Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/471AD7E4E2DB9E9EEE263163C14DD1A3A1A57620C482BC268EB89DF9501808FD/0/323830333a656365303a3a2f33322d3332203d3e203532343039.roa
File:                     323830333a656365303a3a2f33322d3332203d3e203532343039.roa (raw, json)
Hash identifier:          q+4GE8PjJCq7R6JTtwmd6StHEEsmvjYKSRwGfpAs0B0=
Subject key identifier:   BE:2A:C0:5C:E3:58:37:95:0C:6C:AB:46:A2:AE:98:E1:BE:F8:05:23
Certificate issuer:       /CN=91D78B9CDEF27F283AF72785886EF69B689AF95C
Certificate serial:       75DE6E85C544D79073083BDC55E6302555212844
Authority key identifier: 91:D7:8B:9C:DE:F2:7F:28:3A:F7:27:85:88:6E:F6:9B:68:9A:F9:5C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/91D78B9CDEF27F283AF72785886EF69B689AF95C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/471AD7E4E2DB9E9EEE263163C14DD1A3A1A57620C482BC268EB89DF9501808FD/0/323830333a656365303a3a2f33322d3332203d3e203532343039.roa
Signing time:             Tue 04 Feb 2025 20:05:21 +0000
ROA not before:           Tue 04 Feb 2025 20:00:21 +0000
ROA not after:            Tue 03 Feb 2026 20:05:21 +0000
asID:                     52409
IP address blocks:        2803:ece0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/471AD7E4E2DB9E9EEE263163C14DD1A3A1A57620C482BC268EB89DF9501808FD/0/91D78B9CDEF27F283AF72785886EF69B689AF95C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/471AD7E4E2DB9E9EEE263163C14DD1A3A1A57620C482BC268EB89DF9501808FD/0/91D78B9CDEF27F283AF72785886EF69B689AF95C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/91D78B9CDEF27F283AF72785886EF69B689AF95C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 20 Feb 2025 17:49:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:de:6e:85:c5:44:d7:90:73:08:3b:dc:55:e6:30:25:55:21:28:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91D78B9CDEF27F283AF72785886EF69B689AF95C
        Validity
            Not Before: Feb  4 20:00:21 2025 GMT
            Not After : Feb  3 20:05:21 2026 GMT
        Subject: CN=BE2AC05CE35837950C6CAB46A2AE98E1BEF80523
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:c5:bf:38:58:1b:81:95:f9:40:5f:06:68:c8:
                    36:d8:10:ca:74:26:71:64:d2:a7:af:c3:5c:fc:4f:
                    d3:9f:24:7b:2e:b3:4e:cf:82:b0:f4:ab:37:e8:ba:
                    0e:60:d5:5f:3d:12:d5:b1:67:80:b9:ac:19:73:55:
                    18:23:1e:25:bd:2c:64:40:f5:36:4f:27:72:57:2a:
                    4c:c5:55:01:aa:a6:34:fc:96:65:ad:2d:b7:a4:4d:
                    64:21:ea:73:68:39:eb:44:72:41:86:0d:01:ef:4e:
                    15:c0:45:bb:22:cc:e7:e6:8e:cd:93:9a:58:ea:fe:
                    7c:9d:8c:f7:5a:56:64:76:bd:03:ed:ec:52:03:9a:
                    21:30:bf:49:1e:44:2d:f9:98:1a:17:48:1f:0a:fa:
                    57:2d:e8:8b:21:a4:08:31:55:dd:44:c2:95:48:5a:
                    b3:11:cd:41:e5:aa:01:e6:ba:88:e0:85:2f:cf:a8:
                    19:40:88:78:d6:1d:85:47:22:03:34:b7:93:cf:f8:
                    e6:64:f7:c4:46:2a:bc:62:5e:88:c6:2a:97:da:67:
                    7b:ad:5d:26:81:35:5c:04:b8:28:2c:13:ee:1b:24:
                    28:5b:64:7a:8e:a4:80:df:46:46:fc:da:99:df:fd:
                    c2:49:90:ec:07:89:b0:89:fb:da:bb:1d:45:53:3f:
                    33:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:2A:C0:5C:E3:58:37:95:0C:6C:AB:46:A2:AE:98:E1:BE:F8:05:23
            X509v3 Authority Key Identifier:
                keyid:91:D7:8B:9C:DE:F2:7F:28:3A:F7:27:85:88:6E:F6:9B:68:9A:F9:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/471AD7E4E2DB9E9EEE263163C14DD1A3A1A57620C482BC268EB89DF9501808FD/0/91D78B9CDEF27F283AF72785886EF69B689AF95C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/91D78B9CDEF27F283AF72785886EF69B689AF95C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/471AD7E4E2DB9E9EEE263163C14DD1A3A1A57620C482BC268EB89DF9501808FD/0/323830333a656365303a3a2f33322d3332203d3e203532343039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ece0::/32

    Signature Algorithm: sha256WithRSAEncryption
         85:c0:32:25:0a:28:ba:63:ea:a1:dc:1c:6b:09:1a:2e:05:13:
         ed:e8:57:5d:7e:a2:7a:07:d4:d5:df:5b:17:e9:b8:0c:65:96:
         be:a9:04:d9:a8:73:ea:ff:c6:0a:12:77:fb:24:94:18:64:69:
         c4:33:5f:85:7c:61:4b:24:8b:7d:c4:a0:e9:a1:b3:67:9c:d6:
         16:66:c5:4f:f3:9c:66:53:06:9b:f6:ab:ba:7c:dc:9d:1c:d3:
         62:0d:06:de:15:83:65:7a:fa:29:03:cb:00:08:fc:2a:43:70:
         c6:e3:42:85:e2:fc:24:3b:a6:1b:6b:b1:69:04:ce:fa:d4:d2:
         22:49:14:15:ef:de:78:53:95:a9:1d:20:62:71:d9:e2:82:47:
         54:e8:21:88:e8:e8:38:f9:0a:58:66:ef:97:53:30:09:dd:89:
         09:01:a8:be:dc:d6:00:9d:d1:ec:85:c9:26:e0:41:95:70:74:
         79:6f:cd:1f:2e:9d:92:08:bc:69:2b:ce:ac:11:43:7c:c7:fb:
         2f:53:4e:f3:fe:1f:8a:f2:24:5b:5b:b0:12:ab:c3:80:b6:06:
         15:94:50:b9:c0:61:8f:ff:ab:69:8b:2e:60:a1:01:bf:45:ce:
         b6:6f:d5:69:1b:38:f0:57:68:6b:48:36:a0:c7:b3:f9:ef:65:
         50:4d:b5:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:42:44 2025 by rpki-client