Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D688DEEEB6EE470E2F40641231B2C389CC65C0AFA5BA6CB5A6E5229D3A463479/0/323830333a353138303a353030303a3a2f33362d3336203d3e20323633373632.roa
File:                     323830333a353138303a353030303a3a2f33362d3336203d3e20323633373632.roa (raw, json)
Hash identifier:          aj9mvojHxObFamQQegOIIcNxm6UFpJm8M/lBbIRe0Nw=
Subject key identifier:   6E:5B:36:C7:A4:05:F1:FB:95:D6:5C:4F:E6:C2:C4:3C:C3:D5:73:15
Certificate issuer:       /CN=F560245552ABA4019972F9F5D1842354FC2CDB48
Certificate serial:       1610204586A3FA49DEB5ACD965B5101FBFF53775
Authority key identifier: F5:60:24:55:52:AB:A4:01:99:72:F9:F5:D1:84:23:54:FC:2C:DB:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F560245552ABA4019972F9F5D1842354FC2CDB48.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D688DEEEB6EE470E2F40641231B2C389CC65C0AFA5BA6CB5A6E5229D3A463479/0/323830333a353138303a353030303a3a2f33362d3336203d3e20323633373632.roa
Signing time:             Tue 04 Feb 2025 18:52:32 +0000
ROA not before:           Tue 04 Feb 2025 18:47:32 +0000
ROA not after:            Tue 03 Feb 2026 18:52:32 +0000
asID:                     263762
IP address blocks:        2803:5180:5000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D688DEEEB6EE470E2F40641231B2C389CC65C0AFA5BA6CB5A6E5229D3A463479/0/F560245552ABA4019972F9F5D1842354FC2CDB48.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D688DEEEB6EE470E2F40641231B2C389CC65C0AFA5BA6CB5A6E5229D3A463479/0/F560245552ABA4019972F9F5D1842354FC2CDB48.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F560245552ABA4019972F9F5D1842354FC2CDB48.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:10:20:45:86:a3:fa:49:de:b5:ac:d9:65:b5:10:1f:bf:f5:37:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F560245552ABA4019972F9F5D1842354FC2CDB48
        Validity
            Not Before: Feb  4 18:47:32 2025 GMT
            Not After : Feb  3 18:52:32 2026 GMT
        Subject: CN=6E5B36C7A405F1FB95D65C4FE6C2C43CC3D57315
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:09:4e:90:d2:c8:61:25:73:f9:43:3c:18:44:
                    5c:9a:83:dc:56:98:60:91:f9:ca:79:d6:8c:19:e7:
                    cf:3b:27:76:ac:94:f2:cf:5f:2c:70:02:11:93:a4:
                    d0:ad:a9:d7:76:9c:16:82:06:0f:c1:2e:1f:20:9f:
                    4c:20:12:7d:fe:a1:22:2e:5a:a4:d2:6b:4b:c4:b5:
                    b3:a5:64:ae:83:e5:7b:29:93:48:d3:32:ad:2a:6c:
                    20:2d:75:ae:fc:a8:b7:2a:6b:a1:5c:50:8b:9b:84:
                    5c:99:ef:c2:9c:60:e5:df:93:1f:ad:f1:6d:55:6b:
                    6b:11:e7:70:80:9d:8e:f9:8b:e7:68:34:14:35:0a:
                    66:35:31:8a:4e:97:40:57:7c:3c:c1:2d:48:fd:27:
                    f1:f9:24:1e:47:f6:1a:2b:78:88:c1:59:99:b1:01:
                    39:33:1f:67:0a:83:1c:63:74:81:b1:1f:41:ac:78:
                    4a:63:a7:65:3b:1b:e1:2f:fd:73:a6:d5:2b:3e:1c:
                    9f:59:dc:72:55:0a:b0:de:f7:d9:65:ef:94:d8:cd:
                    20:82:16:36:9b:a3:4f:20:26:15:77:6e:69:c5:73:
                    bd:0e:38:49:a7:a5:9e:ae:a5:10:aa:61:5f:a4:0e:
                    aa:15:37:db:59:b4:16:8d:f0:9d:17:b5:20:b2:92:
                    38:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:5B:36:C7:A4:05:F1:FB:95:D6:5C:4F:E6:C2:C4:3C:C3:D5:73:15
            X509v3 Authority Key Identifier:
                keyid:F5:60:24:55:52:AB:A4:01:99:72:F9:F5:D1:84:23:54:FC:2C:DB:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D688DEEEB6EE470E2F40641231B2C389CC65C0AFA5BA6CB5A6E5229D3A463479/0/F560245552ABA4019972F9F5D1842354FC2CDB48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F560245552ABA4019972F9F5D1842354FC2CDB48.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D688DEEEB6EE470E2F40641231B2C389CC65C0AFA5BA6CB5A6E5229D3A463479/0/323830333a353138303a353030303a3a2f33362d3336203d3e20323633373632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5180:5000::/36

    Signature Algorithm: sha256WithRSAEncryption
         05:0c:64:d5:1d:dd:31:b0:70:4d:9e:85:e5:23:16:3d:da:fc:
         e7:fd:87:21:ed:8b:db:e2:de:39:b8:68:ff:f7:84:c3:56:8a:
         28:39:83:81:e5:20:2c:58:99:ef:b9:8a:9b:be:60:47:f4:13:
         68:8a:f5:55:f8:91:7e:91:07:fe:04:80:de:b7:d0:6c:46:f6:
         15:e4:ac:89:d2:62:0a:30:b7:bb:af:bd:7b:03:ce:eb:0c:02:
         39:65:6d:7f:06:eb:01:87:b6:d7:5f:8e:47:26:5c:79:bb:b8:
         ca:c8:d9:b4:17:86:bf:3e:ae:ee:f6:f3:aa:a1:bf:5b:9d:60:
         03:91:45:91:16:4f:6b:26:2e:a4:bc:f1:e9:78:d3:5b:dd:5c:
         f6:2d:ef:3c:c3:d4:33:5e:29:c7:e4:d1:23:69:b7:a3:00:95:
         3a:55:7f:81:94:a0:c3:45:62:29:1c:b2:42:93:67:b4:0b:de:
         68:57:fc:ee:f2:b6:63:d3:b5:eb:28:ff:14:ef:7b:b3:19:65:
         d7:11:97:c8:4d:3b:a3:4b:e0:58:72:6a:ba:a9:d4:52:04:21:
         ea:36:19:ed:88:b3:02:4a:6a:fd:94:ac:e1:71:a2:c0:08:fd:
         08:35:ba:30:02:8c:f9:73:1f:6b:39:7b:fe:10:6e:1c:46:6b:
         9f:da:e0:e6
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Apr 6 01:32:09 2025 by rpki-client