Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DA9596D212E8B66A1192B768B89FF2DAE8E4961D3D9E226AC4978FC6E6AD9F56/0/323830333a356338303a3a2f33322d3438203d3e203239383032.roa
File:                     323830333a356338303a3a2f33322d3438203d3e203239383032.roa (raw, json)
Hash identifier:          LHIEw/iKJsCJYb858z8EsKAhTW8/6M2Ief2kuW11Y6U=
Subject key identifier:   26:59:7E:EC:F9:C1:8F:FB:40:57:3C:75:C1:39:5C:BD:4B:44:E9:72
Certificate issuer:       /CN=E95D7FD5CE56E96E336A6E85C6DE12078D92206F
Certificate serial:       50A896FCD7E2107A15EE1B5643BD63FE5E1A1E5C
Authority key identifier: E9:5D:7F:D5:CE:56:E9:6E:33:6A:6E:85:C6:DE:12:07:8D:92:20:6F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E95D7FD5CE56E96E336A6E85C6DE12078D92206F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DA9596D212E8B66A1192B768B89FF2DAE8E4961D3D9E226AC4978FC6E6AD9F56/0/323830333a356338303a3a2f33322d3438203d3e203239383032.roa
Signing time:             Tue 04 Feb 2025 18:17:43 +0000
ROA not before:           Tue 04 Feb 2025 18:12:43 +0000
ROA not after:            Tue 03 Feb 2026 18:17:43 +0000
asID:                     29802
IP address blocks:        2803:5c80::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DA9596D212E8B66A1192B768B89FF2DAE8E4961D3D9E226AC4978FC6E6AD9F56/0/E95D7FD5CE56E96E336A6E85C6DE12078D92206F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DA9596D212E8B66A1192B768B89FF2DAE8E4961D3D9E226AC4978FC6E6AD9F56/0/E95D7FD5CE56E96E336A6E85C6DE12078D92206F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E95D7FD5CE56E96E336A6E85C6DE12078D92206F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 12 Apr 2025 00:47:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:a8:96:fc:d7:e2:10:7a:15:ee:1b:56:43:bd:63:fe:5e:1a:1e:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E95D7FD5CE56E96E336A6E85C6DE12078D92206F
        Validity
            Not Before: Feb  4 18:12:43 2025 GMT
            Not After : Feb  3 18:17:43 2026 GMT
        Subject: CN=26597EECF9C18FFB40573C75C1395CBD4B44E972
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c0:e8:56:5d:2a:bf:98:f2:ef:4b:e4:ab:71:
                    0c:dd:31:12:b3:ae:4c:4f:9b:8f:13:a1:4a:34:ba:
                    9e:1d:c0:f3:d9:8b:ee:95:a6:7a:b1:20:d2:9e:8f:
                    51:3d:19:46:3c:ae:96:3e:d0:69:9a:83:0a:f9:ae:
                    07:62:36:86:cc:c9:94:06:73:3f:9d:de:15:a0:0c:
                    b3:95:2d:87:e3:1a:ff:c2:34:2c:59:c6:86:6b:c4:
                    fa:ed:ca:a2:8d:d2:ea:c6:ef:37:03:16:96:6a:a9:
                    a9:aa:30:f8:77:53:a9:9d:b7:8a:da:90:a0:d9:07:
                    0c:93:30:d5:5e:d2:56:93:c3:9c:7e:12:54:9e:18:
                    be:7d:fe:34:3a:26:54:73:43:39:b6:e5:35:c6:3b:
                    67:4d:e2:0f:aa:99:ba:ac:14:16:54:02:5e:70:cf:
                    70:a8:c9:1b:6c:1f:3e:88:c8:73:41:60:a7:20:de:
                    04:1c:32:fc:21:cc:21:3a:43:bd:fb:80:77:08:a4:
                    9e:7e:47:4a:b4:6f:65:ac:37:2c:72:81:7e:7e:01:
                    03:2d:c9:0b:af:42:de:79:72:bb:0d:80:1a:2b:8e:
                    5c:fd:42:29:d0:30:ef:94:aa:89:99:a6:75:de:52:
                    ee:33:0f:26:e0:19:b4:f6:5b:45:d5:01:8b:f2:76:
                    f9:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:59:7E:EC:F9:C1:8F:FB:40:57:3C:75:C1:39:5C:BD:4B:44:E9:72
            X509v3 Authority Key Identifier:
                keyid:E9:5D:7F:D5:CE:56:E9:6E:33:6A:6E:85:C6:DE:12:07:8D:92:20:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DA9596D212E8B66A1192B768B89FF2DAE8E4961D3D9E226AC4978FC6E6AD9F56/0/E95D7FD5CE56E96E336A6E85C6DE12078D92206F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E95D7FD5CE56E96E336A6E85C6DE12078D92206F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DA9596D212E8B66A1192B768B89FF2DAE8E4961D3D9E226AC4978FC6E6AD9F56/0/323830333a356338303a3a2f33322d3438203d3e203239383032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5c80::/32

    Signature Algorithm: sha256WithRSAEncryption
         3b:01:09:e6:c4:54:1f:d4:93:c1:09:c6:f0:7b:a0:ce:38:0e:
         65:9b:74:7a:36:cc:56:fc:29:89:84:7b:48:38:83:81:4d:30:
         af:5a:dc:48:ec:2e:18:49:ec:57:c6:ec:e2:bd:3f:3e:c3:28:
         50:cb:da:1c:22:64:9c:82:95:c0:83:88:19:7b:0a:f9:cc:c9:
         1e:41:50:87:8f:f7:b0:00:94:38:44:23:58:d9:b2:b3:c2:3b:
         02:5e:1a:b4:92:4c:90:cb:4a:99:39:cf:8d:9f:d8:ba:00:3b:
         54:ff:e9:e1:17:ca:ca:ca:c6:5a:85:da:82:50:b0:a7:9c:94:
         30:8d:0a:c0:5d:5c:d3:75:7d:c8:6a:68:23:63:02:52:21:65:
         eb:80:f6:43:1c:e7:07:41:48:d5:ea:ed:5a:6b:ba:7c:e0:bd:
         97:ee:3c:b4:1e:cc:ff:cd:ca:8d:bb:1e:01:09:fb:41:c1:43:
         3c:6f:46:38:0b:40:19:58:64:df:60:5a:64:82:e3:a1:ea:21:
         7a:b9:75:ad:10:02:7a:b0:0a:6a:e0:7b:37:9b:af:4c:c4:60:
         e3:e8:88:a0:01:d8:5e:27:a5:c5:04:eb:5e:ab:5c:4a:0a:14:
         72:fa:82:09:c5:cc:fd:39:8e:83:c1:1b:41:05:92:fb:48:76:
         8a:80:6c:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:49:10 2025 by rpki-client