Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0B7093FC2E6776D1257B2529C57A27EB68C700B2032E52F44023E172B5E81F8C/0/323830333a623139303a3330303a3a2f34302d3430203d3e20323732393339.roa
File:                     323830333a623139303a3330303a3a2f34302d3430203d3e20323732393339.roa (raw, json)
Hash identifier:          T2tkK+kmzp8Xwh8sHfkdGBTDgdAjDNDU7c5Gv9ZsM20=
Subject key identifier:   88:D6:77:DB:8A:1D:78:E7:8D:92:E3:B2:94:DB:3A:F1:65:4F:2A:B5
Certificate issuer:       /CN=E5B3F4032FD68EC9C05FADBA437C3459E3C7A2A8
Certificate serial:       707ECDF82E96E9B97A7F43FDDF0F4FDDD900F33C
Authority key identifier: E5:B3:F4:03:2F:D6:8E:C9:C0:5F:AD:BA:43:7C:34:59:E3:C7:A2:A8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5B3F4032FD68EC9C05FADBA437C3459E3C7A2A8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0B7093FC2E6776D1257B2529C57A27EB68C700B2032E52F44023E172B5E81F8C/0/323830333a623139303a3330303a3a2f34302d3430203d3e20323732393339.roa
Signing time:             Tue 04 Feb 2025 18:14:17 +0000
ROA not before:           Tue 04 Feb 2025 18:09:17 +0000
ROA not after:            Tue 03 Feb 2026 18:14:17 +0000
asID:                     272939
IP address blocks:        2803:b190:300::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0B7093FC2E6776D1257B2529C57A27EB68C700B2032E52F44023E172B5E81F8C/0/E5B3F4032FD68EC9C05FADBA437C3459E3C7A2A8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0B7093FC2E6776D1257B2529C57A27EB68C700B2032E52F44023E172B5E81F8C/0/E5B3F4032FD68EC9C05FADBA437C3459E3C7A2A8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5B3F4032FD68EC9C05FADBA437C3459E3C7A2A8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:7e:cd:f8:2e:96:e9:b9:7a:7f:43:fd:df:0f:4f:dd:d9:00:f3:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5B3F4032FD68EC9C05FADBA437C3459E3C7A2A8
        Validity
            Not Before: Feb  4 18:09:17 2025 GMT
            Not After : Feb  3 18:14:17 2026 GMT
        Subject: CN=88D677DB8A1D78E78D92E3B294DB3AF1654F2AB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:71:a4:62:a3:04:c3:26:98:ae:b3:6d:0c:39:
                    aa:49:cc:91:2d:b1:dc:f6:ca:5e:7f:7c:6f:40:d3:
                    ff:18:f2:6a:a8:38:b7:d1:c4:f1:6b:b6:8d:82:06:
                    18:78:4b:b8:1c:58:e3:ec:78:5b:d6:62:a7:c3:5e:
                    d2:f5:2c:67:8f:31:e5:05:74:d9:14:1c:21:48:c6:
                    aa:7a:6d:ae:ea:60:ea:70:35:71:ef:41:fb:86:9e:
                    15:b5:4d:ef:bf:36:da:4d:e0:0d:0b:df:1f:f0:b9:
                    62:25:88:6a:b4:78:3d:53:1c:5b:f4:5e:74:51:d2:
                    de:af:72:fc:20:cd:c9:c7:0e:eb:92:d1:f3:77:a2:
                    55:9e:3c:2d:99:7f:a0:c1:c7:6a:78:ee:26:dc:ba:
                    e7:f3:da:1e:3e:b3:63:f5:1c:d8:ea:5c:17:3d:36:
                    7c:39:2b:ef:0c:ce:26:25:31:62:76:59:a8:4c:86:
                    60:9a:30:49:84:85:04:97:0a:c3:26:32:a8:39:09:
                    30:14:b8:1d:b9:fb:6b:44:bc:80:98:6a:84:ce:7f:
                    f3:07:19:0f:42:ef:fb:d4:b0:17:81:54:70:45:a0:
                    c0:af:e0:35:61:65:f1:b6:5b:2a:fa:9b:56:d5:85:
                    88:7a:27:99:02:30:4b:a3:c3:86:ad:2d:84:f4:be:
                    9d:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:D6:77:DB:8A:1D:78:E7:8D:92:E3:B2:94:DB:3A:F1:65:4F:2A:B5
            X509v3 Authority Key Identifier:
                keyid:E5:B3:F4:03:2F:D6:8E:C9:C0:5F:AD:BA:43:7C:34:59:E3:C7:A2:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0B7093FC2E6776D1257B2529C57A27EB68C700B2032E52F44023E172B5E81F8C/0/E5B3F4032FD68EC9C05FADBA437C3459E3C7A2A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5B3F4032FD68EC9C05FADBA437C3459E3C7A2A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0B7093FC2E6776D1257B2529C57A27EB68C700B2032E52F44023E172B5E81F8C/0/323830333a623139303a3330303a3a2f34302d3430203d3e20323732393339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b190:300::/40

    Signature Algorithm: sha256WithRSAEncryption
         70:40:51:ec:6a:8a:dd:6f:61:15:76:cc:1f:21:48:81:9d:7a:
         cf:ed:b7:b5:e2:77:9f:83:53:83:99:f4:cd:52:ca:8e:96:72:
         a2:bc:ef:2e:ec:1e:46:6e:fd:c0:4e:b5:25:bd:ac:23:6d:2d:
         de:61:46:3a:fd:11:37:16:aa:72:bd:c7:3b:a3:df:64:cf:12:
         2a:89:8f:11:78:23:07:19:3e:de:c0:cb:49:bf:b0:8d:b7:72:
         be:52:b0:f0:1a:66:8e:38:37:22:41:21:34:6f:b4:03:7c:b6:
         a2:81:c2:49:a3:2b:7e:cf:f9:24:c8:6b:98:73:6d:77:f5:fc:
         f9:38:80:85:4b:19:ed:7a:76:67:c1:e6:3d:3d:83:80:3f:d6:
         c3:5a:3a:d5:81:21:be:b9:f2:29:1b:1c:b0:67:3c:cf:00:f4:
         ad:61:b7:a7:2b:a2:8f:e2:0d:eb:2a:2e:40:1e:a1:f2:0c:bd:
         f3:b1:9d:cf:95:39:74:2b:a8:2a:a4:65:b7:dc:f2:e7:78:cd:
         d5:62:3a:cb:4f:fa:75:53:7a:3c:f0:5a:51:bf:0e:18:46:e5:
         bc:77:54:0e:91:03:58:6c:c5:44:a8:c8:17:09:be:37:82:42:
         b5:f2:30:70:3c:82:a5:60:41:1c:be:62:c3:58:fa:96:20:89:
         d4:f3:7a:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:03:46 2025 by rpki-client