Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5682A6042EEE445B29A16973A47D232600C63DCAC9B8BFAEB586691EA3DBDF70/0/323830333a353661303a3a2f34302d3430203d3e20323636383934.roa
File:                     323830333a353661303a3a2f34302d3430203d3e20323636383934.roa (raw, json)
Hash identifier:          DR2Q0592lXo+855F2cQlgPiXHqXowjmyi7vlYuLi8Ik=
Subject key identifier:   B8:95:49:F8:1E:BF:A1:E8:2C:EC:AF:88:A3:45:8F:8F:50:7E:B8:36
Certificate issuer:       /CN=6913998846C57916C081CA47CE0BCEB486460BE1
Certificate serial:       1B6AC933EBFD62F8779AC212DE9DE248931762E6
Authority key identifier: 69:13:99:88:46:C5:79:16:C0:81:CA:47:CE:0B:CE:B4:86:46:0B:E1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6913998846C57916C081CA47CE0BCEB486460BE1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5682A6042EEE445B29A16973A47D232600C63DCAC9B8BFAEB586691EA3DBDF70/0/323830333a353661303a3a2f34302d3430203d3e20323636383934.roa
Signing time:             Tue 04 Feb 2025 20:01:12 +0000
ROA not before:           Tue 04 Feb 2025 19:56:12 +0000
ROA not after:            Tue 03 Feb 2026 20:01:12 +0000
asID:                     266894
IP address blocks:        2803:56a0::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5682A6042EEE445B29A16973A47D232600C63DCAC9B8BFAEB586691EA3DBDF70/0/6913998846C57916C081CA47CE0BCEB486460BE1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5682A6042EEE445B29A16973A47D232600C63DCAC9B8BFAEB586691EA3DBDF70/0/6913998846C57916C081CA47CE0BCEB486460BE1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6913998846C57916C081CA47CE0BCEB486460BE1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:6a:c9:33:eb:fd:62:f8:77:9a:c2:12:de:9d:e2:48:93:17:62:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6913998846C57916C081CA47CE0BCEB486460BE1
        Validity
            Not Before: Feb  4 19:56:12 2025 GMT
            Not After : Feb  3 20:01:12 2026 GMT
        Subject: CN=B89549F81EBFA1E82CECAF88A3458F8F507EB836
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:fc:91:69:06:f9:2b:3f:d1:0b:2e:08:ef:bb:
                    70:42:d8:59:91:82:e2:09:2a:c9:c1:0e:b6:87:0d:
                    22:02:65:71:24:9b:59:b5:cc:f2:14:1f:99:45:59:
                    e2:da:3d:05:0f:39:cd:7c:49:52:d6:0b:66:97:b2:
                    f9:ce:4f:52:c9:81:18:25:d6:a5:43:66:26:f2:81:
                    ea:ad:01:f9:bc:df:19:eb:0a:8d:2b:dd:84:13:ce:
                    3d:83:a7:58:7b:0f:7f:f6:6b:67:cc:cd:83:60:f5:
                    8b:12:13:7b:32:a1:08:76:d4:08:b7:41:38:bd:eb:
                    38:53:bf:6d:77:0b:7d:ff:99:5b:a2:92:48:bc:db:
                    41:b5:fb:b0:d4:cf:d5:42:93:16:be:22:30:88:6d:
                    60:42:15:a9:28:90:ca:da:68:05:0e:60:e7:44:dd:
                    16:be:be:7e:8e:4c:3a:7e:52:c0:c1:60:8b:51:bb:
                    e3:0d:af:1a:74:bc:ae:cb:af:9f:33:72:c5:41:5f:
                    68:d7:45:09:de:0e:78:00:f1:13:0d:7a:60:2d:d1:
                    9f:77:c4:15:a6:32:b0:09:1e:0a:7b:2b:79:a6:4f:
                    70:9e:05:73:26:e4:28:fd:6f:53:3b:ff:df:cd:d0:
                    24:9d:9c:c5:68:f0:c1:18:16:11:79:bb:40:b2:35:
                    ec:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:95:49:F8:1E:BF:A1:E8:2C:EC:AF:88:A3:45:8F:8F:50:7E:B8:36
            X509v3 Authority Key Identifier:
                keyid:69:13:99:88:46:C5:79:16:C0:81:CA:47:CE:0B:CE:B4:86:46:0B:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5682A6042EEE445B29A16973A47D232600C63DCAC9B8BFAEB586691EA3DBDF70/0/6913998846C57916C081CA47CE0BCEB486460BE1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6913998846C57916C081CA47CE0BCEB486460BE1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5682A6042EEE445B29A16973A47D232600C63DCAC9B8BFAEB586691EA3DBDF70/0/323830333a353661303a3a2f34302d3430203d3e20323636383934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:56a0::/40

    Signature Algorithm: sha256WithRSAEncryption
         c5:10:42:ca:f5:20:92:54:83:2d:cd:b9:ca:11:2b:50:39:8c:
         6b:e6:9e:4a:06:71:1b:6f:e7:11:0a:f6:fe:6b:c9:44:d2:dd:
         66:41:4c:04:aa:78:d6:4c:95:7f:80:76:28:a7:1c:e8:53:5b:
         4e:b4:92:4b:50:d4:d5:c4:71:e9:8a:c4:2e:2c:f4:97:7a:cf:
         ca:51:16:c7:ac:21:24:85:9f:f3:2b:38:91:6c:bf:82:b0:03:
         1c:f3:d7:5d:fb:62:d4:b8:43:fb:2c:04:dd:51:fb:03:03:4c:
         e2:ca:d4:09:e7:f3:12:20:c3:43:8d:20:93:81:b8:9b:da:f8:
         1e:23:56:b1:57:f0:d8:75:4d:c7:70:5b:e1:48:1a:5d:b0:82:
         54:15:f7:ec:64:27:61:a2:bb:29:c1:9f:01:b2:65:9b:65:40:
         12:96:22:06:49:fe:77:8b:53:84:71:a3:10:ed:45:8d:e7:d8:
         e9:21:11:3e:77:a6:81:d0:6f:0e:a7:2a:b1:99:65:0c:3d:e8:
         51:fe:58:bd:52:86:3f:dc:6d:3c:c4:f9:30:47:48:ec:0a:2a:
         3d:1e:27:f1:c1:20:f7:9c:70:3d:74:37:99:dc:48:b2:45:b8:
         b8:83:0f:c6:ee:15:54:66:76:64:dc:10:03:10:3e:86:95:f2:
         3f:91:28:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:08:41 2025 by rpki-client