Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/323830333a6630303a3434303a3a2f34322d3438203d3e20323632313832.roa
File:                     323830333a6630303a3434303a3a2f34322d3438203d3e20323632313832.roa (raw, json)
Hash identifier:          YHHHl0mQ+0s71jCr28c+QU865AvAXUAsLjUkQoOxatQ=
Subject key identifier:   D2:7C:9B:15:83:F5:C3:F4:40:20:47:87:D6:A4:C7:D4:E4:46:92:27
Certificate issuer:       /CN=3D608F1A58C367A78F93EDCEF6DA6EACD069209B
Certificate serial:       149A205560C1D1C3661A3A69258164102BAD41F3
Authority key identifier: 3D:60:8F:1A:58:C3:67:A7:8F:93:ED:CE:F6:DA:6E:AC:D0:69:20:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/323830333a6630303a3434303a3a2f34322d3438203d3e20323632313832.roa
Signing time:             Mon 10 Feb 2025 20:09:32 +0000
ROA not before:           Mon 10 Feb 2025 20:04:32 +0000
ROA not after:            Mon 09 Feb 2026 20:09:32 +0000
asID:                     262182
IP address blocks:        2803:f00:440::/42 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:9a:20:55:60:c1:d1:c3:66:1a:3a:69:25:81:64:10:2b:ad:41:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D608F1A58C367A78F93EDCEF6DA6EACD069209B
        Validity
            Not Before: Feb 10 20:04:32 2025 GMT
            Not After : Feb  9 20:09:32 2026 GMT
        Subject: CN=D27C9B1583F5C3F440204787D6A4C7D4E4469227
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:0b:1e:67:56:57:dc:4c:c3:bd:fa:6a:cf:4f:
                    a1:06:ae:32:73:b8:a7:1e:3d:62:6c:e7:b1:c7:91:
                    1e:3c:44:21:48:f7:55:ab:b6:9a:c2:e6:35:77:a7:
                    d5:ab:bf:60:be:1e:11:46:1c:a1:05:6a:b7:6a:0c:
                    9d:6c:49:1d:9b:21:45:ce:21:91:3b:35:e5:4c:7f:
                    78:6b:2d:1d:9c:d8:67:f7:b5:cd:df:cd:ef:f2:64:
                    34:f1:27:6c:19:aa:98:26:42:d6:f0:f4:e0:25:51:
                    05:1a:7f:e8:53:bc:70:ce:54:5b:7d:e0:c8:cb:7c:
                    0c:ff:60:1c:61:16:aa:ec:f2:c3:2d:ed:98:bd:6b:
                    2f:01:88:fa:c2:f5:c9:d8:5e:5c:5f:09:97:95:70:
                    90:a3:af:ab:3e:74:39:a7:d5:bf:88:c6:22:56:6a:
                    98:36:09:c5:50:9b:ba:57:41:f4:5a:01:ef:fd:e5:
                    b9:e3:3d:11:52:91:b9:83:05:48:40:3d:60:4c:82:
                    7a:d0:ea:9f:68:58:f1:f3:67:97:15:74:c7:ae:34:
                    d0:83:39:d1:66:1c:a1:4a:b1:9f:03:73:50:fb:51:
                    20:5a:8e:63:18:7a:e9:e4:cb:5a:94:89:ab:a8:28:
                    9b:b8:0c:d3:c0:ba:f1:90:43:c6:e3:54:d3:35:93:
                    b1:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:7C:9B:15:83:F5:C3:F4:40:20:47:87:D6:A4:C7:D4:E4:46:92:27
            X509v3 Authority Key Identifier:
                keyid:3D:60:8F:1A:58:C3:67:A7:8F:93:ED:CE:F6:DA:6E:AC:D0:69:20:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/323830333a6630303a3434303a3a2f34322d3438203d3e20323632313832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f00:440::/42

    Signature Algorithm: sha256WithRSAEncryption
         b4:ec:ae:49:4c:11:d7:8b:02:10:75:e7:33:a9:f3:3b:3e:7b:
         df:d0:ea:06:98:f0:50:a2:da:cb:d0:c5:34:7a:e0:dd:57:1a:
         4d:dc:c6:d3:24:c5:dd:c8:3e:83:f8:59:98:d6:c3:f1:2b:70:
         e6:9b:b5:30:c5:f2:85:fb:00:13:44:b4:1e:c2:37:34:23:0a:
         96:e7:76:72:4a:fb:2b:5d:9d:6c:48:04:c3:03:5e:f2:10:86:
         13:91:72:85:4e:de:20:83:bb:28:2f:6b:5e:5f:da:c6:47:ef:
         d8:81:fa:41:13:b9:50:5a:08:a7:cd:63:76:8f:5a:07:6e:6f:
         ce:fd:94:8c:50:72:3a:c5:1f:f4:f5:2a:ce:6f:6e:c5:d9:c8:
         dc:3f:8b:15:d7:27:30:a4:eb:ea:46:49:8d:61:f1:f5:a9:62:
         12:56:5b:1f:e5:82:3d:9b:f6:0d:66:10:d1:86:1d:32:45:cb:
         80:37:b5:b8:2f:81:92:db:72:83:62:93:dc:d3:a1:bd:2a:9a:
         d1:ad:f5:66:e9:c2:f2:14:33:89:d4:e0:1f:79:ef:f8:96:1e:
         5d:1f:4d:f7:e9:17:d2:e4:1a:b7:78:83:84:bd:3b:7e:8d:98:
         e5:57:cf:af:2e:61:0f:6b:cf:18:b5:44:f9:43:1b:6a:fd:a4:
         f9:9d:38:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:21:22 2025 by rpki-client