Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2D66870EAB0E4932805F4DB0951805820E1B8AF8C9798AB906AEF05EFEB6C1D6/0/323830333a356164303a653a3a2f34372d3438203d3e20323734303739.roa
File:                     323830333a356164303a653a3a2f34372d3438203d3e20323734303739.roa (raw, json)
Hash identifier:          J9xkIwFx/+PYNW63Fw6xYuVRTClmNap+VqlDk8lGBDo=
Subject key identifier:   A5:FD:20:C7:A9:B3:A5:3F:D3:FE:44:00:9C:F4:66:22:DB:C1:CE:B2
Certificate issuer:       /CN=515E3AA341EF8349020D7BF59BE54DC21A5116E4
Certificate serial:       20E5AA514414B4723100DEB2021F765EBE029D2D
Authority key identifier: 51:5E:3A:A3:41:EF:83:49:02:0D:7B:F5:9B:E5:4D:C2:1A:51:16:E4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/515E3AA341EF8349020D7BF59BE54DC21A5116E4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2D66870EAB0E4932805F4DB0951805820E1B8AF8C9798AB906AEF05EFEB6C1D6/0/323830333a356164303a653a3a2f34372d3438203d3e20323734303739.roa
Signing time:             Wed 09 Jul 2025 03:00:03 +0000
ROA not before:           Wed 09 Jul 2025 02:55:03 +0000
ROA not after:            Wed 08 Jul 2026 03:00:03 +0000
asID:                     274079
IP address blocks:        2803:5ad0:e::/47 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2D66870EAB0E4932805F4DB0951805820E1B8AF8C9798AB906AEF05EFEB6C1D6/0/515E3AA341EF8349020D7BF59BE54DC21A5116E4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2D66870EAB0E4932805F4DB0951805820E1B8AF8C9798AB906AEF05EFEB6C1D6/0/515E3AA341EF8349020D7BF59BE54DC21A5116E4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/515E3AA341EF8349020D7BF59BE54DC21A5116E4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Jul 2025 03:26:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:e5:aa:51:44:14:b4:72:31:00:de:b2:02:1f:76:5e:be:02:9d:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=515E3AA341EF8349020D7BF59BE54DC21A5116E4
        Validity
            Not Before: Jul  9 02:55:03 2025 GMT
            Not After : Jul  8 03:00:03 2026 GMT
        Subject: CN=A5FD20C7A9B3A53FD3FE44009CF46622DBC1CEB2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:95:8d:a7:aa:aa:3b:40:dd:f4:b4:7a:3a:cb:
                    a7:dc:5d:b4:c3:9c:2d:18:ff:94:39:b1:e9:2d:25:
                    32:b4:2f:98:dc:31:ed:94:5a:a2:f0:cf:fb:25:e8:
                    be:54:a3:e2:b4:af:39:3e:3c:46:ab:08:b2:0c:df:
                    ba:34:16:78:68:c5:7d:f3:fd:7c:66:10:63:80:2c:
                    50:64:60:b1:bd:31:05:f3:42:f8:21:46:13:7d:51:
                    06:0d:e3:2d:0b:27:a6:0c:1a:0c:88:8c:43:72:98:
                    15:86:96:5d:08:e1:94:5d:b9:db:50:89:0a:fc:f1:
                    39:6a:85:6e:4f:dd:6c:79:1e:4d:d0:3d:f6:49:a0:
                    65:55:e8:22:b6:19:b3:4a:27:01:4f:f0:10:6c:50:
                    5b:4a:12:ab:9e:de:d9:c4:50:df:30:b2:b0:ec:04:
                    d4:71:2f:c4:c1:97:c2:8f:db:ff:40:d7:e4:21:ef:
                    19:61:3f:c5:0e:2b:55:6f:2a:52:eb:e7:1f:2b:d4:
                    70:b3:57:3a:92:f3:bf:f3:55:a2:e4:5c:6c:1d:b6:
                    5c:a2:d9:f0:6a:fd:46:e2:9b:f6:b4:71:d6:cb:eb:
                    34:d6:be:cc:ac:6b:8c:07:cc:b4:67:92:6b:51:84:
                    4d:da:fe:f7:f3:c8:4c:32:2a:1b:5b:09:e0:da:44:
                    2c:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:FD:20:C7:A9:B3:A5:3F:D3:FE:44:00:9C:F4:66:22:DB:C1:CE:B2
            X509v3 Authority Key Identifier:
                keyid:51:5E:3A:A3:41:EF:83:49:02:0D:7B:F5:9B:E5:4D:C2:1A:51:16:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2D66870EAB0E4932805F4DB0951805820E1B8AF8C9798AB906AEF05EFEB6C1D6/0/515E3AA341EF8349020D7BF59BE54DC21A5116E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/515E3AA341EF8349020D7BF59BE54DC21A5116E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2D66870EAB0E4932805F4DB0951805820E1B8AF8C9798AB906AEF05EFEB6C1D6/0/323830333a356164303a653a3a2f34372d3438203d3e20323734303739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5ad0:e::/47

    Signature Algorithm: sha256WithRSAEncryption
         2c:a2:ce:68:7a:3c:67:7a:02:31:ba:75:72:3e:19:f4:bc:6b:
         ca:e9:fa:fc:89:f0:49:1b:81:e9:c4:2c:f6:a6:e7:06:e8:3f:
         fb:a0:c1:da:dc:5e:24:1e:1b:f3:d0:ca:89:a8:18:70:9b:c2:
         54:0d:ab:18:05:8b:58:8c:4b:5b:df:89:3e:06:69:a4:21:67:
         bc:46:35:ad:6f:28:05:2d:99:6f:a4:bd:ec:11:98:23:1b:37:
         8b:19:87:ff:88:72:b8:0b:e7:d2:a0:75:c5:67:c8:2d:87:f5:
         66:88:9f:78:0a:a3:de:53:7d:06:18:c0:29:47:9a:b0:9b:2c:
         e0:92:24:b4:6e:81:0c:ac:d0:63:49:c8:42:d7:06:3c:c0:64:
         04:89:2a:b5:b1:84:5f:38:a4:fb:82:f9:56:d7:b7:78:da:ec:
         ef:76:5c:48:49:58:24:73:8b:1f:10:ea:3b:fa:09:c4:03:d5:
         25:ca:e2:de:f7:bc:d7:51:34:b3:ab:81:cd:05:a7:2c:9f:f7:
         a4:1b:f7:5e:72:96:d8:60:07:c6:3e:50:77:34:14:4c:8f:cb:
         47:90:34:70:58:39:b2:54:36:f8:61:6a:8f:98:08:55:13:90:
         5b:8d:db:a9:be:d2:98:b6:38:f3:b2:f9:f0:b3:dd:d8:80:75:
         06:f9:de:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 22:58:45 2025 by rpki-client