Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1E5FDB59006F1F42ECD187BE769E3CFA507E34FB73C0492C5BB04543CD43109C/0/323830333a633965303a3a2f33322d3334203d3e20323730303132.roa
File:                     323830333a633965303a3a2f33322d3334203d3e20323730303132.roa (raw, json)
Hash identifier:          Nbe+71L/+5FOggLcltyeUkzPw3NntjAiPzawQjitmAE=
Subject key identifier:   76:58:AE:39:09:8E:30:E4:33:67:86:86:1A:22:74:99:2C:BC:DD:B0
Certificate issuer:       /CN=C49792A535C3870BDA2A89A00898F9EA1F1F61F0
Certificate serial:       3ABF8E6D395763819ED7FDD569672789B8D7F115
Authority key identifier: C4:97:92:A5:35:C3:87:0B:DA:2A:89:A0:08:98:F9:EA:1F:1F:61:F0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C49792A535C3870BDA2A89A00898F9EA1F1F61F0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1E5FDB59006F1F42ECD187BE769E3CFA507E34FB73C0492C5BB04543CD43109C/0/323830333a633965303a3a2f33322d3334203d3e20323730303132.roa
Signing time:             Tue 04 Feb 2025 18:09:47 +0000
ROA not before:           Tue 04 Feb 2025 18:04:47 +0000
ROA not after:            Tue 03 Feb 2026 18:09:47 +0000
asID:                     270012
IP address blocks:        2803:c9e0::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1E5FDB59006F1F42ECD187BE769E3CFA507E34FB73C0492C5BB04543CD43109C/0/C49792A535C3870BDA2A89A00898F9EA1F1F61F0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1E5FDB59006F1F42ECD187BE769E3CFA507E34FB73C0492C5BB04543CD43109C/0/C49792A535C3870BDA2A89A00898F9EA1F1F61F0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C49792A535C3870BDA2A89A00898F9EA1F1F61F0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 03:26:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:bf:8e:6d:39:57:63:81:9e:d7:fd:d5:69:67:27:89:b8:d7:f1:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C49792A535C3870BDA2A89A00898F9EA1F1F61F0
        Validity
            Not Before: Feb  4 18:04:47 2025 GMT
            Not After : Feb  3 18:09:47 2026 GMT
        Subject: CN=7658AE39098E30E4336786861A2274992CBCDDB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:f9:ba:74:22:ee:93:32:c1:c4:18:fa:61:bb:
                    9d:38:f0:dd:13:29:05:03:f0:f0:26:02:ab:7b:c3:
                    1b:10:46:9f:ab:8c:ab:09:95:0b:7f:fd:8e:25:02:
                    ba:66:43:c3:d9:d3:15:22:00:fb:e2:aa:e9:2c:5a:
                    8c:8c:69:18:17:60:e5:69:e5:d4:7a:34:56:3b:75:
                    a2:3d:d1:8b:b6:f0:d9:a3:4a:5b:d8:b3:32:69:47:
                    78:48:d7:43:9e:d2:4f:5f:dc:ce:cb:74:f3:3b:40:
                    b2:07:bc:69:79:34:3a:86:10:80:c3:f9:5d:ba:3c:
                    70:a0:07:93:aa:88:28:48:db:48:bc:dc:04:46:23:
                    a6:14:cf:cc:9f:1d:ca:64:c2:a8:e7:2c:e3:c9:21:
                    c4:2f:9f:bc:c6:b3:89:ca:be:ab:8b:ac:cb:86:ce:
                    8e:ab:da:a5:54:1f:2f:2e:c0:76:92:be:05:ca:86:
                    34:72:c1:88:bc:dd:22:3a:9b:57:13:f2:b6:c3:93:
                    33:d5:da:15:9b:05:93:f3:e0:45:c3:6e:72:3b:0f:
                    c2:37:cb:43:78:ee:ff:28:11:28:fd:53:98:45:a1:
                    6d:31:65:51:ba:3c:60:5a:aa:2a:b5:10:7e:56:8f:
                    e3:00:0e:94:dc:18:72:31:14:9f:9b:13:0d:7c:a6:
                    f0:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:58:AE:39:09:8E:30:E4:33:67:86:86:1A:22:74:99:2C:BC:DD:B0
            X509v3 Authority Key Identifier:
                keyid:C4:97:92:A5:35:C3:87:0B:DA:2A:89:A0:08:98:F9:EA:1F:1F:61:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1E5FDB59006F1F42ECD187BE769E3CFA507E34FB73C0492C5BB04543CD43109C/0/C49792A535C3870BDA2A89A00898F9EA1F1F61F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C49792A535C3870BDA2A89A00898F9EA1F1F61F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1E5FDB59006F1F42ECD187BE769E3CFA507E34FB73C0492C5BB04543CD43109C/0/323830333a633965303a3a2f33322d3334203d3e20323730303132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c9e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         9f:0a:e6:45:88:2a:22:e1:4f:ea:6d:06:4f:dc:46:80:37:d1:
         ad:91:2a:c5:ff:87:12:68:2c:ba:9e:ad:a9:85:64:f0:1a:e6:
         83:c9:a8:ad:99:7a:4c:f0:e8:9a:28:3c:8e:99:2b:c2:34:24:
         6c:4e:c9:98:c4:15:f8:86:91:1b:bf:0d:ad:6f:b0:71:d7:09:
         5b:14:b0:5c:48:e8:eb:b9:a7:e8:1a:3a:f2:7e:fe:c4:0a:49:
         d2:02:39:8b:5f:7b:b3:b9:4a:62:93:29:42:08:7a:9b:00:e0:
         97:38:6c:a4:bc:9c:60:f9:ac:14:37:95:65:0d:1b:5e:72:4a:
         3a:c9:13:b5:d6:38:71:31:f9:05:96:07:ba:12:69:8a:3d:13:
         dd:02:27:46:e1:b7:6f:a5:99:08:6e:00:bd:32:ee:e9:fb:f9:
         79:13:1d:aa:c0:fb:71:f9:40:8d:64:70:82:37:ce:3f:a4:7e:
         18:24:6e:bd:6e:ce:16:98:fb:dc:f2:a2:fc:69:3a:2e:8f:28:
         eb:a1:4b:4e:25:0d:83:c6:e0:e8:05:ea:ef:f0:7c:1d:d2:97:
         0f:b2:d0:09:08:ec:b6:50:94:16:5b:17:5a:61:b0:1d:65:46:
         95:01:0b:7c:53:a2:59:18:54:07:b1:d3:55:e3:04:b0:25:3c:
         c7:57:47:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:05:51 2025 by rpki-client