Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5278F37F1642B64D1FD578A67CF9C30558AFFBFD91E92CA601F8DEA9CF4D183F/0/323830333a396231303a313a3a2f34382d3438203d3e20323732303832.roa
File:                     323830333a396231303a313a3a2f34382d3438203d3e20323732303832.roa (raw, json)
Hash identifier:          IPjMwJQFJz6AiayOi4yu44DS7ZyzU9d1Fl9i68z5DTw=
Subject key identifier:   ED:66:B0:6D:24:92:B3:F0:F4:2F:DA:3F:C7:B3:41:D6:9D:BD:14:C6
Certificate issuer:       /CN=2C415A98264D3E5779D52AFE687F01FA75663605
Certificate serial:       79AD909862BAA9DEC17E204B9D9738DE08920C57
Authority key identifier: 2C:41:5A:98:26:4D:3E:57:79:D5:2A:FE:68:7F:01:FA:75:66:36:05
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C415A98264D3E5779D52AFE687F01FA75663605.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5278F37F1642B64D1FD578A67CF9C30558AFFBFD91E92CA601F8DEA9CF4D183F/0/323830333a396231303a313a3a2f34382d3438203d3e20323732303832.roa
Signing time:             Tue 04 Feb 2025 18:44:01 +0000
ROA not before:           Tue 04 Feb 2025 18:39:01 +0000
ROA not after:            Tue 03 Feb 2026 18:44:01 +0000
asID:                     272082
IP address blocks:        2803:9b10:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5278F37F1642B64D1FD578A67CF9C30558AFFBFD91E92CA601F8DEA9CF4D183F/0/2C415A98264D3E5779D52AFE687F01FA75663605.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5278F37F1642B64D1FD578A67CF9C30558AFFBFD91E92CA601F8DEA9CF4D183F/0/2C415A98264D3E5779D52AFE687F01FA75663605.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C415A98264D3E5779D52AFE687F01FA75663605.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 04:49:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:ad:90:98:62:ba:a9:de:c1:7e:20:4b:9d:97:38:de:08:92:0c:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C415A98264D3E5779D52AFE687F01FA75663605
        Validity
            Not Before: Feb  4 18:39:01 2025 GMT
            Not After : Feb  3 18:44:01 2026 GMT
        Subject: CN=ED66B06D2492B3F0F42FDA3FC7B341D69DBD14C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:19:22:01:22:35:4a:59:da:f3:a4:fd:75:50:
                    cb:01:9b:83:a8:f0:ca:36:ff:36:02:61:6f:ac:2d:
                    cf:9c:23:27:af:ad:05:2e:23:8b:8f:49:28:fb:65:
                    fd:b6:d7:7d:c8:c7:f1:c9:2e:eb:e2:72:32:2f:de:
                    42:a8:f6:47:0a:d7:ca:da:17:bf:a0:a1:ee:8c:d9:
                    df:cb:7b:28:87:1e:83:95:ef:b4:87:d5:f0:b5:73:
                    45:99:26:ea:5c:37:13:d0:fe:f8:96:2e:ec:cf:53:
                    37:ce:53:55:04:46:58:e6:11:c2:7c:18:c4:03:8e:
                    c1:2e:9e:9d:5a:a7:57:f9:65:57:ba:72:92:73:1a:
                    84:00:59:6f:3d:af:06:d8:da:8c:3c:a8:71:c0:0d:
                    9f:c1:f3:52:39:87:79:00:51:f5:ff:07:9d:ad:98:
                    e2:18:bf:02:12:9a:95:46:73:c8:90:9c:81:3d:db:
                    4c:55:b0:ec:53:ca:82:b2:a0:2a:a3:55:fd:df:5f:
                    2f:5b:d7:4f:8b:28:dd:25:65:58:8d:b4:d4:b1:a8:
                    5e:d7:9e:d4:68:80:7c:3f:23:b3:bc:18:4c:b1:dd:
                    cb:10:6e:50:0e:d8:c3:bc:08:08:25:59:94:1b:25:
                    34:07:00:4c:78:95:0b:ae:83:1e:0b:16:ed:a4:34:
                    62:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:66:B0:6D:24:92:B3:F0:F4:2F:DA:3F:C7:B3:41:D6:9D:BD:14:C6
            X509v3 Authority Key Identifier:
                keyid:2C:41:5A:98:26:4D:3E:57:79:D5:2A:FE:68:7F:01:FA:75:66:36:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5278F37F1642B64D1FD578A67CF9C30558AFFBFD91E92CA601F8DEA9CF4D183F/0/2C415A98264D3E5779D52AFE687F01FA75663605.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C415A98264D3E5779D52AFE687F01FA75663605.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5278F37F1642B64D1FD578A67CF9C30558AFFBFD91E92CA601F8DEA9CF4D183F/0/323830333a396231303a313a3a2f34382d3438203d3e20323732303832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9b10:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         04:48:8b:8b:ca:f1:8f:12:85:37:62:81:fe:89:29:c6:3f:48:
         e2:72:5e:86:6a:b2:27:06:06:57:6b:b7:73:ec:f4:82:ac:92:
         49:cd:57:22:2c:a6:7f:3b:d3:65:fc:13:8f:bf:e3:33:a5:41:
         cc:a1:24:b4:8c:0c:35:27:e6:62:29:3e:9e:74:ff:90:f9:fd:
         c2:5e:22:e1:ca:bc:74:ed:82:12:a4:4d:12:47:ad:7d:b5:1f:
         07:7a:b7:f9:58:86:c9:f1:ac:c6:c7:bf:32:ac:a8:23:5e:99:
         40:9c:b4:c3:4c:6d:c8:e1:fd:75:02:70:41:11:95:b2:29:e7:
         a6:b0:40:3d:68:5b:19:1e:1e:42:93:c6:fb:ee:8f:aa:07:8e:
         ce:d3:e6:01:eb:aa:2c:16:90:5b:21:40:ff:79:43:52:4f:f9:
         0c:79:10:16:a9:85:29:a3:b3:88:98:fa:90:ea:2e:64:17:8e:
         03:63:5b:c3:f0:6c:2f:6f:97:e7:5d:fb:28:cc:a5:07:45:31:
         c8:a0:12:71:45:25:4f:b8:2a:91:13:df:b1:f0:9c:a1:19:22:
         ec:82:af:28:b8:a0:e6:47:d5:be:d1:5a:6b:01:7c:e0:fb:29:
         3b:86:e4:e6:e5:a1:08:aa:d0:91:7b:a1:c0:a0:46:67:23:3d:
         63:f6:25:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 18:43:54 2025 by rpki-client