Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E01981304F4D264211E0668ECB22A5B759ABB7E0BB1E0B93DBF25FA2530A0822/0/323830333a623030303a3a2f33322d3332203d3e203237393735.roa
File:                     323830333a623030303a3a2f33322d3332203d3e203237393735.roa (raw, json)
Hash identifier:          1XCH9F47kfojFAR/NAb+mvxJMytNjWKTHzi0EnIWKNU=
Subject key identifier:   FB:DF:30:B2:06:20:E6:CD:77:1C:2D:CD:B5:FB:8C:FB:D1:F4:BD:0D
Certificate issuer:       /CN=5D0024A900025CCFA9CAF531A9C96683C1BA2338
Certificate serial:       14ECD8E6C7D0DE03068F609CC4C748675FECC837
Authority key identifier: 5D:00:24:A9:00:02:5C:CF:A9:CA:F5:31:A9:C9:66:83:C1:BA:23:38
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D0024A900025CCFA9CAF531A9C96683C1BA2338.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E01981304F4D264211E0668ECB22A5B759ABB7E0BB1E0B93DBF25FA2530A0822/0/323830333a623030303a3a2f33322d3332203d3e203237393735.roa
Signing time:             Tue 04 Feb 2025 18:48:16 +0000
ROA not before:           Tue 04 Feb 2025 18:43:16 +0000
ROA not after:            Tue 03 Feb 2026 18:48:16 +0000
asID:                     27975
IP address blocks:        2803:b000::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E01981304F4D264211E0668ECB22A5B759ABB7E0BB1E0B93DBF25FA2530A0822/0/5D0024A900025CCFA9CAF531A9C96683C1BA2338.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E01981304F4D264211E0668ECB22A5B759ABB7E0BB1E0B93DBF25FA2530A0822/0/5D0024A900025CCFA9CAF531A9C96683C1BA2338.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D0024A900025CCFA9CAF531A9C96683C1BA2338.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 20:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:ec:d8:e6:c7:d0:de:03:06:8f:60:9c:c4:c7:48:67:5f:ec:c8:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D0024A900025CCFA9CAF531A9C96683C1BA2338
        Validity
            Not Before: Feb  4 18:43:16 2025 GMT
            Not After : Feb  3 18:48:16 2026 GMT
        Subject: CN=FBDF30B20620E6CD771C2DCDB5FB8CFBD1F4BD0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:fd:44:1d:8f:d9:51:6b:0d:80:b0:52:d5:d8:
                    5f:a6:30:bb:f1:e6:8e:18:5e:0a:6e:a5:8c:33:5f:
                    62:81:62:ea:f7:58:e7:7f:9a:43:2c:0f:c2:b3:ec:
                    b3:6d:83:4d:c9:c9:56:77:5e:8e:88:c8:3b:f1:7b:
                    27:15:84:b4:d8:cd:65:90:7a:05:73:67:7b:8f:0f:
                    98:da:74:63:c1:ba:71:15:f4:74:cd:b9:ea:45:e6:
                    36:7a:2c:42:8c:b3:02:48:64:46:fd:93:49:f2:2d:
                    aa:b4:30:d9:3e:b7:b9:7e:f9:be:58:92:27:66:23:
                    fa:58:17:30:29:2e:a5:11:e7:b0:85:c4:f3:a9:8d:
                    81:19:ec:11:41:51:64:59:ab:7a:14:75:86:48:cb:
                    fa:4a:3c:62:ad:f0:c2:cc:8e:5c:1b:97:cf:8e:78:
                    12:63:ac:22:f8:9b:7b:92:18:9d:d0:af:ab:d7:3e:
                    15:ee:8c:a2:66:2a:3a:a3:fb:b1:5b:bb:a7:7b:7b:
                    55:fe:3e:23:f9:ee:a8:e7:37:78:b1:f9:19:85:85:
                    ad:30:b0:ac:c6:84:36:e1:c3:a3:fb:b6:b0:5d:78:
                    b8:35:0a:68:ab:38:e6:4b:8e:25:9f:c0:81:a0:91:
                    ba:e8:60:5b:09:9b:7e:fa:24:b1:79:23:1f:4d:bc:
                    1c:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:DF:30:B2:06:20:E6:CD:77:1C:2D:CD:B5:FB:8C:FB:D1:F4:BD:0D
            X509v3 Authority Key Identifier:
                keyid:5D:00:24:A9:00:02:5C:CF:A9:CA:F5:31:A9:C9:66:83:C1:BA:23:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E01981304F4D264211E0668ECB22A5B759ABB7E0BB1E0B93DBF25FA2530A0822/0/5D0024A900025CCFA9CAF531A9C96683C1BA2338.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D0024A900025CCFA9CAF531A9C96683C1BA2338.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E01981304F4D264211E0668ECB22A5B759ABB7E0BB1E0B93DBF25FA2530A0822/0/323830333a623030303a3a2f33322d3332203d3e203237393735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b000::/32

    Signature Algorithm: sha256WithRSAEncryption
         93:07:d8:5f:30:f4:1d:a5:ee:6c:3b:0c:3a:ce:12:7d:04:97:
         08:53:4a:c2:4c:27:a6:64:93:77:7c:e1:4b:27:0a:6c:a0:e4:
         67:5e:3c:40:3a:92:f0:03:da:e5:47:fb:b4:7c:44:90:84:7f:
         83:6c:35:d5:90:29:4c:6f:eb:12:36:64:a7:d4:aa:52:12:ff:
         21:8e:c9:b2:87:e1:eb:1c:6c:2b:c1:9d:57:88:00:07:9f:3a:
         9e:0d:1b:1d:fd:9d:d3:5c:13:b5:0b:95:a0:1d:fe:89:e9:ae:
         16:96:99:79:43:59:94:03:9a:52:db:c5:41:ce:e9:78:3f:90:
         2a:7a:21:87:1d:f7:79:c8:74:06:0c:cf:47:75:9f:cf:a1:7f:
         71:43:f7:bc:0b:38:a9:45:3b:2a:a1:d5:a7:17:b4:16:0b:8d:
         2a:6c:65:0b:c4:28:37:e2:e9:78:91:50:7c:29:40:d9:17:fd:
         7e:35:0d:d0:4c:f8:4e:85:58:94:bf:9a:36:c7:59:8b:b5:ba:
         d2:8e:33:21:3a:77:83:1c:aa:c0:eb:44:ff:a7:e7:f1:03:5f:
         55:79:a7:80:cc:e7:a7:75:ea:a1:d5:e1:56:01:3f:b2:92:12:
         dc:6c:b9:aa:6d:17:99:12:a9:48:ac:95:69:2b:55:55:b1:03:
         47:c8:b3:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:58:49 2025 by rpki-client