Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51705880D19D025583FA5ED2125794B769CF55B817CA21DC79D1B2F3CE48CA50/0/323830333a383439303a3a2f33322d3438203d3e20323732383133.roa
File:                     323830333a383439303a3a2f33322d3438203d3e20323732383133.roa (raw, json)
Hash identifier:          8/prVIjGMv4iqHXIh+iew6qaJEAa28HLvL3bH4CwBPU=
Subject key identifier:   C9:28:6C:9F:0D:1A:F1:EF:60:76:35:41:A5:64:EB:49:36:7E:E4:48
Certificate issuer:       /CN=86C24568CB44048FC6A26BDF0F8E2B9E90B59F87
Certificate serial:       7F1001AE209FCA47CFAA1FA991BD8362FB21FF42
Authority key identifier: 86:C2:45:68:CB:44:04:8F:C6:A2:6B:DF:0F:8E:2B:9E:90:B5:9F:87
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/86C24568CB44048FC6A26BDF0F8E2B9E90B59F87.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/51705880D19D025583FA5ED2125794B769CF55B817CA21DC79D1B2F3CE48CA50/0/323830333a383439303a3a2f33322d3438203d3e20323732383133.roa
Signing time:             Thu 08 May 2025 22:18:08 +0000
ROA not before:           Thu 08 May 2025 22:13:08 +0000
ROA not after:            Thu 07 May 2026 22:18:08 +0000
asID:                     272813
IP address blocks:        2803:8490::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/51705880D19D025583FA5ED2125794B769CF55B817CA21DC79D1B2F3CE48CA50/0/86C24568CB44048FC6A26BDF0F8E2B9E90B59F87.crl
                          rsync://repository.lacnic.net/rpki/lacnic/51705880D19D025583FA5ED2125794B769CF55B817CA21DC79D1B2F3CE48CA50/0/86C24568CB44048FC6A26BDF0F8E2B9E90B59F87.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/86C24568CB44048FC6A26BDF0F8E2B9E90B59F87.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 May 2025 14:04:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:10:01:ae:20:9f:ca:47:cf:aa:1f:a9:91:bd:83:62:fb:21:ff:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86C24568CB44048FC6A26BDF0F8E2B9E90B59F87
        Validity
            Not Before: May  8 22:13:08 2025 GMT
            Not After : May  7 22:18:08 2026 GMT
        Subject: CN=C9286C9F0D1AF1EF60763541A564EB49367EE448
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:c2:3a:68:5d:8d:80:8c:15:5b:7b:dd:74:ea:
                    52:7d:f3:05:2d:cd:ce:b2:a2:98:51:ba:b4:16:c8:
                    f3:08:d3:92:81:3a:a0:c4:45:05:c7:c6:1e:55:fe:
                    83:97:7d:06:65:02:d6:0c:f7:72:60:02:0b:d9:bc:
                    4c:18:19:43:3d:87:c2:bf:96:e2:37:ca:d0:d6:d1:
                    03:8c:a2:5b:12:bb:51:a2:46:36:e9:aa:3c:2f:28:
                    17:60:34:54:b4:22:e4:e5:7a:e2:cd:b7:7b:ec:be:
                    1e:7d:f6:d5:d1:d4:3e:cb:bb:22:d2:cf:5e:e2:72:
                    1f:65:f9:95:f5:92:e5:9b:73:be:c1:9c:6f:b1:f7:
                    4e:f9:62:bf:ba:34:19:26:97:8b:88:88:91:c0:f4:
                    d4:03:72:35:ad:88:87:c2:21:7e:84:6b:32:b4:c7:
                    a6:23:77:6c:6e:c1:6c:58:20:68:82:d6:6a:db:25:
                    22:33:80:e5:c6:06:4e:4b:36:b3:3d:ca:10:9c:7f:
                    5b:da:d1:6d:b4:82:24:c1:7a:a2:1e:d4:0b:dd:40:
                    4b:65:b9:47:53:1b:75:15:c3:72:21:5f:4e:c9:d9:
                    3d:5e:ca:56:fb:4d:12:39:69:ba:a8:8a:b0:c0:e4:
                    0c:e0:f4:66:b1:75:51:b7:ce:bd:7c:7d:a7:0c:d3:
                    d0:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:28:6C:9F:0D:1A:F1:EF:60:76:35:41:A5:64:EB:49:36:7E:E4:48
            X509v3 Authority Key Identifier:
                keyid:86:C2:45:68:CB:44:04:8F:C6:A2:6B:DF:0F:8E:2B:9E:90:B5:9F:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/51705880D19D025583FA5ED2125794B769CF55B817CA21DC79D1B2F3CE48CA50/0/86C24568CB44048FC6A26BDF0F8E2B9E90B59F87.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/86C24568CB44048FC6A26BDF0F8E2B9E90B59F87.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51705880D19D025583FA5ED2125794B769CF55B817CA21DC79D1B2F3CE48CA50/0/323830333a383439303a3a2f33322d3438203d3e20323732383133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8490::/32

    Signature Algorithm: sha256WithRSAEncryption
         61:23:88:45:66:29:71:a8:c5:05:4e:19:56:7c:b5:45:bd:37:
         fc:58:e6:8d:4d:fe:8d:d3:ad:b1:e7:e7:20:f7:27:9f:5f:ac:
         d5:be:40:59:14:aa:ab:de:6f:14:5c:bf:fb:03:8c:d2:15:62:
         29:70:5e:82:6c:2e:4f:60:9d:53:d2:78:4d:94:a3:3d:c1:d5:
         65:75:49:ea:af:00:d6:9a:62:14:7b:52:d3:ac:5d:dd:44:7c:
         05:95:be:15:4c:f4:8a:e7:83:0f:33:b8:34:25:ec:30:2a:fc:
         63:c6:da:81:fa:0e:54:26:2e:a1:3e:53:63:ff:8f:18:0b:ce:
         95:3c:5f:e2:f8:1d:ee:9b:ab:f4:5c:8b:ce:82:6d:ea:85:14:
         c1:50:24:0b:a9:08:a8:f0:0c:f3:79:89:34:d7:43:ae:cf:83:
         1c:89:60:d7:a1:15:c2:49:d1:5e:10:d2:75:d8:dc:4f:6b:c3:
         f8:10:f2:94:40:b0:d8:e9:53:e5:4a:a8:69:4a:2d:75:d0:89:
         4d:d5:62:fe:2b:39:94:29:88:fb:d3:a1:59:01:2b:29:1a:3a:
         c0:38:26:1f:7e:1b:04:73:7d:5b:30:9d:db:77:24:41:f2:df:
         89:c4:a6:55:42:a4:22:b1:c1:cf:15:46:a6:9c:d7:f9:6c:55:
         8a:ff:c7:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 08:06:10 2025 by rpki-client