Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4D42B7C6B42636746D3F1CDE1470E8AD20272F5333E4296CDD2499FD9385786F/0/323830333a336532303a3a2f33322d3332203d3e20323635383830.roa
File:                     323830333a336532303a3a2f33322d3332203d3e20323635383830.roa (raw, json)
Hash identifier:          T5U0zcGX8rQTF2ZPEErvDsJXOgdL7D00Kua2KSZ3nqo=
Subject key identifier:   38:2D:18:09:14:C8:67:4A:38:16:BB:28:5F:CC:88:D4:12:BF:01:3F
Certificate issuer:       /CN=C57552E18AFFC85D99468F027EAFCED31C5F6EA4
Certificate serial:       339C74F86A1A0C48BA19A081E6EEA641A6934DD1
Authority key identifier: C5:75:52:E1:8A:FF:C8:5D:99:46:8F:02:7E:AF:CE:D3:1C:5F:6E:A4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C57552E18AFFC85D99468F027EAFCED31C5F6EA4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4D42B7C6B42636746D3F1CDE1470E8AD20272F5333E4296CDD2499FD9385786F/0/323830333a336532303a3a2f33322d3332203d3e20323635383830.roa
Signing time:             Tue 28 Jan 2025 17:10:00 +0000
ROA not before:           Tue 28 Jan 2025 17:05:00 +0000
ROA not after:            Tue 27 Jan 2026 17:10:00 +0000
asID:                     265880
IP address blocks:        2803:3e20::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4D42B7C6B42636746D3F1CDE1470E8AD20272F5333E4296CDD2499FD9385786F/0/C57552E18AFFC85D99468F027EAFCED31C5F6EA4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4D42B7C6B42636746D3F1CDE1470E8AD20272F5333E4296CDD2499FD9385786F/0/C57552E18AFFC85D99468F027EAFCED31C5F6EA4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C57552E18AFFC85D99468F027EAFCED31C5F6EA4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 20:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:9c:74:f8:6a:1a:0c:48:ba:19:a0:81:e6:ee:a6:41:a6:93:4d:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C57552E18AFFC85D99468F027EAFCED31C5F6EA4
        Validity
            Not Before: Jan 28 17:05:00 2025 GMT
            Not After : Jan 27 17:10:00 2026 GMT
        Subject: CN=382D180914C8674A3816BB285FCC88D412BF013F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:ad:7f:67:08:a9:5a:fe:60:f5:76:b4:61:a9:
                    0c:eb:b4:57:ea:e4:00:cb:5a:4c:a5:cd:a9:3b:46:
                    49:36:ac:7c:8f:86:a7:f5:15:c4:8d:f1:94:f0:e2:
                    ca:e8:a4:da:6a:fb:6f:23:15:e7:f5:06:e3:b8:2f:
                    1d:78:36:22:c9:70:2d:62:21:18:a5:0c:ea:32:1e:
                    69:99:bc:24:9b:77:4d:73:cb:e4:d0:ff:6f:89:28:
                    ef:0d:f5:be:db:2f:f0:99:cc:ab:6b:1b:e4:23:81:
                    fd:af:79:10:05:4d:8a:1e:d3:88:e6:81:2a:24:80:
                    4d:88:12:69:1c:0a:c2:c5:24:e6:3b:bd:78:01:35:
                    33:cf:ec:e6:fc:9e:e6:51:b9:36:0e:99:f9:55:9c:
                    4e:b7:cc:42:5d:41:42:8f:8a:92:45:73:ea:96:c7:
                    09:7d:70:3d:ef:6b:3f:a4:0b:9f:04:8f:ae:16:2e:
                    3a:9b:39:d4:c7:ec:d4:e8:44:83:fa:a4:38:e9:e9:
                    91:b5:27:b6:f6:75:42:59:e2:16:35:d6:88:cf:ef:
                    33:56:65:5c:95:7a:ea:ec:ca:1b:68:b0:ef:35:42:
                    9c:2c:15:10:52:81:d3:96:7d:51:bf:81:53:72:62:
                    72:6b:dc:b4:33:dc:9d:c7:e4:01:91:9b:e4:d6:99:
                    7a:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:2D:18:09:14:C8:67:4A:38:16:BB:28:5F:CC:88:D4:12:BF:01:3F
            X509v3 Authority Key Identifier:
                keyid:C5:75:52:E1:8A:FF:C8:5D:99:46:8F:02:7E:AF:CE:D3:1C:5F:6E:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4D42B7C6B42636746D3F1CDE1470E8AD20272F5333E4296CDD2499FD9385786F/0/C57552E18AFFC85D99468F027EAFCED31C5F6EA4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C57552E18AFFC85D99468F027EAFCED31C5F6EA4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4D42B7C6B42636746D3F1CDE1470E8AD20272F5333E4296CDD2499FD9385786F/0/323830333a336532303a3a2f33322d3332203d3e20323635383830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3e20::/32

    Signature Algorithm: sha256WithRSAEncryption
         cc:bd:ea:69:e7:fa:b0:08:87:81:8f:ed:51:24:50:74:b9:64:
         38:0f:e0:44:b5:da:4f:cf:8b:df:d6:3a:71:10:b4:4f:f6:c5:
         0f:da:2c:ea:0f:f9:f1:5b:d3:c9:cb:bb:50:b0:b8:17:d6:8f:
         8a:59:4a:15:18:5b:05:27:35:1d:8c:69:41:60:52:58:85:00:
         bf:7c:13:b7:0e:a0:ce:85:8c:3a:00:d4:75:e3:02:de:67:16:
         40:84:3b:bf:73:07:a3:99:eb:ad:8f:c4:40:45:7a:b0:8c:88:
         b3:77:ce:f3:d9:d8:11:d7:f8:46:49:75:75:e0:6f:3e:81:63:
         4a:52:40:80:69:e5:e0:ac:b8:90:33:a4:28:08:70:77:9a:f8:
         e4:29:2c:f3:4b:9c:fd:b7:74:69:97:69:16:87:15:d7:97:85:
         50:67:b0:32:1a:d5:ac:02:63:49:9b:99:f0:e5:bb:4b:d2:73:
         87:15:97:ef:e7:f5:4d:fc:56:f6:13:ee:2b:f0:98:53:45:78:
         f5:e5:88:7a:b4:e2:36:42:0d:00:0f:54:29:e3:a7:9b:82:df:
         64:19:db:d9:33:db:f3:0e:3a:39:15:81:c0:a2:65:cf:16:bd:
         65:09:5f:81:b1:41:cf:63:8a:77:ef:2d:ff:92:55:1d:94:ce:
         4c:21:5f:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 21:47:45 2025 by rpki-client