Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E5A585AC8F6F8E9BB39F2E90F283515C0A4ABFD72EB56AB7000040F1C75B7D89/0/323830333a653932303a3a2f33322d3332203d3e20323633373032.roa
File:                     323830333a653932303a3a2f33322d3332203d3e20323633373032.roa (raw, json)
Hash identifier:          bHpqr4ud+8rBokJAgwuM6rt7CWvY2zEqnPJNx9Zsuq4=
Subject key identifier:   47:2C:CB:61:FF:E2:61:FD:AE:C1:2E:7F:26:D0:53:42:E1:9D:3D:C5
Certificate issuer:       /CN=98BF38FB2EBC616A0A18D09F92C17B2067FDBC80
Certificate serial:       2BC2A97926CBEF1B8A738B1A67E4F696D4BE677F
Authority key identifier: 98:BF:38:FB:2E:BC:61:6A:0A:18:D0:9F:92:C1:7B:20:67:FD:BC:80
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/98BF38FB2EBC616A0A18D09F92C17B2067FDBC80.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E5A585AC8F6F8E9BB39F2E90F283515C0A4ABFD72EB56AB7000040F1C75B7D89/0/323830333a653932303a3a2f33322d3332203d3e20323633373032.roa
Signing time:             Tue 04 Feb 2025 18:26:18 +0000
ROA not before:           Tue 04 Feb 2025 18:21:18 +0000
ROA not after:            Tue 03 Feb 2026 18:26:18 +0000
asID:                     263702
IP address blocks:        2803:e920::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E5A585AC8F6F8E9BB39F2E90F283515C0A4ABFD72EB56AB7000040F1C75B7D89/0/98BF38FB2EBC616A0A18D09F92C17B2067FDBC80.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5A585AC8F6F8E9BB39F2E90F283515C0A4ABFD72EB56AB7000040F1C75B7D89/0/98BF38FB2EBC616A0A18D09F92C17B2067FDBC80.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/98BF38FB2EBC616A0A18D09F92C17B2067FDBC80.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 17 Apr 2025 22:14:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:c2:a9:79:26:cb:ef:1b:8a:73:8b:1a:67:e4:f6:96:d4:be:67:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98BF38FB2EBC616A0A18D09F92C17B2067FDBC80
        Validity
            Not Before: Feb  4 18:21:18 2025 GMT
            Not After : Feb  3 18:26:18 2026 GMT
        Subject: CN=472CCB61FFE261FDAEC12E7F26D05342E19D3DC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:2d:b5:07:d0:24:c5:27:d3:85:4f:3c:ef:27:
                    41:13:99:8c:f2:89:b0:48:36:27:2f:df:e0:79:ed:
                    ca:0b:53:11:9c:ea:63:86:2a:e0:07:26:b9:e1:c8:
                    12:4f:67:5e:9e:70:fd:36:db:68:06:34:05:44:fa:
                    b6:2a:31:aa:79:00:9e:74:eb:35:75:fc:19:a1:f7:
                    e2:e7:b8:7b:81:bf:51:26:27:81:35:44:52:47:58:
                    53:71:db:9c:47:eb:f4:de:9d:20:b5:9e:7a:cc:31:
                    5a:c4:21:e0:e6:86:6f:37:b3:17:bc:d8:25:7c:47:
                    4c:af:95:d3:0f:e4:70:b5:e0:b2:58:b5:85:9b:f8:
                    00:30:c4:72:ef:a7:23:ea:30:f0:87:bb:25:5a:6e:
                    0b:3d:d3:ed:cf:be:82:2a:1c:db:f4:1d:7a:11:c0:
                    e4:6b:34:4f:ef:57:fd:3e:a1:59:5f:aa:a1:d9:8e:
                    d3:1f:0a:76:f7:b5:ff:ec:16:e1:3a:8f:6d:07:72:
                    99:91:7a:27:fe:c8:15:ea:b6:1e:33:3e:1d:35:42:
                    b3:bc:98:b5:1e:6f:3a:93:0b:0f:12:95:f8:ac:23:
                    46:c5:d0:2f:52:ff:67:2c:6b:86:35:ce:4c:37:4f:
                    33:63:c2:c8:77:f4:3a:c1:39:88:9a:b0:7c:a1:c8:
                    be:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:2C:CB:61:FF:E2:61:FD:AE:C1:2E:7F:26:D0:53:42:E1:9D:3D:C5
            X509v3 Authority Key Identifier:
                keyid:98:BF:38:FB:2E:BC:61:6A:0A:18:D0:9F:92:C1:7B:20:67:FD:BC:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E5A585AC8F6F8E9BB39F2E90F283515C0A4ABFD72EB56AB7000040F1C75B7D89/0/98BF38FB2EBC616A0A18D09F92C17B2067FDBC80.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/98BF38FB2EBC616A0A18D09F92C17B2067FDBC80.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E5A585AC8F6F8E9BB39F2E90F283515C0A4ABFD72EB56AB7000040F1C75B7D89/0/323830333a653932303a3a2f33322d3332203d3e20323633373032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e920::/32

    Signature Algorithm: sha256WithRSAEncryption
         59:10:d9:f3:b7:c2:72:12:de:87:c3:cb:b8:35:0d:2b:e1:f7:
         10:ef:38:37:8f:9f:a2:93:30:81:de:6c:2b:0d:5c:4e:5e:6a:
         b9:97:de:30:fc:67:d5:cb:ca:ea:da:18:24:41:77:3d:25:00:
         8e:b6:e5:a7:af:d7:16:f8:d0:47:48:0a:f4:7b:8e:ef:b1:ff:
         c3:66:5d:88:64:46:1a:d9:59:b7:e2:94:94:8d:52:8a:04:d3:
         89:aa:56:8c:c4:1b:7c:7a:fe:1e:99:7b:46:5d:b9:0b:75:24:
         9e:9f:c6:48:42:72:70:63:5d:26:97:81:68:2c:08:1e:6a:15:
         02:5e:96:e5:83:36:34:72:3a:63:ba:51:ea:1d:63:a6:82:3e:
         09:eb:31:f8:41:46:d0:47:21:40:55:99:a0:b4:34:3e:bc:ec:
         d1:18:52:1a:86:b4:a1:30:83:4c:f6:0e:a5:36:bc:3a:b1:ff:
         5b:e8:8a:1c:5f:b6:23:b3:e7:68:6c:c4:96:6a:18:6d:23:24:
         87:f6:d8:7b:35:ed:da:b7:4b:3e:db:a1:b9:24:67:86:6c:60:
         8e:5c:b9:1f:6c:7d:c7:d8:61:f2:6a:88:2c:1e:9c:1c:94:2c:
         23:40:e6:38:91:83:35:d9:3a:31:16:91:5a:ce:53:e5:da:9c:
         06:dc:4a:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:11:08 2025 by rpki-client