Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/56F26D6FB13FFA5CEF49F491DD46201849E41B08E40577A1E9BEDD5857C3732F/0/323830333a363332303a3a2f33322d3438203d3e20323634383235.roa
File:                     323830333a363332303a3a2f33322d3438203d3e20323634383235.roa (raw, json)
Hash identifier:          l4QubGCaluvHuzRzrvsxYe4aLHlVFxpzpc2xWKP0Ahg=
Subject key identifier:   58:DD:BA:47:AA:8E:BF:D7:45:9E:04:DF:88:38:E4:C4:88:9D:30:23
Certificate issuer:       /CN=4042BFADA396ABB702E65D77D2E207DB761B973F
Certificate serial:       4BB56614FEFC92A9D3547E7AD79D7B39D34BBD2D
Authority key identifier: 40:42:BF:AD:A3:96:AB:B7:02:E6:5D:77:D2:E2:07:DB:76:1B:97:3F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4042BFADA396ABB702E65D77D2E207DB761B973F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/56F26D6FB13FFA5CEF49F491DD46201849E41B08E40577A1E9BEDD5857C3732F/0/323830333a363332303a3a2f33322d3438203d3e20323634383235.roa
Signing time:             Tue 04 Feb 2025 18:45:26 +0000
ROA not before:           Tue 04 Feb 2025 18:40:26 +0000
ROA not after:            Tue 03 Feb 2026 18:45:26 +0000
asID:                     264825
IP address blocks:        2803:6320::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/56F26D6FB13FFA5CEF49F491DD46201849E41B08E40577A1E9BEDD5857C3732F/0/4042BFADA396ABB702E65D77D2E207DB761B973F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/56F26D6FB13FFA5CEF49F491DD46201849E41B08E40577A1E9BEDD5857C3732F/0/4042BFADA396ABB702E65D77D2E207DB761B973F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4042BFADA396ABB702E65D77D2E207DB761B973F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:b5:66:14:fe:fc:92:a9:d3:54:7e:7a:d7:9d:7b:39:d3:4b:bd:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4042BFADA396ABB702E65D77D2E207DB761B973F
        Validity
            Not Before: Feb  4 18:40:26 2025 GMT
            Not After : Feb  3 18:45:26 2026 GMT
        Subject: CN=58DDBA47AA8EBFD7459E04DF8838E4C4889D3023
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:3c:f3:86:48:58:04:4c:1e:65:a4:12:3f:64:
                    99:b3:6c:5a:e7:60:89:c8:7b:b7:00:3c:c1:bd:d0:
                    f4:46:fd:36:11:0c:6a:87:f3:05:c5:21:fd:fb:1d:
                    d4:0a:a8:56:1e:b7:3b:12:b7:d6:ac:77:79:bf:3f:
                    c6:c2:52:71:f3:44:c9:e5:7c:00:70:8a:74:72:4c:
                    21:f8:da:7f:b2:bd:67:a9:9f:f8:ff:d7:ee:bb:7e:
                    96:10:20:2d:7f:04:ff:4a:f5:87:51:36:7f:65:c4:
                    b6:96:69:e3:52:b0:bc:e6:14:b2:a0:32:f8:ef:38:
                    a2:6c:63:1b:67:1e:7c:91:99:90:14:25:4b:47:0e:
                    2f:bf:2d:71:fc:16:2e:a6:99:11:9b:11:6a:bb:88:
                    20:50:18:32:fb:a6:bc:54:0d:cb:54:c8:c7:b8:15:
                    63:90:6d:ac:66:b8:f4:f0:08:de:29:c0:9f:5f:de:
                    cd:d1:f1:8d:32:c6:00:73:54:a4:69:c0:ef:51:09:
                    79:88:79:a2:3e:50:6c:a9:c5:ad:94:ae:45:a5:9c:
                    25:ca:8d:4c:bd:cf:95:bc:f0:cf:82:0b:71:8a:c5:
                    a7:10:5b:96:46:4a:8c:27:6f:04:d9:57:46:51:a8:
                    5d:9e:6a:e3:60:b7:a7:88:5c:36:c4:53:80:d2:e1:
                    7e:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:DD:BA:47:AA:8E:BF:D7:45:9E:04:DF:88:38:E4:C4:88:9D:30:23
            X509v3 Authority Key Identifier:
                keyid:40:42:BF:AD:A3:96:AB:B7:02:E6:5D:77:D2:E2:07:DB:76:1B:97:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/56F26D6FB13FFA5CEF49F491DD46201849E41B08E40577A1E9BEDD5857C3732F/0/4042BFADA396ABB702E65D77D2E207DB761B973F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4042BFADA396ABB702E65D77D2E207DB761B973F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/56F26D6FB13FFA5CEF49F491DD46201849E41B08E40577A1E9BEDD5857C3732F/0/323830333a363332303a3a2f33322d3438203d3e20323634383235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6320::/32

    Signature Algorithm: sha256WithRSAEncryption
         5e:f8:94:46:e9:66:fc:bc:f0:27:0c:56:04:51:a7:be:41:a3:
         86:bc:ce:8c:a0:a8:58:33:de:ba:a0:ab:69:be:66:51:27:90:
         11:fd:01:6a:3c:8f:29:41:34:f9:c2:df:a6:bc:ff:a9:23:73:
         99:96:b6:20:ae:f7:1d:84:2c:ac:b5:96:61:da:36:2b:bf:9c:
         f0:a5:38:1c:9a:c3:3f:9d:e0:86:9e:ba:92:93:06:0f:bb:18:
         02:9f:09:79:c3:5c:ca:6b:6d:54:ed:ab:97:51:8d:76:8f:6c:
         be:f8:c7:0b:cb:f4:f9:75:36:a1:c5:b8:86:19:2e:41:56:fd:
         ef:4c:77:40:8c:eb:2a:84:98:ca:23:45:c6:7e:54:30:91:65:
         b4:c4:24:99:ca:c1:3a:34:af:e6:01:7a:80:9b:05:99:ca:1f:
         e6:c0:ca:04:b2:e3:2f:8c:96:17:ff:a1:7e:7b:a2:27:80:b7:
         61:ab:28:81:73:4c:8d:0f:71:2b:0d:e1:c5:e2:69:10:0a:65:
         d1:06:f9:2e:ab:e6:19:89:69:b3:b1:89:f0:0a:b7:be:31:cb:
         65:f7:a3:b8:a3:7a:2b:09:10:ba:9a:a9:9d:8b:0a:1a:01:e4:
         90:f3:80:18:f1:67:2a:80:8c:c2:c6:0e:66:b2:3f:d6:cb:a4:
         6f:e3:c7:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:36:50 2025 by rpki-client