Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A0B746828A73803EE0AC2CCCF9D588C384A867E4A735BA471AE9620098431F63/0/323830333a323534303a3a2f33322d3438203d3e20323634363638.roa
File:                     323830333a323534303a3a2f33322d3438203d3e20323634363638.roa (raw, json)
Hash identifier:          93+nzdhDljJ7+yYWS83eJ+3XTshDv3kpjK6ACYIoUzA=
Subject key identifier:   E7:96:93:F1:9E:21:5E:B3:71:B0:49:3E:21:AF:40:32:9E:55:37:05
Certificate issuer:       /CN=C2550A5D309EE2128E4FCDC02CD4AC5C576069E2
Certificate serial:       71BFCA7872D4B716966A0F52B2C58B54178410D6
Authority key identifier: C2:55:0A:5D:30:9E:E2:12:8E:4F:CD:C0:2C:D4:AC:5C:57:60:69:E2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2550A5D309EE2128E4FCDC02CD4AC5C576069E2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A0B746828A73803EE0AC2CCCF9D588C384A867E4A735BA471AE9620098431F63/0/323830333a323534303a3a2f33322d3438203d3e20323634363638.roa
Signing time:             Tue 04 Feb 2025 18:54:42 +0000
ROA not before:           Tue 04 Feb 2025 18:49:42 +0000
ROA not after:            Tue 03 Feb 2026 18:54:42 +0000
asID:                     264668
IP address blocks:        2803:2540::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A0B746828A73803EE0AC2CCCF9D588C384A867E4A735BA471AE9620098431F63/0/C2550A5D309EE2128E4FCDC02CD4AC5C576069E2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A0B746828A73803EE0AC2CCCF9D588C384A867E4A735BA471AE9620098431F63/0/C2550A5D309EE2128E4FCDC02CD4AC5C576069E2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2550A5D309EE2128E4FCDC02CD4AC5C576069E2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 22:40:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:bf:ca:78:72:d4:b7:16:96:6a:0f:52:b2:c5:8b:54:17:84:10:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2550A5D309EE2128E4FCDC02CD4AC5C576069E2
        Validity
            Not Before: Feb  4 18:49:42 2025 GMT
            Not After : Feb  3 18:54:42 2026 GMT
        Subject: CN=E79693F19E215EB371B0493E21AF40329E553705
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:61:d3:bc:83:92:85:61:e1:38:ac:14:ac:c3:
                    84:ad:24:70:e6:23:4f:43:43:d0:bf:ae:33:a0:0a:
                    76:20:ac:19:66:97:10:11:e0:65:95:2b:38:13:1c:
                    f8:67:37:18:fd:ed:85:7e:f4:9c:51:b7:4c:cd:5d:
                    4e:9f:bc:be:25:f9:ee:5a:c1:d3:84:da:59:b5:e4:
                    e0:d9:e9:f5:58:6d:cb:d7:22:e5:58:a8:6c:55:11:
                    80:82:cb:9b:ce:51:5d:51:a3:4d:44:40:dc:4a:ef:
                    c5:67:25:de:4e:e6:30:ff:b5:af:aa:d4:fb:4a:71:
                    3e:52:fb:1b:e7:3e:0d:a5:f9:c6:c7:19:b4:b9:b8:
                    a3:8a:4a:4c:cb:35:c7:4d:af:62:ea:d4:a3:2d:c7:
                    1e:4b:5c:dd:9c:dd:5f:da:65:1b:04:24:c7:42:eb:
                    1c:24:93:30:14:77:90:3a:c9:01:71:f6:39:e1:75:
                    4b:37:f8:55:3e:e5:80:e2:01:5e:17:16:7c:00:1c:
                    5e:42:f3:38:00:dc:ae:31:98:2d:14:24:21:b4:de:
                    e2:8c:db:47:9b:68:33:36:a5:af:3f:66:13:c2:18:
                    ab:d9:69:d4:70:38:e4:25:1f:3d:69:ae:1e:8f:09:
                    84:d8:23:1d:bd:ae:6b:8d:ef:b7:5a:e8:9f:38:a8:
                    91:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:96:93:F1:9E:21:5E:B3:71:B0:49:3E:21:AF:40:32:9E:55:37:05
            X509v3 Authority Key Identifier:
                keyid:C2:55:0A:5D:30:9E:E2:12:8E:4F:CD:C0:2C:D4:AC:5C:57:60:69:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A0B746828A73803EE0AC2CCCF9D588C384A867E4A735BA471AE9620098431F63/0/C2550A5D309EE2128E4FCDC02CD4AC5C576069E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2550A5D309EE2128E4FCDC02CD4AC5C576069E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A0B746828A73803EE0AC2CCCF9D588C384A867E4A735BA471AE9620098431F63/0/323830333a323534303a3a2f33322d3438203d3e20323634363638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2540::/32

    Signature Algorithm: sha256WithRSAEncryption
         78:2f:4b:32:95:0d:d1:de:46:3e:06:53:de:1b:b7:ea:c3:60:
         e3:c6:4a:e6:05:e3:d7:96:ad:fc:5c:7d:d4:f9:2a:6c:4e:8c:
         70:d2:d7:50:2e:4c:01:71:72:36:c6:ea:19:88:bb:db:8d:5b:
         9f:b5:85:31:52:3f:1e:69:c9:6b:e8:74:5f:d0:05:9f:1f:db:
         3d:6f:9a:cf:59:b5:c2:db:f4:f9:f0:6c:28:9a:9b:df:d7:6c:
         10:14:08:d6:b1:ac:05:11:75:d4:42:b9:00:b1:4b:fa:43:38:
         cd:75:f2:a9:50:fb:e7:8a:09:3c:f8:8f:2f:22:fb:88:b4:f3:
         58:59:c8:3e:99:d7:a4:b1:c6:02:0e:88:dd:d9:84:93:0a:9d:
         13:da:87:c0:ee:48:51:ed:13:9e:38:88:40:84:7d:3c:0e:d6:
         44:71:56:d2:3d:7b:b3:31:3e:21:13:b2:67:1c:f0:48:fc:6f:
         1a:b4:52:67:8a:62:21:05:91:4a:60:ae:d6:03:69:e3:c0:09:
         bf:61:73:49:a4:1a:0b:9f:f4:7c:51:a2:84:a1:34:ec:57:b2:
         a2:22:c6:36:f4:8e:e8:bd:5f:83:75:e8:41:17:d2:fc:91:b4:
         c5:84:99:ab:ca:e0:fa:f3:15:0c:c8:57:9a:14:d6:b2:09:73:
         1d:9a:97:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:59:09 2025 by rpki-client