Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/52129E9398F37D239772C3C77723A4311BB12316A76ED893A23DCDEF18B20A69/0/323830333a373338303a3a2f33322d3332203d3e203237373831.roa
File:                     323830333a373338303a3a2f33322d3332203d3e203237373831.roa (raw, json)
Hash identifier:          yRFzPfG/Z3qq+gxVhAEsP5TLh6/b4gRyy0odsuhdjfo=
Subject key identifier:   D2:9E:80:CD:44:95:4D:CF:85:A1:E6:6A:5D:4A:AE:B8:29:43:24:EB
Certificate issuer:       /CN=CAE32015DF3B3628FC4046F36C155FFCBA8B398A
Certificate serial:       4C963399902E65423516C5D649F02E57EAC07D50
Authority key identifier: CA:E3:20:15:DF:3B:36:28:FC:40:46:F3:6C:15:5F:FC:BA:8B:39:8A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CAE32015DF3B3628FC4046F36C155FFCBA8B398A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/52129E9398F37D239772C3C77723A4311BB12316A76ED893A23DCDEF18B20A69/0/323830333a373338303a3a2f33322d3332203d3e203237373831.roa
Signing time:             Mon 17 Mar 2025 05:12:04 +0000
ROA not before:           Mon 17 Mar 2025 05:07:04 +0000
ROA not after:            Mon 16 Mar 2026 05:12:04 +0000
asID:                     27781
IP address blocks:        2803:7380::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/52129E9398F37D239772C3C77723A4311BB12316A76ED893A23DCDEF18B20A69/0/CAE32015DF3B3628FC4046F36C155FFCBA8B398A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/52129E9398F37D239772C3C77723A4311BB12316A76ED893A23DCDEF18B20A69/0/CAE32015DF3B3628FC4046F36C155FFCBA8B398A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CAE32015DF3B3628FC4046F36C155FFCBA8B398A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:96:33:99:90:2e:65:42:35:16:c5:d6:49:f0:2e:57:ea:c0:7d:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CAE32015DF3B3628FC4046F36C155FFCBA8B398A
        Validity
            Not Before: Mar 17 05:07:04 2025 GMT
            Not After : Mar 16 05:12:04 2026 GMT
        Subject: CN=D29E80CD44954DCF85A1E66A5D4AAEB8294324EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e4:ab:f0:fe:54:ee:99:94:a2:cb:d2:da:de:
                    26:19:bf:e0:96:eb:60:df:3b:2c:88:fc:4e:b8:93:
                    60:0b:fb:3d:e9:e5:3a:e2:6a:7f:10:a9:a9:6e:af:
                    16:3a:6b:70:b7:8b:1a:a7:84:4f:5d:0d:e7:3b:b7:
                    02:d7:be:61:9f:4e:90:6e:59:b8:df:c5:3a:5f:61:
                    ab:5d:ca:60:fa:5c:e1:fb:da:f8:5c:7e:dc:d5:95:
                    ee:89:f8:26:df:fc:03:37:96:7b:ab:0d:e3:0f:1b:
                    20:ed:3a:7b:8f:4b:ab:91:20:7a:8c:f8:34:4d:45:
                    70:f3:72:1b:03:d0:21:d9:cb:9b:f5:98:45:0e:68:
                    b6:f8:20:15:e2:e0:98:43:ec:2b:c3:29:65:94:4e:
                    ed:ed:f8:24:18:57:a3:b8:f1:33:3a:fc:5b:dd:26:
                    25:69:d3:81:78:a5:0f:cd:ff:85:99:e9:84:b0:17:
                    72:de:27:f4:80:74:d8:9e:3c:8a:c3:e5:50:88:fb:
                    e6:43:13:ca:3e:ad:b6:12:7d:d7:71:6f:1f:e3:c5:
                    0e:80:8d:21:e5:26:8a:c0:87:0f:96:3c:7b:77:75:
                    66:45:be:f7:d3:ba:ee:2d:65:70:eb:d8:7f:7b:89:
                    d5:ca:19:c6:16:2d:0f:b1:21:35:ed:94:11:2a:df:
                    c5:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:9E:80:CD:44:95:4D:CF:85:A1:E6:6A:5D:4A:AE:B8:29:43:24:EB
            X509v3 Authority Key Identifier:
                keyid:CA:E3:20:15:DF:3B:36:28:FC:40:46:F3:6C:15:5F:FC:BA:8B:39:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/52129E9398F37D239772C3C77723A4311BB12316A76ED893A23DCDEF18B20A69/0/CAE32015DF3B3628FC4046F36C155FFCBA8B398A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CAE32015DF3B3628FC4046F36C155FFCBA8B398A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/52129E9398F37D239772C3C77723A4311BB12316A76ED893A23DCDEF18B20A69/0/323830333a373338303a3a2f33322d3332203d3e203237373831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7380::/32

    Signature Algorithm: sha256WithRSAEncryption
         57:a8:f1:8f:e3:b5:0b:cc:28:6c:93:c9:d3:8a:e5:63:75:9b:
         fb:dd:78:e6:96:30:3f:10:cc:46:bb:78:70:9a:b9:ba:c9:96:
         70:2c:48:33:70:68:0c:49:eb:77:8c:4a:0c:e1:bb:c3:d8:91:
         aa:dd:4d:55:ac:cf:38:dd:0f:15:ed:70:b9:6e:8a:c3:e8:f0:
         4a:ab:cb:95:02:5d:51:2a:95:70:21:c5:d3:4b:00:3d:dc:d8:
         4c:1b:4c:11:8c:20:35:2c:b7:bf:de:b1:84:c0:17:a1:05:f2:
         1d:dc:66:b0:87:c2:3f:e0:91:42:f1:9c:b7:a6:1b:9f:3d:e4:
         35:ee:4a:41:d2:7e:f4:61:00:1d:2c:03:2b:d3:d7:76:aa:cd:
         72:c3:6f:79:7d:fe:f1:ec:7f:68:d7:09:35:f0:21:e3:37:1f:
         40:14:a6:ee:ac:57:8b:71:ca:57:c6:8d:94:a2:b4:4c:82:0c:
         f9:41:f3:5f:e8:ba:87:63:5d:fc:a0:c7:b6:8c:94:02:5d:32:
         3f:db:81:3a:c8:5d:52:b0:20:2b:1d:62:38:a3:fb:73:5c:0b:
         fa:16:57:a1:5b:47:2d:77:a3:7e:a3:f5:a1:eb:d8:45:47:7c:
         c1:fc:dc:56:3d:7f:87:f6:d3:61:2e:d8:0f:78:f5:15:c7:9c:
         39:43:c7:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:13:47 2025 by rpki-client