Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/53B9153FFCAEB4CF2A7968E8D6F7FB7CA0B3038EDB131F741D6686B5E2A35DA8/0/323830333a383335303a3a2f33322d3332203d3e20323733383832.roa
File:                     323830333a383335303a3a2f33322d3332203d3e20323733383832.roa (raw, json)
Hash identifier:          UYA6HLA9wSt3HRpTpBxuI/fhQRJjiPmCQVQ+akaHeMI=
Subject key identifier:   50:78:38:39:3E:BE:45:2B:A3:61:8D:9E:B4:38:3A:99:B9:4B:6D:C2
Certificate issuer:       /CN=A97E9F94EBF479C68B3A578173FFC7C436AD1F1B
Certificate serial:       315704EE083654A8703DFBEB3A3A6F074281BCD9
Authority key identifier: A9:7E:9F:94:EB:F4:79:C6:8B:3A:57:81:73:FF:C7:C4:36:AD:1F:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A97E9F94EBF479C68B3A578173FFC7C436AD1F1B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/53B9153FFCAEB4CF2A7968E8D6F7FB7CA0B3038EDB131F741D6686B5E2A35DA8/0/323830333a383335303a3a2f33322d3332203d3e20323733383832.roa
Signing time:             Tue 25 Feb 2025 14:25:00 +0000
ROA not before:           Tue 25 Feb 2025 14:20:00 +0000
ROA not after:            Tue 24 Feb 2026 14:25:00 +0000
asID:                     273882
IP address blocks:        2803:8350::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/53B9153FFCAEB4CF2A7968E8D6F7FB7CA0B3038EDB131F741D6686B5E2A35DA8/0/A97E9F94EBF479C68B3A578173FFC7C436AD1F1B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/53B9153FFCAEB4CF2A7968E8D6F7FB7CA0B3038EDB131F741D6686B5E2A35DA8/0/A97E9F94EBF479C68B3A578173FFC7C436AD1F1B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A97E9F94EBF479C68B3A578173FFC7C436AD1F1B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 10:41:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:57:04:ee:08:36:54:a8:70:3d:fb:eb:3a:3a:6f:07:42:81:bc:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A97E9F94EBF479C68B3A578173FFC7C436AD1F1B
        Validity
            Not Before: Feb 25 14:20:00 2025 GMT
            Not After : Feb 24 14:25:00 2026 GMT
        Subject: CN=507838393EBE452BA3618D9EB4383A99B94B6DC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:cc:ea:f0:eb:14:49:9e:34:57:ac:40:8e:72:
                    2f:64:b2:6b:fe:cc:e6:48:e6:52:15:03:a8:a6:c3:
                    01:72:12:98:0d:30:91:f3:d1:52:d7:75:86:39:f6:
                    63:3c:34:bf:f4:b1:5c:2e:93:1e:2d:2d:ed:30:bc:
                    69:87:8b:0a:73:7a:f1:5e:d0:00:cd:40:27:f2:1d:
                    60:70:81:69:81:e8:03:4d:b0:8b:d3:96:dc:ce:13:
                    1e:0e:6b:28:a9:04:be:9c:66:1f:a3:00:a6:13:ee:
                    6d:65:fd:e4:62:fd:08:1b:fe:30:57:8e:b6:7b:e4:
                    ab:ce:54:e9:6e:f6:01:ed:c7:95:21:b5:8f:ee:bb:
                    18:ea:18:2e:00:35:48:80:63:d6:f3:0a:28:f3:b4:
                    f2:dd:e8:45:bc:42:4c:96:0d:a8:91:53:b6:f8:5f:
                    6f:f6:56:45:5d:e3:09:3f:43:2b:a4:42:81:1a:aa:
                    d5:86:5c:b3:ed:cf:6c:b3:5f:05:f7:8a:e5:96:bc:
                    fa:86:65:84:62:2c:bc:ed:df:79:2f:39:48:b5:15:
                    f3:2e:82:d8:d8:ce:84:dd:69:8a:3d:07:b0:40:d3:
                    45:8e:57:cd:eb:76:19:6b:a7:fb:a0:46:a8:76:82:
                    c7:d8:55:86:7b:50:69:4d:1d:30:50:48:6a:c3:72:
                    4f:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:78:38:39:3E:BE:45:2B:A3:61:8D:9E:B4:38:3A:99:B9:4B:6D:C2
            X509v3 Authority Key Identifier:
                keyid:A9:7E:9F:94:EB:F4:79:C6:8B:3A:57:81:73:FF:C7:C4:36:AD:1F:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/53B9153FFCAEB4CF2A7968E8D6F7FB7CA0B3038EDB131F741D6686B5E2A35DA8/0/A97E9F94EBF479C68B3A578173FFC7C436AD1F1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A97E9F94EBF479C68B3A578173FFC7C436AD1F1B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/53B9153FFCAEB4CF2A7968E8D6F7FB7CA0B3038EDB131F741D6686B5E2A35DA8/0/323830333a383335303a3a2f33322d3332203d3e20323733383832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8350::/32

    Signature Algorithm: sha256WithRSAEncryption
         92:fe:10:cc:05:85:fa:ee:43:ef:13:c3:06:6f:c7:97:23:ab:
         65:ef:b2:b9:cc:0a:e7:02:4a:23:90:27:ce:f8:47:e6:23:43:
         8f:1f:cf:95:4d:5a:63:31:f5:9f:9b:04:d3:c6:7b:24:e3:48:
         f4:a9:d2:c5:63:19:9f:b3:b6:95:fd:d6:d0:64:84:cb:79:a5:
         4e:6c:d8:03:5a:a6:a4:72:9e:96:e1:9f:67:c3:ad:aa:3a:42:
         4e:b9:20:97:f2:5d:f3:5a:13:f2:3a:8a:0e:1b:1e:8b:c1:bd:
         cc:a5:6d:eb:47:70:d8:0d:83:52:53:78:b3:8f:65:fc:dc:66:
         ef:5d:12:f7:da:b7:7e:2b:a7:e5:0b:5a:bc:f0:20:e2:27:ef:
         71:93:67:23:38:f6:ef:66:7d:7a:fc:1d:3e:46:8a:d9:49:08:
         dc:9c:d1:1f:6a:2f:da:a0:af:05:dc:af:36:a9:82:f8:dc:ba:
         bb:af:80:05:df:5e:6b:6b:3c:0b:95:d3:a3:79:12:69:95:86:
         12:15:0a:4b:ab:4e:8b:6d:52:32:84:26:21:81:b5:ab:3e:1b:
         d9:54:51:a4:1c:63:ca:ce:e5:a3:17:f0:b2:a1:2b:a3:f3:42:
         e8:de:ab:a8:28:41:f2:47:1d:90:f2:f0:13:d1:21:2c:fc:9d:
         af:6e:ea:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 02:51:09 2025 by rpki-client