Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5278F37F1642B64D1FD578A67CF9C30558AFFBFD91E92CA601F8DEA9CF4D183F/0/323830333a396231303a333a3a2f34382d3438203d3e20323732303832.roa
File:                     323830333a396231303a333a3a2f34382d3438203d3e20323732303832.roa (raw, json)
Hash identifier:          +3kWzedoQo5josinnCaSa+30SYgwAmAmEzCQxSpFhDc=
Subject key identifier:   90:E5:6E:74:6E:14:B1:F6:F7:1E:DE:12:17:0A:6E:B4:75:9B:94:DD
Certificate issuer:       /CN=2C415A98264D3E5779D52AFE687F01FA75663605
Certificate serial:       65B6CD0FE947EFD058863855950C71DCA0B57A68
Authority key identifier: 2C:41:5A:98:26:4D:3E:57:79:D5:2A:FE:68:7F:01:FA:75:66:36:05
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C415A98264D3E5779D52AFE687F01FA75663605.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5278F37F1642B64D1FD578A67CF9C30558AFFBFD91E92CA601F8DEA9CF4D183F/0/323830333a396231303a333a3a2f34382d3438203d3e20323732303832.roa
Signing time:             Tue 04 Feb 2025 18:44:02 +0000
ROA not before:           Tue 04 Feb 2025 18:39:02 +0000
ROA not after:            Tue 03 Feb 2026 18:44:02 +0000
asID:                     272082
IP address blocks:        2803:9b10:3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5278F37F1642B64D1FD578A67CF9C30558AFFBFD91E92CA601F8DEA9CF4D183F/0/2C415A98264D3E5779D52AFE687F01FA75663605.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5278F37F1642B64D1FD578A67CF9C30558AFFBFD91E92CA601F8DEA9CF4D183F/0/2C415A98264D3E5779D52AFE687F01FA75663605.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C415A98264D3E5779D52AFE687F01FA75663605.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 17 Apr 2025 20:30:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:b6:cd:0f:e9:47:ef:d0:58:86:38:55:95:0c:71:dc:a0:b5:7a:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C415A98264D3E5779D52AFE687F01FA75663605
        Validity
            Not Before: Feb  4 18:39:02 2025 GMT
            Not After : Feb  3 18:44:02 2026 GMT
        Subject: CN=90E56E746E14B1F6F71EDE12170A6EB4759B94DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:86:57:c0:d3:bf:68:d3:c8:e3:f2:9b:90:9e:
                    f7:57:50:4a:b9:2b:fb:94:24:82:d6:15:e7:74:bd:
                    c0:cf:9b:4f:2a:f3:e6:9d:ec:81:e6:b2:92:f6:a7:
                    42:42:f7:29:ca:5e:ed:e5:6a:a1:84:fb:ff:9c:9a:
                    07:0b:7c:63:33:a3:78:5b:b7:47:3a:0c:fd:13:99:
                    5a:ed:d6:ca:d8:26:93:e9:a8:37:55:12:0e:25:a9:
                    5c:2c:fa:c5:36:7a:f0:98:1b:fd:85:ac:79:e8:bb:
                    ad:51:c6:a8:85:e9:ce:f7:d1:3f:26:46:b1:00:7d:
                    8a:58:f4:99:c4:db:2a:63:59:26:c7:a0:ec:08:04:
                    e2:18:96:4e:92:c6:f1:f9:1b:f7:0c:25:3f:42:e8:
                    d3:67:f6:19:7b:e4:53:d3:58:e4:84:36:56:6b:35:
                    26:1f:72:67:c8:76:9b:7c:b6:f1:03:bd:42:0f:32:
                    67:8b:5b:eb:1e:d5:44:b6:a8:8f:02:80:0c:3f:fc:
                    41:ae:be:ec:4a:cc:4f:e5:42:b2:f4:29:49:f2:d1:
                    11:39:15:3c:99:0d:7b:14:57:f2:77:58:fb:00:e1:
                    01:79:04:74:8b:8a:f4:5e:74:33:c3:c8:9b:4d:2c:
                    86:59:51:0a:0f:bc:8b:2e:a8:61:c8:dd:87:97:bb:
                    e3:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:E5:6E:74:6E:14:B1:F6:F7:1E:DE:12:17:0A:6E:B4:75:9B:94:DD
            X509v3 Authority Key Identifier:
                keyid:2C:41:5A:98:26:4D:3E:57:79:D5:2A:FE:68:7F:01:FA:75:66:36:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5278F37F1642B64D1FD578A67CF9C30558AFFBFD91E92CA601F8DEA9CF4D183F/0/2C415A98264D3E5779D52AFE687F01FA75663605.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C415A98264D3E5779D52AFE687F01FA75663605.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5278F37F1642B64D1FD578A67CF9C30558AFFBFD91E92CA601F8DEA9CF4D183F/0/323830333a396231303a333a3a2f34382d3438203d3e20323732303832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9b10:3::/48

    Signature Algorithm: sha256WithRSAEncryption
         7d:54:c7:93:a8:92:70:bf:10:bb:52:a3:9e:e6:7c:53:45:b7:
         d6:d9:47:69:56:bf:4a:31:70:3b:34:11:00:44:d4:14:05:0b:
         89:19:30:41:f2:77:a3:6c:33:a1:e2:a2:92:84:f6:1f:07:ff:
         24:d9:0a:74:de:d1:71:5a:ae:c2:b1:dc:ac:85:af:d3:82:75:
         46:18:78:ab:6d:6d:86:e0:3f:5c:a4:63:19:38:c0:a0:2b:b8:
         c9:c6:12:ce:dd:7b:0d:30:ee:bb:d5:6b:37:d0:9e:07:b3:54:
         25:12:c2:35:bf:74:02:7e:ca:e7:1f:1a:7e:9d:ba:26:03:fa:
         10:f2:14:3a:82:05:de:89:7e:37:31:12:5b:9e:d3:2b:84:c5:
         0a:a7:ac:e5:33:1b:e7:28:ae:ec:74:65:2d:fa:54:df:de:aa:
         45:78:0a:72:8b:78:ef:27:76:c3:ca:0c:3d:35:e6:8a:7a:83:
         b1:0c:20:60:09:f5:3f:68:d4:32:79:c6:6e:df:ef:0e:45:df:
         e9:c1:bb:e0:73:1d:1c:89:f3:a0:0c:57:2b:8c:94:7d:1a:70:
         bb:94:54:91:8f:bd:d0:f5:1c:78:49:b9:ef:59:73:73:72:31:
         d3:a0:71:34:a0:56:df:90:54:2c:1f:5a:e9:d8:b0:75:d8:88:
         18:91:50:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 12:19:59 2025 by rpki-client