Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BE5C5D59D4C7A363EB6C4C85BC4088296E27FB2AC53E6DBA4C64DD2F1DC5B35D/0/323830333a313530303a3a2f33322d3430203d3e203237383030.roa
File:                     323830333a313530303a3a2f33322d3430203d3e203237383030.roa (raw, json)
Hash identifier:          kgfvzhUTrE15eZjmqDgYy6dEH5r9QjhJQDblO+GiYLE=
Subject key identifier:   88:BF:C5:E8:DA:8C:61:49:DE:7E:2C:B1:84:54:7A:D6:30:22:B2:12
Certificate issuer:       /CN=2CE426DCE116C2FC2D07BDD209BC070F6D233D1C
Certificate serial:       66CD91257FC7E616512BD8C3A6C212BE7ADE1447
Authority key identifier: 2C:E4:26:DC:E1:16:C2:FC:2D:07:BD:D2:09:BC:07:0F:6D:23:3D:1C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2CE426DCE116C2FC2D07BDD209BC070F6D233D1C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BE5C5D59D4C7A363EB6C4C85BC4088296E27FB2AC53E6DBA4C64DD2F1DC5B35D/0/323830333a313530303a3a2f33322d3430203d3e203237383030.roa
Signing time:             Tue 04 Feb 2025 19:58:39 +0000
ROA not before:           Tue 04 Feb 2025 19:53:39 +0000
ROA not after:            Tue 03 Feb 2026 19:58:39 +0000
asID:                     27800
IP address blocks:        2803:1500::/32 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BE5C5D59D4C7A363EB6C4C85BC4088296E27FB2AC53E6DBA4C64DD2F1DC5B35D/0/2CE426DCE116C2FC2D07BDD209BC070F6D233D1C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BE5C5D59D4C7A363EB6C4C85BC4088296E27FB2AC53E6DBA4C64DD2F1DC5B35D/0/2CE426DCE116C2FC2D07BDD209BC070F6D233D1C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2CE426DCE116C2FC2D07BDD209BC070F6D233D1C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 01:17:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:cd:91:25:7f:c7:e6:16:51:2b:d8:c3:a6:c2:12:be:7a:de:14:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2CE426DCE116C2FC2D07BDD209BC070F6D233D1C
        Validity
            Not Before: Feb  4 19:53:39 2025 GMT
            Not After : Feb  3 19:58:39 2026 GMT
        Subject: CN=88BFC5E8DA8C6149DE7E2CB184547AD63022B212
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:6c:e3:08:8c:fa:da:8d:f7:c4:d3:06:3c:6d:
                    59:d8:b7:4f:5c:ff:f0:1f:53:42:ae:58:0a:01:7d:
                    35:7c:31:74:cb:35:0e:9c:dc:c9:75:1d:43:77:b8:
                    8d:ff:87:4d:74:9d:31:a0:a7:d8:d6:7c:d9:4d:0c:
                    72:e6:72:d2:96:d6:47:35:36:78:4a:a3:e9:a5:1e:
                    99:77:f4:0b:1f:08:34:3c:f0:1d:6b:ab:54:53:5e:
                    ae:fa:22:f4:2f:c1:53:0a:3c:cc:4f:da:9a:71:18:
                    3d:e8:f5:88:17:d3:e3:b4:47:22:0d:ec:14:7f:66:
                    a8:e0:36:b5:7a:ba:e7:b1:bd:5b:6b:81:aa:bf:92:
                    9f:31:48:6b:eb:a9:e9:da:11:2e:1a:20:ad:a7:18:
                    80:2d:1b:a6:04:f4:ff:91:6e:b8:f0:bb:80:d3:80:
                    18:62:98:66:d7:ed:99:5c:f7:c9:45:bd:99:14:df:
                    5c:33:cc:82:5d:26:75:da:9a:e7:03:c0:f5:d7:d6:
                    12:36:0e:04:c6:c1:de:3e:d2:04:1f:40:e0:1e:d0:
                    f4:37:5c:76:d3:05:c1:d7:bf:04:fe:2e:e6:c9:b7:
                    c1:a1:72:7e:70:b0:92:e7:b9:f8:f0:c3:2e:f7:dc:
                    3d:73:a4:5f:a4:11:70:35:ce:c2:a7:8b:6f:86:c6:
                    dc:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:BF:C5:E8:DA:8C:61:49:DE:7E:2C:B1:84:54:7A:D6:30:22:B2:12
            X509v3 Authority Key Identifier:
                keyid:2C:E4:26:DC:E1:16:C2:FC:2D:07:BD:D2:09:BC:07:0F:6D:23:3D:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BE5C5D59D4C7A363EB6C4C85BC4088296E27FB2AC53E6DBA4C64DD2F1DC5B35D/0/2CE426DCE116C2FC2D07BDD209BC070F6D233D1C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2CE426DCE116C2FC2D07BDD209BC070F6D233D1C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BE5C5D59D4C7A363EB6C4C85BC4088296E27FB2AC53E6DBA4C64DD2F1DC5B35D/0/323830333a313530303a3a2f33322d3430203d3e203237383030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1500::/32

    Signature Algorithm: sha256WithRSAEncryption
         37:03:a3:ee:e9:b6:31:90:82:7f:35:88:4e:b0:6c:73:0f:ba:
         c2:fa:7e:09:b1:86:a9:60:cf:cc:26:ac:56:56:72:65:a2:10:
         65:79:c5:78:c9:39:f6:9c:cd:f5:2f:8f:87:24:e1:a6:e3:fc:
         42:95:47:28:94:5c:39:40:76:e8:1d:93:00:c9:f4:1e:79:92:
         10:ab:1a:07:95:d5:c1:5b:a9:93:dc:83:ac:83:88:fe:af:66:
         c5:5f:66:43:24:97:e4:14:d2:97:2f:39:70:78:0f:cd:b2:17:
         6a:49:cf:70:81:eb:4d:1a:18:b2:e7:13:8f:61:1f:a9:8e:92:
         5e:50:6a:42:19:b2:ca:6a:4c:70:4f:04:5d:f5:f9:bd:23:dc:
         44:51:d5:27:24:0f:27:70:6b:90:9a:75:67:c9:26:e6:1d:6f:
         53:ff:eb:e2:b3:86:0a:e8:23:9b:2b:b4:d5:14:54:f6:29:19:
         91:fa:ef:32:d7:66:9f:53:f8:8b:ef:4a:3e:a5:09:26:dc:dd:
         9e:f1:4f:41:e4:90:f1:d6:2c:0d:9f:f7:86:56:fa:03:9f:b4:
         35:01:74:99:cd:05:9c:ec:db:ec:59:68:5a:43:51:e7:dc:10:
         96:96:ca:e5:c4:cb:b3:5b:9f:8f:b4:a3:a6:68:42:b4:9d:de:
         74:3a:75:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:28:27 2025 by rpki-client