Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9EE9AB12A7E927ADB9CFE5EC8BA2FC014BAC9C22556AFE8653C2BC6A496C15EF/0/323830333a626534303a3a2f33322d3438203d3e203238303830.roa
File:                     323830333a626534303a3a2f33322d3438203d3e203238303830.roa (raw, json)
Hash identifier:          wh3CYxXntZfD3EuZrYHfPLpdsOlbvJOgFmjuSbWpL/c=
Subject key identifier:   CA:98:1E:4F:24:58:E6:1A:2A:EA:50:AD:16:C4:7C:A6:AC:B0:D7:B1
Certificate issuer:       /CN=2905F3DD739DE8F57BFF83877ECBC631E7B12A02
Certificate serial:       32B289816E9AABC73EFDF9F772FBE81940514B7F
Authority key identifier: 29:05:F3:DD:73:9D:E8:F5:7B:FF:83:87:7E:CB:C6:31:E7:B1:2A:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2905F3DD739DE8F57BFF83877ECBC631E7B12A02.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9EE9AB12A7E927ADB9CFE5EC8BA2FC014BAC9C22556AFE8653C2BC6A496C15EF/0/323830333a626534303a3a2f33322d3438203d3e203238303830.roa
Signing time:             Tue 20 May 2025 12:19:50 +0000
ROA not before:           Tue 20 May 2025 12:14:50 +0000
ROA not after:            Tue 19 May 2026 12:19:50 +0000
asID:                     28080
IP address blocks:        2803:be40::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9EE9AB12A7E927ADB9CFE5EC8BA2FC014BAC9C22556AFE8653C2BC6A496C15EF/0/2905F3DD739DE8F57BFF83877ECBC631E7B12A02.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9EE9AB12A7E927ADB9CFE5EC8BA2FC014BAC9C22556AFE8653C2BC6A496C15EF/0/2905F3DD739DE8F57BFF83877ECBC631E7B12A02.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2905F3DD739DE8F57BFF83877ECBC631E7B12A02.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 08:22:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:b2:89:81:6e:9a:ab:c7:3e:fd:f9:f7:72:fb:e8:19:40:51:4b:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2905F3DD739DE8F57BFF83877ECBC631E7B12A02
        Validity
            Not Before: May 20 12:14:50 2025 GMT
            Not After : May 19 12:19:50 2026 GMT
        Subject: CN=CA981E4F2458E61A2AEA50AD16C47CA6ACB0D7B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:d5:39:b7:49:ae:ff:e9:ce:55:27:70:02:14:
                    28:5f:8a:e9:0d:0b:56:0b:d9:fe:4e:9f:47:24:ce:
                    26:7a:61:d1:f4:4a:9c:98:a6:24:0f:da:c4:60:33:
                    6c:63:5a:4d:db:44:db:3d:c2:89:c3:9d:74:7a:80:
                    fe:09:16:26:15:f5:28:ba:4d:8c:63:15:63:88:d1:
                    23:3d:26:1b:f4:69:51:fb:93:25:1d:f5:28:c6:cf:
                    6b:9f:ac:58:61:0b:b2:cb:66:d8:04:fa:99:f9:71:
                    05:e4:a3:bd:cf:56:78:7b:02:f4:86:6c:8d:7f:6e:
                    4a:a5:dc:9e:70:f8:de:4d:2f:4a:35:b2:bf:b4:60:
                    6e:b1:83:5d:64:4e:02:31:08:e8:18:e1:3e:85:b7:
                    df:76:20:1b:a0:15:48:fa:23:2c:af:5f:68:0d:db:
                    d2:ff:26:4d:dd:eb:b0:1c:3e:2f:57:1a:85:17:d5:
                    15:90:f4:c2:7a:90:dd:e2:13:61:33:7d:c1:f0:f4:
                    78:67:1d:ae:d2:0d:60:29:ef:cd:51:05:4f:9c:bb:
                    32:2c:c9:b0:07:68:d5:5a:9c:3e:a1:83:f0:8b:81:
                    3c:23:57:51:b9:08:e8:78:0f:c9:f2:ea:b9:46:44:
                    cd:cc:da:b5:75:76:36:13:34:55:d8:2f:27:e0:b1:
                    28:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:98:1E:4F:24:58:E6:1A:2A:EA:50:AD:16:C4:7C:A6:AC:B0:D7:B1
            X509v3 Authority Key Identifier:
                keyid:29:05:F3:DD:73:9D:E8:F5:7B:FF:83:87:7E:CB:C6:31:E7:B1:2A:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9EE9AB12A7E927ADB9CFE5EC8BA2FC014BAC9C22556AFE8653C2BC6A496C15EF/0/2905F3DD739DE8F57BFF83877ECBC631E7B12A02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2905F3DD739DE8F57BFF83877ECBC631E7B12A02.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9EE9AB12A7E927ADB9CFE5EC8BA2FC014BAC9C22556AFE8653C2BC6A496C15EF/0/323830333a626534303a3a2f33322d3438203d3e203238303830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:be40::/32

    Signature Algorithm: sha256WithRSAEncryption
         08:e9:b9:3a:47:99:3e:32:69:12:55:7a:c4:50:e7:b8:67:2d:
         27:ed:74:fd:45:0e:64:16:2f:d2:d8:e4:0d:2f:5c:5d:a7:17:
         1a:18:4a:11:07:0d:be:1c:e3:ba:31:c3:06:82:b1:83:a6:ac:
         10:d1:89:7d:97:77:34:e6:c6:2c:55:74:2e:4c:4f:e4:2f:98:
         92:4e:16:ea:11:6a:46:46:49:cb:7f:23:62:58:0b:38:c3:ed:
         2a:4b:25:1a:1c:09:22:63:11:8b:71:b3:ec:52:a6:d4:59:89:
         5a:3b:3d:f9:ac:a5:14:cf:74:df:ee:9f:d5:80:92:bf:2b:47:
         da:50:c0:12:f0:c0:25:9f:69:45:d5:a7:d2:b9:af:3e:1c:e2:
         10:6f:33:4e:1e:59:87:42:c0:c8:4c:fc:85:eb:ab:e4:81:d4:
         72:c2:37:3a:d9:3d:85:4f:23:72:3c:65:a8:13:38:85:bc:86:
         60:0b:9f:8d:bb:57:b6:4d:ad:d5:9d:03:9c:1c:15:8b:a0:06:
         62:01:c9:8b:c5:de:c2:84:93:ab:ca:17:6d:fc:64:c8:68:f5:
         9f:56:71:d8:62:63:f3:e0:9e:b2:6e:29:1c:72:20:f6:1f:28:
         44:14:4d:21:a9:71:a8:d7:6c:d2:ac:24:23:ec:45:17:8f:6e:
         79:78:d3:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 20:21:45 2025 by rpki-client