Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5208EA4E8F019B8A55E7B5D3B5675FB5C0B070440DED2C5E9F74CB49F979D48F/0/323830333a343739303a3a2f33322d3438203d3e20323733303537.roa
File:                     323830333a343739303a3a2f33322d3438203d3e20323733303537.roa (raw, json)
Hash identifier:          Kprp8xVzqV358lImenXYYz4rcfhAIKTSVRrHkzLfvXQ=
Subject key identifier:   74:47:1D:69:59:BE:31:59:2A:2C:3B:AE:2E:5A:6F:58:68:7A:60:23
Certificate issuer:       /CN=72B53BA6E0BEF80076D9A16F66DA927965BC5585
Certificate serial:       790A6138E0FA584C3BF12B8993E1ABB9B359A609
Authority key identifier: 72:B5:3B:A6:E0:BE:F8:00:76:D9:A1:6F:66:DA:92:79:65:BC:55:85
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/72B53BA6E0BEF80076D9A16F66DA927965BC5585.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5208EA4E8F019B8A55E7B5D3B5675FB5C0B070440DED2C5E9F74CB49F979D48F/0/323830333a343739303a3a2f33322d3438203d3e20323733303537.roa
Signing time:             Wed 18 Dec 2024 15:00:00 +0000
ROA not before:           Wed 18 Dec 2024 14:55:00 +0000
ROA not after:            Wed 17 Dec 2025 15:00:00 +0000
asID:                     273057
IP address blocks:        2803:4790::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5208EA4E8F019B8A55E7B5D3B5675FB5C0B070440DED2C5E9F74CB49F979D48F/0/72B53BA6E0BEF80076D9A16F66DA927965BC5585.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5208EA4E8F019B8A55E7B5D3B5675FB5C0B070440DED2C5E9F74CB49F979D48F/0/72B53BA6E0BEF80076D9A16F66DA927965BC5585.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/72B53BA6E0BEF80076D9A16F66DA927965BC5585.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 08 Feb 2025 19:39:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:0a:61:38:e0:fa:58:4c:3b:f1:2b:89:93:e1:ab:b9:b3:59:a6:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72B53BA6E0BEF80076D9A16F66DA927965BC5585
        Validity
            Not Before: Dec 18 14:55:00 2024 GMT
            Not After : Dec 17 15:00:00 2025 GMT
        Subject: CN=74471D6959BE31592A2C3BAE2E5A6F58687A6023
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:6c:ff:20:5e:3f:d1:a6:de:b5:4c:cf:c1:2c:
                    1e:62:32:02:39:52:e6:3f:13:5e:69:c8:59:35:3e:
                    db:4c:2f:6d:0c:14:3d:b0:c6:c3:69:ae:8f:ce:92:
                    2e:d8:09:33:7b:97:16:c7:07:bb:c0:97:02:ee:8e:
                    d4:ee:eb:b4:fc:a0:d6:56:5b:8a:25:0d:a4:82:27:
                    e5:95:a7:bd:80:a8:df:10:5b:df:03:d0:a0:de:75:
                    53:f3:40:d0:65:9d:26:e0:65:ce:5d:5e:46:a3:46:
                    72:be:ea:79:ed:87:bd:7d:34:02:81:09:bd:e8:01:
                    6c:50:84:2c:d2:38:3d:60:80:cb:39:1a:30:8f:27:
                    f4:d2:d7:a7:4c:d9:79:55:69:72:0d:12:2e:dc:a2:
                    35:fc:83:0a:95:69:6f:80:7d:5b:62:6c:44:9b:85:
                    70:c5:10:bc:aa:f6:91:5c:eb:15:e3:7a:71:c5:da:
                    72:82:33:7e:d2:5f:d5:85:4d:38:c0:b9:02:79:8a:
                    22:41:63:9b:dc:44:f0:fa:9d:fb:46:8d:c0:ca:c7:
                    63:e8:c5:2f:93:1f:58:92:0d:2a:5d:04:65:98:4b:
                    c3:2d:1b:ab:c8:e5:59:e8:1d:42:55:4c:c9:7c:e0:
                    9b:75:97:bd:72:b5:cd:54:be:31:f0:57:77:be:1b:
                    35:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:47:1D:69:59:BE:31:59:2A:2C:3B:AE:2E:5A:6F:58:68:7A:60:23
            X509v3 Authority Key Identifier:
                keyid:72:B5:3B:A6:E0:BE:F8:00:76:D9:A1:6F:66:DA:92:79:65:BC:55:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5208EA4E8F019B8A55E7B5D3B5675FB5C0B070440DED2C5E9F74CB49F979D48F/0/72B53BA6E0BEF80076D9A16F66DA927965BC5585.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/72B53BA6E0BEF80076D9A16F66DA927965BC5585.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5208EA4E8F019B8A55E7B5D3B5675FB5C0B070440DED2C5E9F74CB49F979D48F/0/323830333a343739303a3a2f33322d3438203d3e20323733303537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4790::/32

    Signature Algorithm: sha256WithRSAEncryption
         28:e9:fe:71:50:15:3a:65:f8:49:6d:e2:f1:c5:b3:c7:e2:28:
         ab:f8:f0:dd:5c:d7:42:3d:18:49:31:c0:36:3f:64:e6:67:ad:
         ac:9d:b0:c9:c4:b3:72:40:35:3e:8c:5b:bd:cd:af:0e:c1:01:
         03:f7:35:1f:bf:d4:31:94:4b:28:06:b8:e0:52:ea:98:9e:3d:
         30:af:69:ae:62:30:ca:6e:1d:d9:37:26:20:21:eb:cd:67:1b:
         f1:52:2e:76:f9:37:57:78:ef:3b:c4:d7:b6:d0:6c:9f:bc:b1:
         2c:97:b8:21:e4:d5:ee:74:57:ba:f8:f1:e1:62:c1:ae:3e:98:
         90:dc:9d:6e:b5:c2:be:89:cc:17:c8:33:4d:e0:9d:10:78:86:
         09:fd:b1:3e:93:08:12:cd:96:9d:ae:ae:ef:4b:5d:eb:02:c6:
         71:11:6b:8e:72:98:c9:ab:78:4d:26:75:71:9c:b1:af:95:e2:
         b5:0e:78:e1:bf:44:15:02:eb:9d:c7:0c:9c:37:52:0a:fa:db:
         5b:56:a6:6b:d8:dc:3a:37:7f:08:fa:f3:96:1f:c9:d1:f4:19:
         f2:7a:2e:f6:21:5c:69:f1:21:23:81:19:e1:3a:aa:27:8a:49:
         15:b5:a6:af:e7:28:39:6f:bd:d8:ce:d1:ef:39:16:d8:d3:67:
         10:fe:46:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 08:38:07 2025 by rpki-client