Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D47CABE4097644325B48777B7C52FC2AD6DD922641D9E0145A8F23EB631EB1CC/0/323830333a626236303a3a2f33322d3438203d3e20323639383133.roa
File:                     323830333a626236303a3a2f33322d3438203d3e20323639383133.roa (raw, json)
Hash identifier:          0yV1Aw7KFsaIZARCe6sfUUr+xSYi4y279CDZkeXCNmg=
Subject key identifier:   4E:09:6A:FE:BE:DE:F6:F4:32:F0:EB:48:CD:BA:8A:C3:B2:8D:26:90
Certificate issuer:       /CN=1543ECDEE164252425B06E8AA0858149FE72AFA3
Certificate serial:       04501DC10FBD1E25F516D04CFF759C657721C845
Authority key identifier: 15:43:EC:DE:E1:64:25:24:25:B0:6E:8A:A0:85:81:49:FE:72:AF:A3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1543ECDEE164252425B06E8AA0858149FE72AFA3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D47CABE4097644325B48777B7C52FC2AD6DD922641D9E0145A8F23EB631EB1CC/0/323830333a626236303a3a2f33322d3438203d3e20323639383133.roa
Signing time:             Thu 08 May 2025 18:18:06 +0000
ROA not before:           Thu 08 May 2025 18:13:06 +0000
ROA not after:            Thu 07 May 2026 18:18:06 +0000
asID:                     269813
IP address blocks:        2803:bb60::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D47CABE4097644325B48777B7C52FC2AD6DD922641D9E0145A8F23EB631EB1CC/0/1543ECDEE164252425B06E8AA0858149FE72AFA3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D47CABE4097644325B48777B7C52FC2AD6DD922641D9E0145A8F23EB631EB1CC/0/1543ECDEE164252425B06E8AA0858149FE72AFA3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1543ECDEE164252425B06E8AA0858149FE72AFA3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 21 May 2025 23:46:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:50:1d:c1:0f:bd:1e:25:f5:16:d0:4c:ff:75:9c:65:77:21:c8:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1543ECDEE164252425B06E8AA0858149FE72AFA3
        Validity
            Not Before: May  8 18:13:06 2025 GMT
            Not After : May  7 18:18:06 2026 GMT
        Subject: CN=4E096AFEBEDEF6F432F0EB48CDBA8AC3B28D2690
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:90:5d:11:3e:3c:7e:89:f0:1b:eb:56:08:ca:
                    0c:81:44:e8:0b:74:76:76:1f:c4:ed:69:5d:13:43:
                    16:fe:8f:4b:6b:fa:36:4c:e0:84:b5:2b:30:00:78:
                    ca:e5:42:7d:55:f2:85:17:94:b9:16:8a:d6:83:ab:
                    a1:95:1f:ca:be:4d:cd:8d:80:ec:de:2f:ae:e5:73:
                    44:08:1a:8a:2d:69:39:77:5a:d8:c3:2f:3f:f5:ce:
                    3b:c2:10:37:fc:fc:94:37:37:54:77:f5:b4:48:e2:
                    ec:14:1c:c9:c2:2d:f1:11:0f:e4:40:bc:d6:f8:6a:
                    ab:05:c7:c5:0b:56:a7:0f:cf:19:06:a7:fc:59:34:
                    ba:7e:8f:18:21:d3:db:ea:d2:fc:f2:a3:04:4c:3c:
                    90:9b:dd:49:f5:3d:9a:4e:75:19:de:6e:50:ac:47:
                    a2:f8:77:52:e3:f5:4b:e6:45:7f:e6:ab:74:a0:54:
                    47:ed:3a:d2:7e:1e:ea:e0:f6:23:4b:c9:aa:e9:20:
                    be:eb:41:37:9f:0b:57:9a:21:b8:f1:ed:75:e9:a7:
                    44:ac:b7:54:a0:b2:7a:94:91:7d:f5:84:9f:f6:69:
                    88:b3:bb:e4:b5:72:60:74:a7:03:59:93:b1:fa:43:
                    69:6e:fb:cc:59:45:33:fa:11:fe:44:a1:ef:e3:61:
                    a4:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:09:6A:FE:BE:DE:F6:F4:32:F0:EB:48:CD:BA:8A:C3:B2:8D:26:90
            X509v3 Authority Key Identifier:
                keyid:15:43:EC:DE:E1:64:25:24:25:B0:6E:8A:A0:85:81:49:FE:72:AF:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D47CABE4097644325B48777B7C52FC2AD6DD922641D9E0145A8F23EB631EB1CC/0/1543ECDEE164252425B06E8AA0858149FE72AFA3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1543ECDEE164252425B06E8AA0858149FE72AFA3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D47CABE4097644325B48777B7C52FC2AD6DD922641D9E0145A8F23EB631EB1CC/0/323830333a626236303a3a2f33322d3438203d3e20323639383133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:bb60::/32

    Signature Algorithm: sha256WithRSAEncryption
         86:56:cc:c2:21:a7:2f:df:6f:2b:b3:da:00:e9:a9:68:45:33:
         d5:d6:9d:d5:f8:16:4f:78:0e:d3:5d:d9:2b:99:21:e6:ac:b1:
         fa:c1:9c:70:cd:3c:28:c3:d6:20:2a:6a:de:53:43:91:26:44:
         ea:c6:db:c1:e2:dc:c1:be:1e:45:a9:3e:a9:b6:a9:73:bc:c5:
         34:42:97:5f:c4:f7:f5:9e:8b:b9:8f:bf:c8:9b:a1:48:d8:81:
         25:ed:28:68:85:c1:77:97:66:33:a4:1a:b9:2b:21:24:9d:47:
         54:b9:61:3c:88:67:ce:6f:de:ae:3a:76:f8:2a:9d:b2:d8:83:
         e6:b1:81:d3:66:4f:a0:c6:a9:cf:de:15:4e:d7:66:e6:51:82:
         53:e3:17:0f:74:93:58:f3:a3:95:b8:25:fe:eb:c9:88:92:37:
         9b:99:03:9c:db:e0:2e:f8:fe:1e:e5:86:ec:4d:99:98:af:7e:
         d2:52:a8:a8:a7:af:88:d2:dd:b8:6e:33:21:16:da:07:68:b0:
         71:3f:6c:af:3e:30:1a:78:2d:eb:1e:2b:15:8b:e9:7f:66:6f:
         ab:24:a1:30:f9:0e:4a:5c:78:ba:66:7d:b1:15:a8:7b:a6:d1:
         51:8c:56:8f:3f:17:50:fb:e2:6f:94:2e:75:c4:09:2b:57:37:
         97:c6:a1:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 07:49:40 2025 by rpki-client