Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5178255AB399D1DA538AD2E09B31292FFBBF4DA76656D398ECBBEE0FCBEF09DE/0/323830333a326335303a3a2f33322d3336203d3e20323733313432.roa
File:                     323830333a326335303a3a2f33322d3336203d3e20323733313432.roa (raw, json)
Hash identifier:          NhMyGidxhb9E04fdS0Z+PiN2H+kWPtrUwEm51v48mxk=
Subject key identifier:   9A:09:65:67:18:13:15:9F:87:D4:2A:CC:41:EC:F7:39:93:64:EE:0D
Certificate issuer:       /CN=41B8103DCE88DDDEADBAC30879C4A785F1517EE2
Certificate serial:       5FB78DF1EF3EC2EC4D43721B8695083154D750F6
Authority key identifier: 41:B8:10:3D:CE:88:DD:DE:AD:BA:C3:08:79:C4:A7:85:F1:51:7E:E2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/41B8103DCE88DDDEADBAC30879C4A785F1517EE2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5178255AB399D1DA538AD2E09B31292FFBBF4DA76656D398ECBBEE0FCBEF09DE/0/323830333a326335303a3a2f33322d3336203d3e20323733313432.roa
Signing time:             Tue 04 Feb 2025 19:56:38 +0000
ROA not before:           Tue 04 Feb 2025 19:51:38 +0000
ROA not after:            Tue 03 Feb 2026 19:56:38 +0000
asID:                     273142
IP address blocks:        2803:2c50::/32 maxlen: 36
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5178255AB399D1DA538AD2E09B31292FFBBF4DA76656D398ECBBEE0FCBEF09DE/0/41B8103DCE88DDDEADBAC30879C4A785F1517EE2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5178255AB399D1DA538AD2E09B31292FFBBF4DA76656D398ECBBEE0FCBEF09DE/0/41B8103DCE88DDDEADBAC30879C4A785F1517EE2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/41B8103DCE88DDDEADBAC30879C4A785F1517EE2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:b7:8d:f1:ef:3e:c2:ec:4d:43:72:1b:86:95:08:31:54:d7:50:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41B8103DCE88DDDEADBAC30879C4A785F1517EE2
        Validity
            Not Before: Feb  4 19:51:38 2025 GMT
            Not After : Feb  3 19:56:38 2026 GMT
        Subject: CN=9A0965671813159F87D42ACC41ECF7399364EE0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:44:55:3b:8b:84:8f:4f:f1:03:27:1a:c4:9e:
                    48:af:11:ff:84:8d:60:8e:84:32:4a:f6:01:41:39:
                    fe:e3:44:03:e9:2c:28:99:98:35:3f:48:6b:82:d8:
                    42:9c:4d:0e:dc:4f:c9:de:e1:ef:5e:16:02:89:02:
                    96:94:c3:5b:07:c6:e6:b8:37:03:95:05:6b:fa:80:
                    ed:3b:b1:db:ab:d6:99:4e:c8:cf:57:99:09:e1:aa:
                    be:2e:5e:78:63:95:df:eb:1b:f3:ad:b7:41:df:a7:
                    3c:c1:c1:09:b2:f4:d6:c7:7b:94:6f:65:78:0c:15:
                    8b:ef:0d:26:e5:00:4d:a1:43:64:d6:19:ee:3b:61:
                    02:91:03:cc:07:aa:7d:99:dc:43:11:5b:6e:99:ef:
                    61:dd:70:f4:71:6d:20:d8:2b:50:bf:12:78:bc:0f:
                    cf:9c:90:ef:f5:c2:26:de:1b:a1:42:35:03:17:21:
                    bc:f3:83:5c:88:5c:1b:0a:a2:47:90:58:06:1c:74:
                    b0:fe:0f:7c:d0:58:b8:78:8f:e5:c8:ac:61:60:2f:
                    f3:f9:26:68:f4:ae:4a:18:46:89:12:3f:f9:11:cb:
                    fd:88:15:d1:e4:9c:69:92:c9:91:29:45:30:6e:d6:
                    91:fe:a3:a8:2b:eb:ad:0d:4b:54:0c:17:a9:df:df:
                    2c:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:09:65:67:18:13:15:9F:87:D4:2A:CC:41:EC:F7:39:93:64:EE:0D
            X509v3 Authority Key Identifier:
                keyid:41:B8:10:3D:CE:88:DD:DE:AD:BA:C3:08:79:C4:A7:85:F1:51:7E:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5178255AB399D1DA538AD2E09B31292FFBBF4DA76656D398ECBBEE0FCBEF09DE/0/41B8103DCE88DDDEADBAC30879C4A785F1517EE2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/41B8103DCE88DDDEADBAC30879C4A785F1517EE2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5178255AB399D1DA538AD2E09B31292FFBBF4DA76656D398ECBBEE0FCBEF09DE/0/323830333a326335303a3a2f33322d3336203d3e20323733313432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2c50::/32

    Signature Algorithm: sha256WithRSAEncryption
         3a:c1:13:f9:4b:0c:7c:f6:75:cf:37:2a:1f:ff:40:12:0d:9c:
         83:8a:af:00:84:41:ff:7a:4e:2d:8d:00:53:91:18:1f:84:14:
         d9:be:8a:7d:cc:93:a2:12:99:48:16:00:b1:07:e4:2c:7a:72:
         ef:89:1a:8d:29:d3:3f:91:f9:41:e6:c5:09:e3:63:bc:c7:dd:
         8a:05:68:c4:74:35:6f:65:20:b7:c1:d2:24:a2:22:ad:55:a3:
         ff:08:5b:1f:5f:d1:c6:db:d2:57:6b:65:79:a2:2f:a3:4d:49:
         f9:f5:97:5b:ac:68:4d:4f:19:d7:54:2f:49:99:87:9b:4e:6a:
         08:4b:67:3c:c9:1d:f4:93:d4:bb:f2:ef:f0:c5:35:7f:46:73:
         16:9d:b9:24:40:e0:fb:d7:e7:51:3d:34:64:27:fb:30:cc:56:
         d1:15:de:ba:21:a4:c6:1e:8a:6c:39:4d:7c:3b:10:f3:7b:5d:
         3d:ca:0e:fb:85:d3:c1:e0:7d:2d:61:15:b1:00:e3:a0:8e:25:
         ce:96:3e:b4:53:83:fc:5c:3c:ae:07:7a:b5:ba:77:b2:11:ef:
         98:97:4e:81:08:01:65:5f:fe:af:9b:17:ca:9d:7a:84:a7:b7:
         ea:be:b8:58:9e:52:91:4a:3c:39:cf:ee:25:87:7a:0b:15:30:
         1f:76:b2:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:14:16 2025 by rpki-client