Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EBEE2E75A5692A7AA0C4A50F147A306DD4F397751DE34B89F3DA5998B97145D0/0/323830333a646339303a3a2f33322d3332203d3e20323732383430.roa
File:                     323830333a646339303a3a2f33322d3332203d3e20323732383430.roa (raw, json)
Hash identifier:          9+Uw2Nbb3GLAvoOGOyw7r4cHOtK2OdujrcrcQSYhKPI=
Subject key identifier:   F3:47:C3:45:1E:EE:78:B7:D6:9D:DE:90:86:30:78:5B:12:11:CF:E5
Certificate issuer:       /CN=3600F1B0522620745C949963CFD8EA88F5958F83
Certificate serial:       5E93EF707341C14DD2DC52BADAE72E4B6BA65DE0
Authority key identifier: 36:00:F1:B0:52:26:20:74:5C:94:99:63:CF:D8:EA:88:F5:95:8F:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3600F1B0522620745C949963CFD8EA88F5958F83.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EBEE2E75A5692A7AA0C4A50F147A306DD4F397751DE34B89F3DA5998B97145D0/0/323830333a646339303a3a2f33322d3332203d3e20323732383430.roa
Signing time:             Tue 04 Feb 2025 18:43:53 +0000
ROA not before:           Tue 04 Feb 2025 18:38:53 +0000
ROA not after:            Tue 03 Feb 2026 18:43:53 +0000
asID:                     272840
IP address blocks:        2803:dc90::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EBEE2E75A5692A7AA0C4A50F147A306DD4F397751DE34B89F3DA5998B97145D0/0/3600F1B0522620745C949963CFD8EA88F5958F83.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EBEE2E75A5692A7AA0C4A50F147A306DD4F397751DE34B89F3DA5998B97145D0/0/3600F1B0522620745C949963CFD8EA88F5958F83.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3600F1B0522620745C949963CFD8EA88F5958F83.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 04:49:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:93:ef:70:73:41:c1:4d:d2:dc:52:ba:da:e7:2e:4b:6b:a6:5d:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3600F1B0522620745C949963CFD8EA88F5958F83
        Validity
            Not Before: Feb  4 18:38:53 2025 GMT
            Not After : Feb  3 18:43:53 2026 GMT
        Subject: CN=F347C3451EEE78B7D69DDE908630785B1211CFE5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:1f:0e:7b:f9:2d:c1:c9:db:cc:88:eb:91:f1:
                    fe:00:8b:a7:89:5c:37:d7:45:8f:db:0d:06:57:85:
                    4b:28:ba:ca:94:50:d4:a9:4c:76:0a:29:45:56:57:
                    94:e9:16:5b:56:32:6a:37:0e:11:d1:58:d0:c4:a1:
                    e0:dc:36:6a:ed:80:c0:ac:ae:ed:37:42:f7:45:e9:
                    2b:63:df:2f:57:b4:80:ec:1b:10:c2:9c:52:5a:ec:
                    d4:d6:3e:74:2a:ed:07:0c:bf:35:f0:89:98:b7:b8:
                    80:66:50:99:9e:15:4c:ec:8f:e1:cd:a4:ad:86:2e:
                    1f:33:67:27:b8:82:8e:de:62:87:b9:78:67:a8:24:
                    bd:23:5d:5e:fa:91:56:51:ab:b0:79:c9:d3:ba:7c:
                    50:56:00:2a:34:33:aa:81:9e:1b:72:be:e2:1a:b7:
                    00:70:2f:01:f7:33:b6:f2:a6:df:b6:48:e2:a1:00:
                    32:45:fe:e0:ac:4c:c9:46:74:85:d4:23:9b:02:ad:
                    fc:62:cf:70:8e:3f:da:fd:a4:07:91:68:63:a3:58:
                    d9:16:21:68:db:e9:86:9f:c7:84:f1:8d:b5:26:e3:
                    7b:5f:53:65:9c:74:51:0f:e5:7b:3e:b3:00:aa:1e:
                    a8:22:46:b2:d0:c5:ab:08:55:8a:3c:6d:27:90:f9:
                    5b:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:47:C3:45:1E:EE:78:B7:D6:9D:DE:90:86:30:78:5B:12:11:CF:E5
            X509v3 Authority Key Identifier:
                keyid:36:00:F1:B0:52:26:20:74:5C:94:99:63:CF:D8:EA:88:F5:95:8F:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EBEE2E75A5692A7AA0C4A50F147A306DD4F397751DE34B89F3DA5998B97145D0/0/3600F1B0522620745C949963CFD8EA88F5958F83.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3600F1B0522620745C949963CFD8EA88F5958F83.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EBEE2E75A5692A7AA0C4A50F147A306DD4F397751DE34B89F3DA5998B97145D0/0/323830333a646339303a3a2f33322d3332203d3e20323732383430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:dc90::/32

    Signature Algorithm: sha256WithRSAEncryption
         3f:db:69:ec:5e:3a:30:0d:03:45:1c:ec:71:75:32:e1:8d:e6:
         b1:5c:c3:7d:5b:8e:c7:a9:75:6d:1c:72:f5:1c:d9:d0:84:b7:
         3b:42:43:74:cd:6e:2a:f4:07:a8:e0:db:20:c7:38:20:0c:8f:
         0e:5a:f6:d2:7f:19:fb:b1:b8:60:e2:72:00:d7:25:72:5e:d8:
         8a:5b:3b:9f:3e:cd:f3:41:5a:00:32:2e:10:62:b7:ec:df:98:
         96:45:b2:fc:f2:f9:ff:fe:9b:ee:5b:14:8e:0d:4f:32:f8:d7:
         b6:47:8f:43:20:b4:af:c3:d1:d9:17:dd:81:19:a3:7f:18:79:
         3c:2f:e4:39:1f:bb:a0:d4:a9:06:d1:ad:3b:0d:7d:ae:65:1c:
         53:0d:7b:f7:2f:d4:db:a1:cc:e9:0f:43:03:12:0a:3b:20:fc:
         36:59:26:e3:ed:e8:7a:49:34:09:f0:8f:df:67:f6:8e:7c:90:
         9a:0e:e4:25:a5:5d:75:da:61:a1:4a:d2:39:5b:72:6e:ed:4f:
         3b:86:e8:1a:04:e1:c5:ae:8b:89:f8:cd:09:49:e3:ce:7a:4d:
         c4:3d:ff:81:70:12:e2:5d:97:e6:ed:26:9f:5f:ed:8e:ab:67:
         5c:ad:02:39:e8:6d:fe:26:09:6f:dd:9f:98:31:37:86:e0:5f:
         ec:5a:40:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:23:09 2025 by rpki-client