Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/75859C85FD10CCA9A24A8B24EA8EF3324B8C37F6E01CE243E6BF656F9A2EF744/0/323830333a626438303a3a2f33322d3438203d3e203238303037.roa
File:                     323830333a626438303a3a2f33322d3438203d3e203238303037.roa (raw, json)
Hash identifier:          qaDjdYBWbm9Cf7sMzVShCE8yyJZupkteb56xI09I3i0=
Subject key identifier:   5E:0A:00:E8:95:15:70:46:B0:26:9C:AE:56:5E:B6:FD:9B:DE:2B:45
Certificate issuer:       /CN=DC17BDE9178A893A0E44505700003A43E9C81665
Certificate serial:       54A6BB3E11CF95961EDB791AD51CBA165F0ED4BA
Authority key identifier: DC:17:BD:E9:17:8A:89:3A:0E:44:50:57:00:00:3A:43:E9:C8:16:65
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC17BDE9178A893A0E44505700003A43E9C81665.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/75859C85FD10CCA9A24A8B24EA8EF3324B8C37F6E01CE243E6BF656F9A2EF744/0/323830333a626438303a3a2f33322d3438203d3e203238303037.roa
Signing time:             Tue 04 Feb 2025 18:44:41 +0000
ROA not before:           Tue 04 Feb 2025 18:39:41 +0000
ROA not after:            Tue 03 Feb 2026 18:44:41 +0000
asID:                     28007
IP address blocks:        2803:bd80::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/75859C85FD10CCA9A24A8B24EA8EF3324B8C37F6E01CE243E6BF656F9A2EF744/0/DC17BDE9178A893A0E44505700003A43E9C81665.crl
                          rsync://repository.lacnic.net/rpki/lacnic/75859C85FD10CCA9A24A8B24EA8EF3324B8C37F6E01CE243E6BF656F9A2EF744/0/DC17BDE9178A893A0E44505700003A43E9C81665.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC17BDE9178A893A0E44505700003A43E9C81665.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:a6:bb:3e:11:cf:95:96:1e:db:79:1a:d5:1c:ba:16:5f:0e:d4:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC17BDE9178A893A0E44505700003A43E9C81665
        Validity
            Not Before: Feb  4 18:39:41 2025 GMT
            Not After : Feb  3 18:44:41 2026 GMT
        Subject: CN=5E0A00E895157046B0269CAE565EB6FD9BDE2B45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:56:77:cb:6f:be:6a:06:cd:67:39:10:fd:74:
                    2d:b2:af:7e:7a:bb:a3:de:a3:b4:38:a7:94:e5:5d:
                    a6:c1:8f:da:d0:a1:85:74:bf:db:85:49:b1:e3:32:
                    f4:6c:a2:69:4d:bd:8e:8f:0e:3e:2c:51:c2:a1:1d:
                    8f:75:bd:c6:b7:4b:24:a8:cc:9f:d1:43:1e:86:3a:
                    58:e2:42:14:d0:64:d9:b6:a2:f6:9e:d0:86:af:1b:
                    2c:64:a8:72:3f:44:e6:62:65:38:70:95:e1:0a:d0:
                    52:0f:84:68:b5:56:f7:46:4c:10:15:80:25:8a:c0:
                    a7:b2:fe:07:f5:f3:a0:90:3c:65:03:cd:ba:6f:b4:
                    3f:73:c8:14:28:7b:c4:73:d8:be:d6:4c:db:04:06:
                    63:cb:f2:35:98:e4:68:b0:f8:44:8a:94:31:74:2f:
                    6b:ad:32:d0:5a:a6:6f:98:eb:b2:bd:09:e1:29:41:
                    2d:e3:a7:53:52:47:d1:b5:2e:ea:f5:50:4a:57:f2:
                    42:fb:6c:43:04:25:6d:82:5e:ce:f4:eb:7c:27:05:
                    72:de:ec:7d:fb:19:f7:d3:6d:7a:55:76:ad:d4:fb:
                    c9:ea:eb:d8:30:32:26:0b:0d:ef:1d:ba:28:43:e3:
                    d7:4f:31:a1:53:8b:ce:f7:33:22:4f:57:24:1f:7f:
                    e7:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:0A:00:E8:95:15:70:46:B0:26:9C:AE:56:5E:B6:FD:9B:DE:2B:45
            X509v3 Authority Key Identifier:
                keyid:DC:17:BD:E9:17:8A:89:3A:0E:44:50:57:00:00:3A:43:E9:C8:16:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/75859C85FD10CCA9A24A8B24EA8EF3324B8C37F6E01CE243E6BF656F9A2EF744/0/DC17BDE9178A893A0E44505700003A43E9C81665.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC17BDE9178A893A0E44505700003A43E9C81665.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/75859C85FD10CCA9A24A8B24EA8EF3324B8C37F6E01CE243E6BF656F9A2EF744/0/323830333a626438303a3a2f33322d3438203d3e203238303037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:bd80::/32

    Signature Algorithm: sha256WithRSAEncryption
         4d:77:ad:12:a2:d4:6f:11:fe:63:d8:33:ee:a7:71:be:a9:24:
         16:e4:93:08:af:f5:ed:e3:65:5d:be:c6:2d:41:d3:17:92:08:
         e1:da:82:a2:0a:40:11:d6:ab:93:ab:61:ff:77:85:08:9b:89:
         c3:eb:0f:ae:d6:bf:2c:01:6c:6d:a7:c5:b6:9a:40:15:61:db:
         e9:a4:44:3d:47:da:32:5c:ef:6d:58:d7:eb:66:e8:29:b9:f7:
         cc:18:52:65:11:14:7b:96:de:45:3e:fc:82:10:01:9a:43:b8:
         db:5a:04:f8:06:82:ed:55:da:81:b9:83:9a:dc:65:96:26:13:
         59:86:c8:92:41:ea:d4:19:f1:87:38:b6:1c:76:04:7c:c1:c6:
         0e:3b:a8:b2:23:61:dd:3b:48:f1:d8:4d:e8:de:c9:bf:48:96:
         20:32:ce:68:1f:92:d6:1f:31:41:58:df:75:a3:30:90:fa:e3:
         d3:4d:b0:f2:06:65:90:61:eb:70:bb:0c:c2:91:87:b5:38:62:
         1d:bd:5b:77:af:61:2f:f8:49:96:25:9f:98:52:40:c7:7a:6f:
         a2:04:bd:74:a5:dc:11:70:e2:42:42:20:4a:9e:cd:68:b7:52:
         24:38:49:a4:c4:0b:86:25:ce:41:24:15:9a:a7:ba:7f:7c:1f:
         9f:06:63:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:06:27 2025 by rpki-client