Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/95C752E1AD4889BB7EB545A6B7EF81F8AEC58D8B21E81C3C996103FAED7C1798/0/323830333a333030303a3a2f33322d3332203d3e20323632323138.roa
File:                     323830333a333030303a3a2f33322d3332203d3e20323632323138.roa (raw, json)
Hash identifier:          t5OMUxXGfzSdj+4kUOc22f9jNTniQ71bjgrOrP7fw/g=
Subject key identifier:   EB:5E:23:A4:1D:33:C9:BF:FF:DA:14:2D:B2:1A:6A:FE:B5:21:42:67
Certificate issuer:       /CN=37309EBD13954CA35EC58986AEFEF579DA52A9BD
Certificate serial:       5AE6DE4FD469DC4C6C4B5DB7D8209E4CA51802A9
Authority key identifier: 37:30:9E:BD:13:95:4C:A3:5E:C5:89:86:AE:FE:F5:79:DA:52:A9:BD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/37309EBD13954CA35EC58986AEFEF579DA52A9BD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/95C752E1AD4889BB7EB545A6B7EF81F8AEC58D8B21E81C3C996103FAED7C1798/0/323830333a333030303a3a2f33322d3332203d3e20323632323138.roa
Signing time:             Tue 04 Feb 2025 18:53:18 +0000
ROA not before:           Tue 04 Feb 2025 18:48:18 +0000
ROA not after:            Tue 03 Feb 2026 18:53:18 +0000
asID:                     262218
IP address blocks:        2803:3000::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/95C752E1AD4889BB7EB545A6B7EF81F8AEC58D8B21E81C3C996103FAED7C1798/0/37309EBD13954CA35EC58986AEFEF579DA52A9BD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/95C752E1AD4889BB7EB545A6B7EF81F8AEC58D8B21E81C3C996103FAED7C1798/0/37309EBD13954CA35EC58986AEFEF579DA52A9BD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/37309EBD13954CA35EC58986AEFEF579DA52A9BD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 20:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:e6:de:4f:d4:69:dc:4c:6c:4b:5d:b7:d8:20:9e:4c:a5:18:02:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37309EBD13954CA35EC58986AEFEF579DA52A9BD
        Validity
            Not Before: Feb  4 18:48:18 2025 GMT
            Not After : Feb  3 18:53:18 2026 GMT
        Subject: CN=EB5E23A41D33C9BFFFDA142DB21A6AFEB5214267
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:ea:51:79:ae:bf:ca:6e:6f:b8:9f:4c:28:cc:
                    a0:69:75:6c:76:e7:dc:10:36:5a:9e:70:eb:42:4f:
                    35:32:2c:1f:9d:66:fa:e4:0c:a5:0b:a8:21:87:25:
                    e9:9d:d7:9a:58:12:bf:cc:b4:20:e9:57:02:24:c0:
                    2b:cb:d5:6b:f1:50:20:60:44:1d:7a:c8:77:d0:3e:
                    1c:98:9a:83:bc:46:15:fd:ca:69:24:0e:9c:8f:0c:
                    60:37:e6:53:a8:f4:61:c4:4a:62:69:8d:9d:f5:ff:
                    50:4c:dd:51:39:26:39:d6:2c:e0:f0:ab:d6:7a:57:
                    d0:a9:26:4f:ff:35:52:8f:e5:eb:60:7a:12:0e:61:
                    b3:02:b1:aa:08:3c:f9:7f:5c:ef:52:9c:bd:c2:4d:
                    fa:51:1c:af:6c:fe:dc:10:1c:23:e4:21:d3:5a:ab:
                    71:2a:2b:31:2c:1f:5c:e1:d3:e7:76:03:78:1d:03:
                    fe:1a:4a:cc:7a:93:f6:e9:15:6c:9d:9f:7d:a2:60:
                    8c:29:06:41:3c:2e:52:08:cc:dd:76:b9:de:b0:d8:
                    fc:0c:09:7c:69:8e:cc:2d:d3:01:05:da:38:75:54:
                    31:d9:24:e0:89:9e:3a:9c:7b:49:cf:06:7e:45:7b:
                    a2:f8:a0:61:0c:b9:15:24:88:5a:56:58:c0:38:ab:
                    31:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:5E:23:A4:1D:33:C9:BF:FF:DA:14:2D:B2:1A:6A:FE:B5:21:42:67
            X509v3 Authority Key Identifier:
                keyid:37:30:9E:BD:13:95:4C:A3:5E:C5:89:86:AE:FE:F5:79:DA:52:A9:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/95C752E1AD4889BB7EB545A6B7EF81F8AEC58D8B21E81C3C996103FAED7C1798/0/37309EBD13954CA35EC58986AEFEF579DA52A9BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/37309EBD13954CA35EC58986AEFEF579DA52A9BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/95C752E1AD4889BB7EB545A6B7EF81F8AEC58D8B21E81C3C996103FAED7C1798/0/323830333a333030303a3a2f33322d3332203d3e20323632323138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3000::/32

    Signature Algorithm: sha256WithRSAEncryption
         73:4f:43:d3:bf:00:bf:e2:a6:7e:89:07:da:f6:6d:56:20:e8:
         2a:82:7a:7f:2d:a1:fc:ac:24:e7:3e:02:3c:11:bc:43:05:ec:
         d7:7c:2a:9c:4b:e6:75:49:0a:01:e7:bd:a1:6e:5f:f2:2d:95:
         f6:9a:4f:16:f7:cd:07:e8:23:da:91:65:8e:56:cb:97:d9:57:
         95:eb:0b:ad:84:70:99:52:f6:04:f2:08:70:a8:92:e3:d8:99:
         10:1d:78:af:42:b8:d8:7f:3b:fe:0a:c5:4f:85:c1:67:71:dd:
         48:48:92:28:82:67:9d:15:17:38:19:04:b0:b4:20:9b:29:98:
         87:c5:c2:a4:03:2c:83:72:29:72:fe:98:f0:6c:51:ce:d3:c1:
         bb:b5:d8:b9:8f:33:93:cc:a7:9b:94:af:1c:7b:f5:c4:61:5c:
         4c:9d:d2:93:f6:ce:4e:1a:ee:a2:63:64:8e:ad:c3:7a:5b:9b:
         e2:16:6c:0f:dc:16:7f:42:4c:4c:07:e9:c9:9e:38:de:e1:39:
         34:6b:7b:85:6e:6d:57:fe:3b:b2:46:20:86:32:5a:43:2e:88:
         78:3a:d1:c6:6d:29:c3:a3:a0:c9:40:d0:29:9c:53:ce:13:7f:
         a7:08:c1:92:ae:e5:39:aa:df:5a:63:d7:34:ea:75:cc:bd:6d:
         1d:d3:93:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:47:56 2025 by rpki-client