Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D110F05B15EDAFE370A85C99458D399D1A5EA3F319B23192620DB3D3E66CE959/0/323830333a333465303a3a2f33322d3438203d3e20323639383938.roa
File:                     323830333a333465303a3a2f33322d3438203d3e20323639383938.roa (raw, json)
Hash identifier:          pdzxVlbeJpazDdydO+ly57EE7M0R0rXYvOb+d52H9BE=
Subject key identifier:   51:D4:65:25:2D:A9:FA:E9:0B:7F:49:99:90:CA:BF:57:E0:73:C3:B0
Certificate issuer:       /CN=42CD5D8FF58F1A6CFCD1042C88476296CB1C9BE1
Certificate serial:       20D37B4FD017E2BEAF79C14309DD836F3BF8475A
Authority key identifier: 42:CD:5D:8F:F5:8F:1A:6C:FC:D1:04:2C:88:47:62:96:CB:1C:9B:E1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/42CD5D8FF58F1A6CFCD1042C88476296CB1C9BE1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D110F05B15EDAFE370A85C99458D399D1A5EA3F319B23192620DB3D3E66CE959/0/323830333a333465303a3a2f33322d3438203d3e20323639383938.roa
Signing time:             Sun 25 May 2025 15:20:05 +0000
ROA not before:           Sun 25 May 2025 15:15:05 +0000
ROA not after:            Sun 24 May 2026 15:20:05 +0000
asID:                     269898
IP address blocks:        2803:34e0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D110F05B15EDAFE370A85C99458D399D1A5EA3F319B23192620DB3D3E66CE959/0/42CD5D8FF58F1A6CFCD1042C88476296CB1C9BE1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D110F05B15EDAFE370A85C99458D399D1A5EA3F319B23192620DB3D3E66CE959/0/42CD5D8FF58F1A6CFCD1042C88476296CB1C9BE1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/42CD5D8FF58F1A6CFCD1042C88476296CB1C9BE1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 04:20:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:d3:7b:4f:d0:17:e2:be:af:79:c1:43:09:dd:83:6f:3b:f8:47:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42CD5D8FF58F1A6CFCD1042C88476296CB1C9BE1
        Validity
            Not Before: May 25 15:15:05 2025 GMT
            Not After : May 24 15:20:05 2026 GMT
        Subject: CN=51D465252DA9FAE90B7F499990CABF57E073C3B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:07:c9:8f:72:52:3d:7c:1e:4f:a1:a2:c4:a1:
                    b0:07:d5:64:1d:0e:b7:fc:10:a1:5b:01:3c:f5:25:
                    da:47:2d:5b:66:b9:fa:2d:5f:f3:a7:88:ef:79:db:
                    7e:5b:b1:93:63:c6:37:d6:08:de:5d:47:b8:c0:94:
                    0a:e1:37:5d:3a:ba:9d:9a:5d:59:73:26:2d:28:39:
                    e0:3d:b7:40:96:69:c7:a0:76:7e:a2:89:72:c7:a5:
                    6b:d6:2a:ff:d3:c0:2d:9b:4f:b2:da:16:b5:a0:6b:
                    c4:14:ff:86:ad:39:86:52:36:83:b1:bf:1e:21:e8:
                    44:23:9d:fa:6f:74:35:d7:73:fd:81:55:ab:d6:11:
                    26:49:8f:86:2c:3a:39:56:30:64:80:b8:aa:48:0b:
                    3f:86:dc:d2:32:97:27:15:2c:d5:11:d5:b5:f9:55:
                    dd:ad:a5:cf:d8:d2:df:e6:9d:98:4e:bf:b0:f7:04:
                    1e:10:25:53:bc:9e:a8:03:51:6c:c6:76:fa:f6:bc:
                    7a:9e:f5:c1:0c:12:06:60:74:26:be:31:f4:3a:77:
                    64:fd:71:be:6e:a6:2d:c9:de:b7:45:21:67:d2:f4:
                    cd:34:5f:90:9b:68:ea:75:1f:14:f3:7c:5d:42:20:
                    07:52:24:e0:21:84:fe:05:be:59:21:9e:06:62:b9:
                    8f:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:D4:65:25:2D:A9:FA:E9:0B:7F:49:99:90:CA:BF:57:E0:73:C3:B0
            X509v3 Authority Key Identifier:
                keyid:42:CD:5D:8F:F5:8F:1A:6C:FC:D1:04:2C:88:47:62:96:CB:1C:9B:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D110F05B15EDAFE370A85C99458D399D1A5EA3F319B23192620DB3D3E66CE959/0/42CD5D8FF58F1A6CFCD1042C88476296CB1C9BE1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/42CD5D8FF58F1A6CFCD1042C88476296CB1C9BE1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D110F05B15EDAFE370A85C99458D399D1A5EA3F319B23192620DB3D3E66CE959/0/323830333a333465303a3a2f33322d3438203d3e20323639383938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:34e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         45:94:ff:7f:b8:33:bd:4c:43:dc:c7:6c:72:de:ee:6d:88:76:
         74:48:ff:83:cd:bd:bc:3e:f9:a4:df:f8:b1:57:d2:22:b8:0f:
         f7:3d:88:39:fd:08:31:f3:db:e9:b7:05:69:77:6b:23:82:32:
         87:2a:ac:51:89:ba:6c:c4:ba:b6:64:d3:17:11:fc:51:d8:3a:
         0f:3d:f1:37:3c:b1:cd:86:55:a9:f1:48:d4:7b:33:f7:92:62:
         21:52:78:82:0c:89:99:a3:72:d6:ea:1c:a4:76:ea:dd:ff:4a:
         d5:f2:81:7e:ed:af:2d:b8:8c:0c:1e:a7:35:0e:29:dc:d4:75:
         79:43:a5:e6:6c:10:c3:eb:f2:4d:0c:68:65:32:f2:22:e6:03:
         40:2d:fb:88:95:72:7c:56:3d:ab:16:3d:7e:89:9e:48:23:d9:
         84:31:2c:82:4e:a3:bb:18:3e:46:b0:6c:30:19:61:f2:cb:2d:
         94:78:ff:e6:16:a1:25:03:9b:2b:c4:bc:a5:2b:a9:2b:66:3d:
         d4:0f:76:ce:f1:36:fd:2d:49:6d:24:23:30:32:f0:0c:38:e4:
         88:dd:49:64:a4:70:bc:c7:45:4a:80:bb:64:01:d1:9a:d7:09:
         45:a2:3c:45:8a:80:d9:77:7d:34:0e:20:ba:ff:90:d9:a0:54:
         c6:2c:c9:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 20:23:39 2025 by rpki-client