Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CD0E054623AC9043C0E299C2C90B143803BD89125B0E863855C49C3B73F7BAA1/0/323030313a313339383a6235333a3a2f34382d3438203d3e203532323334.roa
File:                     323030313a313339383a6235333a3a2f34382d3438203d3e203532323334.roa (raw, json)
Hash identifier:          7/nLoCYye/+iWSamKVbgugY0g4D6jzkKGiZigb40s8o=
Subject key identifier:   FB:2D:6C:88:D2:26:FC:43:73:09:09:3D:C8:88:0B:18:63:01:75:91
Certificate issuer:       /CN=E35FC2646A9FC8929B694AAAE04D52023AA4680C
Certificate serial:       5552FBD52C10C426F013825FB0474E30400CABC2
Authority key identifier: E3:5F:C2:64:6A:9F:C8:92:9B:69:4A:AA:E0:4D:52:02:3A:A4:68:0C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35FC2646A9FC8929B694AAAE04D52023AA4680C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CD0E054623AC9043C0E299C2C90B143803BD89125B0E863855C49C3B73F7BAA1/0/323030313a313339383a6235333a3a2f34382d3438203d3e203532323334.roa
Signing time:             Wed 04 Jun 2025 00:30:00 +0000
ROA not before:           Wed 04 Jun 2025 00:25:00 +0000
ROA not after:            Wed 03 Jun 2026 00:30:00 +0000
asID:                     52234
IP address blocks:        2001:1398:b53::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CD0E054623AC9043C0E299C2C90B143803BD89125B0E863855C49C3B73F7BAA1/0/E35FC2646A9FC8929B694AAAE04D52023AA4680C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CD0E054623AC9043C0E299C2C90B143803BD89125B0E863855C49C3B73F7BAA1/0/E35FC2646A9FC8929B694AAAE04D52023AA4680C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35FC2646A9FC8929B694AAAE04D52023AA4680C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 25 Jun 2025 11:30:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:52:fb:d5:2c:10:c4:26:f0:13:82:5f:b0:47:4e:30:40:0c:ab:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E35FC2646A9FC8929B694AAAE04D52023AA4680C
        Validity
            Not Before: Jun  4 00:25:00 2025 GMT
            Not After : Jun  3 00:30:00 2026 GMT
        Subject: CN=FB2D6C88D226FC437309093DC8880B1863017591
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e5:33:29:ed:3a:09:f5:07:b9:b2:a8:65:41:
                    09:28:cc:87:8b:da:1b:98:d8:0c:cf:27:d3:7d:c5:
                    c9:7b:7a:0f:d6:93:f3:f2:d5:12:97:f3:a3:c4:01:
                    02:b5:ed:9f:28:97:90:9c:f8:c9:37:d3:c0:0c:d5:
                    59:66:fb:ee:56:78:5f:f5:e2:0d:02:88:23:7e:80:
                    2c:55:81:95:e3:89:e9:79:2b:92:2a:57:63:44:04:
                    c2:58:27:fc:70:3d:36:b4:ef:72:f7:2d:b6:c5:ce:
                    5f:36:4e:bf:f7:65:44:1a:ef:6c:31:8a:15:5b:58:
                    7a:79:14:5f:01:7d:97:46:da:8d:33:eb:68:30:0a:
                    c1:b1:3e:62:0a:7d:b4:83:3f:9a:c0:0f:45:ef:7e:
                    ef:79:81:bc:2c:68:b3:12:cf:22:8e:e7:58:54:f7:
                    8d:75:d6:c2:c9:e0:bc:92:e7:b7:00:69:40:76:4f:
                    0a:42:ac:b9:f4:76:39:e8:a0:e3:07:59:2c:e2:b4:
                    04:02:68:c6:85:a1:a3:7b:4d:f4:98:23:3b:89:81:
                    d1:a1:34:71:3b:d1:60:59:bc:70:08:c8:87:ec:c3:
                    88:ef:66:af:b8:b3:93:11:09:d9:79:58:38:2f:48:
                    e0:2a:c1:66:cb:68:5f:1b:b1:4c:de:14:98:0d:ba:
                    1d:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:2D:6C:88:D2:26:FC:43:73:09:09:3D:C8:88:0B:18:63:01:75:91
            X509v3 Authority Key Identifier:
                keyid:E3:5F:C2:64:6A:9F:C8:92:9B:69:4A:AA:E0:4D:52:02:3A:A4:68:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CD0E054623AC9043C0E299C2C90B143803BD89125B0E863855C49C3B73F7BAA1/0/E35FC2646A9FC8929B694AAAE04D52023AA4680C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35FC2646A9FC8929B694AAAE04D52023AA4680C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CD0E054623AC9043C0E299C2C90B143803BD89125B0E863855C49C3B73F7BAA1/0/323030313a313339383a6235333a3a2f34382d3438203d3e203532323334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1398:b53::/48

    Signature Algorithm: sha256WithRSAEncryption
         3f:ef:a3:d9:94:08:66:0a:16:d5:d2:29:e8:d1:d0:bd:63:28:
         cf:87:5f:6f:d7:e1:1d:f3:82:18:af:c8:1f:17:ce:a5:e8:06:
         74:91:7b:77:79:9e:a1:f5:9e:4c:f0:4a:3a:ad:3b:64:ac:23:
         65:8c:4a:bb:98:1a:28:89:8f:ad:87:0b:0d:80:6d:27:ee:9d:
         b4:d1:72:3f:2e:f7:68:af:11:df:0d:b4:15:67:ec:ef:dd:e7:
         e7:d8:4d:2d:9d:e5:9b:2a:21:d4:5a:cb:ae:5c:0b:f2:29:e3:
         db:bd:95:38:32:a9:b7:e2:47:a9:28:e0:1e:a1:6c:e2:08:c7:
         91:81:11:81:d7:45:e2:b9:13:cc:b7:6a:56:e7:2d:16:ae:5f:
         3f:74:47:e2:18:a3:f4:30:01:e5:27:73:df:c1:dd:da:02:ff:
         1b:21:25:c9:37:a4:f3:7c:64:3b:05:bc:3e:ab:8b:e0:bc:38:
         b5:c8:30:fb:87:7a:cc:00:87:89:76:42:19:5e:bb:5d:4d:bb:
         cb:8b:27:45:cc:7f:84:23:5a:78:bc:7a:16:b7:16:3f:29:91:
         b6:76:a4:95:46:7c:5f:15:81:aa:68:df:9f:49:2f:89:fc:39:
         23:05:73:69:2a:80:96:ca:ba:17:bb:6e:79:07:d6:a9:72:5e:
         76:60:c9:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 09:07:41 2025 by rpki-client