Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A0C88ACD83C513BDA0E28DE4B9D9EDDA218E8C161EE215234073DA597F2DCD96/0/323830333a366465303a3a2f33322d3438203d3e203634313236.roa
File:                     323830333a366465303a3a2f33322d3438203d3e203634313236.roa (raw, json)
Hash identifier:          5LzoCWj6H2E5MXG/VnOTYuvogvMij4OFHeiWUG1Zn9s=
Subject key identifier:   94:AB:38:7D:50:BA:34:5E:54:2A:07:95:DD:26:56:92:AA:3D:74:5F
Certificate issuer:       /CN=50000ABFB581FA5761C7B8319FCC768963CDD8FA
Certificate serial:       0CCCF0365FE9EF1BE8C4CE8E8B0F2B19BD09F266
Authority key identifier: 50:00:0A:BF:B5:81:FA:57:61:C7:B8:31:9F:CC:76:89:63:CD:D8:FA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/50000ABFB581FA5761C7B8319FCC768963CDD8FA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A0C88ACD83C513BDA0E28DE4B9D9EDDA218E8C161EE215234073DA597F2DCD96/0/323830333a366465303a3a2f33322d3438203d3e203634313236.roa
Signing time:             Tue 04 Feb 2025 18:36:11 +0000
ROA not before:           Tue 04 Feb 2025 18:31:11 +0000
ROA not after:            Tue 03 Feb 2026 18:36:11 +0000
asID:                     64126
IP address blocks:        2803:6de0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A0C88ACD83C513BDA0E28DE4B9D9EDDA218E8C161EE215234073DA597F2DCD96/0/50000ABFB581FA5761C7B8319FCC768963CDD8FA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A0C88ACD83C513BDA0E28DE4B9D9EDDA218E8C161EE215234073DA597F2DCD96/0/50000ABFB581FA5761C7B8319FCC768963CDD8FA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/50000ABFB581FA5761C7B8319FCC768963CDD8FA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 16 Apr 2025 04:52:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:cc:f0:36:5f:e9:ef:1b:e8:c4:ce:8e:8b:0f:2b:19:bd:09:f2:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50000ABFB581FA5761C7B8319FCC768963CDD8FA
        Validity
            Not Before: Feb  4 18:31:11 2025 GMT
            Not After : Feb  3 18:36:11 2026 GMT
        Subject: CN=94AB387D50BA345E542A0795DD265692AA3D745F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:e3:b8:67:2a:64:e1:f2:b0:12:e8:f3:9b:ea:
                    90:4d:93:17:ef:78:65:04:7f:3d:74:0c:4b:7d:b5:
                    7f:1f:03:20:c6:fd:0a:99:30:33:30:34:f1:bb:7e:
                    62:e9:1f:4c:e7:4b:37:c7:43:46:d9:5e:49:a7:a5:
                    ef:62:33:af:4f:e7:64:3a:56:79:2b:e3:0f:e7:f3:
                    98:a6:dc:ef:3e:a9:bd:94:c2:5f:59:9b:fb:40:2f:
                    94:fa:29:a9:2e:7a:bc:96:3d:8b:98:2e:24:2d:a7:
                    a2:78:0d:2f:4c:32:ac:4d:45:84:b7:d1:bf:c7:24:
                    f2:d8:ae:a0:76:12:5d:e9:a8:f6:b1:1c:44:7e:42:
                    f0:66:a1:7d:81:79:ed:fe:27:7e:47:6e:25:47:68:
                    d7:c5:21:d6:07:ef:45:79:42:98:0e:df:d1:c6:30:
                    37:ee:88:82:cc:9d:a0:2e:cd:3f:7b:77:95:73:6d:
                    48:87:a3:83:88:78:f2:43:d6:be:18:55:f8:15:bf:
                    0e:2d:17:f3:45:4f:d1:5c:0e:62:20:84:df:68:86:
                    1d:0f:94:bc:eb:17:b6:fc:86:38:2a:0d:c7:df:4f:
                    d6:05:30:e2:42:fb:89:c9:b4:89:d5:22:16:00:a7:
                    1f:57:f3:49:a0:1c:5a:4b:99:8d:2d:8d:62:07:a1:
                    df:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:AB:38:7D:50:BA:34:5E:54:2A:07:95:DD:26:56:92:AA:3D:74:5F
            X509v3 Authority Key Identifier:
                keyid:50:00:0A:BF:B5:81:FA:57:61:C7:B8:31:9F:CC:76:89:63:CD:D8:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A0C88ACD83C513BDA0E28DE4B9D9EDDA218E8C161EE215234073DA597F2DCD96/0/50000ABFB581FA5761C7B8319FCC768963CDD8FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/50000ABFB581FA5761C7B8319FCC768963CDD8FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A0C88ACD83C513BDA0E28DE4B9D9EDDA218E8C161EE215234073DA597F2DCD96/0/323830333a366465303a3a2f33322d3438203d3e203634313236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6de0::/32

    Signature Algorithm: sha256WithRSAEncryption
         4f:d5:02:ab:ae:c6:fa:b9:0c:cd:43:16:e9:45:e6:7f:f5:73:
         e7:00:74:0c:85:29:58:c1:9a:85:7a:63:16:00:62:27:e4:02:
         5f:65:15:45:b3:30:01:f0:d4:2d:ae:01:4f:ad:bf:77:0d:5b:
         63:b4:cb:38:52:19:96:58:12:dd:18:c1:b3:c3:9c:32:b0:3b:
         e2:6e:a5:97:c3:55:0d:21:e2:ae:13:de:16:d8:f0:b7:d8:23:
         a5:67:4a:b8:92:16:fc:07:8f:b6:9b:91:35:04:23:9a:c3:8d:
         ed:77:23:7e:8b:27:b3:98:3c:d6:91:b2:fc:f8:a4:ec:37:47:
         a9:e3:59:97:36:ba:ad:9b:63:e0:20:02:12:47:17:a8:d1:38:
         bb:3d:fe:5c:7a:76:d1:de:24:9b:f7:f0:59:4d:a5:6d:95:d3:
         72:c3:14:90:a9:5f:b8:c1:0a:1c:22:16:78:b5:af:da:83:b4:
         13:46:50:1a:2f:e0:a2:85:e4:09:dc:8e:60:f9:e9:b6:f1:83:
         e1:6a:1a:76:1a:3b:61:75:e2:8b:a8:0a:cd:33:c1:9d:1b:10:
         1c:c6:e0:9c:ee:a4:c6:4b:29:08:9d:52:86:8a:5d:32:d2:22:
         38:d3:e9:0b:7e:f7:00:c1:33:9b:3f:1f:ce:50:e1:92:45:d7:
         06:51:54:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:22:21 2025 by rpki-client