Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FF7B7F5770C4EDD7D6B8E4EE01C3A4B5B92E99C766788D7330E6C276C0F3088/0/323830333a636135303a326330323a3a2f34382d3438203d3e20323733313737.roa
File:                     323830333a636135303a326330323a3a2f34382d3438203d3e20323733313737.roa (raw, json)
Hash identifier:          0GFbmD4War2GI/lerqwwKHVIoQ0V+Pa5O2kkZUHmrW8=
Subject key identifier:   C1:0E:E9:38:D8:FD:BE:97:D9:28:D6:E7:C6:8D:75:55:26:E8:1A:2F
Certificate issuer:       /CN=B913C260F56BF7B1E2B7323F47B326FB8A0CBCD6
Certificate serial:       339164464E8BFC7C90D29B011AB42E718C1AA238
Authority key identifier: B9:13:C2:60:F5:6B:F7:B1:E2:B7:32:3F:47:B3:26:FB:8A:0C:BC:D6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B913C260F56BF7B1E2B7323F47B326FB8A0CBCD6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1FF7B7F5770C4EDD7D6B8E4EE01C3A4B5B92E99C766788D7330E6C276C0F3088/0/323830333a636135303a326330323a3a2f34382d3438203d3e20323733313737.roa
Signing time:             Wed 11 Dec 2024 20:40:00 +0000
ROA not before:           Wed 11 Dec 2024 20:35:00 +0000
ROA not after:            Wed 10 Dec 2025 20:40:00 +0000
asID:                     273177
IP address blocks:        2803:ca50:2c02::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1FF7B7F5770C4EDD7D6B8E4EE01C3A4B5B92E99C766788D7330E6C276C0F3088/0/B913C260F56BF7B1E2B7323F47B326FB8A0CBCD6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1FF7B7F5770C4EDD7D6B8E4EE01C3A4B5B92E99C766788D7330E6C276C0F3088/0/B913C260F56BF7B1E2B7323F47B326FB8A0CBCD6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B913C260F56BF7B1E2B7323F47B326FB8A0CBCD6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 09 Feb 2025 03:51:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:91:64:46:4e:8b:fc:7c:90:d2:9b:01:1a:b4:2e:71:8c:1a:a2:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B913C260F56BF7B1E2B7323F47B326FB8A0CBCD6
        Validity
            Not Before: Dec 11 20:35:00 2024 GMT
            Not After : Dec 10 20:40:00 2025 GMT
        Subject: CN=C10EE938D8FDBE97D928D6E7C68D755526E81A2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:3d:cb:db:b9:9e:e3:ed:f3:3b:bf:3e:f1:bf:
                    95:58:8c:0d:4d:d6:fe:a2:68:35:2d:dd:7c:cf:41:
                    1e:05:a0:3e:98:e9:91:09:40:d2:a4:b5:5a:8c:cf:
                    62:34:54:4a:d1:9f:d5:29:c7:b0:00:32:63:21:38:
                    db:60:e3:18:4b:21:2e:be:a7:20:ba:fd:c9:22:a4:
                    3b:c5:40:1d:56:cf:f2:1e:a5:0e:03:2c:e2:ba:dd:
                    17:12:31:5c:87:cb:ff:fe:ea:53:fd:e4:36:f9:2f:
                    4e:72:61:25:ea:68:ba:16:bb:ad:7f:64:e8:1e:32:
                    2d:b1:a1:2d:29:88:e8:b6:93:dd:84:11:f1:ab:ed:
                    41:42:06:36:ac:e0:17:eb:17:18:26:ec:18:bf:f7:
                    94:18:f4:42:9c:84:3e:98:59:57:43:01:5f:ad:59:
                    c6:e9:65:2d:e8:fd:5c:13:89:b0:c9:98:42:46:8c:
                    d9:b7:fa:dd:92:6d:b5:48:86:86:d6:06:c7:c5:f6:
                    96:6e:89:be:8a:75:85:f1:1d:a5:99:2c:eb:ff:07:
                    14:81:46:46:9c:c7:ac:22:0d:8e:64:61:30:e9:ec:
                    67:74:3d:ce:96:e6:2b:e0:fd:0d:1f:c6:19:17:0f:
                    78:f1:0e:7a:ea:66:18:41:cd:57:81:c6:70:f9:c5:
                    27:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:0E:E9:38:D8:FD:BE:97:D9:28:D6:E7:C6:8D:75:55:26:E8:1A:2F
            X509v3 Authority Key Identifier:
                keyid:B9:13:C2:60:F5:6B:F7:B1:E2:B7:32:3F:47:B3:26:FB:8A:0C:BC:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1FF7B7F5770C4EDD7D6B8E4EE01C3A4B5B92E99C766788D7330E6C276C0F3088/0/B913C260F56BF7B1E2B7323F47B326FB8A0CBCD6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B913C260F56BF7B1E2B7323F47B326FB8A0CBCD6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FF7B7F5770C4EDD7D6B8E4EE01C3A4B5B92E99C766788D7330E6C276C0F3088/0/323830333a636135303a326330323a3a2f34382d3438203d3e20323733313737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ca50:2c02::/48

    Signature Algorithm: sha256WithRSAEncryption
         40:41:8f:da:60:54:e9:2e:d3:98:34:17:25:c0:78:64:7b:7a:
         11:a4:97:97:37:44:9d:6b:6a:8d:72:82:57:49:23:7f:5e:f1:
         a8:b3:02:39:3b:3f:61:22:b3:6b:a0:e7:4a:7e:16:21:05:ce:
         11:bf:0b:d1:e8:6e:44:1f:59:2a:44:17:58:7c:de:f1:b6:06:
         9f:1c:bf:dc:74:a5:a5:de:92:87:23:13:5c:58:2f:49:00:72:
         a0:75:c7:60:0a:5f:52:c5:87:1b:52:3d:55:8e:db:de:4e:2a:
         5a:8b:87:e4:d6:28:38:5d:44:6e:0b:3e:9e:c7:c9:72:55:b8:
         58:b1:e1:7f:35:2a:8c:89:7c:61:ca:9b:01:a1:4a:94:fb:57:
         93:a4:86:e4:57:51:e6:9e:81:6a:36:a4:a4:e3:0d:5e:38:c7:
         31:f0:23:55:6f:1f:20:37:88:53:55:d9:20:f7:bb:a4:18:b4:
         71:f7:d2:74:51:aa:4b:ad:d8:79:d7:43:61:a5:80:1f:01:20:
         5e:2c:70:28:59:0a:f8:05:ab:9c:e8:00:f3:db:7e:27:f8:87:
         30:9c:38:fd:26:f2:d2:d0:02:1e:8b:87:f2:7c:c1:34:1e:e5:
         c9:18:72:e2:30:73:41:62:db:3a:c5:d1:90:90:fd:a9:84:7f:
         49:00:bf:44
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Feb 5 10:00:07 2025 by rpki-client