Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FF7B7F5770C4EDD7D6B8E4EE01C3A4B5B92E99C766788D7330E6C276C0F3088/0/323830333a636135303a316630323a3a2f34382d3438203d3e20323733313737.roa
File:                     323830333a636135303a316630323a3a2f34382d3438203d3e20323733313737.roa (raw, json)
Hash identifier:          OoAYW0T6TsS3hzVqNZQ7wF51n3Oo77eOdzEk9RbTzm0=
Subject key identifier:   64:09:D0:4D:09:C8:47:1E:CD:1A:39:F1:8E:55:5E:F5:81:E6:A9:5B
Certificate issuer:       /CN=B913C260F56BF7B1E2B7323F47B326FB8A0CBCD6
Certificate serial:       088C4DD2CCD5299B7E26E1E5ECDE2CF28923B766
Authority key identifier: B9:13:C2:60:F5:6B:F7:B1:E2:B7:32:3F:47:B3:26:FB:8A:0C:BC:D6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B913C260F56BF7B1E2B7323F47B326FB8A0CBCD6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1FF7B7F5770C4EDD7D6B8E4EE01C3A4B5B92E99C766788D7330E6C276C0F3088/0/323830333a636135303a316630323a3a2f34382d3438203d3e20323733313737.roa
Signing time:             Wed 11 Dec 2024 20:40:00 +0000
ROA not before:           Wed 11 Dec 2024 20:35:00 +0000
ROA not after:            Wed 10 Dec 2025 20:40:00 +0000
asID:                     273177
IP address blocks:        2803:ca50:1f02::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1FF7B7F5770C4EDD7D6B8E4EE01C3A4B5B92E99C766788D7330E6C276C0F3088/0/B913C260F56BF7B1E2B7323F47B326FB8A0CBCD6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1FF7B7F5770C4EDD7D6B8E4EE01C3A4B5B92E99C766788D7330E6C276C0F3088/0/B913C260F56BF7B1E2B7323F47B326FB8A0CBCD6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B913C260F56BF7B1E2B7323F47B326FB8A0CBCD6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 09 Feb 2025 03:51:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:8c:4d:d2:cc:d5:29:9b:7e:26:e1:e5:ec:de:2c:f2:89:23:b7:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B913C260F56BF7B1E2B7323F47B326FB8A0CBCD6
        Validity
            Not Before: Dec 11 20:35:00 2024 GMT
            Not After : Dec 10 20:40:00 2025 GMT
        Subject: CN=6409D04D09C8471ECD1A39F18E555EF581E6A95B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:b7:e2:55:c4:85:93:96:91:c8:55:7e:e5:84:
                    2c:91:26:21:05:27:9b:e9:30:97:a7:d1:f5:be:4f:
                    87:fc:75:44:b7:ab:2d:38:57:98:08:a1:5c:f7:dc:
                    7f:ff:ad:23:66:31:09:05:62:72:7e:91:66:5a:b1:
                    a9:1f:a3:bb:98:d6:b5:3f:5c:f4:20:92:9f:51:7e:
                    9a:ac:51:42:cd:35:69:80:26:51:af:9c:94:48:db:
                    ba:33:fb:39:3d:c4:ae:97:a3:9d:28:f5:50:88:61:
                    37:18:89:86:b1:ac:f4:39:d3:3a:f4:d4:95:00:55:
                    4e:2f:c7:7c:07:3d:0f:16:8f:3c:81:34:01:c1:3a:
                    60:b9:88:af:34:c2:a8:fe:53:3e:af:df:26:98:58:
                    29:6c:00:58:50:6c:34:7d:9c:35:20:41:a4:35:18:
                    f2:b7:80:9f:36:ee:a3:e0:c8:b3:a3:03:65:d6:eb:
                    a1:6d:d1:97:17:02:45:13:ce:b9:af:a7:ad:f4:75:
                    39:26:4d:5e:96:03:73:07:d6:b5:d3:67:03:a5:25:
                    34:8e:ff:ea:60:0a:0b:ab:9e:fc:1e:86:d4:e8:1d:
                    d4:84:65:8d:7a:63:50:6d:97:db:fd:c5:b1:60:39:
                    d8:c7:aa:55:a6:60:e3:99:8b:86:4b:a6:3d:9f:83:
                    95:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:09:D0:4D:09:C8:47:1E:CD:1A:39:F1:8E:55:5E:F5:81:E6:A9:5B
            X509v3 Authority Key Identifier:
                keyid:B9:13:C2:60:F5:6B:F7:B1:E2:B7:32:3F:47:B3:26:FB:8A:0C:BC:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1FF7B7F5770C4EDD7D6B8E4EE01C3A4B5B92E99C766788D7330E6C276C0F3088/0/B913C260F56BF7B1E2B7323F47B326FB8A0CBCD6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B913C260F56BF7B1E2B7323F47B326FB8A0CBCD6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FF7B7F5770C4EDD7D6B8E4EE01C3A4B5B92E99C766788D7330E6C276C0F3088/0/323830333a636135303a316630323a3a2f34382d3438203d3e20323733313737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ca50:1f02::/48

    Signature Algorithm: sha256WithRSAEncryption
         4d:bf:a7:0d:4a:d5:95:df:9d:ea:99:98:4e:b9:f9:e7:57:ab:
         47:58:10:db:61:46:56:f5:84:f5:b9:a2:7d:bd:dc:69:21:ea:
         c3:19:4b:56:60:35:dc:10:70:e4:2f:22:4f:1c:bd:a0:5c:86:
         6b:5d:98:a6:c3:5a:9b:21:11:c7:9a:ff:17:8b:87:9d:89:1c:
         ba:cc:76:18:7b:8b:cf:cb:bc:20:58:3c:5f:d1:48:94:51:df:
         66:78:8a:72:31:dc:ca:d5:5b:18:3a:42:83:86:9f:43:ae:d4:
         17:e3:57:1c:67:c7:f1:4d:db:3d:8f:10:bd:78:7d:fe:83:8d:
         1e:b4:67:cf:f9:9d:a3:1b:79:63:c3:fb:b1:cb:fa:d3:52:42:
         00:9a:72:e3:bb:40:0b:27:1e:ac:53:fe:44:a8:e8:71:ae:46:
         8b:57:8a:16:da:bb:17:61:03:0f:4d:35:e3:d1:c3:d0:48:5e:
         9b:56:7e:1c:5a:3d:34:da:98:7a:15:6a:24:79:15:04:ca:ef:
         4e:2a:61:5d:74:3e:2f:63:85:74:4b:a9:0a:ca:00:cf:87:25:
         06:bb:99:42:55:45:25:3a:ce:e3:d8:a8:41:61:a2:ed:f0:db:
         be:b0:3d:6f:96:4c:48:51:76:bc:ff:e0:0d:19:ed:34:25:e5:
         0c:00:4c:e4
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:49:20 2025 by rpki-client