Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/323830333a6630303a3439623a3a2f34382d3438203d3e20323632313832.roa
File:                     323830333a6630303a3439623a3a2f34382d3438203d3e20323632313832.roa (raw, json)
Hash identifier:          Of7ts6jrZQ+CAzyT7DFEbeDaI4mumrPdzuTnJt0cb4s=
Subject key identifier:   0A:92:21:B5:8E:B3:59:59:53:ED:AB:43:45:B3:F5:E2:9C:B9:C4:DD
Certificate issuer:       /CN=3D608F1A58C367A78F93EDCEF6DA6EACD069209B
Certificate serial:       4086E488A718976D58B2CD90078A2058ED35CD5B
Authority key identifier: 3D:60:8F:1A:58:C3:67:A7:8F:93:ED:CE:F6:DA:6E:AC:D0:69:20:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/323830333a6630303a3439623a3a2f34382d3438203d3e20323632313832.roa
Signing time:             Mon 10 Feb 2025 20:09:32 +0000
ROA not before:           Mon 10 Feb 2025 20:04:32 +0000
ROA not after:            Mon 09 Feb 2026 20:09:32 +0000
asID:                     262182
IP address blocks:        2803:f00:49b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 04:49:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:86:e4:88:a7:18:97:6d:58:b2:cd:90:07:8a:20:58:ed:35:cd:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D608F1A58C367A78F93EDCEF6DA6EACD069209B
        Validity
            Not Before: Feb 10 20:04:32 2025 GMT
            Not After : Feb  9 20:09:32 2026 GMT
        Subject: CN=0A9221B58EB3595953EDAB4345B3F5E29CB9C4DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:d0:42:da:83:7c:e1:85:59:31:d0:e0:8c:f9:
                    ef:8d:25:20:27:16:1c:1c:a8:3c:5d:83:43:64:74:
                    ef:bb:0b:46:83:53:d0:3b:36:92:c5:11:1d:74:e0:
                    94:83:1a:e0:bd:e9:af:22:77:dd:30:33:8a:c9:d0:
                    70:a4:8d:f3:6e:88:b2:45:5f:5d:b2:25:e8:f1:25:
                    e9:3d:46:23:10:5f:c2:5a:1d:99:3b:c4:98:0a:05:
                    7b:85:98:b7:51:7d:77:13:8e:b1:30:7b:61:41:b8:
                    df:a4:37:6c:1b:fd:30:f6:f2:eb:1f:40:c3:d5:b6:
                    3c:d2:18:07:a4:70:a4:d4:17:dc:b9:58:d2:bb:31:
                    9a:27:eb:19:fd:6d:20:06:40:bb:6b:7c:9d:9f:3f:
                    ef:3a:5d:51:76:3d:70:9b:83:23:93:71:a6:7e:46:
                    57:33:18:1a:79:8f:c4:4d:40:36:2c:25:96:65:43:
                    32:0d:39:55:f4:98:bd:95:f1:10:65:06:d6:bf:23:
                    91:27:be:ba:cc:8e:ff:ac:b2:6f:fd:d1:85:40:a5:
                    64:92:4e:94:fb:4e:aa:c7:ce:01:bf:7c:ff:b5:f6:
                    8e:56:92:9f:76:0b:00:79:99:49:1d:d4:41:68:0b:
                    4e:4e:9e:65:99:bf:25:0d:87:fe:b2:58:9b:e4:0f:
                    5b:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:92:21:B5:8E:B3:59:59:53:ED:AB:43:45:B3:F5:E2:9C:B9:C4:DD
            X509v3 Authority Key Identifier:
                keyid:3D:60:8F:1A:58:C3:67:A7:8F:93:ED:CE:F6:DA:6E:AC:D0:69:20:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/323830333a6630303a3439623a3a2f34382d3438203d3e20323632313832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f00:49b::/48

    Signature Algorithm: sha256WithRSAEncryption
         af:d1:90:5b:2f:fe:43:85:ce:9b:83:d3:63:82:1c:02:7b:9c:
         d5:62:7e:6f:ea:29:45:eb:5c:b0:1a:61:b4:a8:5f:ae:2a:e7:
         1b:2e:66:38:a5:35:0f:ec:f2:89:ea:e1:cb:92:f5:77:aa:f0:
         00:a2:f5:0c:3d:1a:a6:22:ee:e0:79:df:74:65:a6:43:3f:83:
         ba:38:24:5a:22:65:13:04:72:ff:27:b4:42:50:d0:7a:d1:4d:
         05:d1:cb:fe:0c:69:7b:6b:83:ff:33:a2:1c:97:c2:93:fb:67:
         3a:08:8e:fc:ff:1d:cb:a7:e2:ba:c7:6a:32:3e:e2:94:0b:69:
         f4:cf:55:ac:0c:ea:8d:86:d9:71:bc:d3:3c:e4:00:a6:5f:83:
         36:69:a8:5c:c6:05:00:62:e9:4e:47:f9:5e:27:db:df:4b:47:
         af:ff:03:07:a0:89:65:4a:fa:f5:25:fd:1b:6d:ee:52:83:cb:
         39:47:26:15:17:fa:46:25:57:2d:92:fe:1f:06:e1:10:c7:36:
         4d:5c:7e:1f:58:aa:7e:a7:52:d7:56:f0:16:24:82:00:e0:8d:
         27:5c:d4:db:c8:90:bd:94:6f:8d:93:aa:0e:87:94:6c:ca:26:
         2f:8d:cd:b8:9b:f5:79:20:fd:ae:22:51:6b:8e:d1:46:05:94:
         79:e5:40:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 22:18:33 2025 by rpki-client