Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A511D681E72F9D814F7BD8FC39D1FED7EA3F94AB704F688C8C38F1A51732BDC/0/323830333a3363303a3a2f34382d3438203d3e20323635373238.roa
File:                     323830333a3363303a3a2f34382d3438203d3e20323635373238.roa (raw, json)
Hash identifier:          Hbo+K8ebsU3oLqBpjK/uKw122DOeJbxOMMSl0HGfjhk=
Subject key identifier:   EB:EF:BB:ED:2F:AC:05:3F:00:25:A5:88:B5:FD:28:7F:34:E7:3D:57
Certificate issuer:       /CN=B7E1ABEC010ABB9AF463BF22B16C561B5C2C4444
Certificate serial:       1AF3EBE44D1DCCA4B6966CE6B5A9A2C2C5F54D15
Authority key identifier: B7:E1:AB:EC:01:0A:BB:9A:F4:63:BF:22:B1:6C:56:1B:5C:2C:44:44
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B7E1ABEC010ABB9AF463BF22B16C561B5C2C4444.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3A511D681E72F9D814F7BD8FC39D1FED7EA3F94AB704F688C8C38F1A51732BDC/0/323830333a3363303a3a2f34382d3438203d3e20323635373238.roa
Signing time:             Fri 02 May 2025 21:17:39 +0000
ROA not before:           Fri 02 May 2025 21:12:39 +0000
ROA not after:            Fri 01 May 2026 21:17:39 +0000
asID:                     265728
IP address blocks:        2803:3c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3A511D681E72F9D814F7BD8FC39D1FED7EA3F94AB704F688C8C38F1A51732BDC/0/B7E1ABEC010ABB9AF463BF22B16C561B5C2C4444.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3A511D681E72F9D814F7BD8FC39D1FED7EA3F94AB704F688C8C38F1A51732BDC/0/B7E1ABEC010ABB9AF463BF22B16C561B5C2C4444.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B7E1ABEC010ABB9AF463BF22B16C561B5C2C4444.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 May 2025 06:47:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:f3:eb:e4:4d:1d:cc:a4:b6:96:6c:e6:b5:a9:a2:c2:c5:f5:4d:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7E1ABEC010ABB9AF463BF22B16C561B5C2C4444
        Validity
            Not Before: May  2 21:12:39 2025 GMT
            Not After : May  1 21:17:39 2026 GMT
        Subject: CN=EBEFBBED2FAC053F0025A588B5FD287F34E73D57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:ea:10:a9:6e:75:b7:81:d1:31:81:26:13:63:
                    46:29:67:ee:37:45:c1:63:3d:fe:1c:e2:22:cd:de:
                    37:66:41:3e:fc:b7:ce:43:dc:ce:1f:66:08:1f:56:
                    20:5e:8c:30:17:51:bb:e4:f1:03:7f:84:70:22:60:
                    11:ff:c3:50:40:e6:cb:17:39:69:ba:92:20:32:80:
                    43:94:92:d8:8b:e9:73:ef:cc:0a:04:c4:a4:90:97:
                    48:96:66:94:f9:07:fd:35:e6:bf:35:8e:ef:5a:b9:
                    ba:d4:f5:31:88:5c:67:1f:55:62:94:bd:78:b0:b0:
                    c1:2a:d3:24:af:ab:0c:f1:01:4d:5f:76:99:4d:05:
                    92:2b:3e:89:3e:a9:4e:e7:90:8b:f3:b6:eb:ed:a6:
                    ca:5a:e2:d8:6a:b6:8c:34:90:22:c6:3e:0f:81:bc:
                    95:26:e8:7f:9d:76:09:18:c4:e1:85:2f:f9:70:90:
                    17:fb:53:b7:ab:a2:ab:c3:4a:dc:00:2a:c9:39:96:
                    83:5e:61:a3:36:41:cd:e4:e8:a5:b3:77:e7:00:28:
                    c1:75:e9:df:72:3c:ad:12:0c:22:91:9f:0f:85:5d:
                    e5:d1:73:97:56:b8:71:49:ee:80:3b:93:e5:9a:ce:
                    ec:0a:e3:31:75:92:4f:9d:2a:a9:6b:8c:c4:68:cb:
                    c9:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:EF:BB:ED:2F:AC:05:3F:00:25:A5:88:B5:FD:28:7F:34:E7:3D:57
            X509v3 Authority Key Identifier:
                keyid:B7:E1:AB:EC:01:0A:BB:9A:F4:63:BF:22:B1:6C:56:1B:5C:2C:44:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3A511D681E72F9D814F7BD8FC39D1FED7EA3F94AB704F688C8C38F1A51732BDC/0/B7E1ABEC010ABB9AF463BF22B16C561B5C2C4444.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B7E1ABEC010ABB9AF463BF22B16C561B5C2C4444.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A511D681E72F9D814F7BD8FC39D1FED7EA3F94AB704F688C8C38F1A51732BDC/0/323830333a3363303a3a2f34382d3438203d3e20323635373238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         bd:da:5d:dd:9f:d5:b0:4c:4f:4f:38:c5:e8:ce:c9:00:5c:2b:
         90:60:e5:69:85:51:0d:84:c5:22:0e:d8:53:25:5e:83:a5:49:
         7f:5c:98:3e:71:f5:de:31:54:55:31:b8:96:9b:8c:c9:f1:7b:
         e0:22:26:b0:c4:41:3b:6f:51:e5:17:32:e8:67:71:71:12:58:
         52:98:95:05:98:14:74:ae:be:01:63:5e:de:ac:ce:18:77:b9:
         a8:9c:df:24:15:eb:12:3f:ed:00:2d:e3:73:9f:ab:fc:8c:84:
         51:b9:67:dd:eb:70:48:37:da:c6:7e:cf:0c:df:ff:3d:bd:5e:
         1f:19:92:2b:12:3f:30:4c:78:26:b0:ab:31:6f:d5:b4:bd:78:
         72:3c:76:6c:8f:08:46:48:ba:5c:03:d7:e3:f8:89:0b:d4:8f:
         11:ba:9f:da:be:6c:2c:c4:0f:72:6b:f1:d1:b5:be:0f:de:68:
         af:85:12:bb:8c:c7:d3:de:f4:ea:67:36:ba:60:88:8f:c6:77:
         08:f7:8e:5e:df:c4:53:f5:bf:40:e7:e0:2e:d7:bc:7a:a0:8d:
         4f:fb:10:f9:99:9d:bb:3d:1e:82:28:21:ca:4b:75:c3:43:aa:
         52:0f:2e:e7:1b:6f:60:0a:85:5e:5c:85:fc:83:a4:74:cf:f7:
         99:62:d2:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 20:59:48 2025 by rpki-client