Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2F0EEE742121DCD6BA137FCC5792C993671A0DE83EF477521C436B50958165A3/0/323830333a633632303a3a2f33322d3332203d3e20323635383734.roa
File:                     323830333a633632303a3a2f33322d3332203d3e20323635383734.roa (raw, json)
Hash identifier:          b9WZPj8fGQGJvbW8nRG7f34zELoki1ZMwis/11Agssc=
Subject key identifier:   CB:0C:55:E1:44:7D:AB:21:77:0A:07:FD:5E:C9:45:57:E7:0D:A8:66
Certificate issuer:       /CN=92148A153BC4CF8D74684857020A59633E66EE4D
Certificate serial:       543B02DE9931FC217419D98BFA3F9A992EF36A68
Authority key identifier: 92:14:8A:15:3B:C4:CF:8D:74:68:48:57:02:0A:59:63:3E:66:EE:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92148A153BC4CF8D74684857020A59633E66EE4D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2F0EEE742121DCD6BA137FCC5792C993671A0DE83EF477521C436B50958165A3/0/323830333a633632303a3a2f33322d3332203d3e20323635383734.roa
Signing time:             Tue 04 Feb 2025 18:12:30 +0000
ROA not before:           Tue 04 Feb 2025 18:07:30 +0000
ROA not after:            Tue 03 Feb 2026 18:12:30 +0000
asID:                     265874
IP address blocks:        2803:c620::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2F0EEE742121DCD6BA137FCC5792C993671A0DE83EF477521C436B50958165A3/0/92148A153BC4CF8D74684857020A59633E66EE4D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2F0EEE742121DCD6BA137FCC5792C993671A0DE83EF477521C436B50958165A3/0/92148A153BC4CF8D74684857020A59633E66EE4D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92148A153BC4CF8D74684857020A59633E66EE4D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:3b:02:de:99:31:fc:21:74:19:d9:8b:fa:3f:9a:99:2e:f3:6a:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92148A153BC4CF8D74684857020A59633E66EE4D
        Validity
            Not Before: Feb  4 18:07:30 2025 GMT
            Not After : Feb  3 18:12:30 2026 GMT
        Subject: CN=CB0C55E1447DAB21770A07FD5EC94557E70DA866
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e7:2f:d5:82:75:ba:d2:ce:98:7a:f9:ab:35:
                    52:13:b6:fd:32:1a:b5:75:ce:62:05:9c:c0:e7:25:
                    f4:71:7d:e2:50:80:52:62:46:7f:db:2b:41:96:59:
                    88:a3:59:b2:37:e5:a5:f7:00:e2:0c:3f:ce:f3:ba:
                    a9:b4:5a:05:6c:ee:3f:0e:27:e2:c2:4c:66:94:66:
                    99:d8:e0:81:b6:0a:ba:eb:50:99:1d:0f:e6:80:40:
                    7a:44:62:aa:80:21:c5:e7:a7:a0:33:9c:94:84:34:
                    96:cf:14:c2:b8:2f:35:1a:ae:8e:77:39:aa:a0:eb:
                    8a:6c:6e:fe:80:15:89:0f:a8:6e:26:ab:fd:ba:71:
                    42:79:4c:e2:39:a3:8e:af:bd:c4:4e:f9:19:ba:14:
                    58:be:e9:f9:4c:a7:16:98:95:44:ae:fc:e1:f6:95:
                    39:a2:2d:78:ee:13:7f:ae:bf:a3:59:5c:43:40:c0:
                    4d:73:73:4a:07:ec:ad:c5:f2:03:22:fd:8b:41:0f:
                    7a:e0:a4:66:8f:78:c2:e5:ee:4e:ea:d4:03:28:6c:
                    28:7a:f1:8a:2a:c9:70:92:3d:7d:72:38:94:f6:67:
                    6f:5d:c4:14:86:50:32:f8:c0:99:e0:d2:28:34:22:
                    95:e5:fd:c9:97:3c:7e:44:f5:55:51:ea:de:c6:2e:
                    b5:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:0C:55:E1:44:7D:AB:21:77:0A:07:FD:5E:C9:45:57:E7:0D:A8:66
            X509v3 Authority Key Identifier:
                keyid:92:14:8A:15:3B:C4:CF:8D:74:68:48:57:02:0A:59:63:3E:66:EE:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2F0EEE742121DCD6BA137FCC5792C993671A0DE83EF477521C436B50958165A3/0/92148A153BC4CF8D74684857020A59633E66EE4D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92148A153BC4CF8D74684857020A59633E66EE4D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2F0EEE742121DCD6BA137FCC5792C993671A0DE83EF477521C436B50958165A3/0/323830333a633632303a3a2f33322d3332203d3e20323635383734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c620::/32

    Signature Algorithm: sha256WithRSAEncryption
         b8:57:84:9e:54:fe:67:aa:7d:5b:77:e1:1a:06:9a:1e:1d:c9:
         46:92:23:b0:a3:0a:0c:c7:ae:b4:41:dd:80:22:a0:d8:b3:d1:
         c4:36:3e:53:2e:72:f5:3e:a3:fd:b0:78:c5:13:60:fb:54:4a:
         d1:97:67:d3:a3:74:d8:eb:9c:ea:41:f2:b0:80:4b:ee:42:1b:
         cb:45:ab:2c:86:67:8f:38:74:96:73:15:bb:6d:a3:64:c6:5a:
         30:9c:f2:7f:0c:e3:c8:93:41:ab:e7:f9:43:0f:14:bc:c3:99:
         c9:30:8d:51:b1:e5:7c:ef:16:16:f1:f1:dc:96:88:d4:89:2c:
         cc:90:7d:5e:de:2d:ff:bf:47:b8:6b:73:80:f2:91:2d:f2:6a:
         af:0d:55:b4:dc:5d:a0:d7:58:58:12:a1:7b:cc:fd:1f:78:c4:
         2b:6b:a9:95:60:44:98:b8:47:62:78:2c:2c:59:e3:dc:9c:61:
         34:52:d5:c7:a1:fa:ea:6e:c9:74:a8:54:c7:a1:9a:c8:4a:86:
         3e:c3:8c:66:66:7d:15:84:7e:52:db:81:bd:75:d1:98:83:fb:
         ae:2f:d8:0f:1e:36:eb:10:c2:a6:31:75:34:d4:60:31:49:82:
         0f:4b:4d:03:99:60:e3:8c:be:09:81:e7:ab:a0:b8:c1:41:94:
         d1:57:80:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:12:06 2025 by rpki-client