Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/34B1072922DE72D88DEE32B72F1F299D57F9F01ACCB66CF913C56A3E4E74B66C/0/323830333a366339303a3a2f33322d3438203d3e20323732383437.roa
File:                     323830333a366339303a3a2f33322d3438203d3e20323732383437.roa (raw, json)
Hash identifier:          Q5ZfzqCFe3/2yD1dz0NiseD0tSlJvPb6sH+wRJxhsYA=
Subject key identifier:   31:7C:00:FC:0F:0A:09:9C:DA:20:30:5C:15:3C:06:CD:83:43:E2:C2
Certificate issuer:       /CN=728EC2E97E75244DF988E24AAD7528C170F06E80
Certificate serial:       11634198D8542D394FBF7DBC221E25B8BD9044B8
Authority key identifier: 72:8E:C2:E9:7E:75:24:4D:F9:88:E2:4A:AD:75:28:C1:70:F0:6E:80
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/728EC2E97E75244DF988E24AAD7528C170F06E80.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/34B1072922DE72D88DEE32B72F1F299D57F9F01ACCB66CF913C56A3E4E74B66C/0/323830333a366339303a3a2f33322d3438203d3e20323732383437.roa
Signing time:             Tue 04 Feb 2025 17:59:09 +0000
ROA not before:           Tue 04 Feb 2025 17:54:09 +0000
ROA not after:            Tue 03 Feb 2026 17:59:09 +0000
asID:                     272847
IP address blocks:        2803:6c90::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/34B1072922DE72D88DEE32B72F1F299D57F9F01ACCB66CF913C56A3E4E74B66C/0/728EC2E97E75244DF988E24AAD7528C170F06E80.crl
                          rsync://repository.lacnic.net/rpki/lacnic/34B1072922DE72D88DEE32B72F1F299D57F9F01ACCB66CF913C56A3E4E74B66C/0/728EC2E97E75244DF988E24AAD7528C170F06E80.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/728EC2E97E75244DF988E24AAD7528C170F06E80.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:63:41:98:d8:54:2d:39:4f:bf:7d:bc:22:1e:25:b8:bd:90:44:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=728EC2E97E75244DF988E24AAD7528C170F06E80
        Validity
            Not Before: Feb  4 17:54:09 2025 GMT
            Not After : Feb  3 17:59:09 2026 GMT
        Subject: CN=317C00FC0F0A099CDA20305C153C06CD8343E2C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:02:c6:2e:13:0e:9b:75:8b:2f:72:c2:0f:b3:
                    dd:92:03:b7:28:59:01:75:ee:b0:a6:7f:f9:d2:7f:
                    b4:6b:c5:c3:9e:4c:0e:2c:03:8b:5c:7a:a2:8c:09:
                    ab:2b:6d:4f:fd:ff:36:58:4a:45:ab:d8:0a:d6:5e:
                    36:1b:97:1e:05:05:e0:9f:cb:51:e7:92:02:1c:5f:
                    ca:27:1f:e0:6b:95:98:41:ed:c3:0e:22:91:9e:1d:
                    8c:d5:51:3c:e8:60:49:54:03:f4:7e:42:50:78:15:
                    26:46:4b:6c:96:74:50:5c:6a:62:e8:eb:57:79:26:
                    92:42:1e:99:48:b2:b7:28:04:e0:12:ba:f4:73:07:
                    47:6f:fa:5d:84:96:0e:15:ec:38:9f:cb:ba:6b:37:
                    04:db:8f:68:df:6c:2f:03:00:ea:85:ce:a5:ba:d5:
                    c2:1f:0a:91:f7:b4:7b:8f:9b:b5:48:57:27:60:e6:
                    85:1d:30:62:08:4b:d9:31:47:72:52:07:6f:ae:4d:
                    01:8b:43:49:52:47:af:b8:da:7a:e1:ba:bf:81:72:
                    cd:49:96:d1:ff:3b:37:ee:ee:37:af:b3:74:e3:63:
                    4d:8e:80:a5:e1:2e:86:5a:01:54:3a:8c:13:46:c4:
                    60:13:be:06:a1:29:02:03:a9:63:69:c0:81:33:ba:
                    ab:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:7C:00:FC:0F:0A:09:9C:DA:20:30:5C:15:3C:06:CD:83:43:E2:C2
            X509v3 Authority Key Identifier:
                keyid:72:8E:C2:E9:7E:75:24:4D:F9:88:E2:4A:AD:75:28:C1:70:F0:6E:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/34B1072922DE72D88DEE32B72F1F299D57F9F01ACCB66CF913C56A3E4E74B66C/0/728EC2E97E75244DF988E24AAD7528C170F06E80.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/728EC2E97E75244DF988E24AAD7528C170F06E80.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/34B1072922DE72D88DEE32B72F1F299D57F9F01ACCB66CF913C56A3E4E74B66C/0/323830333a366339303a3a2f33322d3438203d3e20323732383437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6c90::/32

    Signature Algorithm: sha256WithRSAEncryption
         36:24:dd:2e:78:3d:b2:1c:76:c3:11:0f:fd:48:bf:63:3c:26:
         f1:6e:e3:bb:a6:82:56:85:e5:db:84:56:83:02:52:f5:34:29:
         69:cf:7a:ef:88:b7:b6:34:6f:82:a8:21:04:1d:8b:9f:f6:81:
         11:26:11:7d:e2:ce:34:3f:fc:08:4d:bd:c2:06:0e:19:dd:de:
         bf:b5:97:03:6a:92:82:03:12:12:99:90:01:9a:03:81:fe:8c:
         c2:50:7f:33:e1:d3:6b:92:34:71:7f:26:f4:50:e5:be:5c:52:
         6e:77:96:9c:af:f9:13:7f:fe:c5:bd:a8:01:25:d0:f1:29:e1:
         72:e2:b3:74:5f:c1:34:51:c6:43:40:a8:83:d7:0a:54:4c:0f:
         1c:8b:e5:28:24:43:e7:f3:fd:91:79:b3:c9:7b:c8:dd:df:d2:
         c0:33:34:86:34:01:40:a7:94:c9:c1:e1:e4:3b:f4:eb:ae:12:
         6b:05:f3:48:38:77:22:61:47:bc:ca:2c:29:eb:b1:c4:b5:18:
         7d:91:d0:4d:5b:e9:23:3d:b6:fa:61:ec:b0:06:b4:ec:a0:fc:
         16:a7:3b:87:40:1c:aa:8a:f5:7d:03:03:fc:c6:e3:16:c9:c0:
         0b:31:ed:a7:c3:19:5d:5a:63:6e:d5:b1:d0:08:23:81:39:72:
         b4:51:6a:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:42:06 2025 by rpki-client