Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E1129378A5C9C175923F37D370A7F08FFF9775DD4BB43C1354201E1C3F1E6D82/0/323830333a376134303a3a2f33322d3438203d3e20323633383237.roa
File:                     323830333a376134303a3a2f33322d3438203d3e20323633383237.roa (raw, json)
Hash identifier:          gSRj/zoveHS4gymU51i+ClvO/gi5UmvfmlzfPrygX2Y=
Subject key identifier:   BE:5F:1F:F5:17:E4:93:36:34:F7:95:17:61:AD:84:1A:9D:E7:C4:0F
Certificate issuer:       /CN=7C582B37564569A9B9F2CE4DDB525FDF1D499374
Certificate serial:       5056C06BD9C9924785C1FBF64EA5E01F54C12034
Authority key identifier: 7C:58:2B:37:56:45:69:A9:B9:F2:CE:4D:DB:52:5F:DF:1D:49:93:74
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7C582B37564569A9B9F2CE4DDB525FDF1D499374.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E1129378A5C9C175923F37D370A7F08FFF9775DD4BB43C1354201E1C3F1E6D82/0/323830333a376134303a3a2f33322d3438203d3e20323633383237.roa
Signing time:             Tue 04 Feb 2025 18:05:49 +0000
ROA not before:           Tue 04 Feb 2025 18:00:49 +0000
ROA not after:            Tue 03 Feb 2026 18:05:49 +0000
asID:                     263827
IP address blocks:        2803:7a40::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E1129378A5C9C175923F37D370A7F08FFF9775DD4BB43C1354201E1C3F1E6D82/0/7C582B37564569A9B9F2CE4DDB525FDF1D499374.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E1129378A5C9C175923F37D370A7F08FFF9775DD4BB43C1354201E1C3F1E6D82/0/7C582B37564569A9B9F2CE4DDB525FDF1D499374.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7C582B37564569A9B9F2CE4DDB525FDF1D499374.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 20:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:56:c0:6b:d9:c9:92:47:85:c1:fb:f6:4e:a5:e0:1f:54:c1:20:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C582B37564569A9B9F2CE4DDB525FDF1D499374
        Validity
            Not Before: Feb  4 18:00:49 2025 GMT
            Not After : Feb  3 18:05:49 2026 GMT
        Subject: CN=BE5F1FF517E4933634F7951761AD841A9DE7C40F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:10:38:da:65:74:34:5d:42:3d:3f:2a:12:6a:
                    8e:e5:af:5d:35:03:00:86:7f:0a:b8:ff:90:f1:f0:
                    8d:ce:bb:57:13:56:be:fd:a0:55:89:69:ff:db:b2:
                    ab:b4:62:25:2d:cc:fb:d3:51:c2:6f:31:d9:de:0f:
                    be:28:cc:c3:6c:4c:07:f9:56:2b:11:e3:5b:05:a2:
                    1c:7c:97:63:48:41:67:d4:e3:32:a1:35:67:d8:e8:
                    6f:db:bd:c4:4c:8c:2e:7c:5d:dc:59:68:1e:27:32:
                    9c:02:c3:b7:4d:09:98:21:f4:9c:0d:72:58:1d:f8:
                    63:6e:19:e6:5f:8d:71:19:ce:68:d5:eb:31:29:74:
                    d0:61:1c:fb:fa:75:e2:6d:f6:be:1e:1c:20:cb:28:
                    13:47:fb:84:d2:4a:77:4e:d1:c2:9d:23:0f:8c:eb:
                    e5:85:6e:f5:64:a1:5a:4d:53:bc:9c:be:d6:52:ff:
                    f3:38:2c:55:33:1b:ca:7b:ab:44:3e:d0:dc:7a:6e:
                    9a:ee:61:9a:d9:2d:07:42:1c:f2:e4:14:10:07:1a:
                    12:37:9b:26:10:33:b1:a0:ef:d2:51:df:a2:87:30:
                    22:1e:2a:2b:dd:aa:a8:ae:24:5d:4d:14:3a:2c:81:
                    07:c1:6d:81:dd:6d:a1:92:71:b7:b2:cb:93:49:56:
                    4f:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:5F:1F:F5:17:E4:93:36:34:F7:95:17:61:AD:84:1A:9D:E7:C4:0F
            X509v3 Authority Key Identifier:
                keyid:7C:58:2B:37:56:45:69:A9:B9:F2:CE:4D:DB:52:5F:DF:1D:49:93:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E1129378A5C9C175923F37D370A7F08FFF9775DD4BB43C1354201E1C3F1E6D82/0/7C582B37564569A9B9F2CE4DDB525FDF1D499374.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7C582B37564569A9B9F2CE4DDB525FDF1D499374.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E1129378A5C9C175923F37D370A7F08FFF9775DD4BB43C1354201E1C3F1E6D82/0/323830333a376134303a3a2f33322d3438203d3e20323633383237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7a40::/32

    Signature Algorithm: sha256WithRSAEncryption
         4d:df:de:a4:aa:48:2a:10:c6:9e:e0:bf:46:c2:c3:f1:87:70:
         9b:9b:3a:b7:22:06:a3:a9:14:a4:14:d4:e3:66:b6:ec:96:c1:
         2a:62:04:a4:fd:0e:d2:84:0b:20:a7:2f:da:98:6d:25:09:02:
         73:1c:44:d7:55:d3:3c:69:25:ec:c4:ad:da:70:14:ae:83:70:
         2e:8f:e9:fd:f1:c9:f4:54:ac:84:dc:f3:5b:8d:df:46:82:40:
         4a:7c:91:02:e0:c2:c2:00:72:75:a8:ae:e8:6f:40:6e:c2:b9:
         82:ec:02:10:cf:d5:43:b2:93:c3:c0:3d:cd:53:70:7f:23:55:
         55:94:70:d6:a5:82:f6:a6:3d:c0:c3:6e:07:6d:d6:06:34:9a:
         9c:42:67:16:95:78:45:ac:59:3c:c1:b5:34:e5:8b:74:38:73:
         af:6e:3b:73:40:cf:0e:09:5b:71:b6:4b:0d:bb:57:25:83:be:
         7d:e1:bd:5b:ba:dd:e5:8b:57:13:d6:1e:67:57:7d:fa:b0:e5:
         9e:71:73:a0:de:5f:ee:08:16:25:fa:c8:47:d2:b8:80:6e:33:
         83:d1:8b:3b:e2:da:8f:8a:a1:cb:9e:0e:a7:64:b7:ad:60:d2:
         a3:85:90:5f:c4:54:ac:7c:4f:d7:cf:8a:b9:b6:3f:36:8c:45:
         dc:14:3e:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:51:41 2025 by rpki-client