Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4C76ACD238AB7208FCB8977276DA1BC02E543D274FB85D44A2348AC03AC2A770/0/323830333a363139303a3a2f33322d3438203d3e203238303533.roa
File:                     323830333a363139303a3a2f33322d3438203d3e203238303533.roa (raw, json)
Hash identifier:          8/9Ktwc30PkINltufSpgN9swnhNhcSK3Mce4FFgb/Zg=
Subject key identifier:   08:E8:92:78:56:79:36:7F:77:35:17:82:60:53:74:9E:82:BF:54:17
Certificate issuer:       /CN=0775F451BF69A7F4553954A7FE9AC42D41BFF9F2
Certificate serial:       01CC1536CA461B15E51288F1041383E61DD176D0
Authority key identifier: 07:75:F4:51:BF:69:A7:F4:55:39:54:A7:FE:9A:C4:2D:41:BF:F9:F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0775F451BF69A7F4553954A7FE9AC42D41BFF9F2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4C76ACD238AB7208FCB8977276DA1BC02E543D274FB85D44A2348AC03AC2A770/0/323830333a363139303a3a2f33322d3438203d3e203238303533.roa
Signing time:             Tue 04 Feb 2025 18:23:17 +0000
ROA not before:           Tue 04 Feb 2025 18:18:17 +0000
ROA not after:            Tue 03 Feb 2026 18:23:17 +0000
asID:                     28053
IP address blocks:        2803:6190::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4C76ACD238AB7208FCB8977276DA1BC02E543D274FB85D44A2348AC03AC2A770/0/0775F451BF69A7F4553954A7FE9AC42D41BFF9F2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4C76ACD238AB7208FCB8977276DA1BC02E543D274FB85D44A2348AC03AC2A770/0/0775F451BF69A7F4553954A7FE9AC42D41BFF9F2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0775F451BF69A7F4553954A7FE9AC42D41BFF9F2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:cc:15:36:ca:46:1b:15:e5:12:88:f1:04:13:83:e6:1d:d1:76:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0775F451BF69A7F4553954A7FE9AC42D41BFF9F2
        Validity
            Not Before: Feb  4 18:18:17 2025 GMT
            Not After : Feb  3 18:23:17 2026 GMT
        Subject: CN=08E892785679367F773517826053749E82BF5417
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:75:5b:50:fb:bf:d4:06:0d:27:80:52:57:1c:
                    49:40:62:8d:4b:2a:d5:cc:f2:d0:72:36:ab:53:7e:
                    61:2c:b4:f0:2c:32:81:af:60:ad:74:89:d3:c8:8c:
                    ed:59:f4:70:96:97:f6:16:2e:13:83:bf:7e:9e:f1:
                    c9:1c:b8:99:f2:9b:51:58:19:7b:7b:fd:16:dd:12:
                    74:f2:68:d3:bb:1c:1c:e0:53:c2:a1:32:3d:48:a0:
                    0b:cd:8b:7b:95:03:63:9a:c6:f5:e0:a4:b4:50:49:
                    86:0a:18:4b:0c:f7:d5:80:51:d9:12:74:b2:5c:46:
                    52:9b:0d:87:f5:3d:f0:53:90:92:3f:fc:7f:3d:07:
                    ed:46:8f:25:eb:9c:87:61:4f:f3:0d:0b:03:53:55:
                    2f:ee:7f:79:cc:c0:ce:b7:20:d9:b1:18:8f:01:67:
                    c9:fc:9d:16:92:f0:2a:50:67:37:30:50:77:ac:82:
                    a3:d0:3e:8f:e6:c8:3d:78:a7:dc:22:79:12:c9:c4:
                    2e:c9:da:05:72:6d:b4:e9:37:06:bd:40:6f:13:48:
                    2c:ca:bc:6c:73:42:ee:9c:57:37:2a:db:08:d0:f7:
                    f0:b0:26:51:39:73:29:ce:16:e3:a5:a4:1a:b0:09:
                    a4:b6:b9:81:7b:ef:55:d7:d3:c6:b0:bc:3c:50:a6:
                    f6:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:E8:92:78:56:79:36:7F:77:35:17:82:60:53:74:9E:82:BF:54:17
            X509v3 Authority Key Identifier:
                keyid:07:75:F4:51:BF:69:A7:F4:55:39:54:A7:FE:9A:C4:2D:41:BF:F9:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4C76ACD238AB7208FCB8977276DA1BC02E543D274FB85D44A2348AC03AC2A770/0/0775F451BF69A7F4553954A7FE9AC42D41BFF9F2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0775F451BF69A7F4553954A7FE9AC42D41BFF9F2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4C76ACD238AB7208FCB8977276DA1BC02E543D274FB85D44A2348AC03AC2A770/0/323830333a363139303a3a2f33322d3438203d3e203238303533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6190::/32

    Signature Algorithm: sha256WithRSAEncryption
         30:32:23:94:0b:7a:d2:de:ae:81:23:c2:10:6f:76:74:40:12:
         99:de:42:ba:cc:d4:69:a1:04:15:cb:48:1a:b1:77:a4:44:02:
         60:e8:90:6b:48:c4:a3:b8:8c:ee:4c:bf:db:57:f1:ef:a0:a1:
         90:3b:23:cb:a6:c8:63:b8:91:9e:90:1c:27:14:21:41:c1:2e:
         df:74:e8:f5:89:9d:74:fd:e2:45:54:04:95:91:a6:af:fa:8d:
         84:44:49:04:83:4a:46:47:d0:46:20:60:81:33:9a:08:0d:a8:
         e1:18:ce:a2:31:35:da:e7:65:cb:01:ab:84:cb:c9:c3:95:f0:
         5d:39:3e:93:00:75:d3:cb:a5:96:c0:c3:4a:e4:ba:70:dc:70:
         0d:d6:e4:4c:94:53:62:be:5d:64:ac:44:fa:7b:11:6b:4d:d4:
         27:8d:1f:8a:54:e0:22:37:61:07:f2:f4:16:4d:8f:48:96:f8:
         57:28:dd:86:dc:94:65:91:fc:aa:e1:64:88:7a:39:f5:03:27:
         fc:b3:0e:ee:53:8b:b3:2d:d7:64:5e:6f:3c:7a:17:42:fb:ea:
         75:f7:45:32:da:03:2b:c4:6d:98:5c:5c:d5:5c:8d:98:2c:af:
         93:a4:2f:5a:1b:38:59:78:84:06:f6:d8:7b:f4:5e:a0:26:74:
         52:be:8b:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:10:31 2025 by rpki-client