Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7E1752C628BDA40948B158C8F7A19312B1FB50809A6BA0EA1F0CB711D162CCBB/0/323830333a333235303a383030323a3a2f34382d3438203d3e203134303830.roa
File:                     323830333a333235303a383030323a3a2f34382d3438203d3e203134303830.roa (raw, json)
Hash identifier:          PJb7tG9KaTbbOeVEebRxcBPgdzcw43UugZ1dFFxxFbE=
Subject key identifier:   CF:64:ED:17:58:91:CC:BB:68:C9:38:9C:5E:81:F2:87:67:CE:3F:8A
Certificate issuer:       /CN=E1B0DB501E261B731605FF36B2F199D5493CFF86
Certificate serial:       20B39FAC2BD907DF4D9CD6BF5A838809D6E48DB3
Authority key identifier: E1:B0:DB:50:1E:26:1B:73:16:05:FF:36:B2:F1:99:D5:49:3C:FF:86
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E1B0DB501E261B731605FF36B2F199D5493CFF86.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7E1752C628BDA40948B158C8F7A19312B1FB50809A6BA0EA1F0CB711D162CCBB/0/323830333a333235303a383030323a3a2f34382d3438203d3e203134303830.roa
Signing time:             Thu 16 Jan 2025 00:15:00 +0000
ROA not before:           Thu 16 Jan 2025 00:10:00 +0000
ROA not after:            Thu 15 Jan 2026 00:15:00 +0000
asID:                     14080
IP address blocks:        2803:3250:8002::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7E1752C628BDA40948B158C8F7A19312B1FB50809A6BA0EA1F0CB711D162CCBB/0/E1B0DB501E261B731605FF36B2F199D5493CFF86.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7E1752C628BDA40948B158C8F7A19312B1FB50809A6BA0EA1F0CB711D162CCBB/0/E1B0DB501E261B731605FF36B2F199D5493CFF86.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E1B0DB501E261B731605FF36B2F199D5493CFF86.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 08 Feb 2025 11:57:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:b3:9f:ac:2b:d9:07:df:4d:9c:d6:bf:5a:83:88:09:d6:e4:8d:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1B0DB501E261B731605FF36B2F199D5493CFF86
        Validity
            Not Before: Jan 16 00:10:00 2025 GMT
            Not After : Jan 15 00:15:00 2026 GMT
        Subject: CN=CF64ED175891CCBB68C9389C5E81F28767CE3F8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:b3:8a:d0:53:9d:79:7c:e5:c1:1e:fe:42:e7:
                    0c:c6:28:1f:be:21:cd:06:ad:3e:32:f0:16:9b:ee:
                    a1:c5:db:33:ea:b6:eb:78:36:74:14:27:f8:47:18:
                    bb:9e:c0:a3:5d:d3:bf:91:36:50:13:3a:7e:85:13:
                    c6:a0:6e:f6:0b:0f:6a:61:ae:6f:db:93:35:71:ef:
                    ca:70:5b:57:8a:57:2e:e2:3a:8d:ef:11:a8:24:7e:
                    71:d9:cb:21:ff:bc:ed:39:64:19:b6:e8:11:f8:ed:
                    ed:c1:17:d0:9a:cc:f0:c6:43:ca:83:13:af:38:75:
                    d6:e6:31:c0:e3:71:ec:ad:07:d7:98:dc:85:6a:14:
                    23:fc:45:46:20:21:ac:b1:85:df:36:e7:dc:2d:5d:
                    52:34:ab:4d:0b:7e:8c:f7:01:2c:fb:e1:70:67:2f:
                    58:bd:94:96:c4:b7:3b:84:45:84:54:02:ae:80:be:
                    89:09:1c:6f:24:c5:c6:f5:f2:81:5e:27:e2:b0:3b:
                    7d:16:ba:b0:77:1a:ce:b9:84:04:e9:67:d3:7f:fa:
                    03:d1:d8:ba:b4:63:8b:bf:37:31:98:bf:40:4d:3b:
                    4a:85:9c:a2:8f:74:51:84:f0:c2:3d:f1:b8:e3:2b:
                    6c:e6:2d:9a:48:f7:cf:11:cb:3c:76:ca:3d:d8:02:
                    44:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:64:ED:17:58:91:CC:BB:68:C9:38:9C:5E:81:F2:87:67:CE:3F:8A
            X509v3 Authority Key Identifier:
                keyid:E1:B0:DB:50:1E:26:1B:73:16:05:FF:36:B2:F1:99:D5:49:3C:FF:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7E1752C628BDA40948B158C8F7A19312B1FB50809A6BA0EA1F0CB711D162CCBB/0/E1B0DB501E261B731605FF36B2F199D5493CFF86.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E1B0DB501E261B731605FF36B2F199D5493CFF86.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7E1752C628BDA40948B158C8F7A19312B1FB50809A6BA0EA1F0CB711D162CCBB/0/323830333a333235303a383030323a3a2f34382d3438203d3e203134303830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3250:8002::/48

    Signature Algorithm: sha256WithRSAEncryption
         15:e8:44:07:10:c7:26:f1:7a:71:db:2d:4e:db:c3:5e:fe:7b:
         5d:87:46:1b:c4:00:c6:82:83:4e:48:72:53:1d:15:cb:56:c7:
         7e:5b:a8:bd:93:c2:57:dc:27:63:87:cf:bc:7b:5f:59:d9:91:
         fc:b4:cf:38:e2:f6:9e:01:4a:25:74:b5:e8:df:d3:45:ad:13:
         4d:77:5e:c8:9f:7f:0d:43:92:cf:5e:08:0b:16:f7:14:52:c1:
         2b:11:a2:b5:09:b0:fd:df:0c:6e:b9:8a:ad:3b:8b:06:8a:4f:
         47:c9:e5:26:95:43:4d:d4:32:2c:bc:57:25:74:f6:14:63:9f:
         fb:a9:26:77:ac:89:75:e0:f2:75:bd:79:bc:a5:90:d4:51:59:
         8e:c0:10:e8:e5:be:91:dd:37:27:2f:c3:2c:e7:7b:ad:34:c0:
         c3:c8:fa:54:04:c8:0b:af:42:50:53:ad:85:18:16:aa:0e:6c:
         31:b2:2e:cb:51:5a:fb:48:09:a2:fa:50:40:ff:01:cf:6e:bd:
         8e:a2:d6:b1:07:eb:9d:5d:d9:c2:12:19:fe:40:f2:e7:bc:69:
         2a:72:8a:24:aa:5d:1e:a5:92:a2:df:76:d9:6c:7f:c5:85:33:
         f4:c0:00:9b:da:2f:35:8f:72:f4:5d:86:76:4f:59:b3:4c:7e:
         e2:c2:0a:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 06:52:33 2025 by rpki-client