Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/92CFFAEF0472FB020804EE99C456E94E5C10EE6DA5A5265EFDD265D917BF7885/0/323830333a653334303a3a2f33322d3332203d3e20323634363934.roa
File:                     323830333a653334303a3a2f33322d3332203d3e20323634363934.roa (raw, json)
Hash identifier:          6r/+h/eMTIQojYr+JMGS6xli4vp3UHfXOs+TEx/2rd0=
Subject key identifier:   B2:89:92:76:8E:7A:83:CF:F1:B4:2C:E5:DB:CF:06:72:D0:C7:BB:5E
Certificate issuer:       /CN=53CA5061CB632457DD32703D6F65CBB700ADEBC2
Certificate serial:       41ACC71BCB5479A13CB4EA2D76E3B7510DD2B3E2
Authority key identifier: 53:CA:50:61:CB:63:24:57:DD:32:70:3D:6F:65:CB:B7:00:AD:EB:C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/53CA5061CB632457DD32703D6F65CBB700ADEBC2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/92CFFAEF0472FB020804EE99C456E94E5C10EE6DA5A5265EFDD265D917BF7885/0/323830333a653334303a3a2f33322d3332203d3e20323634363934.roa
Signing time:             Tue 04 Feb 2025 18:25:26 +0000
ROA not before:           Tue 04 Feb 2025 18:20:26 +0000
ROA not after:            Tue 03 Feb 2026 18:25:26 +0000
asID:                     264694
IP address blocks:        2803:e340::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/92CFFAEF0472FB020804EE99C456E94E5C10EE6DA5A5265EFDD265D917BF7885/0/53CA5061CB632457DD32703D6F65CBB700ADEBC2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/92CFFAEF0472FB020804EE99C456E94E5C10EE6DA5A5265EFDD265D917BF7885/0/53CA5061CB632457DD32703D6F65CBB700ADEBC2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/53CA5061CB632457DD32703D6F65CBB700ADEBC2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 00:05:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:ac:c7:1b:cb:54:79:a1:3c:b4:ea:2d:76:e3:b7:51:0d:d2:b3:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53CA5061CB632457DD32703D6F65CBB700ADEBC2
        Validity
            Not Before: Feb  4 18:20:26 2025 GMT
            Not After : Feb  3 18:25:26 2026 GMT
        Subject: CN=B28992768E7A83CFF1B42CE5DBCF0672D0C7BB5E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:c5:7b:aa:4c:60:b2:1c:d2:9d:01:5d:2a:b0:
                    f1:cc:26:0c:55:05:26:a6:d3:66:5b:32:37:fc:17:
                    d8:0c:c0:64:f9:7b:29:67:0f:f7:8e:ef:c1:47:5f:
                    23:b9:61:01:6b:de:57:62:2a:05:8e:c9:c7:b6:9a:
                    9a:f7:f8:57:47:f5:41:7b:19:f4:df:bc:f4:19:99:
                    26:c6:d6:c9:c3:7f:2d:85:95:4c:87:6d:3e:fe:31:
                    38:da:cb:ba:e8:02:4d:6c:df:a9:3d:71:0d:f0:5e:
                    6c:46:ef:ce:7d:bb:c9:b8:89:1d:42:a8:2c:b7:e4:
                    06:c9:ef:f0:f9:bc:89:20:7c:09:6a:fd:40:e5:22:
                    07:5d:e3:40:87:1c:d3:33:43:c3:2e:06:27:fa:90:
                    69:15:89:f6:0b:fe:8a:25:14:3f:f1:bc:a8:52:05:
                    74:67:04:32:b0:f0:e5:a0:f4:c8:a5:7d:16:a9:f4:
                    e6:a7:a9:3a:39:9d:44:3b:44:b1:0e:ba:c7:e2:f9:
                    25:7f:ad:21:f9:0e:03:b3:c2:77:03:ae:78:37:f9:
                    bd:8b:1a:b4:8c:58:dc:6a:20:e4:11:7d:ae:22:32:
                    48:9b:57:28:83:9b:6a:7b:e0:61:9d:99:1e:27:21:
                    b6:79:fe:fd:c8:ae:ce:14:4d:79:75:17:31:a7:fb:
                    b8:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:89:92:76:8E:7A:83:CF:F1:B4:2C:E5:DB:CF:06:72:D0:C7:BB:5E
            X509v3 Authority Key Identifier:
                keyid:53:CA:50:61:CB:63:24:57:DD:32:70:3D:6F:65:CB:B7:00:AD:EB:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/92CFFAEF0472FB020804EE99C456E94E5C10EE6DA5A5265EFDD265D917BF7885/0/53CA5061CB632457DD32703D6F65CBB700ADEBC2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/53CA5061CB632457DD32703D6F65CBB700ADEBC2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/92CFFAEF0472FB020804EE99C456E94E5C10EE6DA5A5265EFDD265D917BF7885/0/323830333a653334303a3a2f33322d3332203d3e20323634363934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e340::/32

    Signature Algorithm: sha256WithRSAEncryption
         08:c8:4b:10:73:49:31:7a:0b:2e:e4:82:39:1f:e3:6c:7f:4e:
         50:c5:a7:68:19:58:55:a0:95:6e:2b:36:e8:82:8f:c6:ae:d4:
         41:12:1b:c8:9f:a9:62:25:d7:06:d6:23:70:54:20:73:1c:79:
         3a:2c:6f:76:17:20:25:ae:66:f1:26:62:fe:1f:a8:df:74:21:
         56:09:b3:8d:c0:2c:c3:78:a4:6a:3c:a4:5b:8e:bd:e7:19:ed:
         b1:e3:d6:d5:2d:be:27:0f:ed:57:e3:bc:03:35:06:63:f0:eb:
         1f:f6:9d:5e:41:3e:3c:67:86:77:ca:a5:7c:1d:90:64:70:6d:
         4c:93:6b:8d:b0:fd:7e:4f:43:51:f7:cc:32:98:1c:bf:76:7a:
         89:f4:37:00:79:e6:a5:c7:92:7d:67:71:fd:ca:fd:1f:a3:fe:
         a1:d4:24:4b:e2:93:5b:c4:6f:2c:29:91:4b:dd:ff:9e:db:51:
         9b:99:43:4f:3a:df:66:14:cf:59:b3:99:6e:ce:5c:be:7e:69:
         e0:35:d6:29:56:a3:b6:a2:40:ad:a2:5e:87:14:c2:b9:a9:6f:
         d1:48:f4:8b:73:cd:5a:ad:8b:13:4b:81:04:27:80:8f:0d:05:
         24:92:5b:be:b6:b9:6c:99:4a:69:50:c9:52:93:d3:2c:7f:36:
         d2:2c:52:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:09:03 2025 by rpki-client