Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3FC5A7998A9BECC6EB7251611FF8F04BFF65CDD862A8D5C6CE86542753A77108/0/323830333a3836303a3a2f33322d3438203d3e203532333939.roa
File:                     323830333a3836303a3a2f33322d3438203d3e203532333939.roa (raw, json)
Hash identifier:          /NV+hlNXtdYaEWrjkxZz3hrYeY1mt6xbwztXD8oPdKk=
Subject key identifier:   AA:E5:DC:9D:5B:15:D7:E3:0A:2B:2F:C6:CB:42:9E:29:EC:74:81:05
Certificate issuer:       /CN=0A205E1E925EE30681B338EF41B0939B89AE8FB5
Certificate serial:       0CFED055E225A7A1A8D573E06577E91689F0E970
Authority key identifier: 0A:20:5E:1E:92:5E:E3:06:81:B3:38:EF:41:B0:93:9B:89:AE:8F:B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0A205E1E925EE30681B338EF41B0939B89AE8FB5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3FC5A7998A9BECC6EB7251611FF8F04BFF65CDD862A8D5C6CE86542753A77108/0/323830333a3836303a3a2f33322d3438203d3e203532333939.roa
Signing time:             Tue 04 Feb 2025 20:06:43 +0000
ROA not before:           Tue 04 Feb 2025 20:01:43 +0000
ROA not after:            Tue 03 Feb 2026 20:06:43 +0000
asID:                     52399
IP address blocks:        2803:860::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3FC5A7998A9BECC6EB7251611FF8F04BFF65CDD862A8D5C6CE86542753A77108/0/0A205E1E925EE30681B338EF41B0939B89AE8FB5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3FC5A7998A9BECC6EB7251611FF8F04BFF65CDD862A8D5C6CE86542753A77108/0/0A205E1E925EE30681B338EF41B0939B89AE8FB5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0A205E1E925EE30681B338EF41B0939B89AE8FB5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 10 Feb 2025 17:49:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:fe:d0:55:e2:25:a7:a1:a8:d5:73:e0:65:77:e9:16:89:f0:e9:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A205E1E925EE30681B338EF41B0939B89AE8FB5
        Validity
            Not Before: Feb  4 20:01:43 2025 GMT
            Not After : Feb  3 20:06:43 2026 GMT
        Subject: CN=AAE5DC9D5B15D7E30A2B2FC6CB429E29EC748105
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:52:7b:ec:c4:df:69:06:b9:4f:6c:3d:47:a4:
                    7c:95:e5:be:9c:04:8a:68:e9:d3:32:84:b5:81:14:
                    b8:be:d8:20:73:41:e0:e3:05:3b:d1:3f:ae:f4:39:
                    08:66:58:92:b0:1a:21:30:6f:36:3b:55:1d:58:bd:
                    8b:2c:11:93:f7:14:70:72:ba:9f:fb:10:a4:9e:83:
                    77:73:8d:b2:88:19:9c:b5:37:c8:c2:f5:56:3f:1c:
                    24:c1:2b:f5:f7:eb:d1:af:dd:47:3a:94:76:1f:9e:
                    e0:00:62:d0:05:10:fe:3f:70:15:75:34:2c:31:82:
                    67:a1:33:e8:b7:ab:7e:3b:98:ab:37:b1:f1:3b:bf:
                    81:14:49:c2:50:2f:98:07:15:44:6d:72:8e:42:f1:
                    64:a1:36:ba:72:41:34:95:90:ac:8f:70:ac:e6:b6:
                    21:38:e4:aa:da:e5:ec:b8:45:a8:5c:a9:bb:16:0c:
                    f6:f0:84:1b:90:85:a1:62:1f:c1:df:b7:6f:30:30:
                    29:97:c9:13:e4:8e:d3:e3:66:6e:4a:bc:d8:79:d6:
                    39:29:f4:84:7f:8e:46:3f:4f:90:f4:fb:6b:f2:47:
                    0e:b0:07:42:b4:b6:0c:df:4e:16:0e:4f:10:a4:b9:
                    6a:67:f3:ff:61:1b:f2:f4:ff:f7:2a:ae:55:af:77:
                    ba:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:E5:DC:9D:5B:15:D7:E3:0A:2B:2F:C6:CB:42:9E:29:EC:74:81:05
            X509v3 Authority Key Identifier:
                keyid:0A:20:5E:1E:92:5E:E3:06:81:B3:38:EF:41:B0:93:9B:89:AE:8F:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3FC5A7998A9BECC6EB7251611FF8F04BFF65CDD862A8D5C6CE86542753A77108/0/0A205E1E925EE30681B338EF41B0939B89AE8FB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0A205E1E925EE30681B338EF41B0939B89AE8FB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3FC5A7998A9BECC6EB7251611FF8F04BFF65CDD862A8D5C6CE86542753A77108/0/323830333a3836303a3a2f33322d3438203d3e203532333939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:860::/32

    Signature Algorithm: sha256WithRSAEncryption
         4a:01:a0:b9:2a:14:08:24:73:6e:a8:d4:22:e1:82:71:de:ce:
         14:ed:2a:14:5b:e2:c6:94:ed:de:73:8b:74:0f:52:1e:38:b7:
         df:72:98:aa:51:b8:43:83:86:61:62:f8:ac:58:57:c5:69:8d:
         32:6f:6d:a3:a4:2e:8a:c0:f2:4d:67:bc:e0:47:00:63:fb:bb:
         26:88:d0:3e:ed:c5:57:73:96:dd:db:de:e7:f1:d1:ad:35:35:
         94:f6:c7:95:64:f8:10:a2:1b:be:f7:be:c4:b6:45:0d:6f:0b:
         1f:d5:21:96:83:44:02:07:51:6d:f5:be:65:32:1f:55:19:92:
         0b:e5:db:80:57:53:09:cb:19:c2:8d:ee:04:47:81:3a:7c:6c:
         1d:3f:fb:ea:72:d0:37:86:33:46:92:39:fb:e3:39:23:81:eb:
         d4:3d:52:27:b2:66:cb:2b:72:52:bf:6c:50:22:51:e5:c5:44:
         61:6a:db:1c:e9:67:57:3a:dd:70:f2:95:75:8f:2c:5c:61:43:
         0d:15:49:5b:f2:dd:1a:53:3e:36:a5:50:63:58:45:59:9f:42:
         88:44:c7:02:1d:31:60:57:14:9b:6f:a6:ae:6f:2c:1b:b1:a0:
         8f:48:a0:49:22:3b:94:b7:b7:ce:b7:df:78:17:a3:40:74:62:
         bd:bf:20:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 9 13:32:48 2025 by rpki-client