Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DADF6F2635782C95EA66F8DD5DB0E82E1AFA021F7BFD5F93A49B990278F350A5/0/323830333a356238303a3a2f33322d3332203d3e20323633363939.roa
File:                     323830333a356238303a3a2f33322d3332203d3e20323633363939.roa (raw, json)
Hash identifier:          KfctYogx96ZExtGFsJi1Me5jXSypYAXiWnJPQlOcxWo=
Subject key identifier:   B6:75:64:96:AF:E9:31:01:EE:51:BB:F4:A4:BC:A9:0F:A5:3F:FC:5C
Certificate issuer:       /CN=5E40F509D8EC3462F8B8D1E22D50FFEE0848A41F
Certificate serial:       53B6663D63E2D824FF18D63A2649156777A5414A
Authority key identifier: 5E:40:F5:09:D8:EC:34:62:F8:B8:D1:E2:2D:50:FF:EE:08:48:A4:1F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5E40F509D8EC3462F8B8D1E22D50FFEE0848A41F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DADF6F2635782C95EA66F8DD5DB0E82E1AFA021F7BFD5F93A49B990278F350A5/0/323830333a356238303a3a2f33322d3332203d3e20323633363939.roa
Signing time:             Tue 04 Feb 2025 18:06:13 +0000
ROA not before:           Tue 04 Feb 2025 18:01:13 +0000
ROA not after:            Tue 03 Feb 2026 18:06:13 +0000
asID:                     263699
IP address blocks:        2803:5b80::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DADF6F2635782C95EA66F8DD5DB0E82E1AFA021F7BFD5F93A49B990278F350A5/0/5E40F509D8EC3462F8B8D1E22D50FFEE0848A41F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DADF6F2635782C95EA66F8DD5DB0E82E1AFA021F7BFD5F93A49B990278F350A5/0/5E40F509D8EC3462F8B8D1E22D50FFEE0848A41F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5E40F509D8EC3462F8B8D1E22D50FFEE0848A41F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 13:55:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:b6:66:3d:63:e2:d8:24:ff:18:d6:3a:26:49:15:67:77:a5:41:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5E40F509D8EC3462F8B8D1E22D50FFEE0848A41F
        Validity
            Not Before: Feb  4 18:01:13 2025 GMT
            Not After : Feb  3 18:06:13 2026 GMT
        Subject: CN=B6756496AFE93101EE51BBF4A4BCA90FA53FFC5C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:c8:5c:0c:73:17:cc:eb:34:a6:18:ad:a1:f7:
                    b6:b3:78:29:53:0c:dc:25:3d:bb:e8:8a:98:8c:3c:
                    e7:f5:5b:83:9d:53:f6:4b:72:85:81:85:9f:36:c9:
                    f7:12:71:c3:bf:8f:07:ec:33:5a:e1:2a:6f:73:c6:
                    57:0e:66:63:fc:42:04:57:c7:fe:c7:40:46:0e:c7:
                    f2:ed:67:66:28:45:72:6c:97:2e:59:29:e1:ab:51:
                    1e:02:6b:04:34:0e:02:63:90:3d:d5:6e:87:94:17:
                    7d:5e:78:b7:3a:ef:3f:8a:eb:e9:31:82:65:99:e9:
                    c3:9f:ac:81:40:1e:8f:0f:bf:92:ca:03:b9:0a:7d:
                    f3:ef:46:90:1c:2c:cf:e8:1c:e0:eb:1b:d3:d1:c4:
                    df:fe:ed:cb:34:90:56:1b:2c:1b:4a:46:26:96:bb:
                    96:42:17:ef:b3:40:d0:af:a0:c8:3f:d7:fb:31:61:
                    4a:51:d0:e7:97:85:0b:5c:56:94:a1:b2:1c:46:98:
                    c3:04:05:dd:00:7e:ab:99:11:f3:f4:99:61:87:e5:
                    8d:4f:d0:45:58:5c:7f:59:0e:80:53:76:fe:35:9a:
                    48:fb:a5:df:78:a5:e1:53:7a:89:5e:97:52:0c:74:
                    1d:fb:b2:49:9f:a3:ae:16:0a:ee:9a:d9:ed:88:96:
                    dc:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:75:64:96:AF:E9:31:01:EE:51:BB:F4:A4:BC:A9:0F:A5:3F:FC:5C
            X509v3 Authority Key Identifier:
                keyid:5E:40:F5:09:D8:EC:34:62:F8:B8:D1:E2:2D:50:FF:EE:08:48:A4:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DADF6F2635782C95EA66F8DD5DB0E82E1AFA021F7BFD5F93A49B990278F350A5/0/5E40F509D8EC3462F8B8D1E22D50FFEE0848A41F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5E40F509D8EC3462F8B8D1E22D50FFEE0848A41F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DADF6F2635782C95EA66F8DD5DB0E82E1AFA021F7BFD5F93A49B990278F350A5/0/323830333a356238303a3a2f33322d3332203d3e20323633363939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5b80::/32

    Signature Algorithm: sha256WithRSAEncryption
         79:51:ee:41:0c:3f:ca:25:28:3e:cf:80:1c:a0:f6:3c:8f:91:
         ff:8e:6c:f0:41:e0:de:92:67:cb:a1:0f:bc:5f:60:e0:2b:16:
         68:74:48:02:0d:eb:4b:fb:dd:4a:85:b6:8d:28:a3:c8:87:89:
         d5:2e:e2:b1:f3:88:d5:8c:c7:57:33:51:b1:c7:e9:3d:a3:81:
         de:cd:f9:19:db:d6:ad:4d:11:29:1a:c4:07:fb:67:0d:92:e5:
         9a:10:3a:e0:62:38:e0:36:4b:d5:5a:dc:3e:ce:f3:8a:4e:0e:
         b7:3b:08:b8:3a:c5:c4:89:8b:f5:30:13:21:31:44:d9:23:27:
         53:fd:ce:77:9f:8e:7c:e7:0f:f9:c2:60:68:f0:4a:a0:17:d4:
         79:b8:d3:aa:e4:9f:92:c0:8e:70:42:45:2d:fd:ca:9e:4e:50:
         e1:77:76:f1:93:cf:bc:c7:52:f4:c1:1e:e2:0f:d5:64:2b:cb:
         f6:36:ea:f0:71:08:89:13:91:7a:db:d0:8e:aa:bf:7a:3f:90:
         62:4b:a3:4b:dd:49:71:a2:8a:f7:c0:d1:14:5a:75:d3:5a:53:
         49:05:4f:1a:50:a1:89:cb:a8:74:e8:01:f4:29:a8:e8:45:97:
         77:dd:9e:8b:db:af:f6:5a:c0:06:84:5b:f3:4b:a3:d1:cd:5d:
         80:09:b4:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 17:36:01 2025 by rpki-client