Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/11E6857B655846489B75F9B6F43F3E1DB7AE0D50839633E7274C8C14258F83CD/0/323830333a3963303a66653a3a2f34372d3438203d3e20323732303430.roa
File:                     323830333a3963303a66653a3a2f34372d3438203d3e20323732303430.roa (raw, json)
Hash identifier:          zVmdblhYU4O6+PV8Mdm4+BgY+hHIgZUQBxIAEHtNmNE=
Subject key identifier:   2B:9D:4C:52:E0:D9:C8:E7:EA:6E:B3:A8:95:57:AF:BB:36:D4:7C:03
Certificate issuer:       /CN=402D616A95846FF1E7CE80C99CDB443F6B8B9107
Certificate serial:       34AE51681929978E5702AFB8612891AD48327E2C
Authority key identifier: 40:2D:61:6A:95:84:6F:F1:E7:CE:80:C9:9C:DB:44:3F:6B:8B:91:07
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/402D616A95846FF1E7CE80C99CDB443F6B8B9107.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/11E6857B655846489B75F9B6F43F3E1DB7AE0D50839633E7274C8C14258F83CD/0/323830333a3963303a66653a3a2f34372d3438203d3e20323732303430.roa
Signing time:             Sat 25 Jan 2025 20:35:00 +0000
ROA not before:           Sat 25 Jan 2025 20:30:00 +0000
ROA not after:            Sat 24 Jan 2026 20:35:00 +0000
asID:                     272040
IP address blocks:        2803:9c0:fe::/47 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/11E6857B655846489B75F9B6F43F3E1DB7AE0D50839633E7274C8C14258F83CD/0/402D616A95846FF1E7CE80C99CDB443F6B8B9107.crl
                          rsync://repository.lacnic.net/rpki/lacnic/11E6857B655846489B75F9B6F43F3E1DB7AE0D50839633E7274C8C14258F83CD/0/402D616A95846FF1E7CE80C99CDB443F6B8B9107.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/402D616A95846FF1E7CE80C99CDB443F6B8B9107.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Apr 2025 11:56:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:ae:51:68:19:29:97:8e:57:02:af:b8:61:28:91:ad:48:32:7e:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=402D616A95846FF1E7CE80C99CDB443F6B8B9107
        Validity
            Not Before: Jan 25 20:30:00 2025 GMT
            Not After : Jan 24 20:35:00 2026 GMT
        Subject: CN=2B9D4C52E0D9C8E7EA6EB3A89557AFBB36D47C03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:3b:1e:b7:1e:06:39:94:58:9b:39:64:64:bb:
                    14:b1:27:fb:c6:9b:b5:e9:8e:32:33:58:2a:4b:8d:
                    95:43:f8:99:4c:ec:d4:c1:fd:85:e0:ca:33:90:e9:
                    6d:58:b9:85:8b:de:68:c0:c9:3e:26:6d:24:1a:d8:
                    3f:d4:1e:c7:d9:b4:06:df:6a:a0:f8:e4:08:28:6b:
                    2c:e1:d6:7a:94:a9:c1:5f:7b:9d:2e:8f:d9:cd:65:
                    22:6c:36:8b:ef:6c:f8:4a:4e:28:07:4a:3e:63:9f:
                    23:84:e4:b0:13:e3:c6:7e:c1:08:1f:ea:bb:91:71:
                    d3:ac:10:13:15:e7:2f:57:8e:ef:24:14:74:0f:5c:
                    12:4c:d2:92:4e:25:ce:68:bd:89:1f:f6:f9:d1:f5:
                    57:8b:5d:54:11:0b:99:d4:71:c7:7a:c4:fa:f4:8c:
                    44:50:4c:6e:57:be:58:32:7f:26:2b:a6:f5:5c:33:
                    27:55:89:b9:94:20:d6:c4:d6:fa:dc:68:7d:39:82:
                    a6:c9:87:cd:79:f9:37:23:8e:f9:06:4d:04:ea:2f:
                    5a:d8:b2:25:c2:de:a3:74:01:f7:93:6a:7e:1d:52:
                    12:9d:28:3e:ad:9b:13:b9:3e:fa:b2:6b:b2:6c:bd:
                    24:cb:94:7d:62:23:c8:d0:87:35:a8:c6:56:3f:57:
                    ac:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:9D:4C:52:E0:D9:C8:E7:EA:6E:B3:A8:95:57:AF:BB:36:D4:7C:03
            X509v3 Authority Key Identifier:
                keyid:40:2D:61:6A:95:84:6F:F1:E7:CE:80:C9:9C:DB:44:3F:6B:8B:91:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/11E6857B655846489B75F9B6F43F3E1DB7AE0D50839633E7274C8C14258F83CD/0/402D616A95846FF1E7CE80C99CDB443F6B8B9107.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/402D616A95846FF1E7CE80C99CDB443F6B8B9107.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/11E6857B655846489B75F9B6F43F3E1DB7AE0D50839633E7274C8C14258F83CD/0/323830333a3963303a66653a3a2f34372d3438203d3e20323732303430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9c0:fe::/47

    Signature Algorithm: sha256WithRSAEncryption
         10:28:54:83:eb:84:b7:a0:9f:e3:1a:e3:16:bd:9d:cb:8c:4a:
         0b:5b:09:8f:a2:a1:aa:0f:27:8a:1b:38:f0:f1:05:b6:dc:3b:
         39:4d:2f:ba:94:6f:00:b2:e8:3b:1e:99:fc:96:55:b8:0e:90:
         e8:c1:56:af:41:e3:fe:4a:98:1d:d9:3f:30:19:76:63:30:56:
         8a:38:5c:6e:d4:be:9c:5d:00:b8:57:c2:6c:e3:d9:5f:26:77:
         2f:30:49:5a:8c:6a:30:40:98:77:29:41:11:b5:3e:4e:2f:6b:
         45:fc:12:8b:00:0c:63:90:7d:5f:1b:af:9f:ab:42:b6:1b:ee:
         56:aa:46:ec:04:9d:0e:a8:be:05:f6:82:2c:80:e1:2f:5a:c4:
         ea:46:dd:27:c6:23:93:31:5a:36:9e:29:c2:70:4c:ac:52:b1:
         97:79:d7:69:13:3d:7c:d4:1f:2f:6c:27:c3:65:7a:67:8f:af:
         1b:ad:02:86:f7:38:2c:fd:d4:29:fe:c0:54:18:5c:ff:17:08:
         21:bc:00:d0:a3:83:ce:61:24:25:0c:68:14:d0:9b:41:87:a6:
         3c:7a:15:db:79:54:62:f1:d9:38:ee:b7:3d:08:78:95:55:a5:
         f1:55:68:c1:66:5f:9a:79:de:d4:73:ed:65:fe:58:a9:a8:e0:
         ff:ce:f7:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 19:26:27 2025 by rpki-client