Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/09BA4188BF43656013680C793F6A4846A561718EFC7F97B2FC105BF504A867AD/0/323830333a636338303a3a2f33322d3438203d3e203230323037.roa
File:                     323830333a636338303a3a2f33322d3438203d3e203230323037.roa (raw, json)
Hash identifier:          KwFQmGwe2glxnkQG/qu32ftqAmxztUOYe9qIP+koRC4=
Subject key identifier:   E3:EB:AE:19:2D:39:10:83:D3:0A:1A:F0:3F:CF:27:5E:62:36:B7:D5
Certificate issuer:       /CN=4F99A2A558BEB359E92AC3908E9098C384DE72F7
Certificate serial:       79164A9515A74844AFFB640B77E7AB8494C75588
Authority key identifier: 4F:99:A2:A5:58:BE:B3:59:E9:2A:C3:90:8E:90:98:C3:84:DE:72:F7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4F99A2A558BEB359E92AC3908E9098C384DE72F7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/09BA4188BF43656013680C793F6A4846A561718EFC7F97B2FC105BF504A867AD/0/323830333a636338303a3a2f33322d3438203d3e203230323037.roa
Signing time:             Tue 25 Mar 2025 19:10:00 +0000
ROA not before:           Tue 25 Mar 2025 19:05:00 +0000
ROA not after:            Tue 24 Mar 2026 19:10:00 +0000
asID:                     20207
IP address blocks:        2803:cc80::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/09BA4188BF43656013680C793F6A4846A561718EFC7F97B2FC105BF504A867AD/0/4F99A2A558BEB359E92AC3908E9098C384DE72F7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/09BA4188BF43656013680C793F6A4846A561718EFC7F97B2FC105BF504A867AD/0/4F99A2A558BEB359E92AC3908E9098C384DE72F7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4F99A2A558BEB359E92AC3908E9098C384DE72F7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:16:4a:95:15:a7:48:44:af:fb:64:0b:77:e7:ab:84:94:c7:55:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F99A2A558BEB359E92AC3908E9098C384DE72F7
        Validity
            Not Before: Mar 25 19:05:00 2025 GMT
            Not After : Mar 24 19:10:00 2026 GMT
        Subject: CN=E3EBAE192D391083D30A1AF03FCF275E6236B7D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:e9:9b:ac:5a:f3:b0:c4:0a:63:3e:ce:62:05:
                    f2:47:d6:0e:7a:45:17:20:b2:a1:62:a1:6e:6b:93:
                    10:b9:96:45:36:ca:39:f0:76:24:36:9e:30:6f:39:
                    e4:0b:32:92:52:27:e3:33:bd:87:89:0f:1f:05:f1:
                    55:47:a6:a6:b3:15:8a:1a:db:d1:2d:18:f5:a1:39:
                    54:be:5a:ba:04:6d:27:9e:57:93:d0:b9:6d:3c:f3:
                    ed:0e:74:2d:b8:68:30:d2:06:55:dd:cf:b8:7f:e6:
                    66:91:29:a2:df:4b:3a:48:94:e1:55:d3:b3:c7:78:
                    3a:d0:f0:0c:1f:47:83:94:66:9d:58:ae:dd:e8:73:
                    0c:28:59:d2:b1:ae:65:45:8e:ec:6e:96:1b:9d:fa:
                    3c:0f:4c:1b:bd:af:14:b6:54:f2:b7:78:05:18:e1:
                    b3:4e:b7:e4:db:25:cc:a7:55:82:09:c9:c3:98:ad:
                    dc:f1:32:8d:14:bd:b2:cf:5b:70:09:cd:e1:84:b9:
                    24:c5:be:9f:15:a6:d3:0e:5b:53:ca:f8:d5:e6:0c:
                    5b:4b:fa:ea:91:48:c4:0d:4a:34:a0:3a:d5:1f:33:
                    92:b2:17:b0:14:98:80:d6:ac:02:cf:6f:68:8b:10:
                    7a:f9:10:8a:f4:6f:b8:4c:da:f2:96:8a:61:73:fb:
                    59:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:EB:AE:19:2D:39:10:83:D3:0A:1A:F0:3F:CF:27:5E:62:36:B7:D5
            X509v3 Authority Key Identifier:
                keyid:4F:99:A2:A5:58:BE:B3:59:E9:2A:C3:90:8E:90:98:C3:84:DE:72:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/09BA4188BF43656013680C793F6A4846A561718EFC7F97B2FC105BF504A867AD/0/4F99A2A558BEB359E92AC3908E9098C384DE72F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4F99A2A558BEB359E92AC3908E9098C384DE72F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/09BA4188BF43656013680C793F6A4846A561718EFC7F97B2FC105BF504A867AD/0/323830333a636338303a3a2f33322d3438203d3e203230323037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:cc80::/32

    Signature Algorithm: sha256WithRSAEncryption
         67:54:9b:7b:59:05:8d:f7:03:2c:62:17:30:dc:86:3e:94:69:
         59:89:08:5e:e9:e6:18:ac:fb:25:58:68:ba:51:e8:99:e2:83:
         0b:c8:27:cc:11:38:97:9a:9b:35:9d:fb:3e:59:74:2e:04:94:
         66:6b:b8:df:bd:cd:cf:fe:38:11:bb:cf:f1:e9:af:25:98:92:
         cb:62:89:07:4b:5f:59:c8:90:24:3d:7f:0c:f0:d6:72:e8:8d:
         a9:28:ca:c4:ef:71:bd:4e:c5:d7:a5:a9:b2:18:7a:33:9f:d9:
         ef:c8:fa:94:48:4d:d5:70:20:78:13:4c:31:40:fb:2f:da:ee:
         64:d9:45:b5:c2:86:ac:a6:36:d3:4f:98:46:9c:cf:16:73:93:
         fc:6c:2c:e1:99:37:b1:9d:b5:bf:42:8f:d6:25:ee:eb:c8:34:
         69:9c:8d:50:ad:6b:cd:91:8d:13:4d:df:03:46:d4:19:52:13:
         d1:62:70:95:a2:67:d5:fe:b1:16:ec:cb:20:20:d6:cd:e6:79:
         af:b8:d7:18:0b:40:d9:ee:d0:2a:c7:b8:f0:7e:fc:10:48:1b:
         29:a4:be:d0:a0:3d:3a:d0:25:00:cb:35:7d:b5:1f:cc:10:61:
         72:b8:a5:07:4e:1e:b8:86:3b:1a:01:ff:c3:11:c5:38:b8:02:
         4c:54:a1:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:05:57 2025 by rpki-client