Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BDBE9E35F2E51BCE0587C086FE3A083134FED4584FE34F09EAE22B528F560F59/0/323830333a333264303a3a2f33322d3438203d3e20323734303538.roa
File:                     323830333a333264303a3a2f33322d3438203d3e20323734303538.roa (raw, json)
Hash identifier:          7LUV41nPLm3nTjBR1SYS+hqj2jHVoks/FXR2xQJxUHM=
Subject key identifier:   5A:AA:65:C5:B0:BB:BF:AC:B4:84:9E:F8:27:8A:D0:8A:B2:BA:17:D2
Certificate issuer:       /CN=EE685A9E1BEE0C88857B5579FC0C478C36FEE90A
Certificate serial:       761C6D2E455244564CFA9D9660B07FB08821BE35
Authority key identifier: EE:68:5A:9E:1B:EE:0C:88:85:7B:55:79:FC:0C:47:8C:36:FE:E9:0A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EE685A9E1BEE0C88857B5579FC0C478C36FEE90A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BDBE9E35F2E51BCE0587C086FE3A083134FED4584FE34F09EAE22B528F560F59/0/323830333a333264303a3a2f33322d3438203d3e20323734303538.roa
Signing time:             Sat 10 May 2025 16:30:00 +0000
ROA not before:           Sat 10 May 2025 16:25:00 +0000
ROA not after:            Sat 09 May 2026 16:30:00 +0000
asID:                     274058
IP address blocks:        2803:32d0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BDBE9E35F2E51BCE0587C086FE3A083134FED4584FE34F09EAE22B528F560F59/0/EE685A9E1BEE0C88857B5579FC0C478C36FEE90A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BDBE9E35F2E51BCE0587C086FE3A083134FED4584FE34F09EAE22B528F560F59/0/EE685A9E1BEE0C88857B5579FC0C478C36FEE90A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EE685A9E1BEE0C88857B5579FC0C478C36FEE90A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 21 May 2025 23:46:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:1c:6d:2e:45:52:44:56:4c:fa:9d:96:60:b0:7f:b0:88:21:be:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE685A9E1BEE0C88857B5579FC0C478C36FEE90A
        Validity
            Not Before: May 10 16:25:00 2025 GMT
            Not After : May  9 16:30:00 2026 GMT
        Subject: CN=5AAA65C5B0BBBFACB4849EF8278AD08AB2BA17D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:31:45:40:c9:59:10:7f:0a:e9:29:15:72:80:
                    e5:cb:fc:e7:2f:45:c4:b0:05:7d:a0:a7:06:97:2e:
                    af:e7:e6:a2:b7:ac:ae:93:e6:03:17:67:0d:d9:36:
                    1c:27:02:88:3c:61:3e:90:dd:04:14:2d:97:08:d0:
                    a8:f7:cc:0d:b5:59:44:d2:a9:02:0a:e6:6b:c0:78:
                    f7:6c:09:07:a9:12:84:4b:02:b7:a1:9e:a4:62:7f:
                    32:d5:a2:e3:ab:17:86:08:07:a6:de:37:29:ff:c4:
                    1f:f9:b5:e6:48:c3:a0:15:fb:63:36:25:c8:3e:ab:
                    e5:48:05:2e:4b:05:a5:b2:57:1c:27:37:60:17:44:
                    a0:15:26:4e:da:97:c1:bc:df:1c:28:b7:36:ec:8f:
                    62:54:02:82:b5:a0:82:3f:56:e8:c9:8b:40:e0:e9:
                    41:06:57:b1:64:c9:87:be:a5:8c:1d:bd:06:66:56:
                    02:05:8e:db:27:c5:f9:07:de:d0:c8:06:6a:96:60:
                    cf:03:d9:08:60:07:e5:a4:da:5f:f1:4c:3b:36:e7:
                    0b:b2:ed:c2:39:ba:d4:f4:cc:5b:76:c0:1b:9c:85:
                    4d:04:92:b0:b1:71:30:9b:23:80:21:63:48:18:4e:
                    42:30:15:a9:3d:19:97:e0:4f:ad:6d:e7:34:aa:44:
                    a7:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:AA:65:C5:B0:BB:BF:AC:B4:84:9E:F8:27:8A:D0:8A:B2:BA:17:D2
            X509v3 Authority Key Identifier:
                keyid:EE:68:5A:9E:1B:EE:0C:88:85:7B:55:79:FC:0C:47:8C:36:FE:E9:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BDBE9E35F2E51BCE0587C086FE3A083134FED4584FE34F09EAE22B528F560F59/0/EE685A9E1BEE0C88857B5579FC0C478C36FEE90A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EE685A9E1BEE0C88857B5579FC0C478C36FEE90A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BDBE9E35F2E51BCE0587C086FE3A083134FED4584FE34F09EAE22B528F560F59/0/323830333a333264303a3a2f33322d3438203d3e20323734303538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:32d0::/32

    Signature Algorithm: sha256WithRSAEncryption
         7c:fb:31:89:a9:43:4f:02:35:76:48:59:7a:95:03:1d:b4:4f:
         fd:af:5b:0e:90:59:49:f4:4c:f5:e5:ad:c9:f4:d3:d5:2a:7c:
         e7:a1:65:7c:bb:ca:5a:56:ca:f6:64:6f:b5:ef:45:ab:41:e5:
         f4:b8:9a:93:7e:c4:40:b3:32:a1:43:5c:63:74:01:7c:c2:2f:
         af:50:a5:e5:42:70:1b:d3:43:e4:da:c6:e6:6f:0e:c3:20:d7:
         2c:57:32:a2:54:a6:51:52:47:8e:b9:45:b8:3b:fd:a8:21:f6:
         80:61:6a:4b:17:06:55:7a:7c:3e:f1:86:fd:6e:fb:15:ef:99:
         42:2f:3b:90:6d:62:dc:4d:6b:e8:bc:54:d8:82:f7:9d:0a:d5:
         f3:bc:7c:a7:c7:2c:a3:8e:02:16:6b:cc:89:e3:06:d8:73:af:
         fe:a6:f0:54:5c:bf:3e:d5:a4:0d:05:c6:57:50:7c:83:2c:6d:
         f3:a9:a5:01:f5:8f:95:19:5d:01:32:b0:50:ee:47:09:a2:68:
         b6:9d:43:5c:ee:92:3a:cb:0e:d1:a2:0d:2e:91:1f:0c:7d:26:
         ee:26:2e:c8:19:45:63:ca:25:68:e6:60:6f:d3:56:58:9f:d8:
         c7:92:37:b3:87:a8:47:fb:bb:16:57:b0:3f:0b:37:98:2f:50:
         ca:ab:89:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 17:48:17 2025 by rpki-client