Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/58F605DDA863EA0C5B2FD9640006BAD418E898C6BB64F62C2DF6F7A2BAE69C58/0/323830333a356265303a3330303a3a2f34302d3430203d3e20323731393033.roa
File:                     323830333a356265303a3330303a3a2f34302d3430203d3e20323731393033.roa (raw, json)
Hash identifier:          6EiNoMCxNOewcbbl4Kp1hNOfjUD4rdRcw6GmFw7yasI=
Subject key identifier:   9E:74:92:1A:D2:E1:90:CC:32:8E:AA:55:65:FD:56:CD:63:5B:27:1D
Certificate issuer:       /CN=1EA7572730570E0D627708051828C84C8111A53E
Certificate serial:       02C716ADE8C3ED938C6A7EE2B0141F90EB895B2B
Authority key identifier: 1E:A7:57:27:30:57:0E:0D:62:77:08:05:18:28:C8:4C:81:11:A5:3E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1EA7572730570E0D627708051828C84C8111A53E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/58F605DDA863EA0C5B2FD9640006BAD418E898C6BB64F62C2DF6F7A2BAE69C58/0/323830333a356265303a3330303a3a2f34302d3430203d3e20323731393033.roa
Signing time:             Tue 04 Feb 2025 18:15:07 +0000
ROA not before:           Tue 04 Feb 2025 18:10:07 +0000
ROA not after:            Tue 03 Feb 2026 18:15:07 +0000
asID:                     271903
IP address blocks:        2803:5be0:300::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/58F605DDA863EA0C5B2FD9640006BAD418E898C6BB64F62C2DF6F7A2BAE69C58/0/1EA7572730570E0D627708051828C84C8111A53E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/58F605DDA863EA0C5B2FD9640006BAD418E898C6BB64F62C2DF6F7A2BAE69C58/0/1EA7572730570E0D627708051828C84C8111A53E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1EA7572730570E0D627708051828C84C8111A53E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 23:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:c7:16:ad:e8:c3:ed:93:8c:6a:7e:e2:b0:14:1f:90:eb:89:5b:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1EA7572730570E0D627708051828C84C8111A53E
        Validity
            Not Before: Feb  4 18:10:07 2025 GMT
            Not After : Feb  3 18:15:07 2026 GMT
        Subject: CN=9E74921AD2E190CC328EAA5565FD56CD635B271D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:b7:35:c3:ca:d5:40:a0:14:92:bc:5f:72:fe:
                    d4:57:12:52:a8:1e:75:93:67:f1:55:60:66:8e:fb:
                    83:bf:27:7a:c8:1b:f6:ab:9d:ff:96:2b:7d:b6:3e:
                    1d:74:ef:c0:77:88:e1:51:9b:53:bf:53:ff:6c:41:
                    c4:d1:6d:fe:11:15:3a:bc:40:74:d6:35:c4:9f:af:
                    ab:bd:8b:aa:38:bb:a8:ae:de:1a:65:d5:d4:21:4b:
                    ff:fe:29:50:7b:34:8c:ac:d7:17:d5:28:21:ad:6a:
                    c6:16:01:a7:11:03:c6:17:af:5c:c1:06:e1:ed:cf:
                    90:12:80:f0:45:c4:fd:ff:3c:a7:2b:b3:fc:0d:9e:
                    3f:f7:6d:2f:45:06:23:a0:7d:86:6f:9b:44:f4:b6:
                    ee:7d:6b:7f:61:9c:ef:53:22:0a:24:58:de:3d:b2:
                    5f:0b:20:47:e0:35:fd:32:e7:8a:0d:32:81:a1:94:
                    ca:c8:d3:29:f8:f9:0c:dd:c5:81:31:af:38:87:5b:
                    75:25:80:11:e4:88:28:bd:49:9e:8f:81:6f:06:71:
                    b4:21:0e:13:59:cf:d9:4e:31:11:14:bd:dc:30:09:
                    46:ae:bd:df:63:4e:aa:27:c9:ae:88:14:23:3f:65:
                    e9:b6:3a:92:db:54:36:ef:3c:b8:c5:80:23:77:b8:
                    4a:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:74:92:1A:D2:E1:90:CC:32:8E:AA:55:65:FD:56:CD:63:5B:27:1D
            X509v3 Authority Key Identifier:
                keyid:1E:A7:57:27:30:57:0E:0D:62:77:08:05:18:28:C8:4C:81:11:A5:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/58F605DDA863EA0C5B2FD9640006BAD418E898C6BB64F62C2DF6F7A2BAE69C58/0/1EA7572730570E0D627708051828C84C8111A53E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1EA7572730570E0D627708051828C84C8111A53E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/58F605DDA863EA0C5B2FD9640006BAD418E898C6BB64F62C2DF6F7A2BAE69C58/0/323830333a356265303a3330303a3a2f34302d3430203d3e20323731393033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5be0:300::/40

    Signature Algorithm: sha256WithRSAEncryption
         76:7a:8e:e8:97:46:fc:a0:2a:db:34:46:cd:31:0a:c8:53:99:
         55:05:cc:9d:99:fb:4d:77:27:ba:f1:2a:a5:46:90:d4:f3:c4:
         53:fa:5b:9a:98:26:94:72:b6:13:40:4a:1b:03:f2:a7:88:ed:
         5b:68:8e:47:6a:da:f3:bc:7e:f5:cd:46:9d:da:39:74:00:45:
         9a:26:78:bd:e0:fc:6f:ab:17:c9:4c:4f:47:b8:ad:27:71:3e:
         41:fc:41:15:de:77:70:e8:8e:b1:94:cc:72:e5:1c:db:e8:9b:
         b2:f6:dd:cd:7a:45:7c:69:8c:0c:14:0f:19:49:a9:75:91:b4:
         74:60:66:28:db:26:47:e5:54:a8:6a:43:db:6c:2b:71:43:98:
         5c:47:8f:73:ac:3f:4e:0f:08:bc:0a:f0:c2:42:d8:d1:24:20:
         6b:21:1f:15:84:1b:5f:2c:c8:05:8c:e1:c0:24:50:36:e0:70:
         29:a4:08:8b:94:90:6a:14:6c:69:a8:d9:bb:bb:97:db:04:a3:
         2b:63:9d:c6:bf:ff:8e:d0:4e:7b:ca:4e:e0:0d:0d:2a:2d:64:
         e8:42:bd:10:46:6b:94:64:60:d5:2b:8e:1b:57:d0:e2:bf:3a:
         6e:31:b7:6a:bc:89:3c:2d:cd:99:ab:e5:bb:e3:06:7c:5e:1c:
         60:fd:af:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 04:36:24 2025 by rpki-client