Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5AE7BDDB80FC5E9DE20624E93E7F65668F98B4369CB1616AA475344237A87FF4/0/323830333a326238303a3a2f33322d3332203d3e203132303636.roa
File:                     323830333a326238303a3a2f33322d3332203d3e203132303636.roa (raw, json)
Hash identifier:          0Q24coQmy6EtUsPvyk7iAVHNuFnLPmA5Hqx6XQ2lPIY=
Subject key identifier:   D0:CD:BE:70:07:63:F0:05:5F:D8:FE:B6:AE:84:D8:20:5A:72:85:C2
Certificate issuer:       /CN=BA1555F56F1EE9CECA76B3AD5D23EE829D006D98
Certificate serial:       77655CD46C0C6C097423E8BF1F0AE0B4CF7779CD
Authority key identifier: BA:15:55:F5:6F:1E:E9:CE:CA:76:B3:AD:5D:23:EE:82:9D:00:6D:98
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BA1555F56F1EE9CECA76B3AD5D23EE829D006D98.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5AE7BDDB80FC5E9DE20624E93E7F65668F98B4369CB1616AA475344237A87FF4/0/323830333a326238303a3a2f33322d3332203d3e203132303636.roa
Signing time:             Tue 04 Feb 2025 18:09:32 +0000
ROA not before:           Tue 04 Feb 2025 18:04:32 +0000
ROA not after:            Tue 03 Feb 2026 18:09:32 +0000
asID:                     12066
IP address blocks:        2803:2b80::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5AE7BDDB80FC5E9DE20624E93E7F65668F98B4369CB1616AA475344237A87FF4/0/BA1555F56F1EE9CECA76B3AD5D23EE829D006D98.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5AE7BDDB80FC5E9DE20624E93E7F65668F98B4369CB1616AA475344237A87FF4/0/BA1555F56F1EE9CECA76B3AD5D23EE829D006D98.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BA1555F56F1EE9CECA76B3AD5D23EE829D006D98.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:65:5c:d4:6c:0c:6c:09:74:23:e8:bf:1f:0a:e0:b4:cf:77:79:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA1555F56F1EE9CECA76B3AD5D23EE829D006D98
        Validity
            Not Before: Feb  4 18:04:32 2025 GMT
            Not After : Feb  3 18:09:32 2026 GMT
        Subject: CN=D0CDBE700763F0055FD8FEB6AE84D8205A7285C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:68:50:a9:0a:90:15:70:dc:88:a1:08:0c:5f:
                    fc:f4:f6:ed:f7:ef:b0:ab:bd:76:45:1e:8e:36:04:
                    8c:1b:2b:5c:26:4a:e7:02:b5:38:61:4f:94:7b:05:
                    ef:30:ee:c9:04:2d:46:c0:7a:43:16:e2:12:d4:b5:
                    05:c5:c9:cf:4c:4b:5a:22:cc:16:33:5c:48:99:1c:
                    5b:84:c5:c6:32:14:0d:5a:96:ef:21:88:82:63:f9:
                    c5:60:e4:43:f5:90:d4:04:34:a8:b9:c1:02:ce:7f:
                    bf:a4:01:39:31:b2:97:d9:ab:d5:b5:37:fb:d6:16:
                    ff:6c:b4:6f:ca:50:d0:04:f9:60:f6:ce:1e:38:21:
                    f5:91:c5:76:38:d4:1e:bf:0b:8d:56:f5:ea:9e:84:
                    6e:06:cf:76:a4:2d:50:b8:e5:32:4f:9d:d5:fc:2d:
                    ca:32:ae:a4:32:79:c2:66:b4:af:66:ce:74:31:20:
                    06:2c:4e:36:53:75:4e:06:3e:7c:21:d0:b4:fa:f8:
                    0a:34:23:4b:6d:7c:66:2a:fe:50:97:c2:de:9f:b9:
                    d1:c1:b1:27:2d:45:f3:b1:c0:9a:63:57:3b:da:28:
                    3b:d6:2f:30:ff:2b:50:95:f2:54:8f:26:af:77:6f:
                    7b:18:4c:1b:a4:8a:3d:d0:b0:bf:cd:1c:fe:70:67:
                    4b:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:CD:BE:70:07:63:F0:05:5F:D8:FE:B6:AE:84:D8:20:5A:72:85:C2
            X509v3 Authority Key Identifier:
                keyid:BA:15:55:F5:6F:1E:E9:CE:CA:76:B3:AD:5D:23:EE:82:9D:00:6D:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5AE7BDDB80FC5E9DE20624E93E7F65668F98B4369CB1616AA475344237A87FF4/0/BA1555F56F1EE9CECA76B3AD5D23EE829D006D98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BA1555F56F1EE9CECA76B3AD5D23EE829D006D98.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5AE7BDDB80FC5E9DE20624E93E7F65668F98B4369CB1616AA475344237A87FF4/0/323830333a326238303a3a2f33322d3332203d3e203132303636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2b80::/32

    Signature Algorithm: sha256WithRSAEncryption
         b6:3a:af:d2:cc:0b:b9:75:91:1c:82:54:7f:ba:12:5f:d3:89:
         a4:f4:67:20:ac:85:d8:fc:37:ee:e9:d9:a5:da:a6:fe:44:b7:
         fc:37:f2:ba:1d:cf:34:67:92:ba:86:42:5a:62:58:74:8b:dd:
         ac:df:50:30:22:5a:2e:03:06:6d:70:1e:5b:7c:7d:47:c4:9b:
         ea:91:b1:2f:06:95:73:54:83:71:50:39:40:a3:12:f0:85:dd:
         ad:7a:d7:41:bf:b0:21:4e:2f:f6:7a:ee:36:e1:c6:a9:ad:2b:
         55:06:94:cc:69:e2:5d:29:9d:68:52:49:f0:6a:ca:a1:21:13:
         28:a8:93:78:53:d0:c9:61:31:6a:c0:16:b5:49:10:1e:4f:ff:
         43:2d:72:b9:3e:ad:52:41:be:d5:15:0c:e9:ec:1d:4f:2a:1a:
         8b:e9:60:c7:5b:b2:6f:43:e2:43:a9:94:6b:8c:e6:21:cd:f3:
         47:7e:57:b4:95:20:5c:a9:9c:50:21:10:24:0d:f9:1e:a3:84:
         f6:49:5e:6a:f8:62:b3:27:44:17:b4:46:dc:58:4a:86:08:6a:
         61:96:73:33:76:15:18:7e:f1:32:c8:a3:5d:69:44:5c:d8:b3:
         b2:03:46:e2:75:2b:8c:dd:a0:a5:19:d4:fc:85:2d:6a:2a:61:
         80:33:72:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:11:53 2025 by rpki-client