Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/117E0F28D7B109643382134A928ADB7D8C131972702EA42A048C2764C80DC7C1/0/323830333a623263303a3a2f33322d3438203d3e203237383535.roa
File:                     323830333a623263303a3a2f33322d3438203d3e203237383535.roa (raw, json)
Hash identifier:          cBZAsgYBRe9PwtVJB9mQrHmPZG5SNZVKpc0a0adUbj4=
Subject key identifier:   9E:E3:D4:70:08:0A:96:D3:96:72:59:DE:F0:EB:ED:84:ED:CF:01:08
Certificate issuer:       /CN=CBE72B8D815E9A3D3D87C10B39ED4169A84AB68F
Certificate serial:       742D96F88882EABE036517D8C807858927788D0E
Authority key identifier: CB:E7:2B:8D:81:5E:9A:3D:3D:87:C1:0B:39:ED:41:69:A8:4A:B6:8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBE72B8D815E9A3D3D87C10B39ED4169A84AB68F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/117E0F28D7B109643382134A928ADB7D8C131972702EA42A048C2764C80DC7C1/0/323830333a623263303a3a2f33322d3438203d3e203237383535.roa
Signing time:             Tue 04 Feb 2025 18:16:48 +0000
ROA not before:           Tue 04 Feb 2025 18:11:48 +0000
ROA not after:            Tue 03 Feb 2026 18:16:48 +0000
asID:                     27855
IP address blocks:        2803:b2c0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/117E0F28D7B109643382134A928ADB7D8C131972702EA42A048C2764C80DC7C1/0/CBE72B8D815E9A3D3D87C10B39ED4169A84AB68F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/117E0F28D7B109643382134A928ADB7D8C131972702EA42A048C2764C80DC7C1/0/CBE72B8D815E9A3D3D87C10B39ED4169A84AB68F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBE72B8D815E9A3D3D87C10B39ED4169A84AB68F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:2d:96:f8:88:82:ea:be:03:65:17:d8:c8:07:85:89:27:78:8d:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBE72B8D815E9A3D3D87C10B39ED4169A84AB68F
        Validity
            Not Before: Feb  4 18:11:48 2025 GMT
            Not After : Feb  3 18:16:48 2026 GMT
        Subject: CN=9EE3D470080A96D3967259DEF0EBED84EDCF0108
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:02:03:d3:bc:f0:80:e0:9e:7b:6c:f6:bd:e7:
                    78:63:bc:f6:f8:46:40:2a:9c:6c:6c:21:cf:e5:71:
                    01:d9:a3:c5:fc:a0:1d:ec:4e:ac:de:80:68:3f:1b:
                    3e:f8:46:3c:2e:8b:3d:6d:38:5e:fd:d8:eb:6c:62:
                    79:b6:97:7a:ab:1d:78:06:8c:6f:90:65:b6:a8:d6:
                    06:73:9e:0e:18:9c:b2:1e:3e:fc:e7:fa:db:2f:5c:
                    7b:0e:12:78:54:37:9e:cb:f2:7a:55:73:36:08:cf:
                    6f:db:fb:9e:c9:92:6a:2f:cc:1a:10:11:9c:31:e5:
                    b7:f2:fb:01:1e:a8:c2:9b:e8:0c:88:26:a5:f9:4c:
                    c2:50:45:42:83:69:62:c1:c8:3f:f1:eb:43:21:45:
                    68:9a:f9:c0:c1:96:93:8b:d3:54:df:a4:47:88:64:
                    50:ad:42:2a:5d:03:10:ca:b1:1a:12:54:9b:9f:89:
                    23:70:ff:05:4e:21:0b:08:c9:d9:44:9c:a4:da:e3:
                    60:1a:de:a8:19:5b:c5:b1:b6:dd:31:a4:d9:dd:aa:
                    32:c0:82:9f:33:7f:f3:e5:06:84:9b:ee:45:be:0b:
                    06:c7:35:c5:29:08:ed:71:93:b5:8c:cf:d7:20:a2:
                    25:55:3c:c0:06:6b:a7:ce:1e:e4:df:cb:be:af:7a:
                    76:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:E3:D4:70:08:0A:96:D3:96:72:59:DE:F0:EB:ED:84:ED:CF:01:08
            X509v3 Authority Key Identifier:
                keyid:CB:E7:2B:8D:81:5E:9A:3D:3D:87:C1:0B:39:ED:41:69:A8:4A:B6:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/117E0F28D7B109643382134A928ADB7D8C131972702EA42A048C2764C80DC7C1/0/CBE72B8D815E9A3D3D87C10B39ED4169A84AB68F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBE72B8D815E9A3D3D87C10B39ED4169A84AB68F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/117E0F28D7B109643382134A928ADB7D8C131972702EA42A048C2764C80DC7C1/0/323830333a623263303a3a2f33322d3438203d3e203237383535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b2c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         53:55:4a:aa:b8:a7:8b:47:fc:42:10:32:00:24:7b:9b:3b:75:
         a4:52:e2:db:df:70:1a:d1:9d:d0:ac:6d:2a:4a:d3:2b:e5:d9:
         33:5d:99:25:d2:20:d2:50:53:9d:62:03:59:95:0c:8c:14:3e:
         60:89:9a:1d:de:7c:d5:e3:33:8a:b4:19:0c:95:27:cb:52:cc:
         10:d0:66:a2:36:8f:66:20:09:0e:9d:54:31:7f:3d:8e:2d:c6:
         9a:50:ff:0d:b1:f3:54:15:98:c3:82:ae:8d:39:d8:ad:ca:09:
         ab:be:0c:af:d6:b6:eb:35:64:e9:b3:fe:cb:e6:b9:88:42:e8:
         c0:39:5e:2e:98:b2:5a:51:44:fe:2d:01:41:c1:fe:85:12:59:
         97:a4:97:1e:8c:a4:9f:c3:e1:9f:c8:7c:27:ed:b6:07:a3:19:
         19:c8:78:42:d8:16:c0:fb:ce:24:33:76:8b:fd:0d:27:90:41:
         4d:a2:fa:93:b6:61:78:37:46:7a:75:01:22:4c:a1:a0:a5:1a:
         34:e3:a7:f3:34:00:6e:ac:c2:c9:b2:0f:c0:47:b0:01:88:67:
         df:be:e3:05:94:98:a2:c2:49:51:a6:ba:4e:f3:5d:c2:d6:4b:
         4d:c3:60:73:06:b8:26:35:4a:53:96:ba:ef:07:eb:67:9b:60:
         78:79:41:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:27:52 2025 by rpki-client