Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DA66D71721CB7155993C1E47A85FA41D91EE0B6D9891A58CA8A444AE267E5638/0/323830333a643565303a3a2f33322d3438203d3e20323633383132.roa
File:                     323830333a643565303a3a2f33322d3438203d3e20323633383132.roa (raw, json)
Hash identifier:          PUkJUs2LIENvWysZ6BrKpldm+oli723WF1j36QdUFLI=
Subject key identifier:   EF:E7:78:EF:D9:08:0C:49:20:EB:8F:3D:96:C7:4C:CD:82:83:C7:E2
Certificate issuer:       /CN=534C99354C22A0048A232EFCDC85F70E7478E04F
Certificate serial:       3116A46A9DD49FC41E49FE8B45F2484AC11C31CF
Authority key identifier: 53:4C:99:35:4C:22:A0:04:8A:23:2E:FC:DC:85:F7:0E:74:78:E0:4F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/534C99354C22A0048A232EFCDC85F70E7478E04F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DA66D71721CB7155993C1E47A85FA41D91EE0B6D9891A58CA8A444AE267E5638/0/323830333a643565303a3a2f33322d3438203d3e20323633383132.roa
Signing time:             Tue 04 Feb 2025 18:48:20 +0000
ROA not before:           Tue 04 Feb 2025 18:43:20 +0000
ROA not after:            Tue 03 Feb 2026 18:48:20 +0000
asID:                     263812
IP address blocks:        2803:d5e0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DA66D71721CB7155993C1E47A85FA41D91EE0B6D9891A58CA8A444AE267E5638/0/534C99354C22A0048A232EFCDC85F70E7478E04F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DA66D71721CB7155993C1E47A85FA41D91EE0B6D9891A58CA8A444AE267E5638/0/534C99354C22A0048A232EFCDC85F70E7478E04F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/534C99354C22A0048A232EFCDC85F70E7478E04F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:16:a4:6a:9d:d4:9f:c4:1e:49:fe:8b:45:f2:48:4a:c1:1c:31:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=534C99354C22A0048A232EFCDC85F70E7478E04F
        Validity
            Not Before: Feb  4 18:43:20 2025 GMT
            Not After : Feb  3 18:48:20 2026 GMT
        Subject: CN=EFE778EFD9080C4920EB8F3D96C74CCD8283C7E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c0:e2:96:c6:fd:d8:05:1c:a6:33:d5:31:36:
                    9c:5b:86:0a:c8:5b:82:b2:62:2b:ba:f6:10:34:7c:
                    1a:0e:9c:77:82:50:e1:c3:e5:c9:39:f5:23:df:c3:
                    6c:6a:18:00:3b:e6:62:2b:be:59:35:09:82:a4:c3:
                    42:e9:f9:6d:16:17:45:25:cf:0d:7b:a8:d8:ce:d4:
                    2b:78:e6:ed:00:56:ae:a1:7b:5e:17:8d:72:50:cb:
                    7d:fb:0e:e7:ed:b5:94:2d:44:01:bc:f2:00:54:30:
                    86:9e:be:b9:4a:ef:54:0f:67:f4:f2:97:5c:6d:48:
                    82:69:dc:9d:8d:63:56:19:7d:33:fb:15:1b:47:f8:
                    27:5b:29:e7:55:0e:da:ed:8d:56:c3:0f:b3:1c:62:
                    a7:81:f3:fd:2a:ad:fa:32:4e:f6:12:95:7d:a4:96:
                    08:c5:d9:9f:1b:d7:55:cb:dd:4c:25:38:04:e2:b3:
                    a8:89:ee:a9:dd:3c:95:e0:fd:91:ed:1d:76:ff:cf:
                    80:a9:ca:56:a3:74:81:e6:ff:c9:59:f5:87:77:ab:
                    29:af:97:86:a5:e9:a2:dc:4a:62:74:8e:2f:1b:5b:
                    c3:89:f3:8b:af:db:b6:d7:41:bd:f4:8e:8c:ea:fe:
                    67:66:a5:4c:b0:ca:8c:84:b8:4f:f1:4b:31:b6:0e:
                    b1:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:E7:78:EF:D9:08:0C:49:20:EB:8F:3D:96:C7:4C:CD:82:83:C7:E2
            X509v3 Authority Key Identifier:
                keyid:53:4C:99:35:4C:22:A0:04:8A:23:2E:FC:DC:85:F7:0E:74:78:E0:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DA66D71721CB7155993C1E47A85FA41D91EE0B6D9891A58CA8A444AE267E5638/0/534C99354C22A0048A232EFCDC85F70E7478E04F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/534C99354C22A0048A232EFCDC85F70E7478E04F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DA66D71721CB7155993C1E47A85FA41D91EE0B6D9891A58CA8A444AE267E5638/0/323830333a643565303a3a2f33322d3438203d3e20323633383132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d5e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         bc:ba:9b:f1:e5:b6:dc:f5:b4:85:b3:06:c9:ea:c4:0a:d0:37:
         bb:8a:2c:38:7e:3c:a2:9f:35:04:a8:20:d2:2a:7f:7c:dc:e1:
         a1:04:1b:f2:63:e7:57:f9:5b:2a:d9:7b:23:87:41:2e:49:03:
         c9:11:9a:60:69:b6:11:bf:77:4a:cd:a2:ef:d1:c9:72:bd:b8:
         24:a9:9b:4c:31:c4:37:e3:e3:55:b4:2d:97:d8:78:b5:ec:33:
         ac:75:c5:9a:89:73:77:3c:81:00:1f:72:2c:8c:74:f0:11:07:
         21:a3:6d:35:97:ed:e9:42:f6:13:fe:36:af:83:ff:db:01:5a:
         8b:58:69:ed:91:30:c0:69:6d:49:f0:a0:2e:4e:1e:c1:2a:ac:
         1b:27:94:ee:11:3a:e9:5e:cc:2f:81:a3:7b:81:d3:58:3e:d1:
         d5:3d:bc:c1:6e:0d:48:64:ad:5e:ba:4b:44:26:8e:82:61:b9:
         b5:24:e1:35:dc:f1:88:92:52:0d:b6:72:d6:c2:85:5c:1b:d7:
         92:83:3c:89:d9:d6:b1:33:16:5b:25:4f:f5:c3:06:ee:94:8b:
         f4:d4:48:77:b2:8b:66:4e:d4:f6:98:37:83:fb:00:fb:d4:76:
         28:21:d2:be:15:33:d7:78:9a:1f:3c:ad:e0:e7:c6:c6:b8:dd:
         28:19:2f:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:36:45 2025 by rpki-client