349E769
Authority key identifier: 1B:2A:6A:50:61:D7:8D:C1:53:F8:E9:B4:C4:52:39:4F:D0:8E:89:DC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B2A6A5061D78DC153F8E9B4C452394FD08E89DC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/202AE065427DF9282787E39EE5CEB5D37B4A740A7AB5741B39AB2D3D35040834/0/323830333a643035303a3a2f33322d3332203d3e20323733313030.roa
Signing time:             Tue 04 Feb 2025 18:13:54 +0000
ROA not before:           Tue 04 Feb 2025 18:08:54 +0000
ROA not after:            Tue 03 Feb 2026 18:13:54 +0000
asID:                     273100
IP address blocks:        2803:d050::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/202AE065427DF9282787E39EE5CEB5D37B4A740A7AB5741B39AB2D3D35040834/0/1B2A6A5061D78DC153F8E9B4C452394FD08E89DC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/202AE065427DF9282787E39EE5CEB5D37B4A740A7AB5741B39AB2D3D35040834/0/1B2A6A5061D78DC153F8E9B4C452394FD08E89DC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B2A6A5061D78DC153F8E9B4C452394FD08E89DC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 20:04:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:69:b3:c4:d8:16:a5:0f:3c:63:a3:53:bd:89:41:fb:93:49:e7:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B2A6A5061D78DC153F8E9B4C452394FD08E89DC
        Validity
            Not Before: Feb  4 18:08:54 2025 GMT
            Not After : Feb  3 18:13:54 2026 GMT
        Subject: CN=5104D7FC5D196A0469B5261ACDE92BDBD1B150D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:2b:4a:8b:1f:88:63:0e:84:42:f0:09:44:e2:
                    96:00:da:71:68:ef:b2:22:c1:95:24:1e:76:17:26:
                    30:08:3e:e3:0c:df:57:6b:e2:0f:32:5f:ff:90:c6:
                    90:93:f6:11:90:0a:4f:05:de:a8:4b:34:5c:67:2f:
                    c9:51:8e:9c:8d:d9:ca:4f:a2:e2:e2:ce:bd:46:04:
                    4b:14:84:f3:d6:9d:ee:bc:17:61:ce:51:2b:ae:6e:
                    6a:06:a2:12:a4:dd:c0:b6:d8:38:f6:5a:84:a2:ca:
                    2b:2f:f2:9b:28:fc:0b:04:c1:d6:83:b0:cd:db:79:
                    5f:c3:22:e5:22:e9:df:ef:d9:d8:98:a5:b4:8d:b7:
                    04:f9:64:6a:31:59:5b:5e:6d:58:e0:37:c7:da:57:
                    62:d4:ee:1a:6a:e3:21:ab:a7:4e:39:b3:23:8a:c3:
                    b9:4f:2b:15:7f:cd:d3:d4:5f:c1:7b:ab:ea:ed:6f:
                    2d:37:c5:05:e8:99:4d:ca:16:f0:3c:4c:e1:c4:08:
                    0e:0c:8e:34:c6:cf:d8:e4:15:9d:38:2a:75:15:b5:
                    9b:d7:f6:11:8c:c6:d7:e5:b9:4e:61:a6:d2:57:85:
                    27:88:26:ad:f2:08:ad:06:11:f2:9a:15:9b:17:a8:
                    74:b7:c7:06:ab:6f:ad:fd:06:09:e9:7a:ee:2f:57:
                    be:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:04:D7:FC:5D:19:6A:04:69:B5:26:1A:CD:E9:2B:DB:D1:B1:50:D3
            X509v3 Authority Key Identifier:
                keyid:1B:2A:6A:50:61:D7:8D:C1:53:F8:E9:B4:C4:52:39:4F:D0:8E:89:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/202AE065427DF9282787E39EE5CEB5D37B4A740A7AB5741B39AB2D3D35040834/0/1B2A6A5061D78DC153F8E9B4C452394FD08E89DC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B2A6A5061D78DC153F8E9B4C452394FD08E89DC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/202AE065427DF9282787E39EE5CEB5D37B4A740A7AB5741B39AB2D3D35040834/0/323830333a643035303a3a2f33322d3332203d3e20323733313030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d050::/32

    Signature Algorithm: sha256WithRSAEncryption
         2f:f5:21:47:36:1b:45:65:b1:7d:d7:cb:cd:6c:24:0c:b5:cf:
         c3:8e:eb:b6:8c:fa:87:ba:8d:c0:2f:f3:a1:42:eb:78:03:40:
         a0:ad:d5:9c:2a:74:5f:41:10:90:3a:b4:4d:1a:64:b0:7f:1c:
         04:dc:af:be:f0:bb:b4:00:0a:69:8a:9e:cf:91:e4:12:db:80:
         d9:36:39:54:62:a0:63:84:8d:88:78:9c:98:00:3b:3a:41:a7:
         1c:ba:96:2b:a0:5b:03:98:6e:0a:7f:b9:8c:f2:3c:95:0d:54:
         50:a7:a7:29:34:36:62:30:31:5a:3e:f6:e8:e4:58:51:dd:b9:
         84:a1:12:e5:a6:7b:21:39:fc:1c:88:64:23:77:6f:8b:92:cb:
         87:e9:50:6b:50:f0:a0:c8:1a:b3:df:41:4d:dd:5a:23:ad:31:
         31:f9:d4:6c:78:d4:35:6c:10:3d:22:ee:4d:13:1c:b0:aa:1b:
         3b:27:e4:6e:5e:0d:9d:81:1d:53:2c:26:99:8f:67:c7:a4:97:
         92:4d:56:86:a1:9d:22:e9:68:b4:2a:c3:c2:06:2d:52:c9:fa:
         f5:e6:91:d9:58:ae:54:87:62:13:fb:dd:01:84:f4:0d:a7:12:
         f5:0d:cf:ac:55:9d:15:5c:bb:db:04:0f:bb:f9:e9:a7:ac:d9:
         b9:93:85:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:54:48 2025 by rpki-client