Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0EECE5412CB05783F14441C93C2D1F62C544B917EAFDF75655B4A896E07DE219/0/323830333a356632303a3a2f33322d3332203d3e20323636383030.roa
File:                     323830333a356632303a3a2f33322d3332203d3e20323636383030.roa (raw, json)
Hash identifier:          Vt/cH3yh154ozI64W5Ef8RpRumhurnr87ETQAVQlxFU=
Subject key identifier:   04:F7:7D:6A:AF:AB:41:EA:B4:5C:29:8C:FE:79:92:89:FA:27:BE:DB
Certificate issuer:       /CN=E5E5F55E39001EF24D658430EB3A500D80E40348
Certificate serial:       0B75945FB10CE431DB6E622FE3C0EC7E113D976C
Authority key identifier: E5:E5:F5:5E:39:00:1E:F2:4D:65:84:30:EB:3A:50:0D:80:E4:03:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5E5F55E39001EF24D658430EB3A500D80E40348.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0EECE5412CB05783F14441C93C2D1F62C544B917EAFDF75655B4A896E07DE219/0/323830333a356632303a3a2f33322d3332203d3e20323636383030.roa
Signing time:             Wed 18 Jun 2025 15:22:45 +0000
ROA not before:           Wed 18 Jun 2025 15:17:45 +0000
ROA not after:            Wed 17 Jun 2026 15:22:45 +0000
asID:                     266800
IP address blocks:        2803:5f20::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0EECE5412CB05783F14441C93C2D1F62C544B917EAFDF75655B4A896E07DE219/0/E5E5F55E39001EF24D658430EB3A500D80E40348.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0EECE5412CB05783F14441C93C2D1F62C544B917EAFDF75655B4A896E07DE219/0/E5E5F55E39001EF24D658430EB3A500D80E40348.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5E5F55E39001EF24D658430EB3A500D80E40348.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 18:57:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:75:94:5f:b1:0c:e4:31:db:6e:62:2f:e3:c0:ec:7e:11:3d:97:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5E5F55E39001EF24D658430EB3A500D80E40348
        Validity
            Not Before: Jun 18 15:17:45 2025 GMT
            Not After : Jun 17 15:22:45 2026 GMT
        Subject: CN=04F77D6AAFAB41EAB45C298CFE799289FA27BEDB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:8a:94:f6:88:a3:c5:80:e1:7c:72:8b:e2:1b:
                    0d:5a:35:f7:3a:37:ef:cb:20:b1:4c:a9:da:0d:d8:
                    00:37:de:c2:87:50:0a:13:95:73:10:ab:bc:8c:53:
                    04:35:3c:2d:db:e6:aa:cb:83:d0:2d:f2:8c:b4:51:
                    10:71:2f:54:4e:54:dc:82:40:3c:b9:af:fe:c3:61:
                    1c:b3:fa:20:a5:4b:cc:19:53:e5:59:04:87:d1:bd:
                    a4:75:b3:ad:55:b2:bc:08:22:de:15:7b:55:dc:ce:
                    d6:fb:9a:f4:95:fc:ab:08:cf:4a:fc:90:16:dd:64:
                    16:93:6d:f8:13:41:15:6e:e2:38:e8:45:5f:9e:b0:
                    21:05:23:83:89:31:cd:8d:28:5c:ff:20:d5:bf:d6:
                    7f:b4:9a:dd:42:ca:6f:f2:4a:a4:e9:d5:5b:79:2e:
                    63:5d:1b:3f:d9:fb:28:59:0a:20:20:52:53:1d:d7:
                    24:a5:11:fc:df:14:c7:57:d8:2e:40:36:1c:aa:ff:
                    74:f1:2f:bc:ac:eb:e8:d2:b0:c6:35:97:ff:e9:55:
                    fe:16:c9:63:a4:bf:32:ae:b1:97:fc:96:a0:1c:83:
                    d4:f0:77:64:c1:99:d2:40:ce:ab:d9:d2:68:1e:22:
                    87:e4:da:9d:61:a4:19:ab:2b:f2:da:41:3a:90:2a:
                    cf:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:F7:7D:6A:AF:AB:41:EA:B4:5C:29:8C:FE:79:92:89:FA:27:BE:DB
            X509v3 Authority Key Identifier:
                keyid:E5:E5:F5:5E:39:00:1E:F2:4D:65:84:30:EB:3A:50:0D:80:E4:03:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0EECE5412CB05783F14441C93C2D1F62C544B917EAFDF75655B4A896E07DE219/0/E5E5F55E39001EF24D658430EB3A500D80E40348.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5E5F55E39001EF24D658430EB3A500D80E40348.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0EECE5412CB05783F14441C93C2D1F62C544B917EAFDF75655B4A896E07DE219/0/323830333a356632303a3a2f33322d3332203d3e20323636383030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5f20::/32

    Signature Algorithm: sha256WithRSAEncryption
         3e:35:dd:7d:1b:cd:10:bb:7b:0f:dd:99:85:57:2f:b6:b8:8a:
         88:1c:14:04:36:5d:2e:f2:89:35:ee:01:6f:7f:98:a6:6f:37:
         95:2f:d9:47:ad:67:d6:18:c8:01:85:17:b3:bc:70:9d:61:e9:
         a8:1f:31:3e:95:d1:95:25:1e:a4:8d:44:d0:15:4b:84:94:9a:
         09:3a:94:13:45:ee:7a:ff:0d:ee:62:3d:73:c5:6f:b7:0c:e4:
         38:4f:2c:db:01:ef:9d:12:27:c0:c5:48:b2:23:92:04:97:d5:
         b4:4e:62:0d:e1:ed:36:cd:4f:f5:4b:40:f9:7d:6d:64:bf:88:
         de:59:03:0c:eb:91:44:16:88:46:85:5d:f8:37:7f:71:10:6a:
         5a:f3:7f:7e:6f:cf:fc:46:2a:bc:5d:74:a9:69:eb:00:2f:da:
         ce:01:65:1e:d7:a5:d3:6a:2e:b0:68:aa:17:3f:05:22:07:5e:
         1e:d6:a4:c1:b7:8a:aa:6c:62:be:36:c2:9b:ba:26:56:51:26:
         ca:19:35:ba:d6:02:f6:b2:9c:71:79:2c:04:a3:67:e5:54:c5:
         07:12:42:0e:6e:73:6c:61:9d:19:d2:38:9f:bd:ed:42:d9:24:
         b0:d6:5d:59:ec:68:82:50:f4:f5:f4:d2:51:c9:db:dd:57:9d:
         58:79:2c:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 14:45:23 2025 by rpki-client