Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4244F6835E22BA2699928203BFB83ADB5D244A099F53528B5F78D228D6959373/0/323830333a393439303a3a2f33322d3438203d3e20323732383233.roa
File:                     323830333a393439303a3a2f33322d3438203d3e20323732383233.roa (raw, json)
Hash identifier:          0oKhwsbvlRw+epUBcLEJDUcYeM+rU2io5fVuH6LDEi4=
Subject key identifier:   94:36:D3:73:09:C5:74:DA:10:66:C5:CC:97:0F:2A:4F:4D:9A:DA:8A
Certificate issuer:       /CN=2AFF142AE78A7D965F8E227DFAA659E2FEBDE078
Certificate serial:       05EE244F0C17AC4EAF295C47E9172A008926180E
Authority key identifier: 2A:FF:14:2A:E7:8A:7D:96:5F:8E:22:7D:FA:A6:59:E2:FE:BD:E0:78
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2AFF142AE78A7D965F8E227DFAA659E2FEBDE078.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4244F6835E22BA2699928203BFB83ADB5D244A099F53528B5F78D228D6959373/0/323830333a393439303a3a2f33322d3438203d3e20323732383233.roa
Signing time:             Tue 04 Feb 2025 18:25:24 +0000
ROA not before:           Tue 04 Feb 2025 18:20:24 +0000
ROA not after:            Tue 03 Feb 2026 18:25:24 +0000
asID:                     272823
IP address blocks:        2803:9490::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4244F6835E22BA2699928203BFB83ADB5D244A099F53528B5F78D228D6959373/0/2AFF142AE78A7D965F8E227DFAA659E2FEBDE078.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4244F6835E22BA2699928203BFB83ADB5D244A099F53528B5F78D228D6959373/0/2AFF142AE78A7D965F8E227DFAA659E2FEBDE078.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2AFF142AE78A7D965F8E227DFAA659E2FEBDE078.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 20:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:ee:24:4f:0c:17:ac:4e:af:29:5c:47:e9:17:2a:00:89:26:18:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2AFF142AE78A7D965F8E227DFAA659E2FEBDE078
        Validity
            Not Before: Feb  4 18:20:24 2025 GMT
            Not After : Feb  3 18:25:24 2026 GMT
        Subject: CN=9436D37309C574DA1066C5CC970F2A4F4D9ADA8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e8:54:68:12:86:54:4f:0e:cc:e1:dd:3e:2d:
                    a9:b6:c5:13:1a:99:03:c8:c8:13:3e:78:cc:4a:ea:
                    83:77:b7:39:e2:8f:ab:74:ca:1c:c1:60:99:ce:0c:
                    f5:c0:3f:da:c4:a1:f6:a4:68:7c:ed:51:1c:fe:38:
                    c2:cc:3c:a0:41:bd:43:23:e3:10:28:2c:a2:aa:c0:
                    79:6f:f1:b7:7b:79:eb:ab:1c:de:18:f5:a3:fd:90:
                    6a:03:52:e3:5b:98:90:5e:70:23:8a:f2:7b:74:30:
                    a6:25:83:00:a8:c7:04:21:55:b5:97:8d:98:12:aa:
                    20:45:2c:fe:4c:0d:f8:28:68:c5:3d:c4:df:8d:7b:
                    c7:2f:43:3a:17:ab:44:b3:a4:ee:a6:7d:25:e7:84:
                    c1:c6:6e:8f:ac:04:84:05:2a:8b:cc:0b:e7:d5:26:
                    a0:b7:f3:24:65:be:78:f3:32:12:ac:6b:69:0c:65:
                    06:96:40:62:f5:13:53:4a:73:57:3b:33:7a:ee:0b:
                    e3:49:e1:b6:60:b7:a2:e8:56:06:ba:b9:2e:11:3a:
                    73:c7:7a:c4:0e:b4:7a:ee:07:a2:5f:d8:51:7d:5a:
                    a1:d3:8e:88:68:fe:96:42:4f:9c:1c:85:0c:8f:a9:
                    fb:d1:a4:b8:28:14:14:ac:b1:d8:15:05:6e:7e:9d:
                    a1:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:36:D3:73:09:C5:74:DA:10:66:C5:CC:97:0F:2A:4F:4D:9A:DA:8A
            X509v3 Authority Key Identifier:
                keyid:2A:FF:14:2A:E7:8A:7D:96:5F:8E:22:7D:FA:A6:59:E2:FE:BD:E0:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4244F6835E22BA2699928203BFB83ADB5D244A099F53528B5F78D228D6959373/0/2AFF142AE78A7D965F8E227DFAA659E2FEBDE078.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2AFF142AE78A7D965F8E227DFAA659E2FEBDE078.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4244F6835E22BA2699928203BFB83ADB5D244A099F53528B5F78D228D6959373/0/323830333a393439303a3a2f33322d3438203d3e20323732383233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9490::/32

    Signature Algorithm: sha256WithRSAEncryption
         21:c2:45:82:63:a0:76:8e:0d:dd:b6:ac:9d:37:b1:82:51:24:
         67:ea:6d:7a:b0:7f:7c:41:14:61:32:11:e0:24:c5:3f:ba:54:
         4d:41:f4:c4:4b:2a:d2:e1:1d:76:d3:b8:fd:48:11:d3:d2:3a:
         4c:26:37:5c:5e:42:0f:a0:ff:a8:04:ed:6c:24:c0:50:a2:d2:
         82:b5:70:01:b7:67:58:79:e9:2e:95:65:70:29:dd:33:39:18:
         2e:84:32:e2:20:58:00:3d:3b:aa:c1:0c:e1:6c:f1:4e:13:89:
         ce:d1:97:e5:ad:32:bd:cb:2b:8c:cb:d6:76:ca:42:9c:c9:52:
         1d:82:fb:35:1c:69:f2:b2:ab:26:dc:e2:9e:34:1e:68:59:3f:
         54:dd:a1:59:f0:a7:46:a3:2a:53:68:31:66:26:96:7d:9e:2f:
         29:87:63:b0:53:53:2a:dd:bd:62:f1:ac:a3:04:ef:55:45:1e:
         76:ae:f8:73:b2:c8:78:0f:47:e6:85:b6:ee:7f:41:66:30:5f:
         9d:ce:d5:5b:04:a0:12:01:21:51:ea:16:be:a6:64:10:9c:8d:
         80:14:fe:1e:1b:cd:1b:0f:98:8e:58:48:2d:aa:fc:2d:83:02:
         0c:66:ce:93:8e:54:a4:af:50:ec:bd:c3:08:94:df:e2:4f:59:
         1b:ed:c7:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:31:30 2025 by rpki-client