Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4050DA84FD89C784DFBC3874DD064A3BC42840D9CA79DF7F936DD8FA82C11FB1/0/323830333a343961303a3a2f33322d3438203d3e203136363239.roa
File:                     323830333a343961303a3a2f33322d3438203d3e203136363239.roa (raw, json)
Hash identifier:          ip/B5Dj15n/luR02glvvxZm0veKcxxJ4vwRhyGpjE8A=
Subject key identifier:   BB:AB:50:21:79:7E:63:B9:5E:4B:FC:61:4C:82:57:79:2F:EF:53:BA
Certificate issuer:       /CN=E9BD71B0FDCC660140582C799E734F25C80A1196
Certificate serial:       0E922EE3B51B5D2A2EB4524BB5D95D50997E80A2
Authority key identifier: E9:BD:71:B0:FD:CC:66:01:40:58:2C:79:9E:73:4F:25:C8:0A:11:96
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9BD71B0FDCC660140582C799E734F25C80A1196.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4050DA84FD89C784DFBC3874DD064A3BC42840D9CA79DF7F936DD8FA82C11FB1/0/323830333a343961303a3a2f33322d3438203d3e203136363239.roa
Signing time:             Fri 13 Jun 2025 17:22:07 +0000
ROA not before:           Fri 13 Jun 2025 17:17:07 +0000
ROA not after:            Fri 12 Jun 2026 17:22:07 +0000
asID:                     16629
IP address blocks:        2803:49a0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4050DA84FD89C784DFBC3874DD064A3BC42840D9CA79DF7F936DD8FA82C11FB1/0/E9BD71B0FDCC660140582C799E734F25C80A1196.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4050DA84FD89C784DFBC3874DD064A3BC42840D9CA79DF7F936DD8FA82C11FB1/0/E9BD71B0FDCC660140582C799E734F25C80A1196.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9BD71B0FDCC660140582C799E734F25C80A1196.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 25 Jun 2025 11:30:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:92:2e:e3:b5:1b:5d:2a:2e:b4:52:4b:b5:d9:5d:50:99:7e:80:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9BD71B0FDCC660140582C799E734F25C80A1196
        Validity
            Not Before: Jun 13 17:17:07 2025 GMT
            Not After : Jun 12 17:22:07 2026 GMT
        Subject: CN=BBAB5021797E63B95E4BFC614C8257792FEF53BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:26:d6:26:32:e6:20:e3:f7:a5:92:3d:af:2f:
                    c1:1f:5d:68:2e:11:23:b6:0a:de:32:20:db:13:e2:
                    18:15:a8:08:14:ac:43:4a:44:3a:7e:89:a3:d1:1e:
                    e5:5d:c6:bf:de:9f:c4:ce:b7:87:39:b7:f6:33:59:
                    b4:98:3f:b2:39:43:83:fe:ea:51:07:52:e9:e4:79:
                    18:0e:0b:6e:09:0e:60:5f:d7:5f:4a:07:03:7b:93:
                    2b:b6:22:b8:0e:4e:8c:b3:50:44:19:c6:92:e1:4a:
                    da:ed:ab:8c:fd:d2:6e:b0:67:ab:1e:ca:40:0c:a7:
                    61:d0:6e:19:03:71:6a:8e:39:e4:b3:e4:19:6c:fa:
                    16:0e:b0:eb:f0:68:d7:40:fb:45:a2:40:28:a8:90:
                    f7:4d:fd:16:c3:d0:1e:4f:5f:f2:82:eb:44:9a:75:
                    2e:36:f8:49:ae:68:06:f1:fb:81:5e:ff:ce:15:2a:
                    ae:93:92:eb:75:9c:e1:34:e5:e9:80:cb:da:dd:16:
                    0e:e3:a6:6c:c4:bd:8e:84:57:29:b6:f7:45:d0:33:
                    09:df:ac:36:de:3c:ad:5a:5e:59:48:85:32:3d:76:
                    e9:5f:69:d3:f5:a8:08:1c:dd:39:ba:37:eb:e6:42:
                    19:14:77:f8:38:95:ef:4c:a4:4c:54:f5:2a:ff:40:
                    5f:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:AB:50:21:79:7E:63:B9:5E:4B:FC:61:4C:82:57:79:2F:EF:53:BA
            X509v3 Authority Key Identifier:
                keyid:E9:BD:71:B0:FD:CC:66:01:40:58:2C:79:9E:73:4F:25:C8:0A:11:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4050DA84FD89C784DFBC3874DD064A3BC42840D9CA79DF7F936DD8FA82C11FB1/0/E9BD71B0FDCC660140582C799E734F25C80A1196.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9BD71B0FDCC660140582C799E734F25C80A1196.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4050DA84FD89C784DFBC3874DD064A3BC42840D9CA79DF7F936DD8FA82C11FB1/0/323830333a343961303a3a2f33322d3438203d3e203136363239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:49a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         b1:f0:c2:8a:04:de:75:cd:80:36:02:88:56:1b:d9:60:52:75:
         95:83:91:ca:6b:e5:0b:13:79:ec:86:24:91:08:75:29:68:03:
         9e:a6:70:64:a0:6d:62:c9:c7:63:34:1c:2c:9c:c5:a3:84:37:
         e1:05:6f:e8:e1:64:83:f9:16:0a:b9:51:c5:b3:a3:90:56:f0:
         53:47:72:30:fd:86:44:71:87:ef:5c:9b:c7:f7:a4:a9:db:17:
         0c:8c:e7:c0:9f:df:29:2e:09:fe:f6:2a:e5:2c:80:b9:f9:1e:
         f9:cc:0c:1b:3c:27:c6:cc:7b:23:a3:6a:2b:e7:15:d4:ee:41:
         50:62:a6:f5:5f:31:a4:7c:29:a5:5a:3c:b4:fa:3d:99:f6:ae:
         50:30:37:75:7d:9f:94:91:3c:d0:3e:19:2b:4a:23:30:78:cb:
         e5:fe:a3:db:0a:94:88:cc:c1:e7:25:f8:0e:05:6a:53:f2:db:
         6a:bd:2d:dc:41:30:4f:a6:41:79:ee:5f:a1:69:1f:ee:b9:c2:
         82:58:c6:41:93:7f:4f:25:ba:56:9f:c9:59:df:36:68:25:0a:
         25:6c:3d:bf:8a:e8:ba:1b:49:10:8d:c1:70:88:71:0f:fb:5c:
         4c:c6:36:bb:3b:54:97:00:4d:e0:60:85:ca:b7:11:f4:93:a6:
         e5:ce:3e:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 10:30:09 2025 by rpki-client