Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2BE879972F4E90E8FDCB6500D36E6A4A9FF77B0274706A399C0923D38FFEF25B/0/323830333a616335303a3a2f33322d3438203d3e20323733313433.roa
File:                     323830333a616335303a3a2f33322d3438203d3e20323733313433.roa (raw, json)
Hash identifier:          ginyBrLdL6pvSiYkCTA7VQ5Nb+HNaU798LVhWJ7eRAQ=
Subject key identifier:   6F:1C:77:F5:10:58:32:F1:F2:52:E1:14:5A:1A:6B:F6:F1:6A:30:D6
Certificate issuer:       /CN=5359D5652EB8B1C42FF1914CA8586A67AE35A163
Certificate serial:       2CA2D315A9E4C18B763B6B01D00697A06B4E53D1
Authority key identifier: 53:59:D5:65:2E:B8:B1:C4:2F:F1:91:4C:A8:58:6A:67:AE:35:A1:63
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5359D5652EB8B1C42FF1914CA8586A67AE35A163.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2BE879972F4E90E8FDCB6500D36E6A4A9FF77B0274706A399C0923D38FFEF25B/0/323830333a616335303a3a2f33322d3438203d3e20323733313433.roa
Signing time:             Thu 08 May 2025 22:18:07 +0000
ROA not before:           Thu 08 May 2025 22:13:07 +0000
ROA not after:            Thu 07 May 2026 22:18:07 +0000
asID:                     273143
IP address blocks:        2803:ac50::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2BE879972F4E90E8FDCB6500D36E6A4A9FF77B0274706A399C0923D38FFEF25B/0/5359D5652EB8B1C42FF1914CA8586A67AE35A163.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2BE879972F4E90E8FDCB6500D36E6A4A9FF77B0274706A399C0923D38FFEF25B/0/5359D5652EB8B1C42FF1914CA8586A67AE35A163.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5359D5652EB8B1C42FF1914CA8586A67AE35A163.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 23 May 2025 01:03:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:a2:d3:15:a9:e4:c1:8b:76:3b:6b:01:d0:06:97:a0:6b:4e:53:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5359D5652EB8B1C42FF1914CA8586A67AE35A163
        Validity
            Not Before: May  8 22:13:07 2025 GMT
            Not After : May  7 22:18:07 2026 GMT
        Subject: CN=6F1C77F5105832F1F252E1145A1A6BF6F16A30D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:05:ce:10:61:46:9a:f8:90:fe:c7:5b:b1:c3:
                    c1:2e:99:1c:ad:66:f5:ff:4a:b7:9a:3c:9d:0d:36:
                    f8:87:a3:d6:c7:aa:ee:1c:19:04:a6:59:80:4d:06:
                    a7:14:d7:41:01:1b:56:64:20:c4:0f:0d:00:e7:82:
                    43:83:4d:05:05:2d:05:1c:de:f1:c5:10:c8:10:a7:
                    6f:84:a0:b4:d7:45:06:16:6a:88:28:1a:78:e4:e2:
                    cd:26:ae:63:4b:88:85:53:d2:72:41:c2:2c:81:f2:
                    b4:10:26:28:c1:97:1a:f1:db:49:46:c7:52:7d:48:
                    ac:84:36:b8:0b:d2:26:a4:fb:cf:96:8f:96:b9:7f:
                    d0:80:d1:5e:a7:9b:ac:ba:89:8d:f0:ed:ca:38:a5:
                    f8:48:78:cf:f1:b6:fd:b4:ea:7e:74:d8:e6:05:eb:
                    42:ad:75:5a:df:09:a8:0f:51:61:04:94:93:36:65:
                    20:1c:09:62:1a:45:77:a5:1b:74:30:07:a7:31:5e:
                    a3:37:31:63:97:65:d6:81:63:5a:eb:59:ad:59:21:
                    39:99:e7:aa:b9:1e:5d:08:0a:5f:51:67:99:a3:92:
                    55:39:a1:c3:8b:ed:75:0a:1c:79:f0:2f:89:d7:68:
                    5a:46:e3:c7:2d:2a:32:bb:eb:31:40:43:1e:14:71:
                    4e:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:1C:77:F5:10:58:32:F1:F2:52:E1:14:5A:1A:6B:F6:F1:6A:30:D6
            X509v3 Authority Key Identifier:
                keyid:53:59:D5:65:2E:B8:B1:C4:2F:F1:91:4C:A8:58:6A:67:AE:35:A1:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2BE879972F4E90E8FDCB6500D36E6A4A9FF77B0274706A399C0923D38FFEF25B/0/5359D5652EB8B1C42FF1914CA8586A67AE35A163.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5359D5652EB8B1C42FF1914CA8586A67AE35A163.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2BE879972F4E90E8FDCB6500D36E6A4A9FF77B0274706A399C0923D38FFEF25B/0/323830333a616335303a3a2f33322d3438203d3e20323733313433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ac50::/32

    Signature Algorithm: sha256WithRSAEncryption
         1c:77:c1:65:a2:8e:ae:bf:41:25:d2:92:50:4e:fd:57:60:c5:
         8c:f8:20:ae:94:c0:a9:74:b7:19:2c:74:aa:e5:f8:63:ec:c5:
         8d:b8:c8:9d:8f:09:93:6e:b7:fd:c0:5f:12:39:8d:81:3e:08:
         28:2a:6e:97:a5:d5:9c:7a:c6:d8:69:a4:41:4d:54:bb:36:4d:
         c9:c8:d3:8a:3f:a4:a9:2c:22:ea:4e:6a:6e:41:a0:bb:a9:55:
         65:8e:cb:0c:25:13:be:e5:8a:8b:ae:63:ae:55:39:21:82:95:
         1c:e7:42:20:ac:6f:30:32:79:60:e1:cb:1d:ee:db:60:90:28:
         bb:89:d9:7d:c5:ef:d1:97:d0:8c:a3:5b:3f:53:35:af:bc:07:
         a3:69:67:a5:84:4c:7e:19:fa:4d:a6:5b:e5:e9:25:b1:7e:b7:
         ad:46:14:08:55:69:d1:96:a5:22:ca:eb:ea:6d:cb:fc:c9:4f:
         0f:b3:82:69:ac:14:62:9e:77:17:15:9a:4d:63:d1:b9:ac:de:
         3f:1f:af:99:ba:8b:d4:6f:84:ea:2c:58:4d:b2:9f:aa:2c:db:
         00:fa:d6:75:c5:dd:6f:35:b7:55:e4:c3:6e:04:fb:9e:ff:bb:
         26:d3:fd:51:73:5e:3b:6c:a5:95:b5:3a:a0:12:7e:98:b3:96:
         eb:ec:bf:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 19 16:00:14 2025 by rpki-client