Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/802672FE15624BDF705C3588B1C7767DD409D7594E5A7CC8FD3A384F7AA4E7EF/0/323830333a623539303a3a2f33322d3332203d3e20323733303038.roa
File:                     323830333a623539303a3a2f33322d3332203d3e20323733303038.roa (raw, json)
Hash identifier:          BZyTObMTPmYL/EnQRWsU0QuD9E8QGBcuOI5BGeQsemI=
Subject key identifier:   A0:07:92:43:0D:F5:BC:8B:7D:8A:EC:3B:01:59:C3:40:4D:46:15:15
Certificate issuer:       /CN=D68C275AE349DFCD32C558419A7893BADFF5F3F8
Certificate serial:       272AE17C6D2B1DC5C0676417E913B5CE1BB49E6C
Authority key identifier: D6:8C:27:5A:E3:49:DF:CD:32:C5:58:41:9A:78:93:BA:DF:F5:F3:F8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D68C275AE349DFCD32C558419A7893BADFF5F3F8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/802672FE15624BDF705C3588B1C7767DD409D7594E5A7CC8FD3A384F7AA4E7EF/0/323830333a623539303a3a2f33322d3332203d3e20323733303038.roa
Signing time:             Tue 04 Feb 2025 18:08:55 +0000
ROA not before:           Tue 04 Feb 2025 18:03:55 +0000
ROA not after:            Tue 03 Feb 2026 18:08:55 +0000
asID:                     273008
IP address blocks:        2803:b590::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/802672FE15624BDF705C3588B1C7767DD409D7594E5A7CC8FD3A384F7AA4E7EF/0/D68C275AE349DFCD32C558419A7893BADFF5F3F8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/802672FE15624BDF705C3588B1C7767DD409D7594E5A7CC8FD3A384F7AA4E7EF/0/D68C275AE349DFCD32C558419A7893BADFF5F3F8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D68C275AE349DFCD32C558419A7893BADFF5F3F8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 17:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:2a:e1:7c:6d:2b:1d:c5:c0:67:64:17:e9:13:b5:ce:1b:b4:9e:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D68C275AE349DFCD32C558419A7893BADFF5F3F8
        Validity
            Not Before: Feb  4 18:03:55 2025 GMT
            Not After : Feb  3 18:08:55 2026 GMT
        Subject: CN=A00792430DF5BC8B7D8AEC3B0159C3404D461515
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:27:81:b9:05:58:dc:96:27:7d:33:d8:09:07:
                    56:e6:e5:17:eb:c5:bb:40:74:aa:0b:5c:54:bf:b7:
                    af:26:68:63:14:9d:63:25:97:61:18:9f:11:f0:8f:
                    13:3c:c4:ee:cb:14:a2:68:10:33:c3:be:4c:a0:cb:
                    71:f6:df:1c:16:08:7f:92:e9:8b:89:6a:22:fb:fc:
                    89:ea:6b:3f:64:cf:97:fa:0f:15:5e:c8:0f:5d:94:
                    a5:74:6a:23:f3:be:c7:85:38:6b:d6:d8:30:ed:25:
                    4c:a4:89:8f:7e:ab:5c:fe:26:66:25:de:e8:e3:ec:
                    86:9d:9e:e7:bd:00:62:4a:6f:a6:bf:0b:2d:12:72:
                    92:8a:eb:cc:b2:d6:9f:da:ec:db:80:d5:58:25:78:
                    10:bb:82:a6:57:f2:70:b5:ad:48:8e:c5:47:60:c7:
                    7c:20:00:aa:05:19:b7:54:5e:b5:88:73:8a:f8:bb:
                    27:13:56:63:ea:3d:bf:a0:0f:95:61:1d:da:ab:26:
                    0b:51:52:d5:1b:16:cd:16:85:a0:dc:ff:ae:79:69:
                    97:4e:73:cb:46:b2:30:43:58:05:47:f8:68:5b:39:
                    25:bb:11:e5:fd:e4:d0:35:2f:34:f8:04:ae:d7:bf:
                    ac:d4:4e:76:61:41:bf:77:7b:5b:2c:d6:83:10:53:
                    19:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:07:92:43:0D:F5:BC:8B:7D:8A:EC:3B:01:59:C3:40:4D:46:15:15
            X509v3 Authority Key Identifier:
                keyid:D6:8C:27:5A:E3:49:DF:CD:32:C5:58:41:9A:78:93:BA:DF:F5:F3:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/802672FE15624BDF705C3588B1C7767DD409D7594E5A7CC8FD3A384F7AA4E7EF/0/D68C275AE349DFCD32C558419A7893BADFF5F3F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D68C275AE349DFCD32C558419A7893BADFF5F3F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/802672FE15624BDF705C3588B1C7767DD409D7594E5A7CC8FD3A384F7AA4E7EF/0/323830333a623539303a3a2f33322d3332203d3e20323733303038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b590::/32

    Signature Algorithm: sha256WithRSAEncryption
         4c:1a:d4:fe:57:2a:30:6b:bd:a8:ff:58:0b:13:2f:d2:e6:58:
         9e:67:be:27:55:ee:a3:9a:b7:5a:2b:16:8d:0a:58:aa:83:72:
         9b:1d:f0:df:83:d3:0e:fc:ae:24:e7:2e:1c:09:99:b9:c8:cd:
         99:e6:e1:09:46:47:b0:0d:31:e2:89:bb:37:e0:73:da:ed:30:
         2d:78:89:67:b9:68:f7:27:fb:88:e2:65:f2:6d:0f:9c:8a:38:
         6f:07:9e:ef:01:71:94:78:19:57:fe:8d:08:5d:e1:b3:51:27:
         fa:3d:8b:e9:f9:69:ff:00:ba:20:ef:17:3f:30:0b:b3:a3:5b:
         05:6f:52:1d:99:b7:d1:fc:d9:d9:17:bb:b0:f3:11:9a:62:c3:
         e1:43:c3:29:d1:00:dc:3d:45:88:8b:e2:2d:51:0f:19:7f:04:
         77:8e:ec:4b:7d:f6:51:7c:7e:9d:b9:ee:d5:31:99:58:d1:14:
         dc:3f:ac:be:f0:9b:e3:f6:c4:32:a8:85:1c:19:04:88:a0:9e:
         b0:f7:fe:15:1b:ad:0d:ae:2b:0e:b9:f5:91:36:8c:61:4b:c0:
         24:94:e0:9a:11:6c:18:e0:e0:62:bb:af:04:34:4a:93:bc:f0:
         e2:5c:82:4d:5d:0e:e8:90:ab:03:f4:8c:81:e1:53:5e:b7:e3:
         11:ba:45:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 14:33:13 2025 by rpki-client