Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/59DA0484FB8BD705CD3C1F615A8A06CFE5F4057C4584B23365FCF546D68B4319/0/323830333a313235303a3a2f33322d3438203d3e20323733313634.roa
File:                     323830333a313235303a3a2f33322d3438203d3e20323733313634.roa (raw, json)
Hash identifier:          Yukmb3PF1jubc7WtGy86Xd7pgREZbE1Q3MxCMHBI/S8=
Subject key identifier:   EB:2D:31:16:98:51:B9:C7:77:7D:CD:25:0E:5B:39:8A:BD:A4:74:19
Certificate issuer:       /CN=EA9B6894EB822C6BCDA4C500A14D50C8791D1F18
Certificate serial:       6AA18F14CEE185E58E5D55729CCD29C3170971E6
Authority key identifier: EA:9B:68:94:EB:82:2C:6B:CD:A4:C5:00:A1:4D:50:C8:79:1D:1F:18
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EA9B6894EB822C6BCDA4C500A14D50C8791D1F18.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/59DA0484FB8BD705CD3C1F615A8A06CFE5F4057C4584B23365FCF546D68B4319/0/323830333a313235303a3a2f33322d3438203d3e20323733313634.roa
Signing time:             Tue 26 Nov 2024 00:40:00 +0000
ROA not before:           Tue 26 Nov 2024 00:35:00 +0000
ROA not after:            Tue 25 Nov 2025 00:40:00 +0000
asID:                     273164
IP address blocks:        2803:1250::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/59DA0484FB8BD705CD3C1F615A8A06CFE5F4057C4584B23365FCF546D68B4319/0/EA9B6894EB822C6BCDA4C500A14D50C8791D1F18.crl
                          rsync://repository.lacnic.net/rpki/lacnic/59DA0484FB8BD705CD3C1F615A8A06CFE5F4057C4584B23365FCF546D68B4319/0/EA9B6894EB822C6BCDA4C500A14D50C8791D1F18.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EA9B6894EB822C6BCDA4C500A14D50C8791D1F18.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 21:18:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:a1:8f:14:ce:e1:85:e5:8e:5d:55:72:9c:cd:29:c3:17:09:71:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA9B6894EB822C6BCDA4C500A14D50C8791D1F18
        Validity
            Not Before: Nov 26 00:35:00 2024 GMT
            Not After : Nov 25 00:40:00 2025 GMT
        Subject: CN=EB2D31169851B9C7777DCD250E5B398ABDA47419
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:70:a5:35:a6:72:aa:41:1c:f2:6a:f7:bb:cb:
                    46:68:b4:2d:78:4d:91:65:a0:93:af:2e:e7:68:02:
                    3c:b3:66:86:10:0e:32:ae:2c:d7:e5:bc:ee:b0:d0:
                    28:f6:88:ae:39:e8:69:62:c7:12:0a:bd:97:9b:39:
                    83:fa:0e:b7:75:f7:c3:17:05:25:c8:f8:1a:18:d1:
                    d2:15:2f:da:fb:2f:b7:73:86:69:67:06:49:bc:2b:
                    2b:43:b7:9c:81:e6:67:ca:e8:ef:67:d5:a7:12:fa:
                    38:79:d6:76:17:2c:42:3d:ee:85:83:50:98:b1:70:
                    a2:d3:3e:d0:b3:77:4d:9c:cc:90:34:00:4d:3c:e2:
                    03:1f:3c:c1:6c:bf:76:81:91:f1:e1:7b:cc:ae:e2:
                    35:53:c0:d5:19:cb:0c:76:53:b1:47:bd:ad:71:69:
                    d1:60:65:65:cb:1a:f2:05:f7:2f:2d:e4:ac:1f:8c:
                    bb:f7:be:9d:8a:2d:e5:e1:56:d5:55:fb:4b:cb:b2:
                    35:20:a7:d7:b7:ec:9a:c5:85:62:1d:19:c3:2c:75:
                    8d:80:9d:9b:a5:14:65:a5:e7:89:45:0c:ae:bd:19:
                    ca:6a:a8:e8:97:be:ca:26:6a:15:d0:ef:e2:7e:e0:
                    4f:b7:b0:23:83:bc:3c:d0:0c:68:1d:a0:e3:56:83:
                    bd:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:2D:31:16:98:51:B9:C7:77:7D:CD:25:0E:5B:39:8A:BD:A4:74:19
            X509v3 Authority Key Identifier:
                keyid:EA:9B:68:94:EB:82:2C:6B:CD:A4:C5:00:A1:4D:50:C8:79:1D:1F:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/59DA0484FB8BD705CD3C1F615A8A06CFE5F4057C4584B23365FCF546D68B4319/0/EA9B6894EB822C6BCDA4C500A14D50C8791D1F18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EA9B6894EB822C6BCDA4C500A14D50C8791D1F18.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/59DA0484FB8BD705CD3C1F615A8A06CFE5F4057C4584B23365FCF546D68B4319/0/323830333a313235303a3a2f33322d3438203d3e20323733313634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1250::/32

    Signature Algorithm: sha256WithRSAEncryption
         9f:d2:32:e0:7a:76:18:d1:9a:97:69:34:c7:99:ff:75:a0:98:
         dc:dd:85:cf:27:2b:a7:8c:92:14:34:c8:3d:61:3c:32:5d:c4:
         f3:a8:f2:72:33:ce:ba:e9:ee:1d:99:ff:a7:fa:02:4c:e9:77:
         90:70:bc:c9:a7:bc:d2:42:51:58:18:14:95:6e:d5:97:6e:2b:
         11:25:fc:35:0b:54:de:2c:ba:7c:b5:e3:ea:4a:31:24:65:11:
         e6:f5:f2:9e:fa:3a:f4:84:11:56:4e:4e:ca:9a:ae:25:95:6d:
         1f:eb:c2:12:b5:6b:1b:51:c1:90:ab:34:2c:aa:75:40:a8:bb:
         10:3e:f1:8d:42:bb:e7:83:3b:70:bc:af:1b:83:aa:29:7c:94:
         3c:fe:46:d3:77:eb:00:2a:c6:06:e9:27:7c:5f:99:a0:09:ad:
         6e:20:fb:2e:d7:9f:e7:2e:f1:67:63:e9:71:27:d0:71:f6:14:
         d4:95:69:c6:71:f3:4d:d7:67:a1:98:0c:de:77:0b:2f:6e:64:
         61:65:aa:c6:86:93:57:d2:1f:63:16:9c:34:81:45:f5:f0:e5:
         9c:af:d9:a0:dd:e9:fd:ca:92:84:c9:83:80:a6:3a:de:f6:d6:
         a6:d6:84:c9:f3:a8:a4:1f:09:c1:62:8b:41:55:7a:f3:d3:43:
         8a:5c:f4:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 12:45:47 2025 by rpki-client