Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/36AE5B587E5546A30AFBE693BD61B4B634D7A6198DC7FCFB4A0939FB9CD3FCF7/0/323830333a376335303a3a2f33322d3438203d3e20323733313534.roa
File:                     323830333a376335303a3a2f33322d3438203d3e20323733313534.roa (raw, json)
Hash identifier:          reW2sUZkcyZY/GYRlTAe+SoC+MrkIzLGdzZwsFVlxSk=
Subject key identifier:   B8:5F:B7:C2:45:66:4A:BF:DC:CA:4F:F5:68:38:7B:E9:32:A5:A9:01
Certificate issuer:       /CN=93ED4FCE78C288E48F0F2D57E326100A93D1A90E
Certificate serial:       447934B918F5ED1BD95BB7654E4F6166D152328A
Authority key identifier: 93:ED:4F:CE:78:C2:88:E4:8F:0F:2D:57:E3:26:10:0A:93:D1:A9:0E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/93ED4FCE78C288E48F0F2D57E326100A93D1A90E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/36AE5B587E5546A30AFBE693BD61B4B634D7A6198DC7FCFB4A0939FB9CD3FCF7/0/323830333a376335303a3a2f33322d3438203d3e20323733313534.roa
Signing time:             Wed 14 May 2025 18:18:47 +0000
ROA not before:           Wed 14 May 2025 18:13:47 +0000
ROA not after:            Wed 13 May 2026 18:18:47 +0000
asID:                     273154
IP address blocks:        2803:7c50::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/36AE5B587E5546A30AFBE693BD61B4B634D7A6198DC7FCFB4A0939FB9CD3FCF7/0/93ED4FCE78C288E48F0F2D57E326100A93D1A90E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/36AE5B587E5546A30AFBE693BD61B4B634D7A6198DC7FCFB4A0939FB9CD3FCF7/0/93ED4FCE78C288E48F0F2D57E326100A93D1A90E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/93ED4FCE78C288E48F0F2D57E326100A93D1A90E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 21 May 2025 23:46:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:79:34:b9:18:f5:ed:1b:d9:5b:b7:65:4e:4f:61:66:d1:52:32:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93ED4FCE78C288E48F0F2D57E326100A93D1A90E
        Validity
            Not Before: May 14 18:13:47 2025 GMT
            Not After : May 13 18:18:47 2026 GMT
        Subject: CN=B85FB7C245664ABFDCCA4FF568387BE932A5A901
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:c3:46:d5:da:b0:3f:c8:e3:5d:78:27:fa:80:
                    2c:50:a0:f9:25:67:4e:dc:2e:6e:a2:e5:96:36:78:
                    3e:d3:04:d9:89:d9:4a:d8:bd:0e:fc:ea:6e:eb:12:
                    64:96:64:cb:a4:f2:ae:b1:ad:91:2b:bd:12:58:bf:
                    ea:39:b5:13:62:1a:be:1c:1c:95:56:40:94:55:7b:
                    eb:16:2c:86:78:14:70:d4:a1:5a:5f:56:f8:64:25:
                    03:f4:93:c9:4d:f2:14:e7:da:a9:5f:a5:e5:fe:5c:
                    b2:49:af:43:13:fc:a3:80:31:5b:a9:8e:ae:d7:9b:
                    96:d2:8c:dc:2d:64:81:f3:3f:ad:b8:d3:c1:6c:8e:
                    88:b7:e9:7f:5a:9e:90:aa:f6:5b:ba:db:c7:52:28:
                    1d:9d:d9:02:3c:3d:c4:51:47:ea:c3:42:6d:58:31:
                    f7:ce:9e:52:3b:1c:8d:ec:5f:5a:7f:5e:a2:7c:76:
                    fb:1c:c3:cd:8c:be:a1:76:34:54:9f:2b:38:ea:3a:
                    2f:9f:5a:c1:59:4b:84:73:56:b7:1c:67:ea:f4:7a:
                    27:95:c3:56:c6:f8:03:06:c5:79:74:e3:41:2d:af:
                    63:3b:60:9f:c2:de:9f:69:56:30:78:eb:e7:22:ff:
                    f6:dc:93:dc:19:f3:f6:a4:bc:a7:0f:cc:c5:b3:f1:
                    db:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:5F:B7:C2:45:66:4A:BF:DC:CA:4F:F5:68:38:7B:E9:32:A5:A9:01
            X509v3 Authority Key Identifier:
                keyid:93:ED:4F:CE:78:C2:88:E4:8F:0F:2D:57:E3:26:10:0A:93:D1:A9:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/36AE5B587E5546A30AFBE693BD61B4B634D7A6198DC7FCFB4A0939FB9CD3FCF7/0/93ED4FCE78C288E48F0F2D57E326100A93D1A90E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/93ED4FCE78C288E48F0F2D57E326100A93D1A90E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/36AE5B587E5546A30AFBE693BD61B4B634D7A6198DC7FCFB4A0939FB9CD3FCF7/0/323830333a376335303a3a2f33322d3438203d3e20323733313534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7c50::/32

    Signature Algorithm: sha256WithRSAEncryption
         00:ab:20:e9:9b:a4:04:d8:2b:92:ce:3e:d2:8c:90:61:d6:5c:
         93:8c:1c:97:b4:3b:33:29:21:e1:da:cc:1f:7f:ab:f0:3e:3e:
         e3:f6:26:3d:9c:a4:60:aa:12:f9:02:9a:f5:36:3d:93:ec:36:
         28:a4:f5:32:68:9d:b5:15:d1:a9:d6:e5:1b:ab:ec:82:fd:6a:
         53:1f:b8:85:9b:5c:64:c7:7f:de:8f:d9:17:89:5e:36:b8:b4:
         cd:cb:47:0b:3c:72:aa:e6:b9:0d:ce:a9:0d:38:f0:87:c8:b9:
         a2:2d:29:01:26:ad:6b:59:1a:c5:7f:c8:6f:9f:a8:c8:e7:9a:
         6e:59:c5:3d:97:c9:8f:37:71:a4:3b:a1:b2:2d:5a:22:db:f6:
         18:ce:cd:cd:af:09:f9:b4:1e:ac:c2:bf:14:a4:44:8c:76:0c:
         62:3d:46:4f:d3:1e:df:88:65:7f:5b:f8:eb:2a:8f:e0:bc:90:
         c4:43:c1:47:cd:7f:20:92:9d:1a:8d:77:84:31:2b:56:8d:a3:
         f4:ae:79:88:7d:2e:41:3e:d4:e0:02:a1:25:7a:0f:1f:f7:72:
         0b:cc:76:28:71:bf:28:2c:7a:62:96:ea:6b:ae:d2:52:93:8a:
         69:63:9b:97:84:41:ad:00:84:75:a6:75:77:d4:aa:7f:bb:38:
         2c:c5:a7:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 17:43:51 2025 by rpki-client