Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/471AD7E4E2DB9E9EEE263163C14DD1A3A1A57620C482BC268EB89DF9501808FD/0/323830333a656365303a3a2f33322d3332203d3e203131303134.roa
File:                     323830333a656365303a3a2f33322d3332203d3e203131303134.roa (raw, json)
Hash identifier:          6Z4Biysi/V247YsywIa23VT+VpcOpbv4yUSbj55MwNE=
Subject key identifier:   AC:2C:6D:BA:EA:E4:B3:C9:EF:CE:0D:07:8E:F2:47:85:D0:1C:0C:82
Certificate issuer:       /CN=91D78B9CDEF27F283AF72785886EF69B689AF95C
Certificate serial:       4BE9A495AF155A3859B9A9CDAB12E486B4E8CCD0
Authority key identifier: 91:D7:8B:9C:DE:F2:7F:28:3A:F7:27:85:88:6E:F6:9B:68:9A:F9:5C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/91D78B9CDEF27F283AF72785886EF69B689AF95C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/471AD7E4E2DB9E9EEE263163C14DD1A3A1A57620C482BC268EB89DF9501808FD/0/323830333a656365303a3a2f33322d3332203d3e203131303134.roa
Signing time:             Tue 04 Feb 2025 20:05:23 +0000
ROA not before:           Tue 04 Feb 2025 20:00:23 +0000
ROA not after:            Tue 03 Feb 2026 20:05:23 +0000
asID:                     11014
IP address blocks:        2803:ece0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/471AD7E4E2DB9E9EEE263163C14DD1A3A1A57620C482BC268EB89DF9501808FD/0/91D78B9CDEF27F283AF72785886EF69B689AF95C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/471AD7E4E2DB9E9EEE263163C14DD1A3A1A57620C482BC268EB89DF9501808FD/0/91D78B9CDEF27F283AF72785886EF69B689AF95C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/91D78B9CDEF27F283AF72785886EF69B689AF95C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 17:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:e9:a4:95:af:15:5a:38:59:b9:a9:cd:ab:12:e4:86:b4:e8:cc:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91D78B9CDEF27F283AF72785886EF69B689AF95C
        Validity
            Not Before: Feb  4 20:00:23 2025 GMT
            Not After : Feb  3 20:05:23 2026 GMT
        Subject: CN=AC2C6DBAEAE4B3C9EFCE0D078EF24785D01C0C82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:b9:aa:89:b6:c8:b8:56:6f:93:68:73:34:2b:
                    41:0e:f1:0b:31:52:f5:6a:b5:7b:5d:32:27:48:d2:
                    8d:2c:60:de:f7:16:46:15:65:5c:96:a4:01:a3:35:
                    c6:60:1f:ba:66:60:de:36:3e:fd:20:e9:b9:d3:43:
                    ae:97:d3:98:a5:2c:53:96:54:6d:a8:df:d5:04:77:
                    23:12:38:9c:1a:11:34:f8:0c:a6:5e:11:91:cd:37:
                    6a:d7:e9:42:5e:87:dc:31:82:e9:28:6e:1f:8a:15:
                    4e:a4:37:94:e6:d7:24:54:cc:36:00:cf:3e:c4:be:
                    99:aa:0a:ea:9d:0e:3b:13:11:52:cb:56:9e:66:d2:
                    c5:83:40:64:75:aa:8e:fc:57:0b:14:86:52:c4:4e:
                    47:fc:91:6a:a8:d1:2c:4c:dc:24:e0:ac:a7:f2:f5:
                    21:73:bb:53:98:46:5e:27:c1:87:b9:6a:ce:40:5e:
                    7f:d9:ad:4c:90:f4:a3:a2:1e:6b:63:97:cc:8b:e0:
                    b6:40:60:90:75:b0:00:1e:87:d4:48:1b:d9:96:bb:
                    52:29:79:80:5a:c2:69:f6:0a:47:a6:d1:47:5e:5c:
                    fc:8b:e1:22:0b:cb:27:bc:66:1c:da:af:91:4d:e8:
                    33:f7:67:7b:db:bb:36:79:83:11:07:4a:6d:58:db:
                    ec:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:2C:6D:BA:EA:E4:B3:C9:EF:CE:0D:07:8E:F2:47:85:D0:1C:0C:82
            X509v3 Authority Key Identifier:
                keyid:91:D7:8B:9C:DE:F2:7F:28:3A:F7:27:85:88:6E:F6:9B:68:9A:F9:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/471AD7E4E2DB9E9EEE263163C14DD1A3A1A57620C482BC268EB89DF9501808FD/0/91D78B9CDEF27F283AF72785886EF69B689AF95C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/91D78B9CDEF27F283AF72785886EF69B689AF95C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/471AD7E4E2DB9E9EEE263163C14DD1A3A1A57620C482BC268EB89DF9501808FD/0/323830333a656365303a3a2f33322d3332203d3e203131303134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ece0::/32

    Signature Algorithm: sha256WithRSAEncryption
         64:f2:93:9a:90:26:16:28:c6:22:55:14:7e:ed:8d:6e:44:c0:
         a0:56:0b:1b:12:9a:9e:d8:c6:e9:8c:79:bf:4a:c3:c9:a7:4f:
         e5:2e:d4:ed:4e:96:61:8c:1e:db:8b:90:2f:02:7a:b6:0e:28:
         df:24:f9:a0:dd:c3:fb:82:71:75:8e:ef:4a:e3:d1:c3:63:80:
         3a:b0:30:fa:d9:57:47:aa:ac:57:88:39:8d:7d:25:b9:04:6a:
         c1:75:44:4a:c8:01:50:22:df:0b:df:d3:28:81:90:50:0d:c1:
         c2:68:ae:34:d9:8e:f7:6c:2c:6d:85:be:da:2c:25:ff:ae:3e:
         2d:c9:ab:26:d1:bc:c5:b2:8e:4e:1c:df:76:ff:68:69:07:de:
         44:0b:3b:7e:a8:4c:1f:02:0a:fd:6b:bb:70:14:8c:25:63:15:
         f3:57:9a:d4:e8:bb:91:93:53:b3:12:83:ee:0d:17:6a:08:f8:
         b9:c7:f0:d4:69:32:ce:ea:6e:73:62:03:97:ab:57:23:56:4d:
         e4:a3:7a:4c:33:71:13:7b:e6:03:5a:e7:f5:e2:80:95:a1:57:
         87:9f:8d:6c:86:a3:b3:be:0f:f6:4b:b2:e6:67:13:9d:a9:49:
         fc:ce:fd:19:64:91:70:c8:6c:fd:d8:65:98:c8:f5:08:5b:95:
         57:15:46:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 12:38:11 2025 by rpki-client