Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/42E42C781DBB75A285DBB7B6FA83F07522E6DBEEB5F5A5C4B1928B21975F5BAC/0/323830333a363330303a3a2f33322d3332203d3e203532343534.roa
File:                     323830333a363330303a3a2f33322d3332203d3e203532343534.roa (raw, json)
Hash identifier:          bibBJmAC3aFIMg9DTh9ns+YWRUAdrMnuruCtlHXls8g=
Subject key identifier:   84:21:EB:F7:DD:62:91:B6:81:26:34:F9:72:D3:65:4C:9C:D3:DA:EC
Certificate issuer:       /CN=EB962D020BCD0C8EC8D36618D22902E2E350CD44
Certificate serial:       6E5679C0D8664451FCAD422EB04D8285F3CAEFB1
Authority key identifier: EB:96:2D:02:0B:CD:0C:8E:C8:D3:66:18:D2:29:02:E2:E3:50:CD:44
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EB962D020BCD0C8EC8D36618D22902E2E350CD44.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/42E42C781DBB75A285DBB7B6FA83F07522E6DBEEB5F5A5C4B1928B21975F5BAC/0/323830333a363330303a3a2f33322d3332203d3e203532343534.roa
Signing time:             Tue 04 Feb 2025 20:06:04 +0000
ROA not before:           Tue 04 Feb 2025 20:01:04 +0000
ROA not after:            Tue 03 Feb 2026 20:06:04 +0000
asID:                     52454
IP address blocks:        2803:6300::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/42E42C781DBB75A285DBB7B6FA83F07522E6DBEEB5F5A5C4B1928B21975F5BAC/0/EB962D020BCD0C8EC8D36618D22902E2E350CD44.crl
                          rsync://repository.lacnic.net/rpki/lacnic/42E42C781DBB75A285DBB7B6FA83F07522E6DBEEB5F5A5C4B1928B21975F5BAC/0/EB962D020BCD0C8EC8D36618D22902E2E350CD44.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EB962D020BCD0C8EC8D36618D22902E2E350CD44.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:56:79:c0:d8:66:44:51:fc:ad:42:2e:b0:4d:82:85:f3:ca:ef:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB962D020BCD0C8EC8D36618D22902E2E350CD44
        Validity
            Not Before: Feb  4 20:01:04 2025 GMT
            Not After : Feb  3 20:06:04 2026 GMT
        Subject: CN=8421EBF7DD6291B6812634F972D3654C9CD3DAEC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:47:18:ab:b5:d2:de:ad:85:c9:07:eb:06:ba:
                    51:45:f6:2d:70:2d:c0:6d:11:51:51:c7:6b:11:21:
                    35:5d:01:08:c8:ba:8b:19:f4:eb:a5:91:e9:36:3b:
                    f5:16:ea:bc:83:2c:ec:6f:f7:06:c4:93:38:73:12:
                    d4:1f:32:88:05:f5:af:7b:81:cc:ca:b7:2a:42:3c:
                    b9:d7:3e:ea:d9:58:0e:08:2c:ba:b3:0a:fc:db:42:
                    dd:10:19:c4:a8:f4:9f:de:a3:a8:8b:6f:42:b5:c7:
                    10:32:b5:48:59:ea:c2:61:46:a1:1e:9a:bf:b4:b1:
                    0d:ab:d1:fe:8f:a4:ee:0b:98:f6:fa:67:a4:4c:96:
                    2f:c7:c6:2d:c0:1c:b3:55:8b:fb:17:f1:3c:d9:8a:
                    b7:95:fa:22:cf:aa:b2:7f:44:b4:97:62:86:d7:8e:
                    91:19:c7:c1:c1:f1:8d:01:ce:59:f3:7f:e5:2f:fe:
                    d5:c1:e5:f2:22:95:cb:15:93:d1:2c:38:14:22:8c:
                    51:42:62:b2:c9:c0:70:e3:5b:b5:94:2f:cd:d8:76:
                    87:f2:05:ab:b4:bf:35:53:05:40:70:44:6f:84:39:
                    b6:d6:2e:d2:7d:3c:73:55:97:2f:28:5f:cd:75:34:
                    dd:ce:7d:6d:44:2f:dd:c5:63:4a:f9:74:f4:cd:33:
                    07:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:21:EB:F7:DD:62:91:B6:81:26:34:F9:72:D3:65:4C:9C:D3:DA:EC
            X509v3 Authority Key Identifier:
                keyid:EB:96:2D:02:0B:CD:0C:8E:C8:D3:66:18:D2:29:02:E2:E3:50:CD:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/42E42C781DBB75A285DBB7B6FA83F07522E6DBEEB5F5A5C4B1928B21975F5BAC/0/EB962D020BCD0C8EC8D36618D22902E2E350CD44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EB962D020BCD0C8EC8D36618D22902E2E350CD44.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/42E42C781DBB75A285DBB7B6FA83F07522E6DBEEB5F5A5C4B1928B21975F5BAC/0/323830333a363330303a3a2f33322d3332203d3e203532343534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6300::/32

    Signature Algorithm: sha256WithRSAEncryption
         1d:7c:a3:95:0e:81:54:44:b7:f7:9f:3e:77:34:fe:1f:8a:27:
         dd:ca:c5:c1:60:69:67:60:ca:ff:08:6f:ab:37:ca:73:15:ff:
         53:06:00:7a:73:43:c0:66:90:03:a6:ef:bd:aa:f6:da:30:b3:
         79:4e:f8:a1:06:da:77:72:eb:43:a2:22:19:da:fa:0f:12:37:
         af:32:5a:2c:25:c6:91:24:d9:72:e1:7b:7a:f6:be:e8:b6:9e:
         5f:4b:c3:3f:70:75:7c:d6:34:32:19:69:0e:d8:c7:75:73:d8:
         05:24:69:85:41:0e:2d:05:7f:b3:87:1c:1b:ae:61:16:0f:2e:
         1d:94:5a:12:36:3b:64:00:9c:29:34:bd:21:e0:66:fb:39:18:
         69:c3:43:8b:d3:53:aa:be:d6:d1:0c:3a:d1:9d:db:99:c3:41:
         2b:e5:8c:33:d3:d6:1a:07:7d:3a:35:d7:0d:82:55:ea:ad:87:
         1f:9b:c6:e5:3b:15:58:13:c1:0e:d3:8e:64:d3:16:e7:8a:59:
         7e:58:0e:99:b7:d1:74:7c:23:fa:e1:d7:f8:6f:fd:ab:ad:5b:
         2c:d7:fd:5b:fb:db:24:e0:1d:ae:3f:ac:e0:68:6c:25:18:cf:
         c3:b5:42:c6:08:51:c7:79:e7:ba:81:28:0c:af:1b:96:5d:d0:
         cb:b3:63:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 03:20:40 2025 by rpki-client