Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/35EA57EDCFB8D3C555B7B09D2E5D658E6D2412BC89F1BC7A54777FDC15C93873/0/323830333a343538303a383130303a3a2f34302d3438203d3e203532343638.roa
File:                     323830333a343538303a383130303a3a2f34302d3438203d3e203532343638.roa (raw, json)
Hash identifier:          RGbcxUVpDXE6cYzEOhP4C/BPlUKymxgZsW3JP5M4ZPg=
Subject key identifier:   57:FA:A4:70:C5:EC:2F:BA:8F:C3:89:A9:84:51:04:19:CA:A0:8D:A4
Certificate issuer:       /CN=CEC9A488D079AEE7FE0B21664A1A4AEE1C899FDC
Certificate serial:       5301567A5180AE00FBDA5ED1398D6E57A677B75C
Authority key identifier: CE:C9:A4:88:D0:79:AE:E7:FE:0B:21:66:4A:1A:4A:EE:1C:89:9F:DC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEC9A488D079AEE7FE0B21664A1A4AEE1C899FDC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/35EA57EDCFB8D3C555B7B09D2E5D658E6D2412BC89F1BC7A54777FDC15C93873/0/323830333a343538303a383130303a3a2f34302d3438203d3e203532343638.roa
Signing time:             Tue 04 Feb 2025 18:33:44 +0000
ROA not before:           Tue 04 Feb 2025 18:28:44 +0000
ROA not after:            Tue 03 Feb 2026 18:33:44 +0000
asID:                     52468
IP address blocks:        2803:4580:8100::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/35EA57EDCFB8D3C555B7B09D2E5D658E6D2412BC89F1BC7A54777FDC15C93873/0/CEC9A488D079AEE7FE0B21664A1A4AEE1C899FDC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/35EA57EDCFB8D3C555B7B09D2E5D658E6D2412BC89F1BC7A54777FDC15C93873/0/CEC9A488D079AEE7FE0B21664A1A4AEE1C899FDC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEC9A488D079AEE7FE0B21664A1A4AEE1C899FDC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:01:56:7a:51:80:ae:00:fb:da:5e:d1:39:8d:6e:57:a6:77:b7:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CEC9A488D079AEE7FE0B21664A1A4AEE1C899FDC
        Validity
            Not Before: Feb  4 18:28:44 2025 GMT
            Not After : Feb  3 18:33:44 2026 GMT
        Subject: CN=57FAA470C5EC2FBA8FC389A984510419CAA08DA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:60:a4:09:65:1c:4f:82:2e:80:68:72:41:80:
                    b5:cc:8b:2b:6e:93:d7:01:f1:a7:c3:23:04:8c:b0:
                    bf:e5:d4:87:2e:a4:6e:11:33:af:95:a1:d8:b6:e2:
                    ea:4d:3d:71:2b:ee:38:00:6c:78:e0:42:17:e1:d9:
                    88:f2:7e:0b:b5:15:e4:0a:c4:44:08:50:5a:57:a9:
                    9d:ab:fb:47:2b:bf:3f:f2:ad:50:4b:94:8f:71:2b:
                    94:c4:48:72:55:49:34:45:d0:a2:e4:71:46:00:bf:
                    64:84:57:76:b7:71:64:c2:fc:83:6b:20:8a:09:de:
                    78:bc:b7:77:5b:98:38:59:ea:f1:f3:41:dd:34:c7:
                    96:2a:dc:33:20:84:92:14:d4:66:c1:de:18:0c:18:
                    df:38:0f:ff:ae:94:3a:de:60:2c:10:f2:b6:f6:5b:
                    c2:58:fd:9e:6d:49:78:e5:b1:00:0f:17:31:d3:6c:
                    07:59:80:ec:53:42:c1:c9:10:0f:b8:5f:d9:83:72:
                    0b:3c:13:2c:5f:7d:fc:15:b0:54:08:3b:d7:7f:6a:
                    94:55:8a:7d:38:7d:a5:71:a2:7b:72:04:22:24:96:
                    fc:48:70:82:88:3f:51:62:cf:6a:b2:6a:43:d7:33:
                    21:a3:4e:f4:4d:03:4d:ae:f6:d8:d4:b9:c6:62:f5:
                    42:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:FA:A4:70:C5:EC:2F:BA:8F:C3:89:A9:84:51:04:19:CA:A0:8D:A4
            X509v3 Authority Key Identifier:
                keyid:CE:C9:A4:88:D0:79:AE:E7:FE:0B:21:66:4A:1A:4A:EE:1C:89:9F:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/35EA57EDCFB8D3C555B7B09D2E5D658E6D2412BC89F1BC7A54777FDC15C93873/0/CEC9A488D079AEE7FE0B21664A1A4AEE1C899FDC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEC9A488D079AEE7FE0B21664A1A4AEE1C899FDC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/35EA57EDCFB8D3C555B7B09D2E5D658E6D2412BC89F1BC7A54777FDC15C93873/0/323830333a343538303a383130303a3a2f34302d3438203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4580:8100::/40

    Signature Algorithm: sha256WithRSAEncryption
         69:b7:81:70:27:11:46:cc:2e:b4:a8:fe:32:f5:d1:0d:81:b1:
         d4:15:79:2f:d0:f2:48:83:0d:ec:b2:bb:f4:ab:5b:c8:a9:1f:
         92:77:9e:f0:e6:e3:3e:ee:cd:1e:98:2e:8b:5f:ed:73:ab:60:
         ce:c3:28:60:82:e8:81:39:e8:98:08:cf:e3:a4:15:cb:06:f3:
         c7:2f:f4:6e:d6:4c:5c:1c:44:94:6c:e9:59:36:6f:ec:23:08:
         ab:42:6a:24:af:57:99:2b:d1:66:c1:ff:61:80:0c:65:71:6c:
         5e:5a:41:f7:59:b8:81:7a:d5:f5:bd:bf:79:47:88:0f:eb:70:
         92:9c:f1:38:35:4d:88:3f:5e:d9:78:8d:a6:9b:f9:7e:ca:92:
         ce:51:26:10:aa:23:07:fe:20:79:18:29:43:c8:80:a8:20:14:
         d4:cf:f7:b8:e1:11:1e:a6:06:ea:ed:b5:e0:67:8f:0e:e1:e0:
         01:97:1c:d9:00:cf:f5:28:d8:52:ab:20:59:56:b0:6e:bb:7d:
         b7:6f:94:e3:47:66:39:35:67:c0:29:b5:38:7e:c7:a5:91:af:
         7e:14:2a:02:c7:bc:66:78:07:0a:09:80:30:2e:92:08:4c:13:
         f1:ef:9b:2a:d2:70:51:3e:6c:0e:f4:ce:bd:35:7d:b6:b5:e6:
         a1:22:5b:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:36:52 2025 by rpki-client