Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6396580A8D0F05B3A280D3D9061291302B2C9C53FA6973BBC3916CD70A010A8F/0/323830333a366439303a3a2f33322d3438203d3e20323732393936.roa
File:                     323830333a366439303a3a2f33322d3438203d3e20323732393936.roa (raw, json)
Hash identifier:          eSafE0C2VJwSBqPOnNZ2nKTzkBmt3cdDdn6F5oFvLZo=
Subject key identifier:   E0:18:1A:FA:75:3F:E5:08:FF:EE:B5:9C:1D:BB:2A:BD:2E:27:AA:AC
Certificate issuer:       /CN=4AE2BD6CD73C21411CA8017A254856860F6647F7
Certificate serial:       058614BB4E0907D88D320EBFC9ABAFBE032812DA
Authority key identifier: 4A:E2:BD:6C:D7:3C:21:41:1C:A8:01:7A:25:48:56:86:0F:66:47:F7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4AE2BD6CD73C21411CA8017A254856860F6647F7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6396580A8D0F05B3A280D3D9061291302B2C9C53FA6973BBC3916CD70A010A8F/0/323830333a366439303a3a2f33322d3438203d3e20323732393936.roa
Signing time:             Tue 04 Feb 2025 18:22:04 +0000
ROA not before:           Tue 04 Feb 2025 18:17:04 +0000
ROA not after:            Tue 03 Feb 2026 18:22:04 +0000
asID:                     272996
IP address blocks:        2803:6d90::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6396580A8D0F05B3A280D3D9061291302B2C9C53FA6973BBC3916CD70A010A8F/0/4AE2BD6CD73C21411CA8017A254856860F6647F7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6396580A8D0F05B3A280D3D9061291302B2C9C53FA6973BBC3916CD70A010A8F/0/4AE2BD6CD73C21411CA8017A254856860F6647F7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4AE2BD6CD73C21411CA8017A254856860F6647F7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 15 Apr 2025 19:43:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:86:14:bb:4e:09:07:d8:8d:32:0e:bf:c9:ab:af:be:03:28:12:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4AE2BD6CD73C21411CA8017A254856860F6647F7
        Validity
            Not Before: Feb  4 18:17:04 2025 GMT
            Not After : Feb  3 18:22:04 2026 GMT
        Subject: CN=E0181AFA753FE508FFEEB59C1DBB2ABD2E27AAAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:01:a6:25:56:dc:be:33:fb:a0:8e:dd:d8:d3:
                    49:96:c4:fb:f8:85:1f:e2:a9:40:8b:30:21:5d:3f:
                    6c:d2:fb:24:f0:83:38:ef:24:7c:a9:d3:81:55:e6:
                    d7:ee:0f:fd:c2:77:15:9e:ba:92:ee:01:6c:8e:c7:
                    90:d3:ee:69:1e:a6:42:7f:5a:ce:24:9e:f7:b0:e7:
                    26:51:8b:dd:c8:72:9e:49:58:c2:b2:4d:25:18:09:
                    b3:f8:bb:98:33:9f:06:01:fd:66:f7:78:bc:1f:84:
                    16:2c:a5:7e:44:fc:80:aa:35:af:ec:72:30:ac:ab:
                    66:6e:f9:6e:9c:ac:4d:01:0d:0f:45:79:27:94:6c:
                    ef:b8:24:e4:60:d6:82:be:e2:cc:35:c3:c1:e2:05:
                    61:c5:01:00:32:40:cb:25:16:6e:a1:88:3c:3d:d4:
                    79:42:a4:ab:5c:98:93:66:d6:d1:89:dd:46:32:ee:
                    91:5a:91:fa:0e:5b:18:78:71:c0:45:e8:5a:00:9d:
                    c7:81:26:4b:92:f8:14:26:cf:29:d3:36:b9:03:25:
                    f8:0c:d0:d7:44:c9:52:63:42:d0:5e:a8:83:78:4d:
                    50:f3:40:5d:6c:22:10:e1:f3:b7:80:d5:93:7c:88:
                    8c:1f:a6:be:86:76:de:eb:32:70:99:5f:c7:d6:bf:
                    46:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:18:1A:FA:75:3F:E5:08:FF:EE:B5:9C:1D:BB:2A:BD:2E:27:AA:AC
            X509v3 Authority Key Identifier:
                keyid:4A:E2:BD:6C:D7:3C:21:41:1C:A8:01:7A:25:48:56:86:0F:66:47:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6396580A8D0F05B3A280D3D9061291302B2C9C53FA6973BBC3916CD70A010A8F/0/4AE2BD6CD73C21411CA8017A254856860F6647F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4AE2BD6CD73C21411CA8017A254856860F6647F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6396580A8D0F05B3A280D3D9061291302B2C9C53FA6973BBC3916CD70A010A8F/0/323830333a366439303a3a2f33322d3438203d3e20323732393936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6d90::/32

    Signature Algorithm: sha256WithRSAEncryption
         7d:f3:a7:94:cb:4f:f6:d5:9f:a6:d8:08:77:7a:9c:ca:95:69:
         5f:03:cb:c4:ab:40:ff:ac:6f:4d:d6:81:0c:be:5b:bc:7b:b1:
         4f:b0:4c:51:77:59:73:d4:1b:5f:92:f4:95:1e:db:49:09:a1:
         52:30:cd:2e:2a:af:52:13:48:7e:37:4a:97:16:e8:14:ac:ee:
         63:de:52:fb:2d:28:e5:86:fa:a2:f7:37:d6:5c:e2:65:ee:e0:
         44:bc:6d:6b:ea:5c:27:0d:58:e3:99:8d:2c:9a:47:f5:e8:84:
         e4:d9:43:1a:47:dc:c1:31:a8:92:5c:49:f1:ca:ba:37:42:1c:
         62:b4:ec:e8:9b:35:58:ac:49:8f:06:e6:be:a1:31:9d:29:c7:
         c7:48:b4:e6:cd:d0:95:a5:a2:5d:d6:a7:aa:e7:a5:87:24:05:
         d4:e6:40:7e:aa:34:9e:ce:c5:39:8a:eb:aa:5c:e5:e5:91:a2:
         e3:dc:8e:9d:97:d7:59:f6:e7:ed:62:b7:72:04:d0:40:e9:3c:
         c4:d0:5a:e2:1d:b1:3c:6a:8b:d3:87:05:84:92:1b:dc:95:a4:
         75:be:df:c0:5a:1a:00:ea:18:1d:3e:05:c5:22:b7:58:2a:ce:
         32:52:63:24:6f:1e:a6:64:c3:27:3a:f9:f6:c8:75:5c:ff:03:
         ad:4d:4d:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:28:59 2025 by rpki-client