Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DE05BDBDE3766D440DC7DE2395A246F54F7E618DBDD6C07A8B7C0FA4A0332187/0/323830333a323239303a3a2f33322d3438203d3e20323732383535.roa
File:                     323830333a323239303a3a2f33322d3438203d3e20323732383535.roa (raw, json)
Hash identifier:          Obx90/TpkDjfBWOnS+4N7HdvHLDBnqblLKKZtMo9mUY=
Subject key identifier:   54:53:D4:A5:36:94:3D:5F:25:B9:19:01:BE:F4:BD:A5:A2:82:E1:4B
Certificate issuer:       /CN=98303DA39DF27B071420C90738870D19ED168006
Certificate serial:       69155CC542470558E5AD56769209C4CB0CA9D00F
Authority key identifier: 98:30:3D:A3:9D:F2:7B:07:14:20:C9:07:38:87:0D:19:ED:16:80:06
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/98303DA39DF27B071420C90738870D19ED168006.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DE05BDBDE3766D440DC7DE2395A246F54F7E618DBDD6C07A8B7C0FA4A0332187/0/323830333a323239303a3a2f33322d3438203d3e20323732383535.roa
Signing time:             Tue 04 Feb 2025 18:46:49 +0000
ROA not before:           Tue 04 Feb 2025 18:41:49 +0000
ROA not after:            Tue 03 Feb 2026 18:46:49 +0000
asID:                     272855
IP address blocks:        2803:2290::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DE05BDBDE3766D440DC7DE2395A246F54F7E618DBDD6C07A8B7C0FA4A0332187/0/98303DA39DF27B071420C90738870D19ED168006.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DE05BDBDE3766D440DC7DE2395A246F54F7E618DBDD6C07A8B7C0FA4A0332187/0/98303DA39DF27B071420C90738870D19ED168006.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/98303DA39DF27B071420C90738870D19ED168006.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:15:5c:c5:42:47:05:58:e5:ad:56:76:92:09:c4:cb:0c:a9:d0:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98303DA39DF27B071420C90738870D19ED168006
        Validity
            Not Before: Feb  4 18:41:49 2025 GMT
            Not After : Feb  3 18:46:49 2026 GMT
        Subject: CN=5453D4A536943D5F25B91901BEF4BDA5A282E14B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:c9:66:a2:13:0e:25:ab:e9:ec:f6:29:09:51:
                    43:5c:5e:72:0c:18:8e:d9:58:2a:cc:c2:2d:e2:9d:
                    64:f9:06:59:ff:e8:8a:2e:95:b9:5b:6b:a9:24:e4:
                    dd:0f:e2:e4:a3:0f:23:e3:b2:46:8b:e1:15:5b:f0:
                    4f:d3:a5:6c:be:82:b1:42:7c:e8:f8:2b:16:2a:e3:
                    18:60:47:9b:cd:af:48:63:0a:6f:bc:c3:0d:0a:5d:
                    4d:88:82:7a:e8:ef:7a:1f:91:ce:58:c8:8e:5e:2f:
                    95:06:c5:7e:2f:5a:21:92:a8:fc:5e:a9:4d:17:98:
                    96:f4:b0:61:35:d8:6e:04:1a:9e:1e:c7:b6:1f:1d:
                    e4:8f:21:e7:f5:3e:54:94:23:23:69:65:20:ed:29:
                    bc:aa:16:b8:80:00:46:d3:6b:54:94:5b:c6:7c:61:
                    15:50:3e:7d:5e:16:03:91:3c:65:ed:32:2d:c8:59:
                    6a:9a:da:53:36:10:96:b9:a6:75:89:44:91:80:bd:
                    17:bb:a4:fe:d5:8d:61:53:1e:52:b5:7f:0f:73:0f:
                    80:3d:a9:82:1c:60:e0:08:8a:7c:13:e2:e0:bc:6d:
                    77:fd:8c:7a:13:66:03:64:7a:e6:a1:e9:0f:35:d9:
                    91:82:a6:17:04:c9:de:5c:8d:8c:48:a4:54:32:d3:
                    cd:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:53:D4:A5:36:94:3D:5F:25:B9:19:01:BE:F4:BD:A5:A2:82:E1:4B
            X509v3 Authority Key Identifier:
                keyid:98:30:3D:A3:9D:F2:7B:07:14:20:C9:07:38:87:0D:19:ED:16:80:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DE05BDBDE3766D440DC7DE2395A246F54F7E618DBDD6C07A8B7C0FA4A0332187/0/98303DA39DF27B071420C90738870D19ED168006.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/98303DA39DF27B071420C90738870D19ED168006.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DE05BDBDE3766D440DC7DE2395A246F54F7E618DBDD6C07A8B7C0FA4A0332187/0/323830333a323239303a3a2f33322d3438203d3e20323732383535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2290::/32

    Signature Algorithm: sha256WithRSAEncryption
         02:f1:01:73:a6:36:b9:3e:5b:cc:41:11:4e:e1:62:46:e6:d5:
         7b:15:95:2d:f2:cc:da:94:96:9d:79:18:57:fa:71:43:64:50:
         69:2f:3a:bf:cc:cc:2d:af:2d:bd:33:3a:c3:89:23:1b:15:1e:
         8e:e8:ec:21:32:d4:92:f8:7e:c1:1b:80:65:9f:72:bc:c3:25:
         f2:42:6f:96:3a:96:bb:b7:26:3f:c9:23:9d:b4:b4:81:87:01:
         80:bf:d4:c9:f4:f0:5f:98:e0:56:9c:88:62:4e:ed:63:0c:cd:
         fd:7f:b5:8f:0d:48:bc:4a:c4:03:61:3e:dd:0e:06:97:63:a1:
         55:07:d6:88:72:88:d6:52:8a:02:14:17:da:5e:a9:43:84:06:
         89:dd:46:b6:cd:83:f6:59:c3:4a:c8:f9:cf:15:b5:78:82:e4:
         e5:fb:10:c1:d0:9e:b4:27:95:d1:47:f3:be:3a:86:cb:7c:b2:
         5e:70:e8:33:29:ef:ac:73:84:71:57:d3:64:e1:05:f6:be:3b:
         0f:c8:c7:88:59:91:10:53:3e:ca:27:90:62:ed:f7:d8:43:4d:
         30:ac:55:c9:41:95:40:e7:66:43:d6:9f:75:4d:42:7a:0a:49:
         9b:8c:cf:8f:93:3a:e9:ff:86:d5:b6:0d:c2:79:62:6f:a6:a2:
         2a:09:a6:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:10:23 2025 by rpki-client