Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5D390766D73B05070156976AE1D11FA9DE87C813403538EF88FC4B978E9473C3/0/323830333a373530303a3a2f33322d3332203d3e20323635373134.roa
File:                     323830333a373530303a3a2f33322d3332203d3e20323635373134.roa (raw, json)
Hash identifier:          0R/21VzDZN0fOlioKJfr/jfSbv/qptk4/J+e52Fy9ZA=
Subject key identifier:   00:D2:2D:77:9B:33:C6:8E:FC:46:E3:0E:CB:4B:65:16:21:47:7A:D3
Certificate issuer:       /CN=942BABE0B62CFEB8749F1EBA716D62B61F58FE3B
Certificate serial:       5C68623FE05DB544652A23D435888235C6D0EAE7
Authority key identifier: 94:2B:AB:E0:B6:2C:FE:B8:74:9F:1E:BA:71:6D:62:B6:1F:58:FE:3B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/942BABE0B62CFEB8749F1EBA716D62B61F58FE3B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5D390766D73B05070156976AE1D11FA9DE87C813403538EF88FC4B978E9473C3/0/323830333a373530303a3a2f33322d3332203d3e20323635373134.roa
Signing time:             Tue 13 May 2025 01:18:35 +0000
ROA not before:           Tue 13 May 2025 01:13:35 +0000
ROA not after:            Tue 12 May 2026 01:18:35 +0000
asID:                     265714
IP address blocks:        2803:7500::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5D390766D73B05070156976AE1D11FA9DE87C813403538EF88FC4B978E9473C3/0/942BABE0B62CFEB8749F1EBA716D62B61F58FE3B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5D390766D73B05070156976AE1D11FA9DE87C813403538EF88FC4B978E9473C3/0/942BABE0B62CFEB8749F1EBA716D62B61F58FE3B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/942BABE0B62CFEB8749F1EBA716D62B61F58FE3B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 21 May 2025 23:46:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:68:62:3f:e0:5d:b5:44:65:2a:23:d4:35:88:82:35:c6:d0:ea:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=942BABE0B62CFEB8749F1EBA716D62B61F58FE3B
        Validity
            Not Before: May 13 01:13:35 2025 GMT
            Not After : May 12 01:18:35 2026 GMT
        Subject: CN=00D22D779B33C68EFC46E30ECB4B651621477AD3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:84:59:22:32:e1:e5:63:92:9e:c4:58:98:c8:
                    cf:94:85:4f:e9:5c:d6:2b:fa:3e:a8:2a:fd:ce:06:
                    f7:5a:2a:09:a9:eb:9e:fc:df:e1:17:fe:5a:1f:0b:
                    33:01:1e:cb:29:f7:93:78:c0:69:39:89:30:e6:86:
                    11:56:21:f9:0a:31:e5:c0:57:db:a4:ee:a1:2c:70:
                    eb:9c:5c:6c:a8:63:a6:51:31:2b:b7:5e:76:19:12:
                    8a:fb:38:16:21:d1:6e:67:e8:29:bf:b3:d9:db:f1:
                    8a:6c:eb:8f:ef:2a:c9:02:61:78:34:67:b3:5f:c2:
                    8b:74:a5:0e:0f:c1:c7:c3:cd:15:c6:98:97:c3:ab:
                    9b:25:d7:a7:25:78:a6:21:9b:98:54:a8:30:73:89:
                    8f:f4:4d:93:df:da:07:6e:12:8e:5b:43:d7:12:55:
                    c2:fb:fd:08:50:fe:57:dd:7f:b1:91:de:21:bf:84:
                    20:d4:c0:fd:72:8c:ed:58:50:f6:71:c9:1e:15:39:
                    ec:18:25:a6:74:bd:38:d3:63:2c:4d:0b:93:7e:22:
                    e2:99:7b:9b:84:f1:58:2d:d4:1e:94:4f:04:56:f7:
                    fd:2f:5e:63:67:78:fe:05:b3:9c:72:cc:81:24:bc:
                    f0:a4:b6:ad:88:58:8a:c6:ef:4f:92:e0:66:7b:d7:
                    17:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:D2:2D:77:9B:33:C6:8E:FC:46:E3:0E:CB:4B:65:16:21:47:7A:D3
            X509v3 Authority Key Identifier:
                keyid:94:2B:AB:E0:B6:2C:FE:B8:74:9F:1E:BA:71:6D:62:B6:1F:58:FE:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5D390766D73B05070156976AE1D11FA9DE87C813403538EF88FC4B978E9473C3/0/942BABE0B62CFEB8749F1EBA716D62B61F58FE3B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/942BABE0B62CFEB8749F1EBA716D62B61F58FE3B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5D390766D73B05070156976AE1D11FA9DE87C813403538EF88FC4B978E9473C3/0/323830333a373530303a3a2f33322d3332203d3e20323635373134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7500::/32

    Signature Algorithm: sha256WithRSAEncryption
         9b:f7:2f:48:37:38:1b:82:0d:e3:48:a2:b6:88:28:1b:67:3e:
         c1:8c:d5:e3:96:20:04:1c:cc:00:a4:96:27:8c:0d:5c:23:c3:
         73:e0:3e:ee:44:d9:3c:dc:21:50:54:1f:97:1f:8d:33:0b:e7:
         c6:e3:cd:d9:0b:ce:91:cc:b0:d8:ae:a9:37:b6:bf:d9:5e:ce:
         8f:7f:b4:69:0d:0d:21:d4:1d:50:4c:d3:c6:84:72:0a:8d:5d:
         ee:cb:94:a6:56:e9:d6:9e:19:bd:e0:62:77:85:b7:c5:ba:ea:
         e7:63:44:bc:21:2e:8d:63:1b:9e:02:c1:af:77:f6:bb:1c:68:
         bf:e4:68:36:05:59:34:96:f8:83:18:11:78:57:83:50:6c:ab:
         f5:32:ea:50:df:c5:da:48:a2:e4:0e:66:1c:7e:57:38:2a:27:
         91:a7:34:d0:6f:7d:d8:aa:ca:da:8e:e9:72:4e:d3:02:f6:25:
         f9:26:5b:5d:40:1c:5c:87:7c:22:77:4f:e9:50:a4:ae:c9:ea:
         b0:53:45:0e:26:3b:0c:8c:6b:96:18:65:b0:93:83:d5:b6:43:
         59:c5:61:1d:96:7b:43:92:c4:c9:81:bf:a2:f8:c4:21:69:c3:
         52:51:23:c1:09:41:56:88:d3:77:54:a0:7b:9e:27:b0:02:f0:
         d4:cd:51:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 18:00:21 2025 by rpki-client