Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4EBC094E8656711D6DED2BD9FBCE4C2B857A5DC39B416FAFCF159BC2022A63D8/0/323830333a643632303a3a2f33322d3332203d3e20323635383636.roa
File:                     323830333a643632303a3a2f33322d3332203d3e20323635383636.roa (raw, json)
Hash identifier:          AKsy6IGETXRAR+8N0Sf6xXs3JG8FkxSrF9ce+QO9cM8=
Subject key identifier:   39:4E:61:96:48:1D:B8:18:6D:E1:CE:5E:91:08:34:65:2C:21:B9:6F
Certificate issuer:       /CN=7868C8505B52C8303D8289F2104AC607113D9295
Certificate serial:       5E61A0E0872C0A508C42315826935B9984BFAB53
Authority key identifier: 78:68:C8:50:5B:52:C8:30:3D:82:89:F2:10:4A:C6:07:11:3D:92:95
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7868C8505B52C8303D8289F2104AC607113D9295.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4EBC094E8656711D6DED2BD9FBCE4C2B857A5DC39B416FAFCF159BC2022A63D8/0/323830333a643632303a3a2f33322d3332203d3e20323635383636.roa
Signing time:             Tue 04 Feb 2025 18:54:35 +0000
ROA not before:           Tue 04 Feb 2025 18:49:35 +0000
ROA not after:            Tue 03 Feb 2026 18:54:35 +0000
asID:                     265866
IP address blocks:        2803:d620::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4EBC094E8656711D6DED2BD9FBCE4C2B857A5DC39B416FAFCF159BC2022A63D8/0/7868C8505B52C8303D8289F2104AC607113D9295.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4EBC094E8656711D6DED2BD9FBCE4C2B857A5DC39B416FAFCF159BC2022A63D8/0/7868C8505B52C8303D8289F2104AC607113D9295.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7868C8505B52C8303D8289F2104AC607113D9295.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:61:a0:e0:87:2c:0a:50:8c:42:31:58:26:93:5b:99:84:bf:ab:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7868C8505B52C8303D8289F2104AC607113D9295
        Validity
            Not Before: Feb  4 18:49:35 2025 GMT
            Not After : Feb  3 18:54:35 2026 GMT
        Subject: CN=394E6196481DB8186DE1CE5E910834652C21B96F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:da:5c:76:e5:a3:ef:e8:3e:02:78:05:ad:db:
                    bc:6f:98:53:0a:5d:9e:00:3e:39:56:53:3c:8f:74:
                    bf:73:aa:cf:ed:d8:08:bd:ad:33:8d:82:a5:ab:22:
                    dc:61:d2:e4:67:79:0f:7d:87:49:33:ff:95:40:c2:
                    96:fc:d2:82:de:d9:0e:38:75:3a:e0:b3:1c:37:02:
                    80:b2:c6:21:94:d5:f5:bd:2d:a1:b3:a2:d6:60:02:
                    4a:3e:14:ad:7a:ba:11:b7:a8:43:8c:b2:4c:bb:86:
                    7e:05:40:9c:34:b3:95:ee:b3:07:71:69:14:ae:fb:
                    05:63:15:a8:29:38:dc:d7:2b:43:df:21:d9:5c:62:
                    97:49:d0:c4:c1:bd:fd:3e:7b:36:39:52:f9:11:55:
                    be:5c:87:23:27:70:f4:5c:85:d2:67:a4:5d:f9:38:
                    17:6a:a3:94:c2:3b:3e:d3:9b:c1:a5:26:1e:9f:37:
                    24:5f:17:b4:7a:64:81:2d:28:87:9e:7f:c7:2b:08:
                    ae:ae:ec:d8:63:a3:37:8e:c4:ce:35:5b:bb:22:74:
                    37:3d:3c:21:9f:5c:8d:fc:74:31:75:dc:67:3c:a7:
                    a6:6d:48:9d:20:fd:07:e9:68:f6:bc:83:a6:bc:47:
                    06:b2:76:94:43:dc:38:84:9d:9d:ae:01:ca:c9:05:
                    43:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:4E:61:96:48:1D:B8:18:6D:E1:CE:5E:91:08:34:65:2C:21:B9:6F
            X509v3 Authority Key Identifier:
                keyid:78:68:C8:50:5B:52:C8:30:3D:82:89:F2:10:4A:C6:07:11:3D:92:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4EBC094E8656711D6DED2BD9FBCE4C2B857A5DC39B416FAFCF159BC2022A63D8/0/7868C8505B52C8303D8289F2104AC607113D9295.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7868C8505B52C8303D8289F2104AC607113D9295.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4EBC094E8656711D6DED2BD9FBCE4C2B857A5DC39B416FAFCF159BC2022A63D8/0/323830333a643632303a3a2f33322d3332203d3e20323635383636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d620::/32

    Signature Algorithm: sha256WithRSAEncryption
         a5:bd:00:9c:a3:cb:8b:81:93:57:02:e8:cc:bf:16:a5:90:c5:
         a6:a2:81:eb:da:e5:1d:bf:7a:6a:ef:2c:0e:d2:29:9d:6e:6c:
         4b:8e:f9:b1:1b:de:17:ca:84:42:ff:a7:c0:78:37:18:f2:82:
         91:e4:37:5d:6f:4b:16:b6:64:4b:0f:76:1b:0c:ca:a2:ca:2d:
         80:a5:73:56:90:85:62:0b:46:ca:65:65:b6:ec:09:5e:48:66:
         d1:1e:7f:4e:37:65:ca:f8:08:28:4e:70:4d:03:48:60:22:ab:
         39:a8:97:e7:a1:c9:3f:f6:a1:35:f5:ab:37:5b:d6:e5:f0:39:
         ed:97:66:7f:2c:ca:49:05:0d:43:09:5f:9a:23:89:1c:2d:eb:
         90:78:5e:65:6a:0b:e9:b2:3f:fb:e3:80:7a:a8:bd:d7:07:95:
         e2:96:20:65:cf:2f:6c:4d:9a:38:97:38:b2:2e:55:fa:ca:cf:
         d2:43:33:af:f9:25:15:72:3c:f9:3e:a0:39:17:a8:bf:71:fb:
         35:9e:0c:b0:1d:52:89:f3:a6:ba:42:43:19:ea:e1:cf:56:5d:
         f3:00:e3:15:7e:b6:9d:5f:7f:4e:26:dc:a9:f6:09:b1:90:9e:
         5e:a0:38:5c:7a:0b:f3:5b:a4:a5:30:51:cd:dd:91:0e:44:0f:
         6e:29:ff:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:06:27 2025 by rpki-client