Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D8B2E93B9279EBF3595507F8F48361E0BD2117E64A35FB5F335B42AE022CF488/0/323830333a376239303a3a2f33322d3634203d3e20323733303531.roa
File:                     323830333a376239303a3a2f33322d3634203d3e20323733303531.roa (raw, json)
Hash identifier:          frlusXVIpK/ay3Y84OPNDBfdnCw2XVBe2c4BUZGcA7I=
Subject key identifier:   E1:54:B6:5D:1C:E0:77:9C:0E:BC:C4:41:D1:09:67:A4:02:9F:B3:27
Certificate issuer:       /CN=5145CDCB2E8521E02DC6523594019C25D7A03E0C
Certificate serial:       4C47180D8150E284A8DF29FE3BE9C98D6F167A9C
Authority key identifier: 51:45:CD:CB:2E:85:21:E0:2D:C6:52:35:94:01:9C:25:D7:A0:3E:0C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5145CDCB2E8521E02DC6523594019C25D7A03E0C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D8B2E93B9279EBF3595507F8F48361E0BD2117E64A35FB5F335B42AE022CF488/0/323830333a376239303a3a2f33322d3634203d3e20323733303531.roa
Signing time:             Fri 28 Mar 2025 22:13:15 +0000
ROA not before:           Fri 28 Mar 2025 22:08:15 +0000
ROA not after:            Fri 27 Mar 2026 22:13:15 +0000
asID:                     273051
IP address blocks:        2803:7b90::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D8B2E93B9279EBF3595507F8F48361E0BD2117E64A35FB5F335B42AE022CF488/0/5145CDCB2E8521E02DC6523594019C25D7A03E0C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D8B2E93B9279EBF3595507F8F48361E0BD2117E64A35FB5F335B42AE022CF488/0/5145CDCB2E8521E02DC6523594019C25D7A03E0C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5145CDCB2E8521E02DC6523594019C25D7A03E0C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Apr 2025 22:17:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:47:18:0d:81:50:e2:84:a8:df:29:fe:3b:e9:c9:8d:6f:16:7a:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5145CDCB2E8521E02DC6523594019C25D7A03E0C
        Validity
            Not Before: Mar 28 22:08:15 2025 GMT
            Not After : Mar 27 22:13:15 2026 GMT
        Subject: CN=E154B65D1CE0779C0EBCC441D10967A4029FB327
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:96:88:79:6e:04:69:84:76:e3:c7:4f:41:c7:
                    37:0a:02:64:80:34:05:b8:36:f2:06:59:79:3b:f3:
                    18:9c:96:3e:ac:19:b6:c4:cf:c2:df:22:bd:b0:44:
                    3f:9b:b4:1b:c7:d8:24:a0:c2:fb:d8:ed:44:37:14:
                    87:33:eb:63:8b:01:82:8c:75:c3:c2:d8:94:61:ed:
                    b2:4f:af:22:8e:91:82:76:f5:50:cc:17:2d:38:c0:
                    62:a6:43:85:eb:13:73:14:2e:78:77:bc:47:3f:ac:
                    c7:df:c7:84:5a:10:92:f6:5c:38:0c:df:cb:ff:11:
                    49:19:ab:35:ff:1f:e7:a3:e0:37:48:db:6d:2b:79:
                    e4:62:ea:60:b2:c8:26:3a:9b:4c:5b:94:5f:cc:22:
                    2c:7f:ff:95:ed:af:e7:7d:74:22:fd:07:a3:5d:a3:
                    f3:ae:6d:b7:fa:46:af:af:f8:02:f6:4c:61:2a:78:
                    d6:b4:51:7f:2c:6e:4e:9d:a9:17:d6:0d:12:3f:f4:
                    ac:8b:dd:00:d4:e4:c0:43:50:79:42:b1:57:53:ca:
                    c3:e1:7f:61:cb:4f:74:0b:1d:f3:5f:b3:f6:2e:12:
                    d2:dc:fe:fa:49:2a:20:63:40:20:05:04:a2:5e:1e:
                    23:80:f5:70:cb:4c:4c:84:4a:c4:4a:28:44:39:f5:
                    c9:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:54:B6:5D:1C:E0:77:9C:0E:BC:C4:41:D1:09:67:A4:02:9F:B3:27
            X509v3 Authority Key Identifier:
                keyid:51:45:CD:CB:2E:85:21:E0:2D:C6:52:35:94:01:9C:25:D7:A0:3E:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D8B2E93B9279EBF3595507F8F48361E0BD2117E64A35FB5F335B42AE022CF488/0/5145CDCB2E8521E02DC6523594019C25D7A03E0C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5145CDCB2E8521E02DC6523594019C25D7A03E0C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D8B2E93B9279EBF3595507F8F48361E0BD2117E64A35FB5F335B42AE022CF488/0/323830333a376239303a3a2f33322d3634203d3e20323733303531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7b90::/32

    Signature Algorithm: sha256WithRSAEncryption
         97:c6:b3:b5:e3:6d:a4:66:be:6f:0f:f2:1e:8f:8a:a1:a2:7c:
         2e:ec:78:1d:7a:4d:79:0a:26:04:1d:ab:2e:50:db:f1:17:57:
         55:5a:b5:13:f6:c1:18:e8:11:57:72:6a:68:9f:14:97:39:56:
         1c:85:fc:a1:fa:1b:74:f3:48:94:c4:bc:1c:6f:db:f3:5b:13:
         27:25:c0:e2:af:d7:6c:b6:ed:b5:2a:89:6f:54:36:9d:bd:4b:
         ba:6f:55:1c:30:8a:2f:2e:c9:d7:c3:ef:dc:a9:eb:b6:d3:18:
         20:08:03:77:ea:b4:9b:83:f9:44:f3:ad:6a:27:b9:78:20:06:
         ff:65:8c:52:1c:b0:69:3c:be:14:92:c6:b6:fd:82:be:0f:90:
         fc:d5:d0:53:91:0a:d5:68:e1:e4:c9:98:c7:6d:06:0e:ae:47:
         2a:39:9c:98:26:de:e8:cf:b6:80:62:fb:6e:ee:75:45:98:62:
         f2:65:08:56:d9:7e:6a:bc:25:a4:96:51:3e:e1:6b:c9:8a:b9:
         18:d4:a7:b2:e5:0d:29:70:a6:61:db:d9:9f:e2:4c:48:99:1c:
         e9:16:28:a6:1d:4e:26:a4:b3:f5:39:59:b3:6b:59:9e:9d:4f:
         7d:73:aa:0c:b4:d1:f8:44:9b:33:1a:0e:ea:2f:40:9a:a3:ce:
         c3:8b:ce:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:53:41 2025 by rpki-client