Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0F5DE5FE5414B3639D59BF50B1FD9BC019A8A484710FA86FB3773FC3157E0455/0/323830333a643534303a3a2f33322d3332203d3e20323636373531.roa
File:                     323830333a643534303a3a2f33322d3332203d3e20323636373531.roa (raw, json)
Hash identifier:          Wp27pcq1WF305FPxlw0GS4eCogaQYBcIP1Rqo4Q0r0I=
Subject key identifier:   56:72:5C:CE:C4:B8:61:72:4E:46:39:91:B3:62:0D:90:78:60:87:17
Certificate issuer:       /CN=E45FE5E7213B150375DA656763256CB72EEEE655
Certificate serial:       5756D3A69DD52FCC40C6616584E560C8D2B320FF
Authority key identifier: E4:5F:E5:E7:21:3B:15:03:75:DA:65:67:63:25:6C:B7:2E:EE:E6:55
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E45FE5E7213B150375DA656763256CB72EEEE655.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0F5DE5FE5414B3639D59BF50B1FD9BC019A8A484710FA86FB3773FC3157E0455/0/323830333a643534303a3a2f33322d3332203d3e20323636373531.roa
Signing time:             Fri 02 May 2025 20:17:35 +0000
ROA not before:           Fri 02 May 2025 20:12:35 +0000
ROA not after:            Fri 01 May 2026 20:17:35 +0000
asID:                     266751
IP address blocks:        2803:d540::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0F5DE5FE5414B3639D59BF50B1FD9BC019A8A484710FA86FB3773FC3157E0455/0/E45FE5E7213B150375DA656763256CB72EEEE655.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0F5DE5FE5414B3639D59BF50B1FD9BC019A8A484710FA86FB3773FC3157E0455/0/E45FE5E7213B150375DA656763256CB72EEEE655.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E45FE5E7213B150375DA656763256CB72EEEE655.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 May 2025 10:17:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:56:d3:a6:9d:d5:2f:cc:40:c6:61:65:84:e5:60:c8:d2:b3:20:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E45FE5E7213B150375DA656763256CB72EEEE655
        Validity
            Not Before: May  2 20:12:35 2025 GMT
            Not After : May  1 20:17:35 2026 GMT
        Subject: CN=56725CCEC4B861724E463991B3620D9078608717
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:6d:36:6d:ab:f6:d3:25:1a:82:8c:83:ab:31:
                    9e:93:e1:cb:12:29:80:21:ec:21:7a:e8:05:10:7c:
                    a1:a9:18:05:45:80:2d:7b:ee:45:08:2b:96:83:48:
                    e8:05:41:37:83:52:f7:9d:f9:dc:a7:30:22:fc:0d:
                    94:92:ea:a1:88:d4:13:a6:a2:fc:87:58:95:0e:68:
                    de:24:72:62:d9:fa:6c:97:94:27:95:23:fd:fa:32:
                    c4:d0:14:9e:bc:e0:53:a1:3c:b4:dc:96:b6:3d:52:
                    1b:58:b2:b2:38:b1:20:8d:30:ca:68:34:0e:c8:61:
                    84:47:1e:13:fc:78:8e:db:a9:de:64:d3:08:30:48:
                    0c:67:6f:a1:32:ce:3d:4d:df:18:41:a3:7e:41:63:
                    9b:08:d3:4f:45:75:33:01:f6:27:a4:03:35:e1:f2:
                    e6:ae:07:ef:4c:5a:da:4a:af:7f:15:2e:42:2c:13:
                    76:fc:80:6a:54:33:6b:d9:8b:d2:51:bc:1b:f0:77:
                    b2:a4:24:b3:a3:55:90:57:2f:f0:7b:bc:db:41:1d:
                    10:42:ec:50:f2:cf:c4:a0:c4:31:82:9c:59:f1:41:
                    c0:ce:f9:07:72:4c:82:10:cf:c6:68:a5:83:47:c9:
                    ef:62:74:7d:17:62:57:a6:71:b0:59:62:65:d1:57:
                    c2:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:72:5C:CE:C4:B8:61:72:4E:46:39:91:B3:62:0D:90:78:60:87:17
            X509v3 Authority Key Identifier:
                keyid:E4:5F:E5:E7:21:3B:15:03:75:DA:65:67:63:25:6C:B7:2E:EE:E6:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0F5DE5FE5414B3639D59BF50B1FD9BC019A8A484710FA86FB3773FC3157E0455/0/E45FE5E7213B150375DA656763256CB72EEEE655.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E45FE5E7213B150375DA656763256CB72EEEE655.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0F5DE5FE5414B3639D59BF50B1FD9BC019A8A484710FA86FB3773FC3157E0455/0/323830333a643534303a3a2f33322d3332203d3e20323636373531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d540::/32

    Signature Algorithm: sha256WithRSAEncryption
         2a:d9:60:b8:d9:a9:06:55:f7:c1:e4:ee:90:4d:0f:19:b3:6f:
         9f:0f:0b:3b:ab:02:5c:ac:e1:34:53:82:c5:a3:2d:10:8b:33:
         1e:7b:9d:c3:ad:ca:37:fc:95:7e:a4:7b:63:72:9b:1b:1e:47:
         cc:bc:1a:7a:73:96:5a:6b:38:45:25:8c:b3:fb:98:12:ec:1c:
         cf:eb:e6:0c:6d:a4:24:b3:1f:63:ef:c6:47:5d:0a:7d:5d:e8:
         aa:d8:91:2b:45:43:29:bf:e4:65:61:14:dd:fc:44:e0:af:bf:
         14:41:a8:b1:62:ed:31:17:89:76:6f:f5:2a:e3:c5:24:6b:c2:
         45:90:1f:1d:29:90:76:4d:b7:15:53:09:91:09:bb:d5:ee:66:
         ab:a5:8b:b6:ba:9d:c0:6e:e6:a4:63:8a:8e:ca:89:72:48:ac:
         17:98:c6:79:1d:5a:c8:ff:a4:ea:6b:9c:28:c1:56:9f:0c:ee:
         e1:10:44:e0:11:65:12:99:f4:9a:e1:90:64:5a:b7:de:14:c8:
         76:43:e2:e6:46:0d:63:ae:85:6e:b0:d7:60:3d:11:31:3d:80:
         99:e6:e1:83:0f:9c:2c:27:44:ea:9d:93:81:05:8a:47:8c:8b:
         50:ea:47:b3:16:26:2c:9b:f4:3d:2b:45:ec:b9:f0:86:85:0b:
         96:1e:b9:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 16:11:24 2025 by rpki-client