Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2A2630EFF161E3491A84A5B4F6FB68CF0439ACC404494B7BF1C391929FA76C3E/0/323830333a633630303a3a2f33322d3438203d3e203237393031.roa
File:                     323830333a633630303a3a2f33322d3438203d3e203237393031.roa (raw, json)
Hash identifier:          QTzkscgdkCD/6mD0zEQNV93FIRIjgqp/ZqT8DEH5818=
Subject key identifier:   7F:A1:BB:E5:82:BB:2C:BE:80:D0:43:07:4B:D1:53:85:FA:4F:A6:46
Certificate issuer:       /CN=191DE519F25FDF692CBDC10A0964A4B3D9CDA91F
Certificate serial:       5ABDC62C991F09FAC012E554CE46D04BB5D0C138
Authority key identifier: 19:1D:E5:19:F2:5F:DF:69:2C:BD:C1:0A:09:64:A4:B3:D9:CD:A9:1F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/191DE519F25FDF692CBDC10A0964A4B3D9CDA91F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2A2630EFF161E3491A84A5B4F6FB68CF0439ACC404494B7BF1C391929FA76C3E/0/323830333a633630303a3a2f33322d3438203d3e203237393031.roa
Signing time:             Tue 04 Feb 2025 18:54:15 +0000
ROA not before:           Tue 04 Feb 2025 18:49:15 +0000
ROA not after:            Tue 03 Feb 2026 18:54:15 +0000
asID:                     27901
IP address blocks:        2803:c600::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2A2630EFF161E3491A84A5B4F6FB68CF0439ACC404494B7BF1C391929FA76C3E/0/191DE519F25FDF692CBDC10A0964A4B3D9CDA91F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2A2630EFF161E3491A84A5B4F6FB68CF0439ACC404494B7BF1C391929FA76C3E/0/191DE519F25FDF692CBDC10A0964A4B3D9CDA91F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/191DE519F25FDF692CBDC10A0964A4B3D9CDA91F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 09:50:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:bd:c6:2c:99:1f:09:fa:c0:12:e5:54:ce:46:d0:4b:b5:d0:c1:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=191DE519F25FDF692CBDC10A0964A4B3D9CDA91F
        Validity
            Not Before: Feb  4 18:49:15 2025 GMT
            Not After : Feb  3 18:54:15 2026 GMT
        Subject: CN=7FA1BBE582BB2CBE80D043074BD15385FA4FA646
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:11:8c:85:7c:cf:40:0e:c0:7b:40:3e:1f:00:
                    fe:bc:02:9d:8a:1c:4e:df:14:12:71:c5:de:f8:c2:
                    35:96:21:38:ca:cf:14:95:26:e4:59:e5:e7:26:af:
                    bc:02:f0:35:3f:3e:79:03:e5:57:a5:0b:fb:77:7b:
                    64:ce:cb:1e:fa:5f:ba:c1:1a:7e:42:e6:6a:25:79:
                    47:8e:6a:90:dc:55:41:17:a3:52:cb:81:34:f7:d0:
                    72:68:76:87:22:12:75:f4:92:76:44:9d:48:b8:5a:
                    e1:3d:07:1d:9d:16:a3:80:be:0f:2e:e4:17:08:67:
                    05:36:35:ed:22:e4:27:0a:8e:c0:d4:65:c5:c8:69:
                    f7:6f:05:5f:35:bc:c8:5f:52:42:f0:e0:47:fa:28:
                    11:a8:63:10:fb:82:c3:6c:61:66:55:63:27:0a:ff:
                    12:c2:f0:14:ea:33:02:aa:4f:b3:be:91:e9:d9:ad:
                    07:0c:9b:8b:ef:6a:2e:53:90:35:1b:b0:ea:66:7f:
                    99:ec:c8:27:c8:f1:a2:ec:5f:ee:f5:a0:d0:cb:8d:
                    61:8a:d6:36:42:5d:24:e6:da:59:d6:0d:cb:d1:a3:
                    ee:3a:be:63:fd:6d:30:6b:33:2f:f6:ff:ff:81:6e:
                    ad:6b:41:84:9b:0f:8e:41:49:52:3a:8f:fc:94:51:
                    f1:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:A1:BB:E5:82:BB:2C:BE:80:D0:43:07:4B:D1:53:85:FA:4F:A6:46
            X509v3 Authority Key Identifier:
                keyid:19:1D:E5:19:F2:5F:DF:69:2C:BD:C1:0A:09:64:A4:B3:D9:CD:A9:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2A2630EFF161E3491A84A5B4F6FB68CF0439ACC404494B7BF1C391929FA76C3E/0/191DE519F25FDF692CBDC10A0964A4B3D9CDA91F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/191DE519F25FDF692CBDC10A0964A4B3D9CDA91F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2A2630EFF161E3491A84A5B4F6FB68CF0439ACC404494B7BF1C391929FA76C3E/0/323830333a633630303a3a2f33322d3438203d3e203237393031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c600::/32

    Signature Algorithm: sha256WithRSAEncryption
         06:97:26:56:f9:ad:1e:68:2b:f2:61:d3:3d:0c:43:0c:c4:ee:
         71:f1:7b:e4:20:9b:0e:e7:b5:a9:14:8e:88:ba:9e:d9:ed:27:
         79:86:f0:6e:a5:5a:13:e7:38:55:75:09:3e:2c:9b:f1:e7:30:
         bb:20:a2:8e:8b:87:6d:c4:81:57:50:93:ff:68:4b:33:c1:c3:
         ba:5f:9d:ff:54:47:27:3c:04:bb:d5:ef:8a:b1:0d:9e:5c:2d:
         4b:33:37:8a:a7:59:11:d8:1e:b9:ec:f2:a2:20:3c:aa:20:40:
         25:ff:da:04:73:ba:54:b0:e1:a6:d0:45:81:84:7c:c4:e0:08:
         eb:a2:3e:07:1b:b0:91:98:e2:d2:c4:df:3f:04:e9:b3:a7:80:
         74:b2:0f:66:b1:f5:d6:53:fe:4e:b1:b3:f9:54:9c:cb:99:6f:
         35:2e:d9:d7:23:31:60:a6:25:75:5a:a4:1c:ef:be:b1:0f:44:
         08:ed:41:c5:3e:0a:24:e9:d3:72:27:ee:25:9e:df:d5:7b:02:
         7f:73:fe:ce:f2:89:22:a5:2f:98:d7:7a:4e:2f:64:44:a3:6e:
         11:85:fb:e6:19:dc:6e:95:70:fa:ab:f0:cc:21:f7:4d:a7:cf:
         d5:3e:d0:24:8b:30:8e:21:21:ff:ea:da:d0:2f:6d:79:ec:4a:
         29:51:91:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:53:00 2025 by rpki-client