Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5178255AB399D1DA538AD2E09B31292FFBBF4DA76656D398ECBBEE0FCBEF09DE/0/323830333a326335303a323030303a3a2f33362d3438203d3e20323733313432.roa
File:                     323830333a326335303a323030303a3a2f33362d3438203d3e20323733313432.roa (raw, json)
Hash identifier:          8bTIv1U6I1MEvUec0ErxCnSJLrDHNKo5KQxjkeRIpZs=
Subject key identifier:   23:D5:77:F5:FC:F4:0D:9E:FB:09:A2:95:18:C3:5E:CE:25:CB:89:8F
Certificate issuer:       /CN=41B8103DCE88DDDEADBAC30879C4A785F1517EE2
Certificate serial:       5A1B2A56F5DAB5F9C3CB4042BC5767DF8B47D944
Authority key identifier: 41:B8:10:3D:CE:88:DD:DE:AD:BA:C3:08:79:C4:A7:85:F1:51:7E:E2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/41B8103DCE88DDDEADBAC30879C4A785F1517EE2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5178255AB399D1DA538AD2E09B31292FFBBF4DA76656D398ECBBEE0FCBEF09DE/0/323830333a326335303a323030303a3a2f33362d3438203d3e20323733313432.roa
Signing time:             Tue 27 May 2025 15:20:11 +0000
ROA not before:           Tue 27 May 2025 15:15:11 +0000
ROA not after:            Tue 26 May 2026 15:20:11 +0000
asID:                     273142
IP address blocks:        2803:2c50:2000::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5178255AB399D1DA538AD2E09B31292FFBBF4DA76656D398ECBBEE0FCBEF09DE/0/41B8103DCE88DDDEADBAC30879C4A785F1517EE2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5178255AB399D1DA538AD2E09B31292FFBBF4DA76656D398ECBBEE0FCBEF09DE/0/41B8103DCE88DDDEADBAC30879C4A785F1517EE2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/41B8103DCE88DDDEADBAC30879C4A785F1517EE2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 08:22:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:1b:2a:56:f5:da:b5:f9:c3:cb:40:42:bc:57:67:df:8b:47:d9:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41B8103DCE88DDDEADBAC30879C4A785F1517EE2
        Validity
            Not Before: May 27 15:15:11 2025 GMT
            Not After : May 26 15:20:11 2026 GMT
        Subject: CN=23D577F5FCF40D9EFB09A29518C35ECE25CB898F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:13:40:9a:83:63:3c:2a:6f:49:71:64:4a:9a:
                    ef:ad:ac:c4:61:57:60:23:be:2b:82:ab:32:47:45:
                    4a:0e:d8:bb:18:85:12:a5:56:4e:25:42:ec:16:d1:
                    04:8a:a9:a9:53:7d:72:f1:d2:58:fd:87:6f:fe:79:
                    55:8a:ec:76:c0:13:a9:9b:d4:a8:83:ce:f9:0b:8d:
                    14:13:29:3c:ca:b3:a9:64:80:f1:4f:f0:f7:a1:fc:
                    29:97:00:ed:dd:55:31:05:3f:f3:4f:f0:a7:ef:e5:
                    13:c7:e2:4a:9e:ad:7d:7e:ce:6a:bc:b4:2a:e2:4f:
                    1b:d5:50:90:a6:91:95:45:34:1b:c0:25:6e:63:05:
                    95:12:10:b9:fe:2b:b7:35:f8:a3:db:db:c0:ab:2e:
                    50:e6:00:5f:10:54:f0:b6:61:65:cd:2f:d6:da:2b:
                    bc:a6:a1:bb:93:d0:13:8d:5f:94:7b:20:51:95:8d:
                    9a:98:f3:74:96:a1:9e:60:63:63:ca:31:22:a1:96:
                    ce:a0:62:26:64:36:ad:b2:f0:5f:a4:9b:f6:40:96:
                    67:e3:e1:b1:13:bf:2d:ef:4a:38:cc:ee:e4:76:ab:
                    58:59:68:e5:92:da:29:93:b7:74:61:42:a3:20:fc:
                    9a:4e:23:ba:99:54:27:9c:98:02:01:b6:c7:b3:c9:
                    2b:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:D5:77:F5:FC:F4:0D:9E:FB:09:A2:95:18:C3:5E:CE:25:CB:89:8F
            X509v3 Authority Key Identifier:
                keyid:41:B8:10:3D:CE:88:DD:DE:AD:BA:C3:08:79:C4:A7:85:F1:51:7E:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5178255AB399D1DA538AD2E09B31292FFBBF4DA76656D398ECBBEE0FCBEF09DE/0/41B8103DCE88DDDEADBAC30879C4A785F1517EE2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/41B8103DCE88DDDEADBAC30879C4A785F1517EE2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5178255AB399D1DA538AD2E09B31292FFBBF4DA76656D398ECBBEE0FCBEF09DE/0/323830333a326335303a323030303a3a2f33362d3438203d3e20323733313432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2c50:2000::/36

    Signature Algorithm: sha256WithRSAEncryption
         6e:c9:3b:aa:00:29:d0:51:d5:4b:3c:0d:92:93:40:79:b0:99:
         ad:aa:88:1c:25:df:85:7f:4b:94:2e:11:4b:62:64:33:be:68:
         96:43:b8:9e:00:c4:b4:0a:cd:62:9f:7e:cc:06:be:06:14:dc:
         fe:d0:48:48:8a:97:fe:d3:f5:33:63:7d:c1:20:72:95:fe:3f:
         3d:20:8c:0f:61:25:42:de:e8:f9:4d:77:64:0f:66:ee:3a:69:
         c4:15:f0:76:92:96:f9:e0:5a:26:46:ef:df:97:ff:fa:3f:c4:
         78:ad:ad:cf:cd:5d:b6:f2:54:2d:4d:25:e3:31:5e:15:4f:35:
         45:b3:27:dd:49:6a:74:20:f5:0b:1e:d0:bd:ea:8b:ec:08:cc:
         4a:e9:63:4e:f2:0a:0e:84:e7:97:fc:59:b1:3a:62:2d:97:97:
         bc:51:c8:16:32:0b:e4:9c:a4:6a:40:c0:94:eb:fd:1f:c2:20:
         fd:a3:82:bf:3c:3f:b4:b3:89:72:24:6c:14:7a:1b:0c:21:ec:
         15:15:0b:2a:00:b6:48:4b:21:c8:89:7a:a7:1f:51:79:9d:30:
         e8:31:04:65:29:95:21:81:b3:35:ff:d3:f3:7b:89:a8:c2:d1:
         50:78:dd:a7:37:c2:1b:f6:84:02:73:da:47:ac:aa:67:f3:8c:
         8a:33:75:16
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jun 6 06:06:49 2025 by rpki-client