Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E52FD6A6A46B7828B44D62F7E0AB52216C5E6EEAD8DE8F789F9A0C8D1195A94C/0/323830333a633234303a3a2f33322d3430203d3e203431303935.roa
File:                     323830333a633234303a3a2f33322d3430203d3e203431303935.roa (raw, json)
Hash identifier:          IOww2sxuN84dxsf4sS4VIYx6oqNxcykpoaG7UN2h21c=
Subject key identifier:   44:BE:A1:53:7B:7C:51:F7:C0:5B:EA:39:63:16:9B:13:2D:36:EA:F1
Certificate issuer:       /CN=DCD3F0E4EE043C5BA9858A89B5A60E7FF2D355C6
Certificate serial:       4ACBE910824D6A8C6116AB5200CE7F693EF78531
Authority key identifier: DC:D3:F0:E4:EE:04:3C:5B:A9:85:8A:89:B5:A6:0E:7F:F2:D3:55:C6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCD3F0E4EE043C5BA9858A89B5A60E7FF2D355C6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E52FD6A6A46B7828B44D62F7E0AB52216C5E6EEAD8DE8F789F9A0C8D1195A94C/0/323830333a633234303a3a2f33322d3430203d3e203431303935.roa
Signing time:             Tue 04 Feb 2025 20:01:08 +0000
ROA not before:           Tue 04 Feb 2025 19:56:08 +0000
ROA not after:            Tue 03 Feb 2026 20:01:08 +0000
asID:                     41095
IP address blocks:        2803:c240::/32 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E52FD6A6A46B7828B44D62F7E0AB52216C5E6EEAD8DE8F789F9A0C8D1195A94C/0/DCD3F0E4EE043C5BA9858A89B5A60E7FF2D355C6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E52FD6A6A46B7828B44D62F7E0AB52216C5E6EEAD8DE8F789F9A0C8D1195A94C/0/DCD3F0E4EE043C5BA9858A89B5A60E7FF2D355C6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCD3F0E4EE043C5BA9858A89B5A60E7FF2D355C6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:cb:e9:10:82:4d:6a:8c:61:16:ab:52:00:ce:7f:69:3e:f7:85:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCD3F0E4EE043C5BA9858A89B5A60E7FF2D355C6
        Validity
            Not Before: Feb  4 19:56:08 2025 GMT
            Not After : Feb  3 20:01:08 2026 GMT
        Subject: CN=44BEA1537B7C51F7C05BEA3963169B132D36EAF1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:e6:03:78:fc:fc:49:3a:be:ff:7a:34:b9:45:
                    41:c9:39:b2:eb:97:51:e7:05:a3:cf:66:84:bc:64:
                    ea:fb:60:fd:e5:0e:1e:8e:ac:f4:4b:98:2f:39:40:
                    2d:26:eb:8b:87:55:d3:31:c8:d7:3f:42:00:26:7c:
                    6e:36:00:7b:0e:aa:a5:0a:6b:0c:02:4f:d4:c0:4e:
                    bd:82:0a:83:07:6f:09:18:19:73:eb:58:16:e6:f4:
                    19:22:35:68:02:c4:c8:16:c3:32:1a:77:ea:fe:56:
                    44:69:5c:db:63:08:f8:cd:49:c6:0f:a6:dd:6a:16:
                    17:9d:91:23:6d:8a:bf:4a:37:36:09:a0:c5:8c:ea:
                    b4:eb:49:07:d0:ad:42:30:bd:50:57:95:c4:19:00:
                    ed:29:98:0e:6c:17:22:be:d5:db:aa:a9:b8:40:c8:
                    e3:51:ac:6b:8f:86:41:92:e7:25:cc:cc:dd:5c:bf:
                    9f:f2:4c:43:a8:20:94:8c:c4:2b:9f:3c:ef:83:ed:
                    ca:70:3f:23:9c:0d:aa:c7:ac:c1:28:8a:61:af:11:
                    0e:f5:d4:26:9a:bd:55:73:5a:30:79:2f:3d:c6:53:
                    9a:14:cf:53:5b:d2:55:a3:70:3b:ee:d5:a6:02:99:
                    0f:3b:ed:1d:79:d8:b5:1d:d7:b3:f8:a1:ce:53:30:
                    19:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:BE:A1:53:7B:7C:51:F7:C0:5B:EA:39:63:16:9B:13:2D:36:EA:F1
            X509v3 Authority Key Identifier:
                keyid:DC:D3:F0:E4:EE:04:3C:5B:A9:85:8A:89:B5:A6:0E:7F:F2:D3:55:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E52FD6A6A46B7828B44D62F7E0AB52216C5E6EEAD8DE8F789F9A0C8D1195A94C/0/DCD3F0E4EE043C5BA9858A89B5A60E7FF2D355C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCD3F0E4EE043C5BA9858A89B5A60E7FF2D355C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E52FD6A6A46B7828B44D62F7E0AB52216C5E6EEAD8DE8F789F9A0C8D1195A94C/0/323830333a633234303a3a2f33322d3430203d3e203431303935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c240::/32

    Signature Algorithm: sha256WithRSAEncryption
         9b:88:6e:df:80:a5:de:3a:56:81:e6:a6:e9:57:36:14:97:02:
         b4:41:2d:87:1a:dd:c4:70:b6:69:1c:60:e7:77:3a:fa:97:0e:
         41:46:9b:ce:7b:83:d2:5a:56:9e:c9:e5:38:4e:04:e1:61:7a:
         56:8e:77:1f:34:f6:4d:a1:7b:7b:48:8d:7f:f8:06:08:cc:c7:
         f0:3f:0b:1e:3c:70:84:a6:88:a7:72:3f:55:8f:20:a4:0b:43:
         a3:1c:5c:4f:54:9b:c5:75:e5:51:26:40:a3:fc:35:46:0e:69:
         c5:2f:60:95:b2:74:81:a7:38:01:32:16:b1:11:c1:ca:ae:55:
         32:e4:5f:ef:d7:54:93:1a:c3:b4:76:b0:19:10:88:a9:4e:68:
         53:b1:17:5e:c2:ce:18:52:db:d9:43:bd:d5:f4:e8:f3:86:1a:
         34:76:5d:6c:5d:9b:21:37:a7:42:04:0a:f0:d2:72:00:62:2f:
         03:e8:b1:66:d6:88:89:8c:72:04:da:19:6c:f0:91:a2:1e:a5:
         7a:ab:39:15:67:16:58:1f:b4:68:30:f7:ad:92:d9:a7:21:9f:
         ff:b5:a8:df:c0:df:12:52:3e:00:12:66:92:98:75:f1:d8:f1:
         82:48:9f:66:e1:fe:61:de:d1:1d:ca:a8:08:86:16:82:aa:f2:
         b6:73:98:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:19:00 2025 by rpki-client