Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DE56898DC87FDB54ED5CF0F204F52F7481694B300B9AC6CB0E9687EF940CE7AE/0/323830333a356138303a3a2f33322d3332203d3e20323632393331.roa
File:                     323830333a356138303a3a2f33322d3332203d3e20323632393331.roa (raw, json)
Hash identifier:          qoQ6B/ZehosavZSGo2I6u99ErPgP1VBMlVrZgAqKRxc=
Subject key identifier:   D7:60:5C:45:77:5E:33:A3:B5:D5:09:59:BB:A9:A7:49:6E:D8:04:9D
Certificate issuer:       /CN=A78765AD08967A6A9A5165858220DC333AEEBF8D
Certificate serial:       35729A608C5F5053A3938314ABEEAC502469992E
Authority key identifier: A7:87:65:AD:08:96:7A:6A:9A:51:65:85:82:20:DC:33:3A:EE:BF:8D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A78765AD08967A6A9A5165858220DC333AEEBF8D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DE56898DC87FDB54ED5CF0F204F52F7481694B300B9AC6CB0E9687EF940CE7AE/0/323830333a356138303a3a2f33322d3332203d3e20323632393331.roa
Signing time:             Tue 04 Feb 2025 18:23:06 +0000
ROA not before:           Tue 04 Feb 2025 18:18:06 +0000
ROA not after:            Tue 03 Feb 2026 18:23:06 +0000
asID:                     262931
IP address blocks:        2803:5a80::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DE56898DC87FDB54ED5CF0F204F52F7481694B300B9AC6CB0E9687EF940CE7AE/0/A78765AD08967A6A9A5165858220DC333AEEBF8D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DE56898DC87FDB54ED5CF0F204F52F7481694B300B9AC6CB0E9687EF940CE7AE/0/A78765AD08967A6A9A5165858220DC333AEEBF8D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A78765AD08967A6A9A5165858220DC333AEEBF8D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 17 Apr 2025 20:03:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:72:9a:60:8c:5f:50:53:a3:93:83:14:ab:ee:ac:50:24:69:99:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A78765AD08967A6A9A5165858220DC333AEEBF8D
        Validity
            Not Before: Feb  4 18:18:06 2025 GMT
            Not After : Feb  3 18:23:06 2026 GMT
        Subject: CN=D7605C45775E33A3B5D50959BBA9A7496ED8049D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:bd:a6:9a:f7:0f:db:dc:81:0f:ea:b6:5e:2e:
                    88:68:c7:4d:e6:65:51:3c:7a:e4:b7:6d:88:02:f6:
                    a7:39:0b:2a:47:88:e4:67:83:39:57:d4:27:01:ff:
                    51:19:17:59:cb:71:b7:6c:24:7f:fb:13:d0:35:87:
                    7c:fb:64:c9:e7:0f:ab:1f:83:d3:21:69:a9:96:d4:
                    0b:0b:e6:63:6f:1d:53:93:a4:02:d0:a1:62:e6:9d:
                    44:8a:ea:7c:3b:44:cf:87:34:71:ec:6a:87:b1:5d:
                    bc:2b:52:a0:95:ef:54:1c:b6:17:3a:9d:d7:92:84:
                    6a:f3:ce:d0:d5:7a:53:99:dc:8c:4c:1b:98:af:97:
                    79:ae:99:8d:19:b0:2d:ea:43:16:9d:f0:81:87:ad:
                    13:4c:ba:c7:58:81:9f:09:72:5a:6a:5e:96:ff:8b:
                    55:bd:2a:9d:1b:fb:aa:b0:d5:8d:be:d5:4d:5e:ca:
                    44:1f:4b:77:96:96:f4:fa:27:05:97:32:24:62:03:
                    5b:5d:47:0c:51:7f:55:35:be:24:e0:0d:1c:61:09:
                    b2:ff:51:98:b5:84:91:57:c6:ab:80:a9:cf:5c:9d:
                    fe:cc:28:0f:77:f1:73:e4:4a:14:74:a2:a6:83:92:
                    ad:98:65:82:af:36:68:c7:0e:1e:41:36:23:66:14:
                    9c:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:60:5C:45:77:5E:33:A3:B5:D5:09:59:BB:A9:A7:49:6E:D8:04:9D
            X509v3 Authority Key Identifier:
                keyid:A7:87:65:AD:08:96:7A:6A:9A:51:65:85:82:20:DC:33:3A:EE:BF:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DE56898DC87FDB54ED5CF0F204F52F7481694B300B9AC6CB0E9687EF940CE7AE/0/A78765AD08967A6A9A5165858220DC333AEEBF8D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A78765AD08967A6A9A5165858220DC333AEEBF8D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DE56898DC87FDB54ED5CF0F204F52F7481694B300B9AC6CB0E9687EF940CE7AE/0/323830333a356138303a3a2f33322d3332203d3e20323632393331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5a80::/32

    Signature Algorithm: sha256WithRSAEncryption
         23:7f:58:ea:c6:a7:9c:47:9b:69:f5:29:05:8b:72:b3:aa:89:
         cd:ce:8e:47:f2:06:92:c7:2e:9b:60:cf:bd:f4:e7:ff:c2:8c:
         59:75:e9:47:6f:8b:2c:84:0f:f0:42:d5:4a:37:23:5c:69:5d:
         28:98:ba:17:8a:a9:bc:01:6f:70:8b:51:2c:5e:5e:d0:96:63:
         0b:81:93:06:82:6e:1b:47:89:be:ce:e6:a7:c1:c5:3e:70:54:
         16:26:09:e1:33:91:6e:e4:7e:19:92:f3:4c:79:10:01:ad:af:
         8e:eb:52:4e:95:f9:7f:d1:27:06:eb:44:66:e0:99:16:b2:10:
         dc:10:b1:19:e9:31:c7:d1:77:9e:0d:8b:a4:01:02:e7:62:c1:
         f4:ce:a2:c1:6f:66:85:cf:5e:a7:e5:6a:a8:11:42:d8:a6:a1:
         e6:bd:77:3e:80:b8:f1:12:ea:82:0a:60:dc:d4:85:48:47:86:
         cf:05:93:cd:6e:68:9c:99:cb:11:ff:68:c6:80:0f:fe:e1:df:
         56:3e:8d:4a:1b:ca:c2:0a:2e:9c:e2:e7:10:fc:64:d8:84:7b:
         b0:04:55:a1:6b:8e:7b:df:d0:f5:28:86:8e:fb:3c:1c:82:d2:
         da:9f:8c:00:38:c0:0a:b6:66:4e:97:0b:51:b6:b1:81:f6:f7:
         f4:bc:c6:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 14:33:26 2025 by rpki-client