Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/323830333a313030303a3a2f33322d3332203d3e20323633373833.roa
File:                     323830333a313030303a3a2f33322d3332203d3e20323633373833.roa (raw, json)
Hash identifier:          12F0zMHrJxo5+M8CY6L9G5s+01CFz0l1AvK/r9WMgiU=
Subject key identifier:   01:B5:17:3A:46:9C:A5:51:0C:4E:FD:E6:88:9E:71:03:11:E6:0F:0F
Certificate issuer:       /CN=DCDE245406EF53D802AC05030F2AF3C618B69FF2
Certificate serial:       4E6A410D380338099DC88CB4F9DA98C317AD8FE7
Authority key identifier: DC:DE:24:54:06:EF:53:D8:02:AC:05:03:0F:2A:F3:C6:18:B6:9F:F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/323830333a313030303a3a2f33322d3332203d3e20323633373833.roa
Signing time:             Tue 04 Feb 2025 18:51:30 +0000
ROA not before:           Tue 04 Feb 2025 18:46:30 +0000
ROA not after:            Tue 03 Feb 2026 18:51:30 +0000
asID:                     263783
IP address blocks:        2803:1000::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 20 Feb 2025 17:49:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:6a:41:0d:38:03:38:09:9d:c8:8c:b4:f9:da:98:c3:17:ad:8f:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCDE245406EF53D802AC05030F2AF3C618B69FF2
        Validity
            Not Before: Feb  4 18:46:30 2025 GMT
            Not After : Feb  3 18:51:30 2026 GMT
        Subject: CN=01B5173A469CA5510C4EFDE6889E710311E60F0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:d2:08:8c:96:6c:7b:d2:49:55:d3:cc:f1:3a:
                    b2:d0:03:ef:b2:22:6e:f9:bb:d8:70:3f:30:fc:0a:
                    75:37:1c:fb:f0:ce:4c:51:ca:0c:e0:bd:f8:b3:c6:
                    61:4f:3b:fd:1d:6c:74:6f:71:96:10:78:36:90:bb:
                    93:58:2b:b8:b5:f8:99:a6:33:43:8d:68:7b:de:33:
                    41:6e:a5:95:8f:ac:6f:43:3d:21:ac:3d:fe:45:f7:
                    16:6e:5b:1d:3b:06:02:0c:66:95:61:1a:5b:de:ef:
                    a9:68:6d:4c:8d:34:c0:fd:e5:6b:56:d7:6f:f9:08:
                    2a:99:c7:e9:79:b2:73:51:2b:84:a2:e3:9f:40:94:
                    b0:fd:55:1c:b7:06:a8:9c:13:5c:e3:6b:fa:3b:c5:
                    d7:9f:64:31:fa:0c:ea:55:24:a9:bb:51:0a:e3:cb:
                    d9:56:b0:03:76:e2:b8:6a:95:95:fe:a0:74:b1:83:
                    e0:c0:45:fd:17:26:04:38:fa:97:ae:83:ba:3a:9c:
                    10:82:fc:0e:d9:1a:64:54:d8:46:dc:ef:5b:e9:c2:
                    9f:5a:8d:17:62:e5:ff:d3:f1:f6:98:ed:72:9a:26:
                    90:ba:b4:e7:82:37:ee:7a:15:df:95:6b:66:f9:5b:
                    42:57:cb:dd:d2:3e:78:2f:c4:00:43:dc:cd:2c:01:
                    51:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:B5:17:3A:46:9C:A5:51:0C:4E:FD:E6:88:9E:71:03:11:E6:0F:0F
            X509v3 Authority Key Identifier:
                keyid:DC:DE:24:54:06:EF:53:D8:02:AC:05:03:0F:2A:F3:C6:18:B6:9F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/323830333a313030303a3a2f33322d3332203d3e20323633373833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1000::/32

    Signature Algorithm: sha256WithRSAEncryption
         98:33:e1:70:47:9f:02:d7:23:b8:4e:7a:78:17:22:64:90:56:
         b9:78:e0:01:93:70:61:b8:88:26:d3:32:65:bf:a3:d9:e6:78:
         29:19:13:34:a0:42:73:6d:b1:ed:b1:e7:7f:f1:dd:cf:a2:70:
         9c:d4:3d:72:39:70:c3:47:19:91:ba:40:f0:7e:54:b8:10:e7:
         16:81:f1:36:38:e5:5e:59:c7:35:c2:17:64:26:6c:7b:39:6c:
         be:4a:cb:18:a4:c4:83:52:3a:f3:61:50:24:5e:38:f5:62:48:
         fa:c3:ac:dc:44:85:38:14:b1:86:f1:c1:48:af:73:41:72:b0:
         4d:35:d1:23:11:a5:17:df:6a:a3:c7:ca:68:97:77:79:a0:cd:
         cd:a7:dd:37:11:e6:42:46:38:6b:02:c2:4f:a1:04:81:6a:77:
         1c:c0:2a:4a:e6:02:af:2a:6c:59:1d:05:4a:3a:5f:09:4c:59:
         6b:b1:cc:d9:a5:c5:bb:48:d1:c0:36:c4:81:4a:c6:c1:58:50:
         33:8a:91:3c:e2:29:54:12:83:2c:69:1c:6d:7d:f7:fb:65:6e:
         28:ad:a5:f7:82:87:c5:b3:0c:3b:3c:03:2b:a7:41:fb:a7:6b:
         a5:72:bd:f1:3f:20:26:99:e0:57:57:c8:6a:d0:54:b7:76:16:
         be:86:7e:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:23:20 2025 by rpki-client