Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A4377E94430A933F8779A1462806EE2AB49D40CB32ED0BB12EB19112AAE7EA30/0/323830333a353865303a3a2f33322d3334203d3e20323639383738.roa
File:                     323830333a353865303a3a2f33322d3334203d3e20323639383738.roa (raw, json)
Hash identifier:          OxDGB3LjQKhGh1CCZVxu5YPmB9uDDOedAxu4IsnxH48=
Subject key identifier:   40:67:5A:27:9F:94:AF:5F:CA:98:DD:53:07:6D:90:18:DE:E6:50:F5
Certificate issuer:       /CN=0A5D0DA27AEF033371A74DEA11C4AF833677DD51
Certificate serial:       028133AE40EC9FA488BC58F60455E1734F5C5795
Authority key identifier: 0A:5D:0D:A2:7A:EF:03:33:71:A7:4D:EA:11:C4:AF:83:36:77:DD:51
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0A5D0DA27AEF033371A74DEA11C4AF833677DD51.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A4377E94430A933F8779A1462806EE2AB49D40CB32ED0BB12EB19112AAE7EA30/0/323830333a353865303a3a2f33322d3334203d3e20323639383738.roa
Signing time:             Tue 04 Feb 2025 18:00:57 +0000
ROA not before:           Tue 04 Feb 2025 17:55:57 +0000
ROA not after:            Tue 03 Feb 2026 18:00:57 +0000
asID:                     269878
IP address blocks:        2803:58e0::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A4377E94430A933F8779A1462806EE2AB49D40CB32ED0BB12EB19112AAE7EA30/0/0A5D0DA27AEF033371A74DEA11C4AF833677DD51.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A4377E94430A933F8779A1462806EE2AB49D40CB32ED0BB12EB19112AAE7EA30/0/0A5D0DA27AEF033371A74DEA11C4AF833677DD51.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0A5D0DA27AEF033371A74DEA11C4AF833677DD51.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 22:03:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:81:33:ae:40:ec:9f:a4:88:bc:58:f6:04:55:e1:73:4f:5c:57:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A5D0DA27AEF033371A74DEA11C4AF833677DD51
        Validity
            Not Before: Feb  4 17:55:57 2025 GMT
            Not After : Feb  3 18:00:57 2026 GMT
        Subject: CN=40675A279F94AF5FCA98DD53076D9018DEE650F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:0b:98:45:7a:e0:12:b8:a4:d3:17:65:0d:83:
                    c1:06:b4:dd:d4:9d:91:fd:b0:3f:30:3f:d6:4b:9a:
                    9d:b5:54:0c:0a:70:f4:78:df:65:95:c5:76:71:59:
                    07:84:5f:24:2c:80:2b:49:8a:94:17:0d:c0:10:3d:
                    12:69:27:cc:27:74:77:6a:ba:1a:59:b3:8c:ab:84:
                    e5:69:b0:29:b7:ac:65:b5:b2:d4:c7:d2:81:5a:79:
                    00:f6:db:47:e2:c3:45:45:df:24:1e:8c:8d:3b:98:
                    e0:e4:6f:0f:7e:5a:4b:c4:0d:16:8d:14:0d:35:3b:
                    19:72:07:1d:2a:0a:1a:ff:4e:f6:52:3c:b7:21:b4:
                    d7:19:72:b0:e5:75:58:42:d5:61:7b:43:2c:c3:7a:
                    33:75:95:b8:a1:d7:ea:c9:11:b0:63:34:c2:49:6f:
                    6e:16:c3:f3:47:51:0d:e1:51:0d:7d:de:27:1d:01:
                    a7:38:48:f3:a6:79:4e:15:2e:d2:72:2a:77:78:8b:
                    a0:ca:51:42:5e:6b:07:89:68:0f:52:22:58:3d:2e:
                    19:a1:73:60:39:f4:8c:ca:ef:de:de:af:7b:ae:e7:
                    9e:1e:7b:03:d8:39:cf:ab:2c:73:2c:f3:31:72:bc:
                    86:e9:c7:52:80:e6:dd:3e:83:ef:6b:95:22:7f:39:
                    7b:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:67:5A:27:9F:94:AF:5F:CA:98:DD:53:07:6D:90:18:DE:E6:50:F5
            X509v3 Authority Key Identifier:
                keyid:0A:5D:0D:A2:7A:EF:03:33:71:A7:4D:EA:11:C4:AF:83:36:77:DD:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A4377E94430A933F8779A1462806EE2AB49D40CB32ED0BB12EB19112AAE7EA30/0/0A5D0DA27AEF033371A74DEA11C4AF833677DD51.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0A5D0DA27AEF033371A74DEA11C4AF833677DD51.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A4377E94430A933F8779A1462806EE2AB49D40CB32ED0BB12EB19112AAE7EA30/0/323830333a353865303a3a2f33322d3334203d3e20323639383738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:58e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         3d:ae:ce:aa:2d:a3:42:59:0b:66:c3:0b:e3:42:63:a0:05:e7:
         e1:36:77:3d:b3:fd:b9:1a:b1:1f:b6:c5:12:da:86:5d:4e:d6:
         31:98:45:fa:6d:4b:e0:8d:7a:da:3f:8e:19:f5:c0:05:ac:db:
         2d:2b:85:05:b3:c9:1b:93:d6:d6:f4:09:34:fa:76:33:9b:b1:
         c4:84:68:ab:b8:8f:41:20:cd:86:52:dd:ec:7b:8e:33:77:f7:
         e4:ba:b2:94:10:2a:24:58:ca:06:71:ef:8c:40:41:ef:1c:1a:
         ca:7d:64:16:58:95:e0:20:d9:5f:ec:9e:01:14:9e:55:91:e0:
         86:fe:f9:83:f3:ca:dc:c0:70:99:a4:d0:18:44:30:8a:a3:00:
         6d:ee:9d:59:66:a0:ab:37:0f:f6:ec:41:0d:f4:c0:79:96:9b:
         f7:46:2d:e8:9b:2a:d7:7c:27:a8:e9:2e:c6:34:4b:77:93:b9:
         6c:0a:20:88:db:2a:af:69:51:e4:b2:b5:a5:3e:95:bb:c7:fb:
         86:40:2a:e3:b1:92:73:37:6d:f4:0d:64:70:f8:4d:de:80:b2:
         7e:7b:b9:5a:44:18:e1:63:c7:73:c7:5a:dd:b5:fe:33:26:3a:
         c3:fe:73:48:84:0a:8a:04:49:d8:56:94:97:25:0f:3f:8a:3e:
         fc:30:8e:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 15:01:51 2025 by rpki-client