Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BFFFB211ADF2CF89D3DC16CAAD3507A71D73679F1347B0B06DEC2C1A463C5739/0/323830333a343865303a3a2f33322d3438203d3e203532343638.roa
File:                     323830333a343865303a3a2f33322d3438203d3e203532343638.roa (raw, json)
Hash identifier:          RYfhSetJAqzZFHrICi58EZBRkHGM/+xqLDV4IszrUzA=
Subject key identifier:   78:49:A2:61:0D:6C:94:58:9B:FD:58:31:0F:C0:AA:7B:A3:EB:EE:5C
Certificate issuer:       /CN=5C6C51BA0F3F312CC2221019C1183719A9647AE7
Certificate serial:       55EEEB6757E8E22367E81F9EE64CA67605CABF09
Authority key identifier: 5C:6C:51:BA:0F:3F:31:2C:C2:22:10:19:C1:18:37:19:A9:64:7A:E7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5C6C51BA0F3F312CC2221019C1183719A9647AE7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BFFFB211ADF2CF89D3DC16CAAD3507A71D73679F1347B0B06DEC2C1A463C5739/0/323830333a343865303a3a2f33322d3438203d3e203532343638.roa
Signing time:             Tue 04 Feb 2025 18:56:22 +0000
ROA not before:           Tue 04 Feb 2025 18:51:22 +0000
ROA not after:            Tue 03 Feb 2026 18:56:22 +0000
asID:                     52468
IP address blocks:        2803:48e0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BFFFB211ADF2CF89D3DC16CAAD3507A71D73679F1347B0B06DEC2C1A463C5739/0/5C6C51BA0F3F312CC2221019C1183719A9647AE7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BFFFB211ADF2CF89D3DC16CAAD3507A71D73679F1347B0B06DEC2C1A463C5739/0/5C6C51BA0F3F312CC2221019C1183719A9647AE7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5C6C51BA0F3F312CC2221019C1183719A9647AE7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 17:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:ee:eb:67:57:e8:e2:23:67:e8:1f:9e:e6:4c:a6:76:05:ca:bf:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5C6C51BA0F3F312CC2221019C1183719A9647AE7
        Validity
            Not Before: Feb  4 18:51:22 2025 GMT
            Not After : Feb  3 18:56:22 2026 GMT
        Subject: CN=7849A2610D6C94589BFD58310FC0AA7BA3EBEE5C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:bc:83:15:07:73:68:d1:e5:ab:a3:1d:28:16:
                    86:22:fd:ae:48:1d:41:a3:5f:28:73:45:85:93:82:
                    3d:fe:a9:d9:29:23:09:72:b0:a8:c2:fb:22:5a:ba:
                    ce:67:f4:f9:27:c6:63:5c:22:b0:10:3c:fe:2f:91:
                    8e:5e:8b:5b:65:a3:e0:42:98:61:5b:44:4b:ad:24:
                    53:3c:67:a9:d4:2d:41:f0:6a:35:62:82:9f:74:2a:
                    20:a6:16:d9:00:3e:68:e7:f0:bc:2d:a3:3d:a6:f5:
                    66:18:78:90:e8:7d:aa:43:31:ef:5d:4e:f7:4f:d5:
                    19:8c:04:52:e9:19:1e:11:2f:5b:34:e7:60:85:22:
                    1a:78:49:e2:fb:fe:e3:20:9f:ac:aa:86:b1:eb:a2:
                    7f:ac:95:42:72:75:c5:27:83:e1:ef:9b:a2:5f:0b:
                    b9:5e:7f:43:b4:c8:fe:f0:2f:8b:6d:c6:48:e4:54:
                    5e:c3:91:cc:ea:41:c1:0c:b1:c6:ec:d5:33:e3:93:
                    3f:f3:ad:75:96:4d:bc:24:2a:5e:b6:66:00:a7:47:
                    a6:2d:29:e3:c6:a3:a8:6a:54:29:84:be:28:39:18:
                    42:de:5a:4a:90:6f:56:b1:f2:e2:e1:1a:52:dd:6f:
                    12:9c:83:dd:0a:f4:8d:db:53:5b:fd:42:58:00:ed:
                    b6:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:49:A2:61:0D:6C:94:58:9B:FD:58:31:0F:C0:AA:7B:A3:EB:EE:5C
            X509v3 Authority Key Identifier:
                keyid:5C:6C:51:BA:0F:3F:31:2C:C2:22:10:19:C1:18:37:19:A9:64:7A:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BFFFB211ADF2CF89D3DC16CAAD3507A71D73679F1347B0B06DEC2C1A463C5739/0/5C6C51BA0F3F312CC2221019C1183719A9647AE7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5C6C51BA0F3F312CC2221019C1183719A9647AE7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BFFFB211ADF2CF89D3DC16CAAD3507A71D73679F1347B0B06DEC2C1A463C5739/0/323830333a343865303a3a2f33322d3438203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:48e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         60:bb:ad:07:6f:fa:99:33:89:8f:56:3f:a3:b5:03:76:16:72:
         55:16:06:34:d4:eb:0d:5c:1c:f4:a2:03:64:89:df:47:86:ff:
         c4:d3:76:3b:fb:a7:c3:d5:4b:1c:90:88:ef:88:49:ed:fb:90:
         1a:3f:10:df:63:b7:7c:a1:ef:0b:17:5c:d8:b9:ea:36:e6:90:
         e5:e3:1a:ec:37:64:e8:a8:41:80:84:3d:e7:d7:3a:10:e9:8c:
         26:e9:56:e7:8d:ad:28:be:b3:c1:62:17:da:86:4e:99:0c:41:
         c5:73:98:e1:90:96:f4:e9:61:54:ee:fb:3a:6d:ae:34:31:79:
         82:6b:52:ca:c5:52:dc:1d:62:ec:a1:2e:7c:63:72:87:a0:eb:
         c2:85:e8:57:9f:98:7c:d6:6f:1d:7c:b5:87:36:ee:b3:f1:4f:
         80:31:89:b7:37:0b:73:a2:e5:21:67:f9:33:1f:30:c8:f3:cd:
         05:10:c1:85:03:35:d2:2f:c7:f8:da:49:09:fe:4f:60:d1:72:
         f3:81:68:16:b5:72:95:39:7a:8a:9c:3c:c0:5b:2b:64:8f:55:
         98:f9:96:8a:4c:04:67:ab:c5:10:56:ea:90:ec:b3:59:96:95:
         07:32:15:b2:7e:5a:ef:b0:14:b4:68:38:4b:a4:4d:0f:f0:43:
         4c:ad:a6:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 21:23:58 2025 by rpki-client