Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B8995BF863751A5C60951770258DFE4F82DB7390E62C1B7625A5E1F4190120A9/0/323830333a656131303a353a3a2f34382d3438203d3e20323731393237.roa
File:                     323830333a656131303a353a3a2f34382d3438203d3e20323731393237.roa (raw, json)
Hash identifier:          Ifv7NNfS+m3dox0F3LidwTI1kgq+lK3Peyh5E678+CU=
Subject key identifier:   86:C5:EF:A2:A2:5D:7D:C1:C2:AB:CC:97:8C:90:9B:B5:47:13:44:F8
Certificate issuer:       /CN=5AC74DB2E733289AD330B5CC47EFF7E610D2236E
Certificate serial:       0C815DC109B399DE1C6B6FD316F1411C8691D603
Authority key identifier: 5A:C7:4D:B2:E7:33:28:9A:D3:30:B5:CC:47:EF:F7:E6:10:D2:23:6E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5AC74DB2E733289AD330B5CC47EFF7E610D2236E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B8995BF863751A5C60951770258DFE4F82DB7390E62C1B7625A5E1F4190120A9/0/323830333a656131303a353a3a2f34382d3438203d3e20323731393237.roa
Signing time:             Tue 04 Feb 2025 18:46:51 +0000
ROA not before:           Tue 04 Feb 2025 18:41:51 +0000
ROA not after:            Tue 03 Feb 2026 18:46:51 +0000
asID:                     271927
IP address blocks:        2803:ea10:5::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B8995BF863751A5C60951770258DFE4F82DB7390E62C1B7625A5E1F4190120A9/0/5AC74DB2E733289AD330B5CC47EFF7E610D2236E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B8995BF863751A5C60951770258DFE4F82DB7390E62C1B7625A5E1F4190120A9/0/5AC74DB2E733289AD330B5CC47EFF7E610D2236E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5AC74DB2E733289AD330B5CC47EFF7E610D2236E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:81:5d:c1:09:b3:99:de:1c:6b:6f:d3:16:f1:41:1c:86:91:d6:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5AC74DB2E733289AD330B5CC47EFF7E610D2236E
        Validity
            Not Before: Feb  4 18:41:51 2025 GMT
            Not After : Feb  3 18:46:51 2026 GMT
        Subject: CN=86C5EFA2A25D7DC1C2ABCC978C909BB5471344F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:05:6b:23:0e:2e:02:e3:4d:c2:53:da:58:a6:
                    6d:61:c0:c4:e0:13:1f:0c:a2:9c:a8:0d:36:dd:a2:
                    fb:00:dd:f3:a4:72:df:5f:49:71:0a:9f:b4:10:5b:
                    43:de:0c:b4:30:bb:58:2a:80:0f:9a:9f:77:27:ca:
                    2d:97:d8:af:ae:59:86:fc:09:4b:b5:62:0f:61:4c:
                    77:6d:c4:8c:98:58:e2:1b:38:04:51:5c:40:80:2d:
                    ce:78:b5:75:9b:5a:ae:5a:5a:33:6a:f2:15:8a:7b:
                    f2:00:3b:74:36:05:f0:f1:fb:ae:80:05:57:ab:c5:
                    a9:c9:16:e1:24:1c:f8:a3:91:46:43:8a:13:b9:1c:
                    ca:bd:b2:a2:3e:26:ab:46:94:c1:a4:19:94:b2:b7:
                    1b:50:3b:e7:cf:8d:40:66:29:ac:46:73:4d:f7:1d:
                    b1:f4:77:25:43:47:cf:96:8c:52:5c:d4:0f:c4:20:
                    c8:24:8b:9e:ab:99:9c:42:d6:d8:3f:18:23:a5:0c:
                    ac:5e:07:ea:cf:2c:c3:b1:65:5a:d2:f4:7c:86:6b:
                    39:72:a6:6d:1c:67:43:21:8a:aa:39:16:b1:88:45:
                    cc:bc:dc:b3:9c:e2:7f:79:37:50:22:b6:2a:81:25:
                    ce:a6:eb:73:29:6d:68:89:b2:e4:bd:26:54:38:7e:
                    30:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:C5:EF:A2:A2:5D:7D:C1:C2:AB:CC:97:8C:90:9B:B5:47:13:44:F8
            X509v3 Authority Key Identifier:
                keyid:5A:C7:4D:B2:E7:33:28:9A:D3:30:B5:CC:47:EF:F7:E6:10:D2:23:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B8995BF863751A5C60951770258DFE4F82DB7390E62C1B7625A5E1F4190120A9/0/5AC74DB2E733289AD330B5CC47EFF7E610D2236E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5AC74DB2E733289AD330B5CC47EFF7E610D2236E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B8995BF863751A5C60951770258DFE4F82DB7390E62C1B7625A5E1F4190120A9/0/323830333a656131303a353a3a2f34382d3438203d3e20323731393237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ea10:5::/48

    Signature Algorithm: sha256WithRSAEncryption
         7f:36:73:34:a2:6f:5a:db:66:3e:e6:eb:bc:c4:c9:1e:4f:5d:
         08:81:38:b5:b7:af:31:fb:7c:89:83:ab:83:7d:c3:ab:af:79:
         24:67:a0:13:6c:72:01:df:1a:6c:3b:aa:e0:8f:36:b5:90:6f:
         dc:9c:20:90:5f:f4:19:4e:ff:cb:e7:0a:6f:f3:9e:f3:f8:c6:
         28:5b:85:eb:3d:dd:d1:ac:5e:10:20:27:0a:0f:b3:96:78:72:
         9a:83:e1:88:50:57:cf:bd:ab:bb:40:a2:89:8c:ca:73:00:35:
         80:9f:50:76:a4:0a:0a:b7:94:89:48:7d:2a:a9:8d:ce:45:83:
         9e:8c:e8:99:1e:3a:b0:e6:84:21:14:1e:8a:7e:51:1b:df:a7:
         0e:77:63:d5:6c:67:cb:05:5c:d1:ab:f3:99:11:4e:e0:3b:8e:
         ac:13:96:15:65:f7:fa:71:e5:13:9d:32:ea:cb:51:39:52:3f:
         72:6d:e2:e0:68:e4:c6:33:94:46:dc:73:bc:ba:c5:32:43:ea:
         09:54:73:51:8b:92:ee:c2:62:d8:84:c7:14:a7:fe:5e:19:05:
         79:b4:df:33:8b:06:41:b1:0d:89:0b:8a:51:ea:34:27:dd:e6:
         de:d6:f2:a0:9f:6e:98:ce:99:26:bf:be:e8:0c:76:47:43:1b:
         6d:64:ff:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:17:31 2025 by rpki-client