Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/557A1591B54BD0C295A627D12554512D18A5657825108A571C21B638271AC556/0/323830333a633735303a3a2f33322d3438203d3e20323733393235.roa
File:                     323830333a633735303a3a2f33322d3438203d3e20323733393235.roa (raw, json)
Hash identifier:          e3QwouzRL3kQ8sdeGmUc3uMTyY+KMUcFuzU6LXHyNoI=
Subject key identifier:   EA:EA:5C:91:3A:7F:49:50:23:28:E4:63:7C:58:84:DA:A8:5B:04:81
Certificate issuer:       /CN=15C5EA0DF96BDD3989D73FDC838D1BAF57797357
Certificate serial:       1231943E3C7B9A09506F2EA292B5157E3D72463D
Authority key identifier: 15:C5:EA:0D:F9:6B:DD:39:89:D7:3F:DC:83:8D:1B:AF:57:79:73:57
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/15C5EA0DF96BDD3989D73FDC838D1BAF57797357.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/557A1591B54BD0C295A627D12554512D18A5657825108A571C21B638271AC556/0/323830333a633735303a3a2f33322d3438203d3e20323733393235.roa
Signing time:             Wed 26 Feb 2025 03:10:00 +0000
ROA not before:           Wed 26 Feb 2025 03:05:00 +0000
ROA not after:            Wed 25 Feb 2026 03:10:00 +0000
asID:                     273925
IP address blocks:        2803:c750::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/557A1591B54BD0C295A627D12554512D18A5657825108A571C21B638271AC556/0/15C5EA0DF96BDD3989D73FDC838D1BAF57797357.crl
                          rsync://repository.lacnic.net/rpki/lacnic/557A1591B54BD0C295A627D12554512D18A5657825108A571C21B638271AC556/0/15C5EA0DF96BDD3989D73FDC838D1BAF57797357.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/15C5EA0DF96BDD3989D73FDC838D1BAF57797357.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:31:94:3e:3c:7b:9a:09:50:6f:2e:a2:92:b5:15:7e:3d:72:46:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15C5EA0DF96BDD3989D73FDC838D1BAF57797357
        Validity
            Not Before: Feb 26 03:05:00 2025 GMT
            Not After : Feb 25 03:10:00 2026 GMT
        Subject: CN=EAEA5C913A7F49502328E4637C5884DAA85B0481
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:dd:78:11:8a:25:88:19:a6:75:50:27:ae:2b:
                    5c:94:4b:3a:82:17:df:15:20:ee:32:1f:86:4f:c9:
                    fc:fb:8d:63:cf:04:a6:ee:f7:d6:a7:13:af:06:3c:
                    d1:10:e9:c2:3f:15:a0:6a:4e:31:58:a2:57:1e:43:
                    df:b9:43:c4:a6:97:a8:92:c9:d5:3b:b9:aa:3e:a8:
                    6a:1f:f3:a5:01:fb:ab:43:9c:cb:13:0d:55:c9:6f:
                    3e:24:4e:4a:ad:f7:1d:2d:fa:2e:35:cb:78:b9:f4:
                    ff:31:1b:ba:e9:3e:e1:4d:ad:25:db:c4:79:db:df:
                    79:79:f6:d2:f3:1c:0c:5d:7d:9d:93:3e:94:c8:18:
                    3c:02:1b:74:e5:f2:63:e2:c7:3c:30:8c:90:c7:57:
                    85:70:9f:a8:de:82:53:76:9e:ec:fb:18:d1:b4:16:
                    c7:8f:15:33:f0:43:4b:91:96:d6:f1:d7:06:84:ff:
                    5b:b0:1b:5e:c7:f0:20:64:47:92:06:65:5f:d5:80:
                    10:a2:b1:de:36:88:2e:f5:0f:75:1f:8a:4d:b5:8a:
                    97:4a:31:73:80:cd:84:af:e8:f2:76:9e:37:1f:7f:
                    31:e7:43:82:c3:fc:dd:72:e5:5a:a5:d7:02:ba:95:
                    b3:fc:e7:10:93:98:a1:4c:ed:13:b2:92:dd:96:97:
                    e8:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:EA:5C:91:3A:7F:49:50:23:28:E4:63:7C:58:84:DA:A8:5B:04:81
            X509v3 Authority Key Identifier:
                keyid:15:C5:EA:0D:F9:6B:DD:39:89:D7:3F:DC:83:8D:1B:AF:57:79:73:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/557A1591B54BD0C295A627D12554512D18A5657825108A571C21B638271AC556/0/15C5EA0DF96BDD3989D73FDC838D1BAF57797357.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/15C5EA0DF96BDD3989D73FDC838D1BAF57797357.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/557A1591B54BD0C295A627D12554512D18A5657825108A571C21B638271AC556/0/323830333a633735303a3a2f33322d3438203d3e20323733393235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c750::/32

    Signature Algorithm: sha256WithRSAEncryption
         7b:90:0c:b1:fd:05:31:6e:b2:ab:3d:fe:f1:ed:d0:b8:23:58:
         aa:66:bd:aa:90:ce:02:55:97:b5:f0:de:f6:ab:cd:9c:83:66:
         dd:c1:5d:2e:97:9f:69:f5:2d:bd:34:fa:ec:f3:a3:e4:8d:ab:
         ed:0c:c0:99:e3:5e:87:96:a9:5d:24:32:01:bf:1d:77:9c:8d:
         dc:4f:50:70:bd:d1:7c:85:ed:7f:ed:16:49:a7:6f:b1:ea:b1:
         d9:b8:a5:44:2e:65:20:ce:04:0d:c1:a9:56:c6:82:46:f7:22:
         b4:18:18:cc:bf:6a:23:26:fa:be:7d:0d:47:0d:46:b2:1d:be:
         c2:32:40:91:5b:3d:c9:f4:11:57:48:9b:84:52:cb:69:04:f3:
         6a:f9:98:ef:2b:0e:6f:ad:9b:e6:b2:03:94:7d:b7:46:8e:0f:
         ff:ff:97:41:37:bd:5a:62:3d:38:2b:da:90:d4:7f:2f:57:15:
         1e:95:7e:cd:fa:a3:aa:36:88:23:bc:1e:09:32:b4:89:f2:29:
         ac:c0:00:a9:ad:a8:67:ad:28:fb:ee:50:0c:14:1a:1e:cd:79:
         6a:b1:31:1a:53:e6:d2:b6:5b:82:4e:c5:c3:c9:bf:78:30:bc:
         73:02:b4:3a:af:43:59:28:45:17:c3:d0:1a:04:2a:9c:f5:f5:
         3d:f4:d8:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 17:42:37 2025 by rpki-client