Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BAF02E822514644D30EB9C6335075620AFEC893BDB9940FA1EA2568FBDD8CB17/0/323830333a326330303a3a2f33322d3332203d3e20323632323331.roa
File:                     323830333a326330303a3a2f33322d3332203d3e20323632323331.roa (raw, json)
Hash identifier:          U8WxyTNq4zMrD7zIgmZG7H6X5lZodDFo/vZmQoIl41A=
Subject key identifier:   C5:EC:58:07:2F:28:8B:D8:F6:05:82:08:FE:A5:DD:3B:AD:54:66:81
Certificate issuer:       /CN=4233B5C9FB05032EE4D323F58984C9BB2353F9AE
Certificate serial:       50DF7CD41E29CE1DDF8C26A4B92612EAA5D7846E
Authority key identifier: 42:33:B5:C9:FB:05:03:2E:E4:D3:23:F5:89:84:C9:BB:23:53:F9:AE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4233B5C9FB05032EE4D323F58984C9BB2353F9AE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BAF02E822514644D30EB9C6335075620AFEC893BDB9940FA1EA2568FBDD8CB17/0/323830333a326330303a3a2f33322d3332203d3e20323632323331.roa
Signing time:             Tue 04 Feb 2025 18:00:30 +0000
ROA not before:           Tue 04 Feb 2025 17:55:30 +0000
ROA not after:            Tue 03 Feb 2026 18:00:30 +0000
asID:                     262231
IP address blocks:        2803:2c00::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BAF02E822514644D30EB9C6335075620AFEC893BDB9940FA1EA2568FBDD8CB17/0/4233B5C9FB05032EE4D323F58984C9BB2353F9AE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BAF02E822514644D30EB9C6335075620AFEC893BDB9940FA1EA2568FBDD8CB17/0/4233B5C9FB05032EE4D323F58984C9BB2353F9AE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4233B5C9FB05032EE4D323F58984C9BB2353F9AE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Apr 2025 11:56:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:df:7c:d4:1e:29:ce:1d:df:8c:26:a4:b9:26:12:ea:a5:d7:84:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4233B5C9FB05032EE4D323F58984C9BB2353F9AE
        Validity
            Not Before: Feb  4 17:55:30 2025 GMT
            Not After : Feb  3 18:00:30 2026 GMT
        Subject: CN=C5EC58072F288BD8F6058208FEA5DD3BAD546681
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:1b:af:f7:5d:9f:c9:32:c0:b2:fb:06:ab:d0:
                    24:cb:36:31:78:f6:ff:28:cd:c5:3c:42:1d:e9:4e:
                    72:d2:03:60:a2:22:47:84:0c:e0:7e:39:77:5f:95:
                    31:91:c5:4e:c0:43:75:e6:38:89:82:4e:c4:6b:19:
                    60:7b:7f:11:13:c6:b3:96:8a:7a:9a:23:f7:54:5c:
                    b9:f7:5d:80:45:5a:b2:82:50:09:a1:be:fb:c5:66:
                    dc:15:8c:a3:c3:72:23:15:7a:89:9b:b3:96:97:06:
                    49:64:7a:33:07:94:28:28:5d:ed:67:ee:9c:04:b9:
                    21:c0:3a:e0:f5:d5:33:86:33:a5:df:aa:a6:4c:d8:
                    24:a2:85:bf:bf:c4:b0:5d:e0:8e:cb:3d:a3:fa:aa:
                    cc:01:d4:df:6c:39:8c:67:e1:b1:d0:f0:54:92:af:
                    90:63:e3:df:f9:4c:ad:f3:e7:c7:b2:cf:fc:9a:87:
                    1e:98:31:5a:f6:3c:69:b5:3d:77:ce:6f:27:42:cb:
                    9e:fc:5f:b1:d2:1f:c6:24:14:b9:b7:1a:17:02:eb:
                    82:cd:fd:93:31:3a:b7:95:a2:a4:da:57:9e:be:db:
                    be:2d:bb:e0:ab:c2:cc:28:a5:c3:4b:d7:8f:59:9f:
                    f8:b4:93:e2:21:50:d1:e9:a4:e7:9c:4d:89:50:9e:
                    47:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:EC:58:07:2F:28:8B:D8:F6:05:82:08:FE:A5:DD:3B:AD:54:66:81
            X509v3 Authority Key Identifier:
                keyid:42:33:B5:C9:FB:05:03:2E:E4:D3:23:F5:89:84:C9:BB:23:53:F9:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BAF02E822514644D30EB9C6335075620AFEC893BDB9940FA1EA2568FBDD8CB17/0/4233B5C9FB05032EE4D323F58984C9BB2353F9AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4233B5C9FB05032EE4D323F58984C9BB2353F9AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BAF02E822514644D30EB9C6335075620AFEC893BDB9940FA1EA2568FBDD8CB17/0/323830333a326330303a3a2f33322d3332203d3e20323632323331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2c00::/32

    Signature Algorithm: sha256WithRSAEncryption
         a4:57:37:49:c6:b2:09:ea:dd:ea:40:33:e3:b8:1b:da:7a:1c:
         d2:4d:2f:1c:5d:64:93:a2:a2:5b:e7:3e:f0:a6:06:66:40:ba:
         74:39:c6:2b:86:9a:a3:94:10:b6:5b:68:a1:56:b9:25:c6:73:
         13:88:60:31:b5:ac:02:bc:44:35:66:bf:36:54:b7:56:86:4c:
         d8:29:3f:c0:1a:ee:06:6f:1d:35:d6:69:a8:27:68:16:b2:c0:
         1b:45:26:36:61:f2:60:27:f8:d4:ed:98:03:26:bc:30:ee:93:
         f3:66:17:b0:28:5d:9d:e8:29:01:1f:89:71:a0:6f:d5:27:7d:
         7a:1f:b5:ae:71:a0:52:3e:2b:fd:0a:6f:3f:59:a2:e3:c6:6d:
         d7:b4:60:dd:4d:95:58:8d:4b:a9:f0:fa:db:3b:cc:31:0c:f1:
         38:14:0c:d3:6b:7d:b7:4e:c9:b8:0b:69:c6:00:99:12:d7:bf:
         d2:ed:e1:09:8b:ed:11:8b:10:ac:2a:09:e4:88:96:7d:f2:c8:
         26:c3:d0:6c:55:59:fe:3b:a7:d4:40:53:41:4e:0d:09:66:0f:
         b3:c2:00:02:99:26:5b:38:c8:5f:f7:65:f7:0f:2e:43:8b:d5:
         c5:e8:1f:55:95:94:9c:9b:2a:83:79:96:cf:f5:d8:a2:d9:02:
         2a:0d:e9:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:49:40 2025 by rpki-client