Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F0BAB4FDC49B7DFE1D89ACB49F8C8A9225FB645AFBF6A00D832DC9DC3F39B253/0/323830333a346131303a3a2f33322d3332203d3e20323731393136.roa
File:                     323830333a346131303a3a2f33322d3332203d3e20323731393136.roa (raw, json)
Hash identifier:          AvnW42nDc/MTmjZ4uJeHT7GQ/XgK8GUz8p82qrXjljw=
Subject key identifier:   1E:4B:83:C1:FB:36:EC:E7:29:02:01:84:8A:E3:EC:DB:B2:4E:F2:4E
Certificate issuer:       /CN=E45215C1ABF0099BEFF5D5807A415849759B9467
Certificate serial:       54C531D3DE7604F8E6417873C58C21CE1EBCE9A5
Authority key identifier: E4:52:15:C1:AB:F0:09:9B:EF:F5:D5:80:7A:41:58:49:75:9B:94:67
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E45215C1ABF0099BEFF5D5807A415849759B9467.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F0BAB4FDC49B7DFE1D89ACB49F8C8A9225FB645AFBF6A00D832DC9DC3F39B253/0/323830333a346131303a3a2f33322d3332203d3e20323731393136.roa
Signing time:             Tue 04 Feb 2025 18:21:25 +0000
ROA not before:           Tue 04 Feb 2025 18:16:25 +0000
ROA not after:            Tue 03 Feb 2026 18:21:25 +0000
asID:                     271916
IP address blocks:        2803:4a10::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F0BAB4FDC49B7DFE1D89ACB49F8C8A9225FB645AFBF6A00D832DC9DC3F39B253/0/E45215C1ABF0099BEFF5D5807A415849759B9467.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F0BAB4FDC49B7DFE1D89ACB49F8C8A9225FB645AFBF6A00D832DC9DC3F39B253/0/E45215C1ABF0099BEFF5D5807A415849759B9467.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E45215C1ABF0099BEFF5D5807A415849759B9467.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 17:38:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:c5:31:d3:de:76:04:f8:e6:41:78:73:c5:8c:21:ce:1e:bc:e9:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E45215C1ABF0099BEFF5D5807A415849759B9467
        Validity
            Not Before: Feb  4 18:16:25 2025 GMT
            Not After : Feb  3 18:21:25 2026 GMT
        Subject: CN=1E4B83C1FB36ECE7290201848AE3ECDBB24EF24E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e4:61:57:e7:cc:a1:8f:be:12:db:41:d4:92:
                    4d:af:39:25:2a:13:b0:c2:c9:db:11:73:44:85:1e:
                    ab:0e:3b:60:4c:27:62:c3:00:66:51:11:fd:62:4a:
                    4c:2c:ca:52:8d:84:2d:85:8c:b7:40:ee:6b:9d:e3:
                    3d:a3:5c:3f:6c:40:50:6f:d1:fc:e3:eb:d4:c2:88:
                    1c:47:10:18:bc:5b:3a:8f:d8:c6:37:33:55:5d:79:
                    ae:f7:7a:f2:09:75:07:71:c6:2b:cf:4c:fd:ad:3a:
                    fc:27:6c:2e:93:55:35:62:4c:f0:c5:e6:71:51:c9:
                    1d:83:9c:c6:06:ff:8e:ba:3e:f8:ae:29:e7:5d:98:
                    3d:b1:2b:4d:72:a8:07:01:13:3b:1e:8f:b3:87:7a:
                    6c:e9:c0:d1:35:6f:ea:33:44:0c:bd:f5:18:38:d2:
                    c8:e6:cc:84:2f:88:f2:57:b4:c9:7c:c4:73:5e:9f:
                    cf:3a:c6:59:58:82:6d:d7:d5:5f:84:a1:79:9f:ec:
                    73:63:28:da:d8:2d:60:37:e7:de:64:d8:57:f0:16:
                    74:72:b5:de:af:44:a2:0f:68:a7:5f:be:20:32:af:
                    72:ba:10:82:66:2f:93:3e:5a:3a:24:44:2b:f9:c7:
                    b0:10:e1:f1:38:f9:6d:ab:38:78:a0:06:0e:68:0f:
                    42:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:4B:83:C1:FB:36:EC:E7:29:02:01:84:8A:E3:EC:DB:B2:4E:F2:4E
            X509v3 Authority Key Identifier:
                keyid:E4:52:15:C1:AB:F0:09:9B:EF:F5:D5:80:7A:41:58:49:75:9B:94:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F0BAB4FDC49B7DFE1D89ACB49F8C8A9225FB645AFBF6A00D832DC9DC3F39B253/0/E45215C1ABF0099BEFF5D5807A415849759B9467.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E45215C1ABF0099BEFF5D5807A415849759B9467.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F0BAB4FDC49B7DFE1D89ACB49F8C8A9225FB645AFBF6A00D832DC9DC3F39B253/0/323830333a346131303a3a2f33322d3332203d3e20323731393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4a10::/32

    Signature Algorithm: sha256WithRSAEncryption
         03:32:99:5c:44:5c:d9:6b:85:05:90:8f:f2:3f:bb:02:88:c3:
         44:8a:00:a3:69:ab:36:68:10:19:c5:d6:2f:fc:c2:41:05:1e:
         02:32:6b:6d:ad:44:9a:4b:d8:ce:80:58:f3:de:4d:f3:46:71:
         a6:c8:78:2c:51:4c:f6:5e:6b:53:7e:a7:55:a6:0d:1e:d5:3c:
         3e:bb:ef:36:55:c6:b0:e7:f5:50:a4:a7:bb:70:ef:d3:0f:99:
         34:17:6f:56:be:92:f0:54:1e:ed:b6:d2:4b:ba:82:41:98:a7:
         ec:68:c7:76:b1:ce:25:8c:b3:ac:f5:d3:b7:6f:c6:9a:1b:fb:
         04:a3:15:7b:fc:47:de:92:ff:ba:c3:3c:f9:30:c1:22:dd:6b:
         57:e5:7b:31:99:c6:bc:2b:20:b5:8c:23:58:78:37:9e:40:9a:
         58:ec:ea:a5:e7:a4:ba:c4:f4:f0:07:5c:36:44:3e:ab:1b:c6:
         5e:66:bb:6e:7d:34:a8:dc:2c:c0:37:ca:9e:a9:f1:91:19:59:
         d4:49:53:61:5f:ec:69:8a:60:8c:98:da:7d:5c:d6:b5:a8:25:
         73:8a:f1:72:eb:85:50:09:a0:a5:b2:50:2f:63:2f:5e:e3:f7:
         fa:64:48:67:31:a0:37:65:dd:04:8c:75:5f:43:ab:4e:47:ad:
         8d:3d:26:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:07:37 2025 by rpki-client