Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/323830333a3435303a313530303a3a2f34302d3430203d3e20323733313233.roa
File:                     323830333a3435303a313530303a3a2f34302d3430203d3e20323733313233.roa (raw, json)
Hash identifier:          UFJeBw5KLX4tCk//fWO1HCpRcdT3RI9VSeY2gDK80XY=
Subject key identifier:   6B:E4:92:EA:26:67:DA:6E:7A:A6:47:8D:EA:F4:40:D3:00:02:54:FF
Certificate issuer:       /CN=A198FA87174B8B00FBA9F65DCF1B605476A4B9FD
Certificate serial:       7CE8A82A90932A1944E800CCA1F89CBC9D1C78D4
Authority key identifier: A1:98:FA:87:17:4B:8B:00:FB:A9:F6:5D:CF:1B:60:54:76:A4:B9:FD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A198FA87174B8B00FBA9F65DCF1B605476A4B9FD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/323830333a3435303a313530303a3a2f34302d3430203d3e20323733313233.roa
Signing time:             Sat 21 Dec 2024 00:15:01 +0000
ROA not before:           Sat 21 Dec 2024 00:10:01 +0000
ROA not after:            Sat 20 Dec 2025 00:15:01 +0000
asID:                     273123
IP address blocks:        2803:450:1500::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/A198FA87174B8B00FBA9F65DCF1B605476A4B9FD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/A198FA87174B8B00FBA9F65DCF1B605476A4B9FD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A198FA87174B8B00FBA9F65DCF1B605476A4B9FD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Apr 2025 11:56:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:e8:a8:2a:90:93:2a:19:44:e8:00:cc:a1:f8:9c:bc:9d:1c:78:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A198FA87174B8B00FBA9F65DCF1B605476A4B9FD
        Validity
            Not Before: Dec 21 00:10:01 2024 GMT
            Not After : Dec 20 00:15:01 2025 GMT
        Subject: CN=6BE492EA2667DA6E7AA6478DEAF440D3000254FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:3d:b7:83:ca:90:e3:f5:ad:1b:53:f6:0d:40:
                    f7:97:ee:6e:cb:39:ae:99:52:85:34:8c:8f:46:e7:
                    e6:78:d4:6e:f6:0c:cd:ba:af:79:c2:89:09:00:31:
                    5c:92:7d:f5:51:bf:c2:68:a7:1d:02:e7:29:2c:51:
                    ae:e3:12:bb:94:cc:a3:3a:b0:b5:7b:a8:ff:40:aa:
                    4c:20:71:4b:3e:f4:95:27:78:70:69:18:44:cc:43:
                    01:c8:e1:71:9b:50:57:a9:4b:67:1e:18:f5:72:d7:
                    23:93:a2:ae:86:1b:3a:40:b0:54:4d:c5:3f:6e:75:
                    9e:e5:28:cf:d1:ad:97:67:38:74:ed:3c:7e:70:ca:
                    fb:15:26:40:65:7b:89:92:cb:79:dc:bc:a2:30:89:
                    56:66:36:7e:fb:37:ad:ba:a1:8e:fa:b6:a6:fb:68:
                    9b:62:c4:83:9f:42:e4:e4:9e:09:25:81:32:9b:a7:
                    c9:40:31:b4:c6:f7:77:ad:1c:ee:59:cf:2e:39:b7:
                    25:3d:27:df:42:26:e3:ee:65:dc:53:27:bb:83:bb:
                    af:b8:51:86:38:56:cc:17:c3:b0:3a:57:b4:28:4b:
                    86:3e:29:a7:e5:5b:29:22:e8:21:a2:d3:93:a5:b3:
                    7a:8d:81:cc:7f:3a:45:66:f6:cc:99:c8:a8:7e:0d:
                    6f:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:E4:92:EA:26:67:DA:6E:7A:A6:47:8D:EA:F4:40:D3:00:02:54:FF
            X509v3 Authority Key Identifier:
                keyid:A1:98:FA:87:17:4B:8B:00:FB:A9:F6:5D:CF:1B:60:54:76:A4:B9:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/A198FA87174B8B00FBA9F65DCF1B605476A4B9FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A198FA87174B8B00FBA9F65DCF1B605476A4B9FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/323830333a3435303a313530303a3a2f34302d3430203d3e20323733313233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:450:1500::/40

    Signature Algorithm: sha256WithRSAEncryption
         56:fc:23:0b:96:ff:2d:49:6c:5f:ab:2a:3a:f7:c6:67:73:bc:
         c0:3a:cf:99:d1:5e:d4:f0:0d:9f:57:8d:a4:b2:e2:39:bc:74:
         0f:35:5c:7d:06:cc:72:0c:23:30:c5:e7:6b:c0:e6:fe:05:92:
         7a:53:e4:bc:66:0d:33:1a:3f:ab:cf:83:1d:fd:fc:e9:c9:e0:
         58:48:26:fa:2b:da:e5:88:13:ae:1e:84:c6:c8:0e:9d:7c:8b:
         2f:62:df:77:7a:4f:55:f8:8f:bf:87:26:5c:c7:56:35:5d:32:
         16:77:0d:fa:76:28:3c:dc:3b:ad:45:5a:ea:f0:ab:47:ff:d9:
         30:2a:bc:f1:ac:dc:59:74:c0:b5:5c:7a:a8:95:e7:b1:4d:61:
         bd:af:e0:1d:f8:54:2d:53:f1:f9:a7:1a:b5:98:58:6c:6d:c0:
         84:01:31:47:50:8e:4f:56:0f:9d:02:c6:aa:6e:1b:3c:e8:bf:
         0b:8c:31:ee:30:b5:ac:39:38:7b:85:e5:37:39:a7:e1:f1:cb:
         63:eb:13:03:f9:e7:02:c9:4f:13:7f:c8:04:bc:13:69:b5:b2:
         63:5b:96:35:72:10:d5:35:2b:f3:73:2b:71:dc:0c:5f:74:d6:
         29:a6:75:2a:e3:c2:41:83:53:df:e1:02:9f:bd:1b:0e:0c:a6:
         5b:d9:c5:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 20:33:15 2025 by rpki-client