Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ED4A5F0E05403413629A2EFD3F2590AFCAF1D770D58282CB9B919A878DD969B4/0/323830333a656335303a3a2f33322d3332203d3e20323733313435.roa
File:                     323830333a656335303a3a2f33322d3332203d3e20323733313435.roa (raw, json)
Hash identifier:          hXtxjM297U6ld0tn/0s2JRA8pBbVvmzwhIOgX7DOE24=
Subject key identifier:   EA:2B:D3:ED:4D:60:78:BE:6F:F7:DF:FC:21:4A:C2:6B:6D:61:E4:2D
Certificate issuer:       /CN=01B14B09E11356B6D6FB6F3BA7F9D5AB176268BB
Certificate serial:       240ADFC5F0720671515453E5426D8825425BF3E3
Authority key identifier: 01:B1:4B:09:E1:13:56:B6:D6:FB:6F:3B:A7:F9:D5:AB:17:62:68:BB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01B14B09E11356B6D6FB6F3BA7F9D5AB176268BB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ED4A5F0E05403413629A2EFD3F2590AFCAF1D770D58282CB9B919A878DD969B4/0/323830333a656335303a3a2f33322d3332203d3e20323733313435.roa
Signing time:             Tue 04 Feb 2025 20:06:42 +0000
ROA not before:           Tue 04 Feb 2025 20:01:42 +0000
ROA not after:            Tue 03 Feb 2026 20:06:42 +0000
asID:                     273145
IP address blocks:        2803:ec50::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/ED4A5F0E05403413629A2EFD3F2590AFCAF1D770D58282CB9B919A878DD969B4/0/01B14B09E11356B6D6FB6F3BA7F9D5AB176268BB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/ED4A5F0E05403413629A2EFD3F2590AFCAF1D770D58282CB9B919A878DD969B4/0/01B14B09E11356B6D6FB6F3BA7F9D5AB176268BB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01B14B09E11356B6D6FB6F3BA7F9D5AB176268BB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 05:43:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:0a:df:c5:f0:72:06:71:51:54:53:e5:42:6d:88:25:42:5b:f3:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01B14B09E11356B6D6FB6F3BA7F9D5AB176268BB
        Validity
            Not Before: Feb  4 20:01:42 2025 GMT
            Not After : Feb  3 20:06:42 2026 GMT
        Subject: CN=EA2BD3ED4D6078BE6FF7DFFC214AC26B6D61E42D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:9b:ae:23:fd:bf:d3:4d:c6:6b:bc:da:c8:0d:
                    58:f4:d6:2b:9f:ae:ff:54:26:a8:99:8f:11:bf:f3:
                    69:25:f7:bc:47:b3:d3:6e:4a:69:62:0d:03:7e:48:
                    94:25:98:9c:19:f6:9e:dd:d8:36:bd:82:35:be:40:
                    2a:a0:37:44:b8:e1:fa:69:50:f9:91:85:45:97:96:
                    24:c5:e5:97:f1:4b:e2:48:00:c4:bb:31:6a:b2:5e:
                    bd:9d:e6:52:4d:1f:11:53:89:ef:50:a0:47:f0:cc:
                    e0:a2:9f:9a:14:9b:b4:41:54:0e:8b:28:27:03:6a:
                    58:a4:70:28:84:cb:66:71:cf:20:1d:39:f6:5f:ff:
                    22:2e:6e:a5:8c:fe:e5:93:23:0f:16:07:9d:9c:15:
                    b5:06:b9:94:ce:d3:05:9a:00:f3:8b:a5:d6:34:33:
                    99:47:d7:f8:27:77:05:28:4c:fb:13:62:e8:04:04:
                    b8:bb:89:49:00:ea:64:af:03:77:d0:43:c2:1b:1b:
                    3b:25:a2:db:a2:31:91:fa:e7:2f:03:09:27:2f:da:
                    e7:a3:e1:18:18:c5:54:f1:25:02:98:42:93:46:d3:
                    6e:77:f5:2e:3e:2f:60:72:76:2b:bf:3f:65:13:cd:
                    60:ec:8a:b5:8b:33:a9:0b:90:3f:59:ab:1f:38:17:
                    9a:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:2B:D3:ED:4D:60:78:BE:6F:F7:DF:FC:21:4A:C2:6B:6D:61:E4:2D
            X509v3 Authority Key Identifier:
                keyid:01:B1:4B:09:E1:13:56:B6:D6:FB:6F:3B:A7:F9:D5:AB:17:62:68:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ED4A5F0E05403413629A2EFD3F2590AFCAF1D770D58282CB9B919A878DD969B4/0/01B14B09E11356B6D6FB6F3BA7F9D5AB176268BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01B14B09E11356B6D6FB6F3BA7F9D5AB176268BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ED4A5F0E05403413629A2EFD3F2590AFCAF1D770D58282CB9B919A878DD969B4/0/323830333a656335303a3a2f33322d3332203d3e20323733313435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ec50::/32

    Signature Algorithm: sha256WithRSAEncryption
         14:cd:ed:f1:33:63:4c:0a:6c:17:3d:22:1f:7c:5b:1c:32:4d:
         8e:bc:e9:55:a6:84:94:53:0a:fa:f5:db:7f:5d:97:24:ab:ac:
         dc:31:88:e1:29:fa:c0:8f:d5:54:28:c4:c6:1f:15:2c:90:4c:
         4f:2b:6f:23:8c:46:2b:da:de:42:f8:d6:c7:54:c7:63:9e:28:
         dd:47:c2:04:e4:c0:1a:45:5c:72:51:8c:87:ff:61:e9:f4:6f:
         b8:20:26:51:25:33:88:cc:e9:eb:07:65:5a:81:d8:ee:6e:48:
         88:fe:05:df:84:63:04:e7:85:dc:82:ba:d8:75:45:9b:9d:50:
         53:cb:ac:6f:2e:a6:8f:11:f8:f9:59:36:a6:32:d2:d5:a5:fd:
         2f:2d:55:27:0f:c0:8d:16:49:bd:24:88:cd:39:56:40:19:f5:
         f3:9a:bd:17:a8:54:c1:b2:34:d6:ce:79:d6:9a:a2:69:39:14:
         88:17:0e:30:36:a2:5d:99:80:54:87:b2:8d:9f:aa:9e:74:0d:
         23:1e:a0:b0:ce:1a:0a:28:0f:2f:02:51:38:2c:17:ab:93:05:
         e8:1e:b9:86:ea:39:85:44:47:ce:db:9e:2c:ba:fb:2b:dc:94:
         df:da:2b:07:5d:13:f9:aa:62:b4:2c:96:22:82:aa:46:e5:a5:
         4f:af:49:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 11:42:26 2025 by rpki-client