Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E0413618314162654813A045056F6DA6351CF5B04AB331DDAAE6AA8E13BB0AB7/0/323830333a3265303a3a2f33322d3438203d3e20323639393137.roa
File:                     323830333a3265303a3a2f33322d3438203d3e20323639393137.roa (raw, json)
Hash identifier:          YAzMBNYMyfly9d1iw7Gd7mYc9jPFRXu99Aa+3cEgM1o=
Subject key identifier:   3B:4B:8A:01:CE:73:DB:A1:F5:C4:6E:5C:28:34:39:78:12:A9:13:0D
Certificate issuer:       /CN=BB28B637F6EE7ED77448EEA8BDB8441FDD54DB06
Certificate serial:       2BBB775EEE81D9EF08A46E9C2EBD02A181141A46
Authority key identifier: BB:28:B6:37:F6:EE:7E:D7:74:48:EE:A8:BD:B8:44:1F:DD:54:DB:06
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BB28B637F6EE7ED77448EEA8BDB8441FDD54DB06.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E0413618314162654813A045056F6DA6351CF5B04AB331DDAAE6AA8E13BB0AB7/0/323830333a3265303a3a2f33322d3438203d3e20323639393137.roa
Signing time:             Tue 04 Feb 2025 20:02:57 +0000
ROA not before:           Tue 04 Feb 2025 19:57:57 +0000
ROA not after:            Tue 03 Feb 2026 20:02:57 +0000
asID:                     269917
IP address blocks:        2803:2e0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E0413618314162654813A045056F6DA6351CF5B04AB331DDAAE6AA8E13BB0AB7/0/BB28B637F6EE7ED77448EEA8BDB8441FDD54DB06.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E0413618314162654813A045056F6DA6351CF5B04AB331DDAAE6AA8E13BB0AB7/0/BB28B637F6EE7ED77448EEA8BDB8441FDD54DB06.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BB28B637F6EE7ED77448EEA8BDB8441FDD54DB06.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:bb:77:5e:ee:81:d9:ef:08:a4:6e:9c:2e:bd:02:a1:81:14:1a:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB28B637F6EE7ED77448EEA8BDB8441FDD54DB06
        Validity
            Not Before: Feb  4 19:57:57 2025 GMT
            Not After : Feb  3 20:02:57 2026 GMT
        Subject: CN=3B4B8A01CE73DBA1F5C46E5C2834397812A9130D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:f2:6a:b7:35:f6:56:2a:04:b6:3b:7a:6f:dc:
                    79:8d:c5:68:ef:f4:cb:bc:fe:6b:bf:94:c7:68:66:
                    40:d5:82:0c:bc:b6:2d:19:ac:3a:7c:5b:9f:c6:09:
                    8c:33:83:7d:9c:9e:92:c2:b1:77:80:c4:86:8a:e9:
                    e7:30:83:0d:d9:1b:1b:b7:a9:2e:5b:66:12:ab:ec:
                    e2:9d:45:57:ba:fc:f1:f0:6d:3c:dd:cb:2a:0f:52:
                    9a:a7:53:fb:69:37:e6:00:45:25:9c:63:73:60:e9:
                    20:a1:cd:70:64:06:17:65:38:a2:f8:fb:81:7d:dc:
                    f2:fe:73:86:e6:7c:76:7f:d6:f1:ac:75:7a:b0:65:
                    a2:af:e0:37:ec:43:13:b3:7b:98:ba:b1:7d:11:94:
                    56:0c:2a:c0:af:52:1f:c4:ff:fe:28:10:bb:92:22:
                    b2:1c:d1:b2:53:78:91:7f:86:39:a1:c3:98:15:37:
                    72:1a:e5:ca:47:54:d6:9a:44:82:bb:cb:2a:16:26:
                    bc:62:94:dd:56:eb:44:e2:b2:d6:d6:17:64:00:c7:
                    59:6f:a8:04:e0:3e:47:96:44:72:e9:3b:d1:b9:44:
                    0c:80:84:8f:28:b4:c6:4f:63:6c:7a:cf:9e:ef:49:
                    9e:9f:17:ce:c3:1f:9f:97:8e:52:d9:f3:f7:cd:6d:
                    ba:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:4B:8A:01:CE:73:DB:A1:F5:C4:6E:5C:28:34:39:78:12:A9:13:0D
            X509v3 Authority Key Identifier:
                keyid:BB:28:B6:37:F6:EE:7E:D7:74:48:EE:A8:BD:B8:44:1F:DD:54:DB:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E0413618314162654813A045056F6DA6351CF5B04AB331DDAAE6AA8E13BB0AB7/0/BB28B637F6EE7ED77448EEA8BDB8441FDD54DB06.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BB28B637F6EE7ED77448EEA8BDB8441FDD54DB06.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E0413618314162654813A045056F6DA6351CF5B04AB331DDAAE6AA8E13BB0AB7/0/323830333a3265303a3a2f33322d3438203d3e20323639393137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         22:4f:32:68:5a:35:42:80:9e:73:72:01:bd:39:61:aa:9e:04:
         7d:f7:28:95:20:91:71:17:f8:2b:3d:36:ce:1a:eb:88:d3:fc:
         ca:92:00:12:15:0f:ff:05:6e:d5:22:a2:32:b8:95:db:7b:56:
         f8:d9:f6:ce:36:d3:a0:f7:aa:71:e4:db:47:5c:d0:31:70:9f:
         19:e4:39:5d:e4:4d:d7:69:26:be:1b:49:02:0b:d3:7a:c1:4d:
         bf:f8:5b:33:de:71:60:6d:7e:f6:4d:97:ca:99:d8:e6:94:9e:
         e5:9a:0d:db:b2:48:18:12:60:ad:44:9f:5f:85:ac:06:68:83:
         6f:30:36:93:b8:1e:8c:c9:7c:88:11:72:95:37:b0:99:35:23:
         4c:63:42:0f:f3:02:4d:78:12:e4:95:33:fd:cf:45:8a:80:28:
         9c:d1:dc:c0:be:e4:a3:a7:ff:33:58:d5:ac:55:71:4a:50:e3:
         7f:a6:0e:e8:21:82:19:26:40:b0:50:a6:85:0e:a7:e0:e0:25:
         16:66:e5:59:91:fc:48:d8:31:0e:a7:8c:7d:76:49:a5:ee:b2:
         07:ac:24:76:57:3e:c8:ef:f7:f9:96:44:0e:a0:59:8c:20:50:
         3d:7a:9c:11:5b:d1:6f:97:5c:b2:df:d1:c0:61:9b:a3:4e:a8:
         3b:33:cf:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 14:58:58 2025 by rpki-client