Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/685D74E7B9DDC4DA6522992D46C0E68F8F7B62FE759C79B27F4D3958F4291EF6/0/323830333a656138303a3a2f33322d3438203d3e203238303438.roa
File:                     323830333a656138303a3a2f33322d3438203d3e203238303438.roa (raw, json)
Hash identifier:          OLei93HcxK994h5zdP4Wls3p4+I+R8EycfegFb+c0Kk=
Subject key identifier:   A2:D0:D9:71:A9:07:8B:BF:49:4F:E4:75:37:31:F5:D1:B1:A8:79:41
Certificate issuer:       /CN=E545F04AB379D8134DE636206977A39FA5008712
Certificate serial:       3BBF1F30D05F4EA3D949FC122A8399BBAC4B5804
Authority key identifier: E5:45:F0:4A:B3:79:D8:13:4D:E6:36:20:69:77:A3:9F:A5:00:87:12
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E545F04AB379D8134DE636206977A39FA5008712.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/685D74E7B9DDC4DA6522992D46C0E68F8F7B62FE759C79B27F4D3958F4291EF6/0/323830333a656138303a3a2f33322d3438203d3e203238303438.roa
Signing time:             Tue 04 Feb 2025 19:58:16 +0000
ROA not before:           Tue 04 Feb 2025 19:53:16 +0000
ROA not after:            Tue 03 Feb 2026 19:58:16 +0000
asID:                     28048
IP address blocks:        2803:ea80::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/685D74E7B9DDC4DA6522992D46C0E68F8F7B62FE759C79B27F4D3958F4291EF6/0/E545F04AB379D8134DE636206977A39FA5008712.crl
                          rsync://repository.lacnic.net/rpki/lacnic/685D74E7B9DDC4DA6522992D46C0E68F8F7B62FE759C79B27F4D3958F4291EF6/0/E545F04AB379D8134DE636206977A39FA5008712.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E545F04AB379D8134DE636206977A39FA5008712.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:bf:1f:30:d0:5f:4e:a3:d9:49:fc:12:2a:83:99:bb:ac:4b:58:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E545F04AB379D8134DE636206977A39FA5008712
        Validity
            Not Before: Feb  4 19:53:16 2025 GMT
            Not After : Feb  3 19:58:16 2026 GMT
        Subject: CN=A2D0D971A9078BBF494FE4753731F5D1B1A87941
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:c9:88:83:3a:ec:c0:5f:9a:51:0f:37:72:cb:
                    55:3f:21:f1:2a:57:48:5a:a8:08:40:d5:b0:17:e9:
                    0c:27:68:d1:96:e5:8b:bb:38:53:f4:4c:8f:1c:64:
                    b0:1e:24:6b:81:49:dc:dc:38:01:2b:b3:4f:40:7b:
                    b6:ef:86:b6:60:a8:2e:bb:17:b3:27:e1:fa:d6:a9:
                    ab:8d:c4:94:11:13:eb:fc:cf:2a:cb:16:6d:fd:50:
                    79:6f:89:a1:ff:ab:7a:0d:b9:e8:da:28:64:23:44:
                    3d:3f:76:b4:89:69:9e:80:5a:4c:69:b8:80:11:3d:
                    12:df:cd:05:9e:84:7f:68:4c:e2:d3:8f:c8:b5:5c:
                    98:17:d3:2e:4e:02:27:8a:75:ce:a7:6a:d5:0d:b1:
                    52:1b:44:c8:07:7e:3c:35:de:42:3d:27:dd:c4:fa:
                    ee:52:06:ea:01:94:13:91:8a:70:23:81:f5:09:6d:
                    89:92:cf:7c:42:d7:c3:2c:45:e7:2e:a5:c5:9f:59:
                    75:5e:20:6a:86:51:4e:fe:87:c0:b1:3c:82:f9:87:
                    6a:d4:ef:b8:c7:1b:89:f8:17:b4:20:b5:73:5a:ab:
                    fe:e7:5b:f9:ae:ae:b7:7d:37:db:4c:e2:39:f3:a4:
                    3f:e5:27:65:76:b6:de:42:48:26:d7:a1:51:19:7a:
                    1a:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:D0:D9:71:A9:07:8B:BF:49:4F:E4:75:37:31:F5:D1:B1:A8:79:41
            X509v3 Authority Key Identifier:
                keyid:E5:45:F0:4A:B3:79:D8:13:4D:E6:36:20:69:77:A3:9F:A5:00:87:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/685D74E7B9DDC4DA6522992D46C0E68F8F7B62FE759C79B27F4D3958F4291EF6/0/E545F04AB379D8134DE636206977A39FA5008712.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E545F04AB379D8134DE636206977A39FA5008712.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/685D74E7B9DDC4DA6522992D46C0E68F8F7B62FE759C79B27F4D3958F4291EF6/0/323830333a656138303a3a2f33322d3438203d3e203238303438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ea80::/32

    Signature Algorithm: sha256WithRSAEncryption
         66:57:b0:6d:e6:b9:5c:95:dd:40:8b:5b:a4:48:98:1c:d2:8c:
         69:2f:81:b6:bb:f5:6d:60:34:51:3f:63:db:1a:7c:56:46:07:
         c5:55:c5:ba:bb:9d:4d:01:80:78:4e:6e:29:5b:7a:a0:63:b2:
         9b:c4:5c:aa:f5:99:27:42:5d:59:8a:13:ab:ab:56:48:af:94:
         c4:10:ee:63:d6:be:1b:63:61:94:a9:41:46:5c:c5:77:0a:01:
         9f:55:aa:9e:7d:33:0c:6c:63:cc:c4:53:2e:cc:2b:5e:82:22:
         c0:3f:fe:77:0b:04:1d:9b:b0:2d:f2:a7:02:f7:b9:55:91:74:
         f4:80:a0:37:1f:20:56:be:8b:36:7d:eb:45:a9:68:f3:a9:8d:
         46:ca:0a:80:19:18:d1:5e:ad:75:00:eb:52:77:7e:94:91:19:
         01:88:55:d8:6e:17:3c:90:fd:dc:d6:dd:a3:2e:f9:0e:05:6e:
         16:19:e6:9e:33:5a:aa:05:e8:25:ec:2e:51:5c:db:72:f3:88:
         4b:74:ed:2f:d0:f4:86:16:a6:d1:07:a5:07:1e:ad:8f:0a:ce:
         11:d3:d8:92:ce:59:74:9c:ca:ea:e4:d5:f0:9a:ec:72:4b:8f:
         de:bf:f5:ef:19:95:6c:d7:36:05:21:8f:06:d1:c1:ce:93:cd:
         21:6a:86:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:35:36 2025 by rpki-client