Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B7A6C5F49DA78C1E4B3DC1AB2D7DD45E7436AA7F3AC76A83E49F3AB33917598F/0/323830333a346238303a3a2f33322d3634203d3e203237393430.roa
File:                     323830333a346238303a3a2f33322d3634203d3e203237393430.roa (raw, json)
Hash identifier:          6zlSrGB5ODU4KaTQxUkDlAzPRLS6C7dwaTE4I4IISpI=
Subject key identifier:   5E:B2:55:71:9B:1C:27:4F:4B:DA:E1:C1:4B:CB:8D:AC:77:99:4B:A1
Certificate issuer:       /CN=949C12357BC4AD5FFBEC5FBB36FE61882639A5B0
Certificate serial:       1DBA9A1AAFD984AB34BD902D6EE1FBFD36E89624
Authority key identifier: 94:9C:12:35:7B:C4:AD:5F:FB:EC:5F:BB:36:FE:61:88:26:39:A5:B0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/949C12357BC4AD5FFBEC5FBB36FE61882639A5B0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B7A6C5F49DA78C1E4B3DC1AB2D7DD45E7436AA7F3AC76A83E49F3AB33917598F/0/323830333a346238303a3a2f33322d3634203d3e203237393430.roa
Signing time:             Tue 04 Feb 2025 18:13:25 +0000
ROA not before:           Tue 04 Feb 2025 18:08:25 +0000
ROA not after:            Tue 03 Feb 2026 18:13:25 +0000
asID:                     27940
IP address blocks:        2803:4b80::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B7A6C5F49DA78C1E4B3DC1AB2D7DD45E7436AA7F3AC76A83E49F3AB33917598F/0/949C12357BC4AD5FFBEC5FBB36FE61882639A5B0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B7A6C5F49DA78C1E4B3DC1AB2D7DD45E7436AA7F3AC76A83E49F3AB33917598F/0/949C12357BC4AD5FFBEC5FBB36FE61882639A5B0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/949C12357BC4AD5FFBEC5FBB36FE61882639A5B0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:ba:9a:1a:af:d9:84:ab:34:bd:90:2d:6e:e1:fb:fd:36:e8:96:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=949C12357BC4AD5FFBEC5FBB36FE61882639A5B0
        Validity
            Not Before: Feb  4 18:08:25 2025 GMT
            Not After : Feb  3 18:13:25 2026 GMT
        Subject: CN=5EB255719B1C274F4BDAE1C14BCB8DAC77994BA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:99:7d:d5:fa:76:b0:ab:80:8f:fb:9f:1d:79:
                    b7:6f:1b:7a:9e:63:c7:d8:35:41:ba:6f:8f:68:98:
                    3e:5b:5c:03:9c:9d:d0:d3:bc:8c:d0:11:bc:5a:ef:
                    63:59:f6:0c:b9:9c:8b:9b:2b:40:b2:d3:93:b0:7f:
                    e2:5c:ee:8e:26:5b:e1:30:0c:7c:0c:2c:08:19:f6:
                    5e:e5:d2:1a:c9:8c:fd:25:6d:54:4f:a1:e9:ad:e6:
                    3e:1e:dd:95:49:36:85:7e:2c:cd:3f:76:90:3b:43:
                    2a:49:a9:69:69:e0:74:20:fe:03:d8:85:90:3f:6f:
                    f4:85:00:ae:cb:bd:96:7e:8d:05:58:5d:6a:46:ba:
                    2b:20:2a:c6:99:67:e0:53:af:6b:84:b2:6b:aa:54:
                    cb:07:e3:ab:45:92:af:e0:f9:69:27:46:92:85:b4:
                    bf:06:32:c0:4a:1c:ad:66:e6:b7:c5:a8:de:03:11:
                    5b:65:7c:b7:f7:d2:6e:59:a7:f5:78:3f:e9:d8:93:
                    3d:b7:88:45:48:75:a0:a9:cb:3a:fc:c2:6d:2c:73:
                    f6:48:32:98:ca:f9:17:38:71:18:6f:e4:d1:eb:4e:
                    f0:50:fa:ad:38:e6:7e:8b:4c:11:e1:f3:d6:45:16:
                    8b:0d:7a:18:55:5d:ae:e3:cc:44:c6:5b:83:a6:3f:
                    56:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:B2:55:71:9B:1C:27:4F:4B:DA:E1:C1:4B:CB:8D:AC:77:99:4B:A1
            X509v3 Authority Key Identifier:
                keyid:94:9C:12:35:7B:C4:AD:5F:FB:EC:5F:BB:36:FE:61:88:26:39:A5:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B7A6C5F49DA78C1E4B3DC1AB2D7DD45E7436AA7F3AC76A83E49F3AB33917598F/0/949C12357BC4AD5FFBEC5FBB36FE61882639A5B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/949C12357BC4AD5FFBEC5FBB36FE61882639A5B0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B7A6C5F49DA78C1E4B3DC1AB2D7DD45E7436AA7F3AC76A83E49F3AB33917598F/0/323830333a346238303a3a2f33322d3634203d3e203237393430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4b80::/32

    Signature Algorithm: sha256WithRSAEncryption
         07:9c:5e:83:06:ca:c0:6e:f5:81:35:2b:d4:01:12:e0:77:e7:
         7a:1a:cb:c0:5b:77:0d:d5:45:57:34:0b:51:fd:ac:55:23:ae:
         07:33:fe:a4:f7:fe:4e:58:02:2a:1d:7f:a8:65:54:5f:6c:14:
         4c:99:70:5f:57:7a:cb:5b:07:32:99:2e:a1:44:e3:a0:98:78:
         2f:57:2a:02:90:d5:1f:40:5a:8d:4b:6e:47:40:59:69:cb:33:
         b3:be:60:1c:4a:f4:b4:1d:00:27:26:fa:d0:cf:3f:4a:d3:e6:
         b3:b3:6e:00:b4:97:7e:87:95:89:12:c1:84:3e:77:ed:18:fa:
         a5:89:33:29:3f:82:46:e7:9a:08:77:fb:93:3b:21:2f:02:35:
         29:d3:83:be:b9:a2:14:fb:a8:9b:57:98:36:0f:58:54:fd:37:
         b3:01:c3:d9:7f:88:29:98:6f:f9:2e:26:57:1c:58:29:d2:0b:
         c5:8c:59:56:21:c0:d2:3d:2a:82:24:82:57:4b:c4:e8:68:b6:
         9c:2b:76:4c:a9:87:cf:33:05:28:f1:b5:fe:36:f3:9e:fa:30:
         b0:07:0a:10:df:86:04:52:03:84:4c:db:84:2e:73:09:db:ee:
         06:70:89:e4:af:be:d7:1b:03:e8:4d:a0:30:3e:c7:3d:7d:d9:
         af:1b:0a:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:14:20 2025 by rpki-client