Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E8583101F33B33E0A9D6AECC74233EB868B767DDEE02A20FC18B803B5CB41DEA/0/323830333a323665303a353230303a3a2f34302d3430203d3e20323639383035.roa
File:                     323830333a323665303a353230303a3a2f34302d3430203d3e20323639383035.roa (raw, json)
Hash identifier:          bkt2APmRJrDclXVIcRevvbiy8hFxMeGIYBFN8b4eYIM=
Subject key identifier:   31:D6:C0:0D:FE:68:38:99:C3:50:0D:12:45:5B:1B:72:9B:EA:D2:5D
Certificate issuer:       /CN=1DEE90799B3B2F7EFC216DAB92BDF4586D4CC0D4
Certificate serial:       151F636FEBB5062651D5D220365A22C93C22EEF9
Authority key identifier: 1D:EE:90:79:9B:3B:2F:7E:FC:21:6D:AB:92:BD:F4:58:6D:4C:C0:D4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1DEE90799B3B2F7EFC216DAB92BDF4586D4CC0D4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E8583101F33B33E0A9D6AECC74233EB868B767DDEE02A20FC18B803B5CB41DEA/0/323830333a323665303a353230303a3a2f34302d3430203d3e20323639383035.roa
Signing time:             Mon 05 May 2025 18:10:00 +0000
ROA not before:           Mon 05 May 2025 18:05:00 +0000
ROA not after:            Mon 04 May 2026 18:10:00 +0000
asID:                     269805
IP address blocks:        2803:26e0:5200::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E8583101F33B33E0A9D6AECC74233EB868B767DDEE02A20FC18B803B5CB41DEA/0/1DEE90799B3B2F7EFC216DAB92BDF4586D4CC0D4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E8583101F33B33E0A9D6AECC74233EB868B767DDEE02A20FC18B803B5CB41DEA/0/1DEE90799B3B2F7EFC216DAB92BDF4586D4CC0D4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1DEE90799B3B2F7EFC216DAB92BDF4586D4CC0D4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 21 May 2025 23:46:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:1f:63:6f:eb:b5:06:26:51:d5:d2:20:36:5a:22:c9:3c:22:ee:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1DEE90799B3B2F7EFC216DAB92BDF4586D4CC0D4
        Validity
            Not Before: May  5 18:05:00 2025 GMT
            Not After : May  4 18:10:00 2026 GMT
        Subject: CN=31D6C00DFE683899C3500D12455B1B729BEAD25D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:5e:85:bb:e1:b7:6b:4f:b4:0a:42:2b:82:2a:
                    09:1f:67:d8:a4:82:80:cf:61:5c:2c:45:0d:1f:af:
                    fa:87:e5:19:0a:1e:dd:e6:96:b2:06:38:be:0a:ec:
                    b0:3e:72:33:cb:c9:0a:02:d2:4c:30:f1:dc:cc:b3:
                    37:08:e1:22:e5:33:53:e3:5c:c7:ab:47:a6:2e:36:
                    fb:98:b5:fe:c3:a5:ae:36:6e:5f:6b:b8:45:33:d9:
                    72:f6:e7:57:fc:e5:a1:e3:0f:12:30:f2:c3:6c:be:
                    a9:e8:3b:80:2b:ea:93:d2:61:77:95:ef:d2:6b:df:
                    c2:d8:da:b2:f1:c5:c9:28:7f:b5:de:a4:a0:00:e7:
                    be:49:8f:e8:ed:ba:a9:c2:0b:17:2d:e4:7a:84:a8:
                    4a:b1:de:81:c4:c3:74:69:4c:0c:f4:d0:86:24:4a:
                    ad:10:f0:65:5e:b5:11:65:12:ae:90:24:90:b6:eb:
                    00:08:0f:95:9a:14:f7:f3:62:e0:de:5f:ad:a9:b5:
                    10:f9:17:8c:bf:02:64:5e:c6:75:b6:52:9a:3a:0e:
                    d7:e7:29:10:18:c3:15:61:e0:8c:e1:6a:66:75:ce:
                    82:ad:bc:da:fd:19:85:ca:6d:a9:bf:22:cb:c2:f8:
                    92:e1:9a:41:40:48:e5:94:d8:ba:11:69:1b:a4:23:
                    18:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:D6:C0:0D:FE:68:38:99:C3:50:0D:12:45:5B:1B:72:9B:EA:D2:5D
            X509v3 Authority Key Identifier:
                keyid:1D:EE:90:79:9B:3B:2F:7E:FC:21:6D:AB:92:BD:F4:58:6D:4C:C0:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E8583101F33B33E0A9D6AECC74233EB868B767DDEE02A20FC18B803B5CB41DEA/0/1DEE90799B3B2F7EFC216DAB92BDF4586D4CC0D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1DEE90799B3B2F7EFC216DAB92BDF4586D4CC0D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E8583101F33B33E0A9D6AECC74233EB868B767DDEE02A20FC18B803B5CB41DEA/0/323830333a323665303a353230303a3a2f34302d3430203d3e20323639383035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:26e0:5200::/40

    Signature Algorithm: sha256WithRSAEncryption
         4a:db:c9:db:7f:c7:03:0d:a1:3e:21:5b:2b:6e:da:4d:e0:5c:
         24:45:23:f8:89:e8:2c:a3:78:92:31:94:f5:b9:90:c2:86:2c:
         b8:c1:33:0b:a1:18:8e:1a:62:c1:7f:71:57:3f:d8:32:c7:0d:
         24:d9:d0:6d:5b:fb:00:e0:01:a7:6a:79:ed:0f:b3:40:aa:e2:
         6a:65:9b:a4:e7:48:99:b1:76:54:71:d3:83:61:43:ab:e3:37:
         0d:d8:16:6d:b6:d7:1e:06:1f:fa:c1:b2:0d:17:c2:75:35:10:
         a2:2f:97:36:67:5d:69:d6:1b:ae:8e:3c:f1:5d:3d:e8:4f:7f:
         24:5b:fc:6b:1d:78:ee:c8:8f:f6:36:a7:16:20:d9:7c:47:b9:
         93:ae:0f:32:fa:a9:3a:62:70:b7:bf:59:ab:06:63:22:f0:c1:
         da:a5:f0:53:4b:d4:92:40:d7:96:19:89:a2:e1:cf:d8:7d:ab:
         64:fb:9d:99:a9:9f:ed:64:82:f7:04:e4:3c:fb:3a:9e:e2:61:
         c4:3d:05:ef:b3:ba:11:af:b8:2a:34:1d:88:9e:1b:3f:89:b6:
         0e:38:fc:61:4d:bd:95:ae:80:1f:d4:52:05:f9:36:70:4f:c7:
         01:1a:88:20:4c:69:fa:e0:75:2c:72:62:03:12:df:61:1b:de:
         51:6a:e6:e4
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun May 18 22:43:22 2025 by rpki-client