Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7E31FCEE674B889DCB26101BB3A42DA81330B9AA63D2722DDF515D067AF86125/0/323830333a623432303a3a2f33322d3332203d3e20323634363638.roa
File:                     323830333a623432303a3a2f33322d3332203d3e20323634363638.roa (raw, json)
Hash identifier:          D0MpmYMlouEPB0IoeGUREAiUddBrepWOFw/KBHgsD6o=
Subject key identifier:   B5:CC:3F:07:BA:6C:14:8B:6C:0C:6E:98:B5:E3:93:F6:A2:AA:F6:DE
Certificate issuer:       /CN=AED4A1E6201DA852B960F5946F4F7E5EAA9A1F86
Certificate serial:       5CF2EA97A9A450A2C2D28BBF7556BC593EB3A9A2
Authority key identifier: AE:D4:A1:E6:20:1D:A8:52:B9:60:F5:94:6F:4F:7E:5E:AA:9A:1F:86
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AED4A1E6201DA852B960F5946F4F7E5EAA9A1F86.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7E31FCEE674B889DCB26101BB3A42DA81330B9AA63D2722DDF515D067AF86125/0/323830333a623432303a3a2f33322d3332203d3e20323634363638.roa
Signing time:             Tue 04 Feb 2025 18:54:46 +0000
ROA not before:           Tue 04 Feb 2025 18:49:46 +0000
ROA not after:            Tue 03 Feb 2026 18:54:46 +0000
asID:                     264668
IP address blocks:        2803:b420::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7E31FCEE674B889DCB26101BB3A42DA81330B9AA63D2722DDF515D067AF86125/0/AED4A1E6201DA852B960F5946F4F7E5EAA9A1F86.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7E31FCEE674B889DCB26101BB3A42DA81330B9AA63D2722DDF515D067AF86125/0/AED4A1E6201DA852B960F5946F4F7E5EAA9A1F86.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AED4A1E6201DA852B960F5946F4F7E5EAA9A1F86.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 01:48:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:f2:ea:97:a9:a4:50:a2:c2:d2:8b:bf:75:56:bc:59:3e:b3:a9:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AED4A1E6201DA852B960F5946F4F7E5EAA9A1F86
        Validity
            Not Before: Feb  4 18:49:46 2025 GMT
            Not After : Feb  3 18:54:46 2026 GMT
        Subject: CN=B5CC3F07BA6C148B6C0C6E98B5E393F6A2AAF6DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:1e:22:01:d4:28:39:30:e1:05:1f:5b:8f:57:
                    0d:6e:7a:be:2d:62:28:b0:f5:c9:41:be:49:13:58:
                    31:c4:50:37:dc:7e:d0:37:4b:d3:fe:50:1a:15:9f:
                    60:87:64:d7:49:44:92:94:15:38:46:23:00:42:1f:
                    fb:f0:b4:31:18:19:f9:f3:2c:2c:c7:e7:8f:ff:a2:
                    86:7c:c0:66:4b:a7:16:66:d2:be:e3:ce:62:6a:41:
                    d2:9d:13:96:02:c4:61:98:fb:35:13:1e:c8:0d:0e:
                    19:bb:52:36:b7:1e:d5:b5:84:f1:e4:f0:cd:18:ee:
                    9b:9d:2d:11:a5:20:34:b3:cd:e2:e7:73:46:bb:0c:
                    06:e8:89:57:9c:d5:77:dd:e1:f2:41:02:a1:d2:1b:
                    fc:50:9b:82:32:8b:9e:d4:92:8e:9f:ee:3f:4b:8f:
                    c0:bb:2f:19:c8:ea:3f:1b:66:af:f4:71:c4:87:6e:
                    07:83:25:fb:72:26:b8:5d:ce:ac:65:a8:a1:3c:75:
                    c7:c0:05:19:36:f7:32:a0:36:46:b1:f7:52:0f:f0:
                    a1:67:59:cf:22:a1:dd:4c:6c:83:76:f0:a1:e9:5b:
                    19:db:87:40:d4:86:31:bb:f8:c5:6c:a4:ec:70:81:
                    4d:46:61:06:23:6f:3b:63:51:c8:4d:f1:4f:18:d5:
                    21:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:CC:3F:07:BA:6C:14:8B:6C:0C:6E:98:B5:E3:93:F6:A2:AA:F6:DE
            X509v3 Authority Key Identifier:
                keyid:AE:D4:A1:E6:20:1D:A8:52:B9:60:F5:94:6F:4F:7E:5E:AA:9A:1F:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7E31FCEE674B889DCB26101BB3A42DA81330B9AA63D2722DDF515D067AF86125/0/AED4A1E6201DA852B960F5946F4F7E5EAA9A1F86.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AED4A1E6201DA852B960F5946F4F7E5EAA9A1F86.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7E31FCEE674B889DCB26101BB3A42DA81330B9AA63D2722DDF515D067AF86125/0/323830333a623432303a3a2f33322d3332203d3e20323634363638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b420::/32

    Signature Algorithm: sha256WithRSAEncryption
         0e:04:a1:84:aa:b5:97:f2:0e:4e:38:c4:91:72:e7:a6:2f:8e:
         27:8b:e0:c2:f5:3a:43:8e:fb:9c:23:48:88:89:45:72:a3:a1:
         4d:0d:a2:a2:5f:8d:f5:8b:cc:43:df:aa:ad:03:b2:6d:a0:fd:
         ea:9f:d8:fa:fe:a1:50:1c:aa:14:b7:64:da:ce:ec:e3:8d:a5:
         6d:91:45:69:83:6d:d7:1a:44:b5:a1:7e:73:0e:cd:f8:1b:3a:
         44:e7:26:77:90:72:ff:ff:a1:b4:b3:bd:35:38:79:8c:ee:95:
         f7:9a:d3:44:06:3c:a1:0f:0f:c3:ff:5b:c5:6f:e8:df:7b:bf:
         32:ae:ac:1b:d9:4d:67:4d:85:1e:85:29:a6:39:77:7f:ec:52:
         ba:7f:86:ce:17:05:d1:7d:b1:8b:3b:68:e2:56:a2:18:3f:41:
         1f:5d:27:83:4d:33:65:ab:db:7d:b7:88:91:16:3e:aa:a6:6e:
         1e:2a:db:f7:08:ea:00:83:05:7b:4d:41:70:79:18:56:18:b4:
         22:31:2f:5f:65:bf:35:42:89:b6:2a:ab:75:1e:af:58:7a:9e:
         62:b7:b1:1f:d6:0d:59:1f:05:d9:a9:bb:09:ae:5c:26:76:87:
         77:88:d5:be:8d:44:ec:3e:b1:43:62:c9:f2:0e:1f:5e:13:0a:
         91:61:48:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:15:15 2025 by rpki-client