Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5F4791AF5BF1502AAEE5BCC2802797A1B3E98483B53EF04AF0F4CC78A4D584D0/0/323830333a623632303a3a2f33322d3438203d3e20323635383638.roa
File:                     323830333a623632303a3a2f33322d3438203d3e20323635383638.roa (raw, json)
Hash identifier:          B5fWim0N5rsKRw4JlylCCht65hjBdfpNiA2cch2zuOI=
Subject key identifier:   97:8F:2B:E0:6C:D0:3E:E0:47:E7:C7:94:DC:A4:D6:73:42:E9:1B:D8
Certificate issuer:       /CN=550F60A736CB45E447499B31D8249CBB97AEB73E
Certificate serial:       6747CD6C79A3F48F5C6AF7A37F1C7DB33D553F74
Authority key identifier: 55:0F:60:A7:36:CB:45:E4:47:49:9B:31:D8:24:9C:BB:97:AE:B7:3E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/550F60A736CB45E447499B31D8249CBB97AEB73E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5F4791AF5BF1502AAEE5BCC2802797A1B3E98483B53EF04AF0F4CC78A4D584D0/0/323830333a623632303a3a2f33322d3438203d3e20323635383638.roa
Signing time:             Tue 04 Feb 2025 17:59:18 +0000
ROA not before:           Tue 04 Feb 2025 17:54:18 +0000
ROA not after:            Tue 03 Feb 2026 17:59:18 +0000
asID:                     265868
IP address blocks:        2803:b620::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5F4791AF5BF1502AAEE5BCC2802797A1B3E98483B53EF04AF0F4CC78A4D584D0/0/550F60A736CB45E447499B31D8249CBB97AEB73E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5F4791AF5BF1502AAEE5BCC2802797A1B3E98483B53EF04AF0F4CC78A4D584D0/0/550F60A736CB45E447499B31D8249CBB97AEB73E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/550F60A736CB45E447499B31D8249CBB97AEB73E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 20:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:47:cd:6c:79:a3:f4:8f:5c:6a:f7:a3:7f:1c:7d:b3:3d:55:3f:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=550F60A736CB45E447499B31D8249CBB97AEB73E
        Validity
            Not Before: Feb  4 17:54:18 2025 GMT
            Not After : Feb  3 17:59:18 2026 GMT
        Subject: CN=978F2BE06CD03EE047E7C794DCA4D67342E91BD8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:29:81:e5:11:71:f9:74:9a:f5:7e:b8:ad:70:
                    19:11:79:ec:68:90:4a:3a:00:62:28:92:2b:d8:98:
                    6d:4a:cf:f4:c5:2a:9d:9a:54:ba:2c:e1:11:10:1c:
                    8f:9d:1f:a7:52:cf:5c:9d:05:14:d5:e9:de:58:97:
                    65:d7:1d:7c:1e:00:9c:d4:e5:bd:5a:7d:dc:1e:36:
                    46:5c:4c:df:e1:ee:be:21:89:d3:6d:79:2b:e3:87:
                    5c:55:e3:6c:de:d3:c7:0b:9f:c9:3c:58:91:c6:71:
                    d2:c6:08:8f:21:9f:ec:56:fd:69:64:6f:bc:52:1d:
                    d9:fb:f0:27:cd:f3:b0:67:ea:90:7a:2c:ec:91:35:
                    0f:65:4d:e4:01:28:3a:07:df:2f:c0:22:b4:43:79:
                    5d:7d:41:19:cc:ad:ff:6c:8f:95:e7:99:32:71:03:
                    c8:39:12:3e:5f:0c:84:22:ca:97:81:1e:32:cc:6c:
                    d3:28:27:94:83:12:60:89:ee:f1:e0:6f:57:70:2d:
                    e7:af:32:54:23:83:fd:a0:33:3e:88:c6:25:2f:3f:
                    18:55:49:da:14:d2:3c:80:db:6e:0b:81:51:da:cd:
                    94:32:43:67:60:ba:ff:8e:fa:83:f9:c8:70:87:68:
                    19:10:ee:5b:a9:8b:0a:8a:8b:66:6d:9b:f2:ad:01:
                    d5:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:8F:2B:E0:6C:D0:3E:E0:47:E7:C7:94:DC:A4:D6:73:42:E9:1B:D8
            X509v3 Authority Key Identifier:
                keyid:55:0F:60:A7:36:CB:45:E4:47:49:9B:31:D8:24:9C:BB:97:AE:B7:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5F4791AF5BF1502AAEE5BCC2802797A1B3E98483B53EF04AF0F4CC78A4D584D0/0/550F60A736CB45E447499B31D8249CBB97AEB73E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/550F60A736CB45E447499B31D8249CBB97AEB73E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5F4791AF5BF1502AAEE5BCC2802797A1B3E98483B53EF04AF0F4CC78A4D584D0/0/323830333a623632303a3a2f33322d3438203d3e20323635383638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b620::/32

    Signature Algorithm: sha256WithRSAEncryption
         3d:8e:2d:55:f0:b9:a5:39:1c:8d:4a:5a:24:b3:f2:05:32:11:
         2c:b4:12:21:f2:bd:08:e7:6b:7c:ee:41:c5:c9:90:4e:a8:94:
         a9:98:45:ec:46:8c:8b:25:ab:d5:69:53:35:11:dd:c9:a7:1d:
         72:8a:d4:b4:85:b9:6d:79:64:b5:cc:21:58:00:b3:60:6d:b4:
         bd:5f:1e:c6:47:50:06:15:60:7a:9e:2e:62:61:3c:e2:e5:c0:
         1f:cf:15:bc:69:db:71:2b:0c:bb:9a:70:de:b3:c7:a6:03:5d:
         4d:5e:81:0e:b0:18:ea:6e:4c:cc:75:35:4d:16:a6:17:2c:1b:
         11:75:12:31:35:f1:6d:72:9d:3f:98:d1:96:69:95:89:d2:48:
         fb:aa:c7:7f:82:22:58:be:4c:c6:c5:b6:71:d0:e6:f7:d6:b6:
         5b:28:a7:7b:d7:70:b1:93:13:88:c4:3d:58:c2:9d:d1:c1:18:
         9d:3b:b2:45:a7:23:c0:06:54:96:08:85:c2:b6:0d:6a:dc:f6:
         0d:f5:31:b7:19:a8:7b:02:c5:0e:dd:93:ca:39:b0:3a:3e:99:
         4b:ee:f7:63:e4:d2:be:cf:05:02:3c:7b:46:38:84:55:4b:17:
         39:2c:02:bb:ec:8a:5f:6e:42:fa:95:11:36:bd:e6:5c:d4:7e:
         5b:0e:85:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 21:59:28 2025 by rpki-client