Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/593A0AC384B6524026144AF30E6CD0DEB1929BC9B633AB2D7A50789DDC57DE87/0/323830333a653465303a3a2f33322d3332203d3e20323639383930.roa
File:                     323830333a653465303a3a2f33322d3332203d3e20323639383930.roa (raw, json)
Hash identifier:          eSK7JGRONdni3bptD4bFzI2MNFTizCEm8DZaqDeTgws=
Subject key identifier:   7A:DB:7B:99:54:3E:A2:0A:4A:4D:CE:A2:53:6F:AB:05:2A:44:73:71
Certificate issuer:       /CN=EE2AF6BD214244A36B40F5A96F06C91DF5169792
Certificate serial:       17834EB854C1E8D6A4912414856C6B91B2CDA4DA
Authority key identifier: EE:2A:F6:BD:21:42:44:A3:6B:40:F5:A9:6F:06:C9:1D:F5:16:97:92
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EE2AF6BD214244A36B40F5A96F06C91DF5169792.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/593A0AC384B6524026144AF30E6CD0DEB1929BC9B633AB2D7A50789DDC57DE87/0/323830333a653465303a3a2f33322d3332203d3e20323639383930.roa
Signing time:             Tue 04 Feb 2025 19:58:37 +0000
ROA not before:           Tue 04 Feb 2025 19:53:37 +0000
ROA not after:            Tue 03 Feb 2026 19:58:37 +0000
asID:                     269890
IP address blocks:        2803:e4e0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/593A0AC384B6524026144AF30E6CD0DEB1929BC9B633AB2D7A50789DDC57DE87/0/EE2AF6BD214244A36B40F5A96F06C91DF5169792.crl
                          rsync://repository.lacnic.net/rpki/lacnic/593A0AC384B6524026144AF30E6CD0DEB1929BC9B633AB2D7A50789DDC57DE87/0/EE2AF6BD214244A36B40F5A96F06C91DF5169792.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EE2AF6BD214244A36B40F5A96F06C91DF5169792.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 20:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:83:4e:b8:54:c1:e8:d6:a4:91:24:14:85:6c:6b:91:b2:cd:a4:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE2AF6BD214244A36B40F5A96F06C91DF5169792
        Validity
            Not Before: Feb  4 19:53:37 2025 GMT
            Not After : Feb  3 19:58:37 2026 GMT
        Subject: CN=7ADB7B99543EA20A4A4DCEA2536FAB052A447371
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:71:8e:86:80:72:2c:c8:5f:04:fc:72:16:25:
                    04:e5:c3:e2:5a:79:18:fe:dd:dc:12:2e:68:1e:e3:
                    d0:62:aa:35:3b:44:70:f5:ba:a5:08:0f:17:ff:b3:
                    63:d8:30:f6:d6:fd:e8:c6:89:aa:74:1e:d2:ed:5d:
                    71:b5:c9:3f:92:43:1e:9a:70:b4:0c:8c:cd:c1:74:
                    5d:3b:eb:55:e6:f7:61:0a:fe:d8:0f:f4:93:92:37:
                    ae:2d:fc:05:60:22:aa:e6:33:f2:2e:29:71:7a:ae:
                    b4:08:77:e9:8b:d0:d1:b9:5f:17:31:5f:84:95:59:
                    d9:e9:b5:9d:25:7e:41:48:16:92:7c:26:d3:8b:11:
                    40:91:f2:f4:bb:04:1e:c5:b6:d8:5a:72:fa:c3:b0:
                    64:d6:74:25:d8:f2:4a:83:5e:a6:1a:5a:8d:07:8b:
                    79:9c:45:a4:98:15:04:d4:fb:8a:34:3d:f2:e6:20:
                    f9:42:76:12:84:e8:f7:72:a1:ea:1f:e2:1c:15:d4:
                    f7:1d:39:dd:06:07:29:2c:f8:2f:b4:33:ee:4d:bb:
                    5b:c4:1f:93:e5:32:ef:88:16:fb:4f:b2:9e:98:82:
                    37:ea:2a:67:fb:5b:36:d6:02:b8:f2:84:84:ea:0a:
                    16:11:36:39:0a:12:58:66:c0:38:04:87:8d:31:20:
                    99:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:DB:7B:99:54:3E:A2:0A:4A:4D:CE:A2:53:6F:AB:05:2A:44:73:71
            X509v3 Authority Key Identifier:
                keyid:EE:2A:F6:BD:21:42:44:A3:6B:40:F5:A9:6F:06:C9:1D:F5:16:97:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/593A0AC384B6524026144AF30E6CD0DEB1929BC9B633AB2D7A50789DDC57DE87/0/EE2AF6BD214244A36B40F5A96F06C91DF5169792.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EE2AF6BD214244A36B40F5A96F06C91DF5169792.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/593A0AC384B6524026144AF30E6CD0DEB1929BC9B633AB2D7A50789DDC57DE87/0/323830333a653465303a3a2f33322d3332203d3e20323639383930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e4e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         b6:98:c9:5a:50:64:c5:10:e0:53:9d:9a:20:30:f0:9c:08:d2:
         24:05:2b:eb:45:f9:58:d3:d5:07:43:20:4d:fd:69:88:6a:e3:
         71:81:88:62:0d:68:14:59:95:4f:e7:75:db:8d:d4:a6:bb:4d:
         1e:18:4b:5a:77:79:a9:c1:c6:f1:1d:97:de:ea:d5:ed:e3:7f:
         c3:34:11:6e:a3:7e:f1:c2:66:9e:04:07:e4:64:45:d0:f5:18:
         98:0d:9a:ec:3f:68:db:e3:50:21:46:dd:a6:d3:23:c8:74:35:
         38:a2:52:0c:3c:c4:81:52:ac:9f:47:31:81:f8:b1:6e:30:cc:
         d4:b7:bc:14:72:83:bc:ff:29:6a:76:22:67:9d:45:8e:d9:8c:
         7a:df:35:bc:51:9e:5e:bf:f8:4e:02:9f:bb:5a:6b:c4:d8:31:
         01:98:ca:c6:7e:5f:97:32:ea:21:93:ce:ba:df:9d:9a:c4:12:
         73:dd:11:be:ea:a2:84:59:74:80:29:06:80:b4:40:dd:fd:bc:
         b1:c2:12:e8:71:4f:a3:e2:fd:f5:50:31:82:22:30:fe:79:9a:
         33:59:b3:d5:f3:97:00:f5:d6:16:e0:44:a4:c9:2f:b9:b6:58:
         0a:6b:0c:9e:5a:e9:e5:b4:5e:c6:39:13:99:c4:6b:b6:19:18:
         39:f9:66:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:45:11 2025 by rpki-client