Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A683DB2EBE484C7A3536C34C158206B843D3CEF91146C49CF97FC4668FAD41C/0/323830333a656332303a3a2f33322d3332203d3e203532343638.roa
File:                     323830333a656332303a3a2f33322d3332203d3e203532343638.roa (raw, json)
Hash identifier:          JENrQ0fO0QCIFmGdKUlwhNatlZ5VYms/86EmeudBeNk=
Subject key identifier:   A5:D4:DE:92:6B:DA:34:6E:C1:D3:DC:9F:6F:52:2F:B0:88:B9:CE:31
Certificate issuer:       /CN=665E210B6EA50ABEA68925B6683D57E0A94D5CCF
Certificate serial:       5E4C4E36388C26400F329EC4ECD158D5F107D90D
Authority key identifier: 66:5E:21:0B:6E:A5:0A:BE:A6:89:25:B6:68:3D:57:E0:A9:4D:5C:CF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/665E210B6EA50ABEA68925B6683D57E0A94D5CCF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3A683DB2EBE484C7A3536C34C158206B843D3CEF91146C49CF97FC4668FAD41C/0/323830333a656332303a3a2f33322d3332203d3e203532343638.roa
Signing time:             Tue 04 Feb 2025 18:16:51 +0000
ROA not before:           Tue 04 Feb 2025 18:11:51 +0000
ROA not after:            Tue 03 Feb 2026 18:16:51 +0000
asID:                     52468
IP address blocks:        2803:ec20::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3A683DB2EBE484C7A3536C34C158206B843D3CEF91146C49CF97FC4668FAD41C/0/665E210B6EA50ABEA68925B6683D57E0A94D5CCF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3A683DB2EBE484C7A3536C34C158206B843D3CEF91146C49CF97FC4668FAD41C/0/665E210B6EA50ABEA68925B6683D57E0A94D5CCF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/665E210B6EA50ABEA68925B6683D57E0A94D5CCF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:4c:4e:36:38:8c:26:40:0f:32:9e:c4:ec:d1:58:d5:f1:07:d9:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=665E210B6EA50ABEA68925B6683D57E0A94D5CCF
        Validity
            Not Before: Feb  4 18:11:51 2025 GMT
            Not After : Feb  3 18:16:51 2026 GMT
        Subject: CN=A5D4DE926BDA346EC1D3DC9F6F522FB088B9CE31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:01:d9:19:38:f7:65:29:04:c8:5e:d6:4f:04:
                    25:e1:ec:c1:3b:b7:9f:5d:cd:cc:cc:78:59:89:d1:
                    53:b1:ad:20:9d:ac:40:06:84:e9:4a:5e:3e:39:f6:
                    bf:d0:b2:a9:01:02:d2:92:ca:9e:6e:25:ae:71:a5:
                    77:48:41:62:3e:15:54:00:99:bf:3a:0d:09:4e:71:
                    e5:29:d3:c3:91:2c:ec:10:0c:44:be:cd:04:e2:eb:
                    20:fe:a3:cc:be:05:8c:25:06:5c:af:db:1e:20:0e:
                    08:a8:95:a0:ca:40:c0:9d:b5:d4:d3:e7:af:e5:24:
                    71:3a:1e:96:e1:e6:a6:a0:37:b6:87:19:48:be:a9:
                    29:2e:87:c6:38:fb:4e:51:8f:3d:6a:71:65:aa:c2:
                    ed:18:1c:9d:ae:fe:7b:2d:bb:9f:22:fe:76:08:c6:
                    55:cf:a3:f4:e8:d7:a6:2c:3b:79:62:f7:69:d4:32:
                    a9:4f:80:7a:b7:e3:30:26:cb:d5:89:17:5a:5b:d9:
                    a2:8d:58:c9:6d:cc:b2:10:c1:ae:a0:2a:7b:f3:df:
                    c9:76:62:e4:29:2a:ec:8d:a3:59:ba:d8:6d:b0:0c:
                    3b:dc:d2:3c:08:47:8b:52:b1:33:8d:a6:02:bc:fe:
                    60:42:67:8d:a6:32:e6:8a:39:88:85:c4:9b:9d:fd:
                    75:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:D4:DE:92:6B:DA:34:6E:C1:D3:DC:9F:6F:52:2F:B0:88:B9:CE:31
            X509v3 Authority Key Identifier:
                keyid:66:5E:21:0B:6E:A5:0A:BE:A6:89:25:B6:68:3D:57:E0:A9:4D:5C:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3A683DB2EBE484C7A3536C34C158206B843D3CEF91146C49CF97FC4668FAD41C/0/665E210B6EA50ABEA68925B6683D57E0A94D5CCF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/665E210B6EA50ABEA68925B6683D57E0A94D5CCF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A683DB2EBE484C7A3536C34C158206B843D3CEF91146C49CF97FC4668FAD41C/0/323830333a656332303a3a2f33322d3332203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ec20::/32

    Signature Algorithm: sha256WithRSAEncryption
         56:54:c2:1b:2a:27:17:2e:82:72:86:41:f3:5f:03:ee:73:cf:
         46:93:29:40:a3:ba:76:b7:8e:02:c5:67:67:19:a1:bf:ce:b5:
         2d:99:49:b7:12:5b:80:1e:f2:c1:0d:11:4d:3f:d2:39:13:d1:
         63:6c:ae:5d:33:50:19:ff:5d:4c:f5:1c:b4:9a:ec:5c:4b:61:
         09:ea:e1:6c:0a:08:04:a0:94:01:25:ef:29:7a:13:32:1d:9f:
         76:c9:3c:1d:b6:c0:d4:f1:27:53:7c:45:d1:7b:fe:8f:8f:46:
         e4:22:e7:ec:4c:3b:50:c2:37:ca:36:fa:bc:4e:49:83:84:ab:
         d1:8b:7b:c2:10:44:29:fd:fc:fc:f8:44:1c:2e:74:4e:e8:b9:
         f4:23:ad:10:4e:bc:f5:d1:ea:cb:a2:52:9b:61:cf:55:c0:e2:
         50:53:01:70:b4:c6:8f:36:2e:dc:a5:1c:1a:9a:00:07:94:30:
         bb:99:81:23:86:84:d8:07:66:7b:86:89:8f:66:73:68:9e:50:
         f6:19:0f:95:e4:9b:ee:2f:5a:ba:3d:ee:33:46:f5:27:ba:b3:
         28:9f:2c:39:3c:01:6a:7c:9f:ca:fa:bb:76:69:c0:2c:82:a4:
         62:e5:e8:f2:17:70:7c:73:7b:d7:ee:e3:a9:73:cb:09:5a:ec:
         5b:97:0a:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:26:27 2025 by rpki-client