Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E8583101F33B33E0A9D6AECC74233EB868B767DDEE02A20FC18B803B5CB41DEA/0/323830333a323665303a3a2f33322d3332203d3e20323639383035.roa
File:                     323830333a323665303a3a2f33322d3332203d3e20323639383035.roa (raw, json)
Hash identifier:          dt9v/PCMqZ5Q1mu/1diaNUaJ9/jw7ZUBdr64b6ObGOY=
Subject key identifier:   DF:3A:98:5D:51:C7:29:29:78:4B:16:0D:69:AE:6C:AF:0A:2E:FC:71
Certificate issuer:       /CN=1DEE90799B3B2F7EFC216DAB92BDF4586D4CC0D4
Certificate serial:       559C50A5CD157180D1366E4444AD5F84E06376ED
Authority key identifier: 1D:EE:90:79:9B:3B:2F:7E:FC:21:6D:AB:92:BD:F4:58:6D:4C:C0:D4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1DEE90799B3B2F7EFC216DAB92BDF4586D4CC0D4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E8583101F33B33E0A9D6AECC74233EB868B767DDEE02A20FC18B803B5CB41DEA/0/323830333a323665303a3a2f33322d3332203d3e20323639383035.roa
Signing time:             Wed 30 Apr 2025 19:25:00 +0000
ROA not before:           Wed 30 Apr 2025 19:20:00 +0000
ROA not after:            Wed 29 Apr 2026 19:25:00 +0000
asID:                     269805
IP address blocks:        2803:26e0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E8583101F33B33E0A9D6AECC74233EB868B767DDEE02A20FC18B803B5CB41DEA/0/1DEE90799B3B2F7EFC216DAB92BDF4586D4CC0D4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E8583101F33B33E0A9D6AECC74233EB868B767DDEE02A20FC18B803B5CB41DEA/0/1DEE90799B3B2F7EFC216DAB92BDF4586D4CC0D4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1DEE90799B3B2F7EFC216DAB92BDF4586D4CC0D4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 May 2025 07:07:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:9c:50:a5:cd:15:71:80:d1:36:6e:44:44:ad:5f:84:e0:63:76:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1DEE90799B3B2F7EFC216DAB92BDF4586D4CC0D4
        Validity
            Not Before: Apr 30 19:20:00 2025 GMT
            Not After : Apr 29 19:25:00 2026 GMT
        Subject: CN=DF3A985D51C72929784B160D69AE6CAF0A2EFC71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:17:a3:78:67:ec:9c:ae:23:f5:d9:07:bb:0b:
                    d8:f9:62:e9:5f:b0:45:72:c0:ea:3a:5a:71:2e:e7:
                    67:77:01:9a:f7:94:b6:9d:ed:82:f2:fe:98:29:88:
                    64:d5:fe:77:6e:60:d1:14:67:a7:83:5f:ca:2e:6a:
                    92:48:94:46:63:bf:2e:5b:9b:fb:0b:10:a9:c5:db:
                    be:d6:c8:33:8b:6f:08:bf:20:d0:7b:f3:ff:05:30:
                    d0:01:6b:1e:41:37:c3:eb:52:52:e0:6b:4d:9d:2b:
                    46:c4:ec:cf:bb:b6:83:01:14:53:49:3f:56:6a:c0:
                    b1:0f:37:8a:57:03:64:eb:ad:ba:f0:6a:48:97:33:
                    27:06:34:08:e8:73:ac:16:09:11:8f:f4:82:ea:d0:
                    92:b3:99:f1:76:2d:b5:34:fa:d5:47:ec:6b:a8:e9:
                    6a:5d:aa:24:2c:2a:7f:26:7f:c2:89:e8:16:63:ab:
                    56:85:da:35:0f:96:29:80:d9:e1:5b:c4:9b:3e:a4:
                    bf:07:43:45:8b:ba:c4:98:01:e8:44:3a:33:d2:f6:
                    d0:6e:04:d3:61:5c:de:cb:da:e6:79:71:f4:5e:cf:
                    34:6a:04:9a:9f:53:b4:ae:15:5e:39:41:ff:6e:6e:
                    52:3b:3a:fa:b9:e4:19:e1:07:c6:e6:77:01:95:94:
                    f8:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:3A:98:5D:51:C7:29:29:78:4B:16:0D:69:AE:6C:AF:0A:2E:FC:71
            X509v3 Authority Key Identifier:
                keyid:1D:EE:90:79:9B:3B:2F:7E:FC:21:6D:AB:92:BD:F4:58:6D:4C:C0:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E8583101F33B33E0A9D6AECC74233EB868B767DDEE02A20FC18B803B5CB41DEA/0/1DEE90799B3B2F7EFC216DAB92BDF4586D4CC0D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1DEE90799B3B2F7EFC216DAB92BDF4586D4CC0D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E8583101F33B33E0A9D6AECC74233EB868B767DDEE02A20FC18B803B5CB41DEA/0/323830333a323665303a3a2f33322d3332203d3e20323639383035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:26e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         7b:1d:da:78:f6:e2:2c:17:f6:28:af:ae:51:35:ec:21:e9:04:
         c6:b9:83:f2:02:56:18:f8:62:46:38:bc:a7:8c:09:ca:14:5e:
         3d:1d:af:da:07:6c:10:e2:e1:0d:81:e9:5c:a0:43:ff:68:98:
         eb:6d:bc:4a:02:4e:b0:f3:42:f3:78:a1:98:33:09:6b:11:8a:
         64:6b:43:c4:74:50:08:0c:3a:0a:74:76:43:a2:07:90:1c:0a:
         bd:cb:69:31:f7:cb:f3:5e:05:11:72:0e:cb:44:9f:dc:35:f8:
         b4:bb:59:e5:0e:8e:98:41:a5:34:a6:ad:77:9d:f4:71:5d:06:
         f6:d9:ff:31:3e:7b:84:69:66:b4:5e:ce:c2:13:34:0d:1d:30:
         b4:a4:55:8f:75:0d:47:74:81:89:27:42:66:96:7c:cc:58:29:
         ab:39:60:55:b4:7d:77:10:4f:02:4e:63:db:7f:37:f6:3b:49:
         73:08:ca:54:d8:73:20:55:5c:19:96:2a:2a:f1:a8:51:d9:19:
         9b:dc:55:7c:df:e4:fa:c6:61:47:d2:0a:8a:ee:14:92:98:da:
         1e:7c:0b:05:e3:3b:54:46:86:02:3e:fe:67:a0:db:f7:cf:65:
         19:a8:2a:af:ec:b5:f2:3a:d7:72:c4:eb:8c:ef:8a:dd:6b:fb:
         8a:4c:37:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 17:46:00 2025 by rpki-client