Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E32DACE42C0A3DCC3AF17C95C3CA4030D52CA6E7F0A83E8652E987E209FD526A/0/323830333a373435303a626130313a3a2f34382d3438203d3e203634313132.roa
File:                     323830333a373435303a626130313a3a2f34382d3438203d3e203634313132.roa (raw, json)
Hash identifier:          xgpTIGZ7N+KyMvpZWXhAzT0F+1RoqjdiLCyhh4X81yg=
Subject key identifier:   28:D7:71:54:20:50:09:91:47:92:12:63:A5:1E:EF:16:F6:F8:FD:ED
Certificate issuer:       /CN=B156B92173159B61E3CBF80FA51A1B58E6218261
Certificate serial:       26F156C936CEF1ABBA42EF28A0FD504D5FF2E03D
Authority key identifier: B1:56:B9:21:73:15:9B:61:E3:CB:F8:0F:A5:1A:1B:58:E6:21:82:61
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B156B92173159B61E3CBF80FA51A1B58E6218261.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E32DACE42C0A3DCC3AF17C95C3CA4030D52CA6E7F0A83E8652E987E209FD526A/0/323830333a373435303a626130313a3a2f34382d3438203d3e203634313132.roa
Signing time:             Tue 10 Dec 2024 14:25:00 +0000
ROA not before:           Tue 10 Dec 2024 14:20:00 +0000
ROA not after:            Tue 09 Dec 2025 14:25:00 +0000
asID:                     64112
IP address blocks:        2803:7450:ba01::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E32DACE42C0A3DCC3AF17C95C3CA4030D52CA6E7F0A83E8652E987E209FD526A/0/B156B92173159B61E3CBF80FA51A1B58E6218261.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E32DACE42C0A3DCC3AF17C95C3CA4030D52CA6E7F0A83E8652E987E209FD526A/0/B156B92173159B61E3CBF80FA51A1B58E6218261.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B156B92173159B61E3CBF80FA51A1B58E6218261.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 20:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:f1:56:c9:36:ce:f1:ab:ba:42:ef:28:a0:fd:50:4d:5f:f2:e0:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B156B92173159B61E3CBF80FA51A1B58E6218261
        Validity
            Not Before: Dec 10 14:20:00 2024 GMT
            Not After : Dec  9 14:25:00 2025 GMT
        Subject: CN=28D771542050099147921263A51EEF16F6F8FDED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:53:e1:1a:ba:e6:18:e8:e4:a9:bf:5c:92:36:
                    af:31:89:22:f7:fc:23:68:82:98:db:f5:4e:a3:4c:
                    d6:78:5d:29:43:71:27:0f:67:19:22:d1:5f:ec:0b:
                    99:30:50:6b:ba:86:f9:42:bc:43:36:29:8c:c5:3c:
                    0f:38:de:6e:88:3c:85:8f:7d:17:77:39:1e:bf:7f:
                    01:9c:00:bb:3c:5c:6f:46:7b:a1:eb:5c:8d:4c:11:
                    e8:ac:c9:8f:95:2e:01:65:a8:5f:d6:d6:da:a7:49:
                    9b:b1:b1:70:14:ac:2f:f9:37:17:7d:a9:6a:f8:fa:
                    5c:77:d5:ee:e5:e9:bb:2a:0b:c4:7c:33:ad:3e:b9:
                    96:81:68:33:0c:86:3b:7c:e9:c4:86:e1:02:2e:94:
                    fd:42:fb:b2:96:5e:88:4d:a7:08:10:31:b3:1d:44:
                    e7:a7:ae:d0:b2:9c:f3:48:72:60:a2:f2:88:4a:8b:
                    05:0d:57:15:92:9c:a8:f9:db:bd:37:38:cf:c4:bb:
                    b2:f6:01:2b:c5:b0:5b:e4:3f:52:99:11:e1:ae:34:
                    0b:61:52:32:a6:a9:4e:81:83:03:66:9f:5b:a4:89:
                    4f:00:65:e7:8c:74:fa:bf:71:03:25:13:a8:67:4a:
                    3f:1b:62:ee:a2:7a:68:7f:82:8e:60:94:c7:be:cc:
                    d8:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:D7:71:54:20:50:09:91:47:92:12:63:A5:1E:EF:16:F6:F8:FD:ED
            X509v3 Authority Key Identifier:
                keyid:B1:56:B9:21:73:15:9B:61:E3:CB:F8:0F:A5:1A:1B:58:E6:21:82:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E32DACE42C0A3DCC3AF17C95C3CA4030D52CA6E7F0A83E8652E987E209FD526A/0/B156B92173159B61E3CBF80FA51A1B58E6218261.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B156B92173159B61E3CBF80FA51A1B58E6218261.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E32DACE42C0A3DCC3AF17C95C3CA4030D52CA6E7F0A83E8652E987E209FD526A/0/323830333a373435303a626130313a3a2f34382d3438203d3e203634313132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7450:ba01::/48

    Signature Algorithm: sha256WithRSAEncryption
         16:9e:b9:ec:06:67:0b:7b:22:e3:54:7f:25:51:f4:0d:e7:f4:
         6b:7d:a6:6b:0d:36:90:60:b0:25:bf:93:0b:0f:21:6c:90:31:
         d7:b6:36:17:bc:cb:5b:ff:9d:9c:7b:5a:c6:ce:08:39:1f:a8:
         73:bd:fa:a5:db:56:fb:ab:50:b4:65:84:b5:35:77:24:ac:de:
         dd:c6:0f:1f:b2:10:13:bf:b3:5a:76:02:83:74:4f:92:ea:40:
         b4:e2:7f:1b:fd:91:aa:d2:0e:1a:a1:13:9e:bb:ce:dd:49:9b:
         fd:49:08:64:b9:14:cd:36:4a:a4:ad:35:68:8a:5c:55:50:34:
         d8:a2:75:ea:4b:6e:3b:eb:bc:9c:02:5b:8e:45:b3:ee:76:3f:
         af:b5:b9:2d:23:b3:91:46:1b:20:f4:b4:a4:39:5a:45:25:79:
         6d:6a:b7:ae:44:a5:cb:f4:e0:02:20:43:d9:5f:71:54:1c:8e:
         10:ff:c9:e6:21:d7:3a:ad:ec:0c:15:d4:6b:00:8b:fe:a1:c2:
         9e:ce:e6:a1:95:f4:9d:c0:39:ca:68:ed:92:4b:d1:6b:4e:40:
         9d:46:09:8d:aa:d4:54:f5:0a:44:fc:55:56:2d:93:7e:c3:c0:
         3d:38:77:75:00:c4:3a:fb:13:3e:00:78:a9:14:5f:87:74:b3:
         57:1c:58:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 16:49:18 2025 by rpki-client