Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C96DE90F4F4E1C7CD63FD12D2DD6415B40DA8653A63972536D0D44B79017CF63/0/323830333a326132303a3a2f33322d3332203d3e203533383536.roa
File:                     323830333a326132303a3a2f33322d3332203d3e203533383536.roa (raw, json)
Hash identifier:          MFzh1/SO3x6ot+1eKD1MwnPyabA+WfGhsKmiJ/B3oIQ=
Subject key identifier:   0A:FE:D4:B5:A1:1A:01:9A:15:CE:48:45:2C:FF:7F:1A:71:AF:3F:F9
Certificate issuer:       /CN=6B513DA47D330ABD029046B0C0FB7A850D26C312
Certificate serial:       3371267065A2DBBF517620C7206B8459BF11A8BE
Authority key identifier: 6B:51:3D:A4:7D:33:0A:BD:02:90:46:B0:C0:FB:7A:85:0D:26:C3:12
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6B513DA47D330ABD029046B0C0FB7A850D26C312.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C96DE90F4F4E1C7CD63FD12D2DD6415B40DA8653A63972536D0D44B79017CF63/0/323830333a326132303a3a2f33322d3332203d3e203533383536.roa
Signing time:             Tue 04 Feb 2025 18:02:24 +0000
ROA not before:           Tue 04 Feb 2025 17:57:24 +0000
ROA not after:            Tue 03 Feb 2026 18:02:24 +0000
asID:                     53856
IP address blocks:        2803:2a20::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C96DE90F4F4E1C7CD63FD12D2DD6415B40DA8653A63972536D0D44B79017CF63/0/6B513DA47D330ABD029046B0C0FB7A850D26C312.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C96DE90F4F4E1C7CD63FD12D2DD6415B40DA8653A63972536D0D44B79017CF63/0/6B513DA47D330ABD029046B0C0FB7A850D26C312.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6B513DA47D330ABD029046B0C0FB7A850D26C312.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 21 May 2025 01:23:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:71:26:70:65:a2:db:bf:51:76:20:c7:20:6b:84:59:bf:11:a8:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B513DA47D330ABD029046B0C0FB7A850D26C312
        Validity
            Not Before: Feb  4 17:57:24 2025 GMT
            Not After : Feb  3 18:02:24 2026 GMT
        Subject: CN=0AFED4B5A11A019A15CE48452CFF7F1A71AF3FF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d2:a0:62:62:82:86:72:5e:a5:07:0f:8f:79:
                    56:12:d9:82:ea:7c:42:d9:7e:9d:07:b5:53:8a:f6:
                    97:56:20:74:0a:68:cd:37:3b:5d:b6:3c:16:55:f6:
                    b1:93:00:cf:8d:43:3b:07:93:c3:95:4b:3f:a6:df:
                    0a:43:3d:b5:29:de:ed:ea:36:4c:01:e8:6a:95:cb:
                    0d:83:27:bc:98:53:fe:ff:37:56:bb:b5:db:cd:1d:
                    50:ed:48:0e:31:a7:7e:d4:cf:dc:ce:49:60:b5:da:
                    a0:67:6b:c9:be:21:bf:83:e1:3e:f0:f1:0d:3f:50:
                    05:98:ef:20:1f:a3:64:fe:22:73:5c:b4:a0:f4:69:
                    3f:18:dd:08:dc:c8:f0:b3:5d:37:c8:e9:78:ed:7a:
                    14:59:18:89:51:77:8e:c5:51:a2:4a:f3:01:b1:d1:
                    aa:d5:8b:a2:e6:f3:f4:98:c4:52:63:9f:29:74:91:
                    7c:ec:b8:89:fc:1b:3b:70:f5:b6:9b:ab:a4:ed:d1:
                    ca:da:a5:ea:77:f5:7e:80:78:e0:1a:da:c9:03:92:
                    9e:f6:b5:cf:39:73:23:09:29:1d:50:f5:3f:d3:a8:
                    13:f7:7a:b6:a0:da:92:cd:df:92:2e:9a:f9:65:85:
                    89:ad:ec:9d:60:f9:ba:f9:9c:b6:3f:2e:b0:ad:55:
                    3b:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:FE:D4:B5:A1:1A:01:9A:15:CE:48:45:2C:FF:7F:1A:71:AF:3F:F9
            X509v3 Authority Key Identifier:
                keyid:6B:51:3D:A4:7D:33:0A:BD:02:90:46:B0:C0:FB:7A:85:0D:26:C3:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C96DE90F4F4E1C7CD63FD12D2DD6415B40DA8653A63972536D0D44B79017CF63/0/6B513DA47D330ABD029046B0C0FB7A850D26C312.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6B513DA47D330ABD029046B0C0FB7A850D26C312.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C96DE90F4F4E1C7CD63FD12D2DD6415B40DA8653A63972536D0D44B79017CF63/0/323830333a326132303a3a2f33322d3332203d3e203533383536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2a20::/32

    Signature Algorithm: sha256WithRSAEncryption
         5f:eb:e7:cb:6e:28:a6:49:54:ff:4c:ab:69:d4:da:c9:5a:26:
         da:02:29:e8:62:09:b9:18:4c:8a:c4:c2:bc:aa:66:cb:ca:d4:
         21:af:a5:7d:91:94:34:36:a5:64:0e:5c:2d:94:6d:f1:e0:17:
         cd:3c:ae:0f:cb:81:53:2f:47:d6:01:0b:56:b9:a3:ae:16:b9:
         8b:72:57:5f:37:b3:61:f7:09:19:fe:b6:b5:80:7b:37:c4:81:
         9c:71:ba:53:6d:ed:d9:09:e7:0a:3b:32:fe:1d:04:21:be:1f:
         b2:c9:4d:08:f8:72:3d:b8:12:3e:a8:22:cc:4e:5f:aa:3a:c8:
         a7:c4:07:49:c6:21:f0:92:82:6f:ae:b6:42:12:d4:4e:c9:ef:
         11:c5:9d:67:03:f9:86:53:db:19:93:36:8c:66:36:a3:c8:20:
         6b:89:af:76:5e:10:34:5b:bc:58:d0:82:3d:31:96:94:12:e2:
         d3:bb:b5:0b:39:f9:a8:c7:7b:89:33:dd:6c:87:69:36:58:fc:
         14:0e:6e:1c:07:a4:52:ff:9c:e2:c7:14:34:1f:47:d8:7a:de:
         7e:71:94:9a:6a:e8:16:7c:be:5b:15:bd:9e:36:de:c2:8a:76:
         cc:dc:2c:27:08:a2:f4:12:47:5a:da:e0:b5:a3:00:80:98:d1:
         62:5a:ae:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 23:37:35 2025 by rpki-client