Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5319F2CE31BB1E2A4FF4C757B191FA1D10CE2398239774ECA610A95375C8FE77/0/323830333a353838303a3a2f33322d3634203d3e203532343933.roa
File:                     323830333a353838303a3a2f33322d3634203d3e203532343933.roa (raw, json)
Hash identifier:          gXQKWDcmZh1l967yCf4uYn8dKFOhOuYIUc8Ur8CA3Vo=
Subject key identifier:   F0:C5:D1:1F:E4:AF:3F:E1:B1:66:36:62:9F:41:7C:78:75:A8:82:1E
Certificate issuer:       /CN=6CD081A4A402C107D88705AFD93558A5645EE0CA
Certificate serial:       0A30127749961344BD21D2FA4E6ACE111599E6B5
Authority key identifier: 6C:D0:81:A4:A4:02:C1:07:D8:87:05:AF:D9:35:58:A5:64:5E:E0:CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CD081A4A402C107D88705AFD93558A5645EE0CA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5319F2CE31BB1E2A4FF4C757B191FA1D10CE2398239774ECA610A95375C8FE77/0/323830333a353838303a3a2f33322d3634203d3e203532343933.roa
Signing time:             Tue 04 Feb 2025 18:13:37 +0000
ROA not before:           Tue 04 Feb 2025 18:08:37 +0000
ROA not after:            Tue 03 Feb 2026 18:13:37 +0000
asID:                     52493
IP address blocks:        2803:5880::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5319F2CE31BB1E2A4FF4C757B191FA1D10CE2398239774ECA610A95375C8FE77/0/6CD081A4A402C107D88705AFD93558A5645EE0CA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5319F2CE31BB1E2A4FF4C757B191FA1D10CE2398239774ECA610A95375C8FE77/0/6CD081A4A402C107D88705AFD93558A5645EE0CA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CD081A4A402C107D88705AFD93558A5645EE0CA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 03:43:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:30:12:77:49:96:13:44:bd:21:d2:fa:4e:6a:ce:11:15:99:e6:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6CD081A4A402C107D88705AFD93558A5645EE0CA
        Validity
            Not Before: Feb  4 18:08:37 2025 GMT
            Not After : Feb  3 18:13:37 2026 GMT
        Subject: CN=F0C5D11FE4AF3FE1B16636629F417C7875A8821E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b3:4a:3d:ca:39:85:60:87:5c:0d:3c:05:b4:
                    d8:3a:2f:22:75:ff:19:19:7f:95:36:d6:72:43:26:
                    54:41:8b:52:b8:4f:65:69:97:3a:83:4a:3b:c3:5e:
                    71:2f:4c:21:83:31:50:53:71:0e:23:2b:56:91:36:
                    d5:1e:b1:80:14:0d:af:f7:59:96:ae:26:b6:38:4c:
                    24:4a:a2:58:5f:ac:20:3f:9d:cd:9d:28:00:10:7c:
                    8a:26:9b:3d:75:dc:59:2e:18:c6:f2:7b:79:70:12:
                    76:3a:22:e3:70:3e:9d:01:90:fa:1d:4f:46:c5:91:
                    b1:79:f2:f0:f5:36:e3:12:0f:19:a1:47:84:e5:18:
                    cf:33:b3:8b:bf:6d:71:b7:b6:4e:c8:51:04:28:71:
                    51:4e:05:d3:4b:34:e6:7c:2c:12:4f:b2:6f:0e:1f:
                    63:3a:ab:83:04:71:99:af:8d:e4:92:70:74:f6:09:
                    a8:2d:96:19:9d:f6:f6:0c:80:a9:c2:5b:cf:8e:62:
                    12:a4:44:9e:9c:55:7e:a6:76:6a:e3:ce:9a:43:e7:
                    ce:b9:15:6c:07:25:c2:12:67:61:72:9c:73:82:fe:
                    ae:e3:28:cf:90:82:30:92:56:a0:0f:62:40:93:8a:
                    97:ab:b5:01:04:75:73:bb:7d:1e:e0:3d:2c:c8:ca:
                    49:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:C5:D1:1F:E4:AF:3F:E1:B1:66:36:62:9F:41:7C:78:75:A8:82:1E
            X509v3 Authority Key Identifier:
                keyid:6C:D0:81:A4:A4:02:C1:07:D8:87:05:AF:D9:35:58:A5:64:5E:E0:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5319F2CE31BB1E2A4FF4C757B191FA1D10CE2398239774ECA610A95375C8FE77/0/6CD081A4A402C107D88705AFD93558A5645EE0CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CD081A4A402C107D88705AFD93558A5645EE0CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5319F2CE31BB1E2A4FF4C757B191FA1D10CE2398239774ECA610A95375C8FE77/0/323830333a353838303a3a2f33322d3634203d3e203532343933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5880::/32

    Signature Algorithm: sha256WithRSAEncryption
         b2:17:1e:59:13:e2:97:36:7f:2b:24:35:89:c6:56:f6:71:9a:
         89:4a:bc:15:63:c1:3c:64:ca:ea:da:d1:5c:9b:65:68:32:89:
         27:4a:cb:7a:26:f3:15:a7:85:71:41:2e:65:04:ef:69:5e:7e:
         38:a4:cf:38:b4:66:a1:01:20:5c:ca:2a:58:f4:67:1d:78:62:
         8e:ee:7f:57:e0:f4:ae:b0:74:a5:c4:f0:0a:4e:0e:e6:ec:7b:
         8e:d6:75:17:63:ab:ca:6c:1f:bf:ef:2d:cd:92:9a:07:09:9e:
         15:9f:94:b4:3e:24:24:dd:00:39:23:80:f6:19:9c:ac:4d:fa:
         5a:15:d7:eb:b5:29:51:27:bf:43:8f:7b:b1:25:3f:df:e0:02:
         31:62:ca:54:40:ad:2b:10:d0:21:02:0b:93:1a:bb:46:55:9c:
         ce:8a:2e:21:40:24:23:b6:50:27:32:4b:a5:24:60:15:15:fb:
         ac:24:8a:2c:76:d9:df:14:44:0f:86:e6:95:17:ee:45:27:6b:
         a4:c1:6d:25:d9:7a:a1:e7:96:0a:82:59:88:80:eb:84:0e:a4:
         bb:e2:fe:88:3c:d7:01:3b:f8:91:80:91:b3:6f:a0:0d:e8:54:
         45:bd:ab:2b:dc:1e:00:2f:47:ff:6f:cb:5c:73:ce:a2:fa:de:
         3a:ff:f9:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:38:25 2025 by rpki-client