Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D9973489D48CBEBCBEBAE931A40B6AF5D117E81900F8F98DF0728F12B6D26692/0/323830333a326535303a3a2f33322d3438203d3e20323733323233.roa
File:                     323830333a326535303a3a2f33322d3438203d3e20323733323233.roa (raw, json)
Hash identifier:          oYQk8HiWmZuAMob4i7BZd9BErCiVIPJZRPEVhUQt/6A=
Subject key identifier:   05:6A:A9:C8:0A:61:E7:C3:31:CC:2B:ED:54:C5:1D:DC:C3:8B:74:FF
Certificate issuer:       /CN=E221F58F9AD3CDA90B75247C2652AA1181D7A457
Certificate serial:       27F81A4242FB111F76D1CCED565DD3638DF6B0B4
Authority key identifier: E2:21:F5:8F:9A:D3:CD:A9:0B:75:24:7C:26:52:AA:11:81:D7:A4:57
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E221F58F9AD3CDA90B75247C2652AA1181D7A457.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D9973489D48CBEBCBEBAE931A40B6AF5D117E81900F8F98DF0728F12B6D26692/0/323830333a326535303a3a2f33322d3438203d3e20323733323233.roa
Signing time:             Thu 01 May 2025 16:17:26 +0000
ROA not before:           Thu 01 May 2025 16:12:26 +0000
ROA not after:            Thu 30 Apr 2026 16:17:26 +0000
asID:                     273223
IP address blocks:        2803:2e50::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D9973489D48CBEBCBEBAE931A40B6AF5D117E81900F8F98DF0728F12B6D26692/0/E221F58F9AD3CDA90B75247C2652AA1181D7A457.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D9973489D48CBEBCBEBAE931A40B6AF5D117E81900F8F98DF0728F12B6D26692/0/E221F58F9AD3CDA90B75247C2652AA1181D7A457.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E221F58F9AD3CDA90B75247C2652AA1181D7A457.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 09 May 2025 20:47:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:f8:1a:42:42:fb:11:1f:76:d1:cc:ed:56:5d:d3:63:8d:f6:b0:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E221F58F9AD3CDA90B75247C2652AA1181D7A457
        Validity
            Not Before: May  1 16:12:26 2025 GMT
            Not After : Apr 30 16:17:26 2026 GMT
        Subject: CN=056AA9C80A61E7C331CC2BED54C51DDCC38B74FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:5c:01:fa:a1:68:1a:3d:dd:c8:91:91:28:51:
                    62:bc:4a:bf:76:a4:a7:e5:a0:3f:4a:a7:9b:37:b0:
                    62:26:64:44:de:22:f9:2d:a1:2b:02:52:64:69:8c:
                    e8:a4:2d:30:0b:0e:13:af:6a:04:ba:33:f0:33:f9:
                    f7:51:0e:2b:7d:2d:82:9a:b3:50:5c:72:25:ab:5c:
                    53:35:ec:91:6d:11:ac:f8:17:21:84:f4:27:18:e6:
                    67:88:39:38:f4:b8:6a:3e:72:f7:79:ae:07:fa:f1:
                    03:e6:76:47:3c:fc:fe:9b:eb:92:07:3e:0f:48:c4:
                    24:ba:f2:55:51:79:f0:fd:f0:30:45:68:bb:3d:41:
                    4d:e8:f1:66:35:9a:68:b0:54:02:81:2a:32:b9:6f:
                    01:92:b0:87:35:b4:4f:e4:3b:56:1e:f3:4f:f8:e1:
                    e9:5a:c4:f9:04:14:c9:68:68:6b:e5:cd:11:fa:ed:
                    04:c1:0a:df:9b:4e:f4:c2:d9:d0:d4:68:d3:ce:9e:
                    77:03:1a:7b:f2:38:69:0f:b9:63:91:98:bf:c6:cf:
                    2f:69:16:93:99:5d:b4:41:88:23:b7:9c:b3:04:5b:
                    85:97:46:bb:51:ac:ac:83:7c:10:81:50:ab:82:10:
                    f7:bc:60:0e:92:9c:46:72:64:4c:23:57:0f:0e:81:
                    98:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:6A:A9:C8:0A:61:E7:C3:31:CC:2B:ED:54:C5:1D:DC:C3:8B:74:FF
            X509v3 Authority Key Identifier:
                keyid:E2:21:F5:8F:9A:D3:CD:A9:0B:75:24:7C:26:52:AA:11:81:D7:A4:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D9973489D48CBEBCBEBAE931A40B6AF5D117E81900F8F98DF0728F12B6D26692/0/E221F58F9AD3CDA90B75247C2652AA1181D7A457.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E221F58F9AD3CDA90B75247C2652AA1181D7A457.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D9973489D48CBEBCBEBAE931A40B6AF5D117E81900F8F98DF0728F12B6D26692/0/323830333a326535303a3a2f33322d3438203d3e20323733323233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2e50::/32

    Signature Algorithm: sha256WithRSAEncryption
         16:5b:c5:50:4b:1a:d1:d7:65:72:80:62:4a:78:dd:9c:ad:61:
         72:61:58:62:30:51:a6:be:2a:a9:01:9d:b5:fb:8b:09:7c:22:
         4f:82:3c:2d:aa:39:9a:56:84:47:95:5c:ff:65:2d:2f:ef:45:
         94:a2:1a:25:d5:82:e6:6a:36:b0:a3:0b:8e:d7:b2:6b:c7:21:
         bb:e5:48:27:e9:e0:6a:90:40:38:e3:cf:fe:86:e0:b6:24:a8:
         6d:a3:e3:44:22:89:b3:86:2d:73:39:63:cf:dd:04:a8:2d:1e:
         fc:bf:38:43:3b:91:76:d2:4f:15:2d:2b:ae:0a:12:d5:ac:da:
         fc:0f:c1:dd:7d:4e:f2:d7:d1:fc:d3:fe:9d:df:9b:57:f0:32:
         94:8a:11:78:00:4b:35:6e:49:d1:ed:b9:3d:a8:fb:7e:f3:3e:
         1d:9f:d7:27:18:32:c8:18:ba:c1:b5:72:0d:df:f1:fe:f2:7c:
         41:95:6f:ee:32:65:9e:78:e8:be:45:38:38:a9:37:7f:38:1c:
         ee:01:b3:fc:d2:a2:98:d8:3b:bc:95:21:cc:2b:64:a6:8f:68:
         7c:ce:04:66:00:64:ef:95:db:d6:f2:56:1d:cc:ea:fa:1e:b0:
         d8:6a:5b:c2:a7:31:5a:dd:93:5a:10:6c:cd:7b:5a:3e:6a:38:
         41:a3:b2:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 20:17:42 2025 by rpki-client