Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3D8A7AE4A0639A999ECFE2B8AB19580924F2AB8F8F32A860DD8D6D5F79BB2815/0/323830333a633535303a383030303a3a2f33332d3333203d3e20323733383437.roa
File:                     323830333a633535303a383030303a3a2f33332d3333203d3e20323733383437.roa (raw, json)
Hash identifier:          VkDAsoGxFw7L+cyHnvxLR1lDihW/qq+9Z9RdnHAdnKg=
Subject key identifier:   3D:7F:A0:0C:8F:EB:6E:22:F3:58:21:7A:2D:39:B8:1F:7C:2C:6C:94
Certificate issuer:       /CN=E4FA559F63807E8DD19FFF7624CD06DD42F2B765
Certificate serial:       58406CFAFD19052D86E01F01FA1379DB6CB63833
Authority key identifier: E4:FA:55:9F:63:80:7E:8D:D1:9F:FF:76:24:CD:06:DD:42:F2:B7:65
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E4FA559F63807E8DD19FFF7624CD06DD42F2B765.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3D8A7AE4A0639A999ECFE2B8AB19580924F2AB8F8F32A860DD8D6D5F79BB2815/0/323830333a633535303a383030303a3a2f33332d3333203d3e20323733383437.roa
Signing time:             Fri 09 May 2025 16:18:12 +0000
ROA not before:           Fri 09 May 2025 16:13:12 +0000
ROA not after:            Fri 08 May 2026 16:18:12 +0000
asID:                     273847
IP address blocks:        2803:c550:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3D8A7AE4A0639A999ECFE2B8AB19580924F2AB8F8F32A860DD8D6D5F79BB2815/0/E4FA559F63807E8DD19FFF7624CD06DD42F2B765.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3D8A7AE4A0639A999ECFE2B8AB19580924F2AB8F8F32A860DD8D6D5F79BB2815/0/E4FA559F63807E8DD19FFF7624CD06DD42F2B765.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E4FA559F63807E8DD19FFF7624CD06DD42F2B765.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 21 May 2025 01:23:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:40:6c:fa:fd:19:05:2d:86:e0:1f:01:fa:13:79:db:6c:b6:38:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4FA559F63807E8DD19FFF7624CD06DD42F2B765
        Validity
            Not Before: May  9 16:13:12 2025 GMT
            Not After : May  8 16:18:12 2026 GMT
        Subject: CN=3D7FA00C8FEB6E22F358217A2D39B81F7C2C6C94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:0d:60:e7:c8:dc:a8:19:e2:f8:a5:99:31:10:
                    a1:66:f5:53:0d:27:da:37:06:0d:7f:02:1a:e1:3c:
                    c9:0a:49:38:99:80:34:64:84:a6:e0:f2:ea:de:1d:
                    b1:07:25:b7:31:e6:2a:b8:99:0d:d2:7c:19:dc:22:
                    a7:c0:ab:3c:fd:c8:05:e9:bd:98:8b:7a:72:4a:b7:
                    92:1b:ed:11:f6:e7:c2:e8:6e:49:c8:9f:8a:20:69:
                    68:e0:f5:4e:93:3f:3d:f5:f4:61:8d:78:4d:f9:1f:
                    df:9f:18:d3:0a:c2:f5:de:e8:b3:85:da:48:06:27:
                    9d:c3:a8:e0:3a:44:6a:15:42:a8:8c:fe:a6:ef:83:
                    fe:61:19:a5:91:8d:12:6a:5c:49:aa:86:88:bf:6e:
                    06:b0:14:ca:db:a7:df:93:89:d0:db:52:95:0f:bd:
                    ce:b9:b5:f6:ee:d0:9e:53:c4:dd:9b:54:dd:2a:61:
                    5f:eb:7b:2e:8a:b2:ea:85:34:4b:fa:ae:06:55:bc:
                    26:c7:57:1b:25:e7:54:f2:c3:2e:32:87:39:b9:cd:
                    72:55:4b:68:42:4b:67:0a:69:e9:44:4f:75:a5:5f:
                    00:a5:3c:fa:0f:38:58:34:03:6c:16:de:0d:d9:af:
                    29:cf:a4:e9:19:e0:11:78:13:b3:93:3b:82:55:9d:
                    50:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:7F:A0:0C:8F:EB:6E:22:F3:58:21:7A:2D:39:B8:1F:7C:2C:6C:94
            X509v3 Authority Key Identifier:
                keyid:E4:FA:55:9F:63:80:7E:8D:D1:9F:FF:76:24:CD:06:DD:42:F2:B7:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3D8A7AE4A0639A999ECFE2B8AB19580924F2AB8F8F32A860DD8D6D5F79BB2815/0/E4FA559F63807E8DD19FFF7624CD06DD42F2B765.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E4FA559F63807E8DD19FFF7624CD06DD42F2B765.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3D8A7AE4A0639A999ECFE2B8AB19580924F2AB8F8F32A860DD8D6D5F79BB2815/0/323830333a633535303a383030303a3a2f33332d3333203d3e20323733383437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c550:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         4f:51:b9:f3:20:dc:e9:37:42:05:7f:6d:99:82:9c:ce:ab:44:
         08:24:27:03:24:e5:43:b0:27:fc:33:81:09:2d:ac:82:4f:83:
         30:aa:19:07:32:3d:3e:41:94:98:13:f1:10:dc:92:a5:7d:d9:
         8b:3e:fe:fb:0d:53:bf:93:e4:3d:9b:78:22:20:8f:83:3b:c0:
         49:f8:86:ff:31:39:5f:91:9f:71:49:97:ae:76:b1:54:eb:3d:
         50:e1:c3:19:37:63:13:96:a7:31:96:53:89:31:4b:09:49:e2:
         2e:91:fd:46:47:7e:cf:7e:9d:ca:15:b4:f4:b9:f9:4e:8c:88:
         46:e0:a9:05:d5:22:a1:33:dc:d2:ab:39:4f:c4:68:41:73:6d:
         80:b2:3a:3d:39:0e:cb:69:e0:b8:cb:d7:f3:ef:99:3b:42:e1:
         71:88:83:ef:d7:f9:96:96:9a:78:c3:99:a0:68:f5:0f:e3:27:
         b2:8e:b5:4b:1b:f9:77:03:83:f1:3b:80:0a:b3:b8:59:95:57:
         f4:93:b5:47:6e:23:1e:b0:76:5e:ac:c4:95:9e:48:3a:50:12:
         6d:ee:f5:3c:66:63:56:15:ad:5e:f4:59:2b:f5:d6:c5:d4:b7:
         dd:32:3c:49:aa:12:ca:93:21:75:06:ec:5b:b4:02:bf:d6:7d:
         fe:34:f5:ce
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat May 17 23:31:01 2025 by rpki-client