Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FBDDDDCC26DBD9D0EF5C28747275CD801C96379A5D0A9B758DF4019CD88F8380/0/323830333a356336303a3a2f33322d3634203d3e20323633323338.roa
File:                     323830333a356336303a3a2f33322d3634203d3e20323633323338.roa (raw, json)
Hash identifier:          z1nrGGgGeNsWFXHjwx36PYCXpqxqvWqfqPKtGd6Wgu4=
Subject key identifier:   77:CE:07:B0:FC:1A:D3:8A:B5:FF:13:5F:D7:03:15:59:88:6C:C1:E0
Certificate issuer:       /CN=EB48A6C9791DEF12290FCBFDC63E9C8AC2C2EAED
Certificate serial:       7294406B3BA76FA344EF70713B98C49B90247429
Authority key identifier: EB:48:A6:C9:79:1D:EF:12:29:0F:CB:FD:C6:3E:9C:8A:C2:C2:EA:ED
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EB48A6C9791DEF12290FCBFDC63E9C8AC2C2EAED.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FBDDDDCC26DBD9D0EF5C28747275CD801C96379A5D0A9B758DF4019CD88F8380/0/323830333a356336303a3a2f33322d3634203d3e20323633323338.roa
Signing time:             Tue 04 Feb 2025 20:05:15 +0000
ROA not before:           Tue 04 Feb 2025 20:00:15 +0000
ROA not after:            Tue 03 Feb 2026 20:05:15 +0000
asID:                     263238
IP address blocks:        2803:5c60::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FBDDDDCC26DBD9D0EF5C28747275CD801C96379A5D0A9B758DF4019CD88F8380/0/EB48A6C9791DEF12290FCBFDC63E9C8AC2C2EAED.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FBDDDDCC26DBD9D0EF5C28747275CD801C96379A5D0A9B758DF4019CD88F8380/0/EB48A6C9791DEF12290FCBFDC63E9C8AC2C2EAED.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EB48A6C9791DEF12290FCBFDC63E9C8AC2C2EAED.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:94:40:6b:3b:a7:6f:a3:44:ef:70:71:3b:98:c4:9b:90:24:74:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB48A6C9791DEF12290FCBFDC63E9C8AC2C2EAED
        Validity
            Not Before: Feb  4 20:00:15 2025 GMT
            Not After : Feb  3 20:05:15 2026 GMT
        Subject: CN=77CE07B0FC1AD38AB5FF135FD7031559886CC1E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:3e:c7:c2:1c:df:8f:1d:0e:ba:ec:a1:da:79:
                    85:bd:34:6e:77:13:a1:a4:e4:a9:af:1c:4c:67:54:
                    be:cd:c0:07:3b:2d:0a:4a:d1:11:77:d0:5f:02:fc:
                    44:ab:a1:51:e2:1c:42:f5:60:a6:40:ee:85:ac:d7:
                    61:31:63:44:e6:8f:42:12:62:28:97:42:eb:5c:65:
                    5c:83:a6:56:52:69:5c:0e:e2:ec:cc:56:3e:9a:80:
                    50:a8:cf:bd:ea:1e:f2:ce:15:64:a0:c6:30:13:37:
                    4a:67:cb:d5:18:ad:7f:d6:06:b0:f9:b7:95:46:f7:
                    a0:f8:ed:68:3e:34:b9:a2:a6:38:c9:22:b1:8c:18:
                    7e:73:61:77:d2:c0:a6:ce:ba:9b:c9:38:f8:a3:77:
                    74:e2:90:94:e9:40:1a:d4:f0:40:04:48:a1:4f:95:
                    98:47:9c:0c:38:bc:1f:7f:20:e5:b7:bf:5f:1e:0d:
                    15:b6:70:4a:15:35:f4:c5:a8:c6:59:44:e2:c3:2c:
                    12:73:38:cc:78:07:7f:9e:52:8e:39:4c:40:f7:d5:
                    b1:d1:e7:f0:3f:53:43:8d:21:ce:41:69:51:2c:29:
                    be:02:be:43:c3:88:b4:58:c3:83:1e:3b:cd:36:fa:
                    e8:ad:05:3e:7b:f6:df:bc:57:16:1c:55:d0:8f:3e:
                    a3:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:CE:07:B0:FC:1A:D3:8A:B5:FF:13:5F:D7:03:15:59:88:6C:C1:E0
            X509v3 Authority Key Identifier:
                keyid:EB:48:A6:C9:79:1D:EF:12:29:0F:CB:FD:C6:3E:9C:8A:C2:C2:EA:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FBDDDDCC26DBD9D0EF5C28747275CD801C96379A5D0A9B758DF4019CD88F8380/0/EB48A6C9791DEF12290FCBFDC63E9C8AC2C2EAED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EB48A6C9791DEF12290FCBFDC63E9C8AC2C2EAED.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FBDDDDCC26DBD9D0EF5C28747275CD801C96379A5D0A9B758DF4019CD88F8380/0/323830333a356336303a3a2f33322d3634203d3e20323633323338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5c60::/32

    Signature Algorithm: sha256WithRSAEncryption
         d2:1f:c4:94:b4:f2:85:79:9d:b2:ca:88:45:aa:8c:a9:95:7a:
         bb:1c:e8:9d:d6:bf:74:71:4c:f5:4a:6d:4a:bc:80:77:8c:a8:
         af:3f:0a:f0:24:08:2b:31:40:3d:eb:70:6e:93:3b:33:c3:4e:
         d0:49:e6:0f:d6:99:23:51:14:82:df:ab:24:29:c4:4a:f5:de:
         c1:c7:38:e7:20:7b:db:56:b0:cf:15:09:09:ee:24:b3:97:d1:
         9c:a8:ce:e3:ed:ec:7e:57:f9:eb:59:8e:7b:49:f7:f3:56:a1:
         39:88:5e:9b:3b:78:ea:ff:26:fa:b3:25:9c:e6:74:83:fd:b3:
         53:43:10:2f:e8:25:c7:ed:5c:5d:63:7e:92:d2:5d:81:01:d4:
         4a:d8:4a:20:31:bf:44:3c:7f:68:bd:6b:a4:8c:1d:7c:2f:46:
         da:b9:37:74:9a:d4:62:92:37:19:09:43:90:10:ea:f6:d6:ff:
         89:f7:1b:88:ad:1a:37:8f:45:47:7e:65:f2:bd:b5:52:92:0a:
         b7:b0:74:cc:3b:ce:fa:78:07:56:25:c2:b4:91:4c:d5:74:e6:
         7b:57:48:84:b1:f5:1c:0a:25:4c:03:11:26:dd:43:1a:61:26:
         78:c6:c3:33:20:f2:6f:0e:99:ea:8f:d7:ea:72:35:72:86:80:
         bd:67:cd:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:55:02 2025 by rpki-client