Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E62556774DD67B40667FE6C050C972E72FE0A30F7694E1E6AB7631F298C02026/0/323830333a3831303a3a2f33322d3438203d3e20323731383232.roa
File:                     323830333a3831303a3a2f33322d3438203d3e20323731383232.roa (raw, json)
Hash identifier:          jZTE31jZSh4MkNo6d0nmpZ7c2op/8oEmHS7LfaCHTOA=
Subject key identifier:   CF:A5:46:34:18:CB:5A:8F:92:D4:45:9C:8D:34:AE:37:33:8A:1C:ED
Certificate issuer:       /CN=595C380F7D155E2B7CE8E9EEE28FB9E4D1E47A5E
Certificate serial:       49EEF7D48108A7E0452C3ECCC0D8D4FCDA9ECA0C
Authority key identifier: 59:5C:38:0F:7D:15:5E:2B:7C:E8:E9:EE:E2:8F:B9:E4:D1:E4:7A:5E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/595C380F7D155E2B7CE8E9EEE28FB9E4D1E47A5E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E62556774DD67B40667FE6C050C972E72FE0A30F7694E1E6AB7631F298C02026/0/323830333a3831303a3a2f33322d3438203d3e20323731383232.roa
Signing time:             Tue 04 Feb 2025 17:59:07 +0000
ROA not before:           Tue 04 Feb 2025 17:54:07 +0000
ROA not after:            Tue 03 Feb 2026 17:59:07 +0000
asID:                     271822
IP address blocks:        2803:810::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E62556774DD67B40667FE6C050C972E72FE0A30F7694E1E6AB7631F298C02026/0/595C380F7D155E2B7CE8E9EEE28FB9E4D1E47A5E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E62556774DD67B40667FE6C050C972E72FE0A30F7694E1E6AB7631F298C02026/0/595C380F7D155E2B7CE8E9EEE28FB9E4D1E47A5E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/595C380F7D155E2B7CE8E9EEE28FB9E4D1E47A5E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 12:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:ee:f7:d4:81:08:a7:e0:45:2c:3e:cc:c0:d8:d4:fc:da:9e:ca:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=595C380F7D155E2B7CE8E9EEE28FB9E4D1E47A5E
        Validity
            Not Before: Feb  4 17:54:07 2025 GMT
            Not After : Feb  3 17:59:07 2026 GMT
        Subject: CN=CFA5463418CB5A8F92D4459C8D34AE37338A1CED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:41:27:f1:3c:a7:b3:1c:9c:48:70:df:2f:ce:
                    55:c8:d7:50:e3:1c:62:51:28:ed:f7:59:ed:1e:a9:
                    f8:7e:08:1a:22:9b:85:53:2a:f2:de:56:4e:92:ed:
                    62:1b:bc:d6:d7:d9:64:5f:c2:7c:c4:9d:4a:bd:a0:
                    b6:10:5d:eb:4c:4d:99:57:1a:c1:7f:d6:71:2a:5a:
                    1f:31:9d:26:e1:8f:e4:66:58:ce:85:86:87:4e:cf:
                    a9:c6:50:38:e8:07:9d:d4:e4:26:f3:c5:66:58:23:
                    92:a3:f3:cc:5a:80:90:66:bf:e1:b9:d4:95:8e:e1:
                    07:1e:89:5b:c4:f3:f5:dd:a1:74:fc:24:3f:8f:31:
                    d8:77:ea:92:71:ae:6e:d5:1a:39:56:d1:c2:7d:13:
                    bf:ae:9d:77:a7:6f:8e:ac:51:4b:32:dd:70:11:73:
                    ea:a3:af:3b:4c:5c:ee:e7:b1:37:95:87:bb:b1:30:
                    9d:25:1d:cf:bb:fa:83:7b:0e:06:95:da:6a:fa:2c:
                    6f:45:83:78:01:ce:6e:c5:3e:cf:e1:d7:ac:78:45:
                    34:a7:bc:ed:ac:2a:93:5c:6d:f3:46:5d:7c:1c:a5:
                    07:66:41:06:8f:0f:01:f6:45:0e:80:49:64:73:20:
                    a1:90:7d:1e:a2:3d:73:c8:ee:6f:c3:84:28:e2:fa:
                    84:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:A5:46:34:18:CB:5A:8F:92:D4:45:9C:8D:34:AE:37:33:8A:1C:ED
            X509v3 Authority Key Identifier:
                keyid:59:5C:38:0F:7D:15:5E:2B:7C:E8:E9:EE:E2:8F:B9:E4:D1:E4:7A:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E62556774DD67B40667FE6C050C972E72FE0A30F7694E1E6AB7631F298C02026/0/595C380F7D155E2B7CE8E9EEE28FB9E4D1E47A5E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/595C380F7D155E2B7CE8E9EEE28FB9E4D1E47A5E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E62556774DD67B40667FE6C050C972E72FE0A30F7694E1E6AB7631F298C02026/0/323830333a3831303a3a2f33322d3438203d3e20323731383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:810::/32

    Signature Algorithm: sha256WithRSAEncryption
         84:f1:7e:d5:e9:c6:7e:91:93:7a:f0:c6:7d:84:4f:09:f7:03:
         26:f6:82:5d:e1:3d:8d:bc:aa:f2:95:dc:aa:ad:59:b4:b5:76:
         dc:c9:8e:8c:de:2b:16:cf:3a:6b:35:e7:10:3c:f9:c3:58:63:
         e9:70:44:e6:49:42:c7:b1:cc:33:91:42:39:d5:84:0c:ac:1a:
         6c:29:21:85:60:9f:b0:d7:14:6e:34:72:50:f5:a4:b9:a9:71:
         2e:07:ef:ee:ca:a1:a1:5b:8d:8d:89:65:d2:d2:a3:19:75:e2:
         6a:08:46:4e:7b:87:69:9f:2d:47:0b:4a:d0:fd:10:8b:10:eb:
         55:91:ce:fa:0c:bb:09:77:ad:a2:fe:6a:df:52:81:7c:08:06:
         2c:df:db:a9:69:13:30:af:1f:de:5b:e9:cc:88:22:19:58:68:
         c3:37:f9:81:5b:11:f9:e0:1e:fd:f3:5b:42:c8:a9:23:de:3f:
         46:5b:d3:67:2f:90:c7:5d:55:4d:da:0f:dd:04:c4:d1:a8:1c:
         88:89:69:d4:1e:4d:86:54:28:92:b2:c5:c0:da:4a:cc:88:17:
         53:eb:e9:b6:35:0a:da:98:f8:75:90:81:30:e8:2a:ad:a2:25:
         62:57:cb:7c:52:a4:dd:03:8e:5e:d1:33:68:cd:db:d7:a2:21:
         6c:35:06:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 21:36:07 2025 by rpki-client