Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D8BCCB388650063C38404DF51523586457808D54F6B505C66F3ED997D62614CD/0/323830333a393236303a3a2f33322d3332203d3e203138363738.roa
File:                     323830333a393236303a3a2f33322d3332203d3e203138363738.roa (raw, json)
Hash identifier:          V1om6wxT0eMAebjSpp8YsM7GrFfA7KkGHsbi+grKErQ=
Subject key identifier:   43:07:F0:EB:39:84:2D:02:78:C6:C0:55:22:62:B3:A1:92:69:5F:80
Certificate issuer:       /CN=E48C5AD5CAD244C1A19CF65CED538162C984F4AD
Certificate serial:       5BE18B1C2787486513B8CC9DB89712B78E46111B
Authority key identifier: E4:8C:5A:D5:CA:D2:44:C1:A1:9C:F6:5C:ED:53:81:62:C9:84:F4:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E48C5AD5CAD244C1A19CF65CED538162C984F4AD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D8BCCB388650063C38404DF51523586457808D54F6B505C66F3ED997D62614CD/0/323830333a393236303a3a2f33322d3332203d3e203138363738.roa
Signing time:             Tue 04 Feb 2025 18:49:11 +0000
ROA not before:           Tue 04 Feb 2025 18:44:11 +0000
ROA not after:            Tue 03 Feb 2026 18:49:11 +0000
asID:                     18678
IP address blocks:        2803:9260::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D8BCCB388650063C38404DF51523586457808D54F6B505C66F3ED997D62614CD/0/E48C5AD5CAD244C1A19CF65CED538162C984F4AD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D8BCCB388650063C38404DF51523586457808D54F6B505C66F3ED997D62614CD/0/E48C5AD5CAD244C1A19CF65CED538162C984F4AD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E48C5AD5CAD244C1A19CF65CED538162C984F4AD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:e1:8b:1c:27:87:48:65:13:b8:cc:9d:b8:97:12:b7:8e:46:11:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E48C5AD5CAD244C1A19CF65CED538162C984F4AD
        Validity
            Not Before: Feb  4 18:44:11 2025 GMT
            Not After : Feb  3 18:49:11 2026 GMT
        Subject: CN=4307F0EB39842D0278C6C0552262B3A192695F80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:f7:ac:5f:29:40:20:5b:e7:3f:70:a9:e4:a4:
                    85:d1:06:83:37:29:40:80:b1:34:e9:53:16:2f:8e:
                    58:f1:74:b8:a6:7b:e0:a3:29:06:92:b8:56:d8:61:
                    d1:7c:cb:aa:20:41:60:fe:33:c2:77:e6:ed:91:40:
                    bc:03:86:72:a4:5c:27:cc:9b:ad:c7:c1:89:41:f7:
                    35:7c:67:03:29:81:2c:cf:1c:f7:eb:13:b8:68:1b:
                    31:4e:a0:54:cf:f8:76:77:9d:49:26:a0:60:66:ee:
                    04:30:fe:28:19:a3:f4:36:f6:36:12:52:07:ca:ea:
                    6f:31:d3:f5:51:ad:b6:71:40:15:e2:3d:d2:83:8a:
                    63:a1:90:9c:cd:67:e3:af:97:8e:1c:f4:c1:6a:58:
                    e6:89:bc:b8:c5:73:7e:fc:ff:8e:31:4d:e2:a3:a0:
                    9a:73:89:a4:d4:d2:e5:06:cb:c1:22:cb:4d:65:65:
                    3a:d0:c1:ef:36:25:eb:3c:7d:c8:9b:8c:df:22:4c:
                    2f:06:52:eb:ff:40:fd:e6:cf:ed:86:38:db:eb:63:
                    6c:2b:70:78:f5:f7:a8:6c:b5:30:d8:d1:9f:57:38:
                    72:2a:de:d1:28:5f:6b:eb:f2:1f:d0:52:ec:63:c6:
                    e4:6d:93:91:5b:2a:8a:d3:ad:1d:0d:bf:05:e4:5b:
                    30:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:07:F0:EB:39:84:2D:02:78:C6:C0:55:22:62:B3:A1:92:69:5F:80
            X509v3 Authority Key Identifier:
                keyid:E4:8C:5A:D5:CA:D2:44:C1:A1:9C:F6:5C:ED:53:81:62:C9:84:F4:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D8BCCB388650063C38404DF51523586457808D54F6B505C66F3ED997D62614CD/0/E48C5AD5CAD244C1A19CF65CED538162C984F4AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E48C5AD5CAD244C1A19CF65CED538162C984F4AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D8BCCB388650063C38404DF51523586457808D54F6B505C66F3ED997D62614CD/0/323830333a393236303a3a2f33322d3332203d3e203138363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9260::/32

    Signature Algorithm: sha256WithRSAEncryption
         ca:76:73:e5:0c:2e:82:95:ef:8b:e7:64:b0:2a:52:05:dc:2e:
         c6:03:9d:2d:65:44:70:1b:c8:26:c7:4c:23:6d:53:73:c2:d2:
         bb:54:c8:8b:57:b8:63:64:f0:fa:2d:24:2e:24:54:2e:8a:c2:
         01:c8:49:bd:16:63:17:00:a9:af:76:02:78:8b:aa:7e:e9:a7:
         a6:2c:93:10:46:36:03:53:bc:f1:8b:4c:e4:8e:47:ba:25:46:
         f1:10:23:28:80:bc:09:00:c9:58:b1:9a:9e:08:cf:74:bb:c6:
         4f:68:59:c0:21:35:10:e9:88:b5:ea:12:ba:b0:b8:aa:d4:90:
         4e:2e:b8:ff:c3:04:e6:46:8b:5f:9d:6a:07:d9:e2:9c:7a:78:
         c5:84:94:25:e7:2e:d1:38:f0:10:c3:ad:a0:2b:0f:3f:ee:25:
         87:a8:c3:fc:08:26:ae:d3:c7:11:76:6d:47:03:92:f1:4f:fa:
         a6:10:7a:ba:0d:ba:a1:c2:21:e6:1a:fc:bd:96:ab:e9:28:c5:
         fe:b8:ea:ca:49:75:96:1e:38:58:58:fa:51:6b:0d:c1:78:28:
         e7:30:c9:70:25:2a:02:fb:3e:2e:b5:b8:a1:01:e2:de:d1:f2:
         b0:1a:fa:d9:a9:a2:d7:b7:63:0b:ee:14:0b:13:63:8f:44:34:
         e8:08:67:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:19:40 2025 by rpki-client