Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/41FE651CDFCDFFBE7732AD718D68A50718AEB42A61EC0B565FC4A4A6CFF4660C/0/323830333a656661303a3a2f33322d3438203d3e20323637373932.roa
File:                     323830333a656661303a3a2f33322d3438203d3e20323637373932.roa (raw, json)
Hash identifier:          PQXn/xB7xlLB0RdtXnNOLoUy/zq0PBpYslWNGruDICo=
Subject key identifier:   B9:B3:0D:8A:66:47:6B:29:62:7C:35:01:A2:9A:53:DF:B3:37:70:87
Certificate issuer:       /CN=A8C4E5871207B44EC0821058200C507D53B96E50
Certificate serial:       0F590603D2F8C732F873B97078D3D1FAC02BC1AE
Authority key identifier: A8:C4:E5:87:12:07:B4:4E:C0:82:10:58:20:0C:50:7D:53:B9:6E:50
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8C4E5871207B44EC0821058200C507D53B96E50.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/41FE651CDFCDFFBE7732AD718D68A50718AEB42A61EC0B565FC4A4A6CFF4660C/0/323830333a656661303a3a2f33322d3438203d3e20323637373932.roa
Signing time:             Tue 04 Feb 2025 18:41:53 +0000
ROA not before:           Tue 04 Feb 2025 18:36:53 +0000
ROA not after:            Tue 03 Feb 2026 18:41:53 +0000
asID:                     267792
IP address blocks:        2803:efa0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/41FE651CDFCDFFBE7732AD718D68A50718AEB42A61EC0B565FC4A4A6CFF4660C/0/A8C4E5871207B44EC0821058200C507D53B96E50.crl
                          rsync://repository.lacnic.net/rpki/lacnic/41FE651CDFCDFFBE7732AD718D68A50718AEB42A61EC0B565FC4A4A6CFF4660C/0/A8C4E5871207B44EC0821058200C507D53B96E50.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8C4E5871207B44EC0821058200C507D53B96E50.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 14:41:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:59:06:03:d2:f8:c7:32:f8:73:b9:70:78:d3:d1:fa:c0:2b:c1:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8C4E5871207B44EC0821058200C507D53B96E50
        Validity
            Not Before: Feb  4 18:36:53 2025 GMT
            Not After : Feb  3 18:41:53 2026 GMT
        Subject: CN=B9B30D8A66476B29627C3501A29A53DFB3377087
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:75:c4:9d:6b:7c:e8:77:6c:17:64:7c:1a:76:
                    ef:4f:c6:a4:f7:b2:47:e9:3a:3e:7e:42:c5:05:be:
                    06:e6:60:31:26:55:33:7f:be:b9:61:65:00:a8:cf:
                    80:4b:03:97:31:60:d3:69:29:33:f6:e9:ae:d0:61:
                    0a:3b:3c:2a:dc:f2:81:71:91:da:e0:22:3d:d1:1f:
                    b2:98:cd:22:3c:76:d8:e2:39:d0:39:36:40:4d:43:
                    8d:ec:2e:26:4d:23:66:1a:f9:88:05:b6:8f:7c:98:
                    cf:90:c3:2c:da:39:14:52:92:eb:50:1e:68:79:01:
                    99:e6:cf:05:c0:4f:24:2d:fd:d4:cc:ef:cf:ce:02:
                    0b:b1:81:a4:25:c9:e3:0b:68:42:86:27:90:0d:2f:
                    16:18:e5:91:7e:2c:d1:c6:80:5f:14:79:9a:78:5f:
                    e4:9d:72:12:8e:ec:0e:6b:e6:e7:f1:39:1f:9d:91:
                    6e:ef:e4:78:98:f8:49:61:ee:2f:84:bf:c6:70:b2:
                    47:f2:85:5b:79:92:0a:72:2b:bf:f4:a5:8b:a7:19:
                    c3:91:e7:73:81:04:1c:b5:60:26:e7:1b:0b:5b:5a:
                    6a:c8:3e:00:8b:e0:39:ac:0b:32:ce:8b:3c:c7:4a:
                    4d:9d:bd:40:6f:bd:9d:25:7d:e7:de:50:da:81:2d:
                    68:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:B3:0D:8A:66:47:6B:29:62:7C:35:01:A2:9A:53:DF:B3:37:70:87
            X509v3 Authority Key Identifier:
                keyid:A8:C4:E5:87:12:07:B4:4E:C0:82:10:58:20:0C:50:7D:53:B9:6E:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/41FE651CDFCDFFBE7732AD718D68A50718AEB42A61EC0B565FC4A4A6CFF4660C/0/A8C4E5871207B44EC0821058200C507D53B96E50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8C4E5871207B44EC0821058200C507D53B96E50.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/41FE651CDFCDFFBE7732AD718D68A50718AEB42A61EC0B565FC4A4A6CFF4660C/0/323830333a656661303a3a2f33322d3438203d3e20323637373932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:efa0::/32

    Signature Algorithm: sha256WithRSAEncryption
         69:d5:8b:0e:0c:cc:08:be:6c:22:0b:5a:89:8c:d8:e5:23:b5:
         6a:3b:af:de:82:34:78:0c:21:34:73:1b:e1:38:1a:f9:85:09:
         d2:c9:18:cc:f1:08:7d:e5:5c:a9:fc:54:0e:0d:8c:7b:74:8c:
         a3:07:28:6d:62:6c:30:21:4b:5a:3d:fd:41:2e:2f:9d:81:e5:
         de:c7:b1:e7:12:24:be:18:05:15:07:ce:b0:d0:5e:14:3b:1a:
         f9:8d:9d:eb:53:99:18:d3:cc:ec:43:c2:a3:6c:ac:57:3c:d8:
         fb:79:9e:a6:07:9d:39:b6:f8:71:71:58:99:6c:7f:b2:a2:7b:
         f4:78:59:dd:46:71:c4:fe:11:2b:06:40:ff:00:7e:f4:05:3f:
         67:60:92:0d:93:37:b5:66:b5:dc:83:78:a9:8d:ba:a4:38:25:
         8f:d9:52:15:b1:4f:3d:7f:14:f9:d4:a8:ae:ce:ac:2e:2e:76:
         ed:ac:40:87:7d:01:80:97:9c:d0:46:55:fa:b5:85:3b:21:f8:
         8a:14:1e:61:e0:20:94:45:d4:7c:f8:68:17:eb:93:f6:b2:6b:
         b5:07:ad:b8:c2:a8:9d:f9:ca:f6:c9:47:e8:1c:1c:0d:7d:56:
         47:3f:98:c5:1b:16:a6:1c:e1:1c:fa:e5:f7:7c:eb:1f:ce:aa:
         30:50:b8:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 12:56:54 2025 by rpki-client