Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F0BE3B0B1095AA5912FB21C7735CEBB8B83DAF6BC44426278388EB8772D426CB/0/323830333a663531303a3a2f33322d3438203d3e20323732303334.roa
File:                     323830333a663531303a3a2f33322d3438203d3e20323732303334.roa (raw, json)
Hash identifier:          vE5XWV6R7o9lsEy7wZ/UhOOURHpxz1ZAZ/T4Sc4rWWo=
Subject key identifier:   2D:35:2E:64:7C:46:BF:EE:9C:9A:47:64:DC:8C:43:AA:8E:EA:14:94
Certificate issuer:       /CN=891E55A23EE024520C4B107ECF8CDB24B95A8283
Certificate serial:       5B6C6296A21FE7E10154EAC5502C42478AA08855
Authority key identifier: 89:1E:55:A2:3E:E0:24:52:0C:4B:10:7E:CF:8C:DB:24:B9:5A:82:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/891E55A23EE024520C4B107ECF8CDB24B95A8283.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F0BE3B0B1095AA5912FB21C7735CEBB8B83DAF6BC44426278388EB8772D426CB/0/323830333a663531303a3a2f33322d3438203d3e20323732303334.roa
Signing time:             Tue 04 Feb 2025 20:00:05 +0000
ROA not before:           Tue 04 Feb 2025 19:55:05 +0000
ROA not after:            Tue 03 Feb 2026 20:00:05 +0000
asID:                     272034
IP address blocks:        2803:f510::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F0BE3B0B1095AA5912FB21C7735CEBB8B83DAF6BC44426278388EB8772D426CB/0/891E55A23EE024520C4B107ECF8CDB24B95A8283.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F0BE3B0B1095AA5912FB21C7735CEBB8B83DAF6BC44426278388EB8772D426CB/0/891E55A23EE024520C4B107ECF8CDB24B95A8283.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/891E55A23EE024520C4B107ECF8CDB24B95A8283.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 04:49:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:6c:62:96:a2:1f:e7:e1:01:54:ea:c5:50:2c:42:47:8a:a0:88:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=891E55A23EE024520C4B107ECF8CDB24B95A8283
        Validity
            Not Before: Feb  4 19:55:05 2025 GMT
            Not After : Feb  3 20:00:05 2026 GMT
        Subject: CN=2D352E647C46BFEE9C9A4764DC8C43AA8EEA1494
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:80:ed:e2:40:c0:9a:6b:18:8a:cb:eb:eb:2d:
                    04:f4:3c:32:ed:2d:ba:4f:e2:99:4c:00:87:72:9d:
                    b3:91:ab:75:60:05:dd:23:6a:a5:ff:db:ac:7d:5c:
                    31:33:60:25:e1:54:fc:37:db:24:12:fb:27:ca:5e:
                    6d:ed:e6:16:ff:72:61:68:fa:e0:68:66:53:b3:9b:
                    c9:d7:8f:ee:7a:8d:3d:a7:6c:57:58:88:f4:5d:fc:
                    89:af:df:d8:2c:f6:f9:cf:ad:30:33:c0:74:f7:d7:
                    52:dc:21:4d:75:bc:62:95:68:5c:5e:ab:41:48:e4:
                    0e:7d:ba:8b:4a:ee:07:cb:9d:a4:e2:d8:48:9f:11:
                    2a:bb:61:89:65:5e:a0:16:cc:71:6c:dd:98:be:18:
                    83:f0:58:9c:4b:4c:aa:1a:11:e6:b0:bd:d7:3c:52:
                    0c:4c:38:21:e0:99:33:99:e4:3b:c2:f4:7a:90:d9:
                    dd:7f:18:07:74:34:23:ef:74:48:48:fc:e9:44:b8:
                    9a:e4:03:14:49:ed:cd:46:32:79:b8:fe:51:87:3d:
                    bc:44:a5:ae:c9:57:fc:02:e1:cd:8c:8b:8b:1a:69:
                    3c:eb:70:86:31:a7:8b:5c:48:ee:e5:a4:c1:c8:fa:
                    7c:ad:74:c8:6d:2f:d0:16:ea:f6:d9:62:40:b3:74:
                    be:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:35:2E:64:7C:46:BF:EE:9C:9A:47:64:DC:8C:43:AA:8E:EA:14:94
            X509v3 Authority Key Identifier:
                keyid:89:1E:55:A2:3E:E0:24:52:0C:4B:10:7E:CF:8C:DB:24:B9:5A:82:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F0BE3B0B1095AA5912FB21C7735CEBB8B83DAF6BC44426278388EB8772D426CB/0/891E55A23EE024520C4B107ECF8CDB24B95A8283.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/891E55A23EE024520C4B107ECF8CDB24B95A8283.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F0BE3B0B1095AA5912FB21C7735CEBB8B83DAF6BC44426278388EB8772D426CB/0/323830333a663531303a3a2f33322d3438203d3e20323732303334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f510::/32

    Signature Algorithm: sha256WithRSAEncryption
         10:ec:91:f8:62:48:e4:6d:d3:25:48:41:1b:1e:b9:53:4f:0c:
         e1:5c:40:5c:dc:aa:de:c7:8b:4e:99:bd:b6:47:e5:ed:eb:35:
         ed:75:9b:b1:1e:16:8f:96:3f:fb:f7:8a:39:97:32:75:74:20:
         aa:b5:de:06:36:05:36:88:ad:da:54:1f:7c:06:b9:d0:84:16:
         f7:a6:2a:3f:5b:1d:23:7a:d4:84:c5:fb:48:1a:f7:49:0c:82:
         94:a8:d5:46:29:93:09:60:16:65:15:77:84:91:9f:65:25:42:
         18:48:0e:7d:0c:e3:17:11:c6:c3:98:c1:cf:f2:a5:a0:1c:9e:
         ea:b1:19:f5:dc:fc:9e:ff:2d:94:88:f8:f0:f1:ee:40:95:9e:
         2c:1c:24:3d:b6:ea:b0:c7:04:4d:76:99:76:d8:f0:d0:10:6b:
         b4:d0:19:d6:60:d6:79:6a:63:3e:f4:51:4c:03:f0:91:19:33:
         cb:43:e5:fc:16:ee:db:20:ef:39:9f:82:f4:c2:cf:80:b7:25:
         34:a1:91:3f:99:48:68:be:f6:16:9f:26:fd:7d:41:79:54:11:
         71:d4:91:70:17:c2:0e:b4:8b:89:d6:23:aa:41:67:e7:a9:70:
         27:ff:33:72:8c:4e:04:25:58:ab:d3:65:dc:bf:40:b0:c3:08:
         0e:f7:dc:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 00:58:04 2025 by rpki-client