Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5278F37F1642B64D1FD578A67CF9C30558AFFBFD91E92CA601F8DEA9CF4D183F/0/323830333a396231303a353a3a2f34382d3438203d3e20323732303832.roa
File:                     323830333a396231303a353a3a2f34382d3438203d3e20323732303832.roa (raw, json)
Hash identifier:          7U5g3WjgfvAaoi9vpqu9pTryf+xpu4s0JrsqHKGRcAs=
Subject key identifier:   04:A5:BA:45:27:20:18:23:0F:F9:00:BB:DE:86:E3:B0:AD:8F:31:BF
Certificate issuer:       /CN=2C415A98264D3E5779D52AFE687F01FA75663605
Certificate serial:       63A39D45BDA1BD8D17DD57A1C2D0F0C433E3E98D
Authority key identifier: 2C:41:5A:98:26:4D:3E:57:79:D5:2A:FE:68:7F:01:FA:75:66:36:05
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C415A98264D3E5779D52AFE687F01FA75663605.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5278F37F1642B64D1FD578A67CF9C30558AFFBFD91E92CA601F8DEA9CF4D183F/0/323830333a396231303a353a3a2f34382d3438203d3e20323732303832.roa
Signing time:             Tue 04 Feb 2025 18:44:00 +0000
ROA not before:           Tue 04 Feb 2025 18:39:00 +0000
ROA not after:            Tue 03 Feb 2026 18:44:00 +0000
asID:                     272082
IP address blocks:        2803:9b10:5::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5278F37F1642B64D1FD578A67CF9C30558AFFBFD91E92CA601F8DEA9CF4D183F/0/2C415A98264D3E5779D52AFE687F01FA75663605.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5278F37F1642B64D1FD578A67CF9C30558AFFBFD91E92CA601F8DEA9CF4D183F/0/2C415A98264D3E5779D52AFE687F01FA75663605.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C415A98264D3E5779D52AFE687F01FA75663605.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:a3:9d:45:bd:a1:bd:8d:17:dd:57:a1:c2:d0:f0:c4:33:e3:e9:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C415A98264D3E5779D52AFE687F01FA75663605
        Validity
            Not Before: Feb  4 18:39:00 2025 GMT
            Not After : Feb  3 18:44:00 2026 GMT
        Subject: CN=04A5BA45272018230FF900BBDE86E3B0AD8F31BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:8e:2f:40:88:31:76:3f:47:80:e3:86:76:ee:
                    4b:b3:47:9a:e7:cc:48:e1:38:43:4b:8b:4a:f7:0e:
                    bd:96:cc:9a:cf:2b:51:a2:93:2c:47:1a:9a:e4:21:
                    ac:c1:95:21:a4:95:1c:4d:88:1e:c4:a0:43:b7:0b:
                    90:91:f1:84:09:e9:74:be:23:ec:a7:ac:9b:ca:3f:
                    8f:30:b4:b2:0e:89:d6:17:49:d3:82:28:02:16:cf:
                    37:17:40:01:03:22:db:0f:a5:c9:4d:f1:54:76:c6:
                    11:0f:67:32:81:3f:e3:0c:18:d3:bd:96:02:96:c5:
                    7e:40:d6:cd:d3:2e:c4:25:b0:b5:44:0d:50:a6:6e:
                    1b:71:fb:ca:a2:2c:1a:e0:8c:f2:7e:85:88:bc:9c:
                    04:2c:47:da:76:e2:5f:bc:f6:bc:aa:2d:0e:ed:fa:
                    29:ad:6b:99:5b:3f:0d:66:0c:70:2d:79:25:dd:c5:
                    d4:4b:b1:89:83:73:40:1f:d3:12:ac:8e:f5:a4:ac:
                    cd:20:e3:4f:ae:54:52:c4:b5:58:83:e5:89:fc:10:
                    81:2d:09:93:43:51:02:83:74:0d:9f:5c:95:ca:68:
                    d9:4b:ae:94:d1:a0:3d:29:58:7a:e4:64:8f:04:07:
                    1d:31:84:1e:17:be:98:29:26:90:cc:80:33:98:30:
                    e8:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:A5:BA:45:27:20:18:23:0F:F9:00:BB:DE:86:E3:B0:AD:8F:31:BF
            X509v3 Authority Key Identifier:
                keyid:2C:41:5A:98:26:4D:3E:57:79:D5:2A:FE:68:7F:01:FA:75:66:36:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5278F37F1642B64D1FD578A67CF9C30558AFFBFD91E92CA601F8DEA9CF4D183F/0/2C415A98264D3E5779D52AFE687F01FA75663605.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C415A98264D3E5779D52AFE687F01FA75663605.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5278F37F1642B64D1FD578A67CF9C30558AFFBFD91E92CA601F8DEA9CF4D183F/0/323830333a396231303a353a3a2f34382d3438203d3e20323732303832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9b10:5::/48

    Signature Algorithm: sha256WithRSAEncryption
         7b:8e:b5:60:e4:f1:fc:ba:55:dd:13:7a:72:22:87:ec:34:fe:
         a0:73:65:a4:bf:f6:82:ef:68:a5:b1:3c:1f:56:20:6a:e2:82:
         24:b3:62:18:d9:06:ba:03:a7:2b:1d:92:e3:af:c9:48:c3:e8:
         57:0e:59:58:3a:c7:71:73:76:99:e9:bb:10:b9:ad:0d:20:a7:
         cc:75:ac:6b:40:97:8a:cd:de:ef:21:91:27:57:35:27:ef:24:
         1a:8d:e9:66:bc:f4:6c:3a:6a:fc:99:cd:6e:17:49:a0:b0:44:
         cf:5a:a2:7a:e5:5f:cc:0e:50:22:2d:19:90:28:aa:f2:4e:1d:
         4c:9f:93:51:cc:31:fc:15:b2:b3:76:89:7f:21:a2:08:2d:af:
         8a:18:cb:1b:d5:89:1f:18:72:38:32:8f:c6:af:f0:5e:c0:52:
         2e:f7:d9:2c:24:2d:de:71:80:a5:2c:39:f3:5b:db:54:a9:a9:
         9b:b0:74:3f:1f:61:3f:23:0e:db:2e:44:0d:27:a5:d8:1f:6c:
         a0:ec:8a:d0:1f:91:75:23:39:27:af:06:7b:44:c8:68:22:c7:
         77:e8:d5:6a:e6:78:8d:0b:36:c6:cb:c1:fe:cc:6e:ee:bd:87:
         2c:ee:ee:4b:ec:3b:79:e5:97:55:7f:d9:3c:7f:9f:68:75:59:
         82:59:cd:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:54:31 2025 by rpki-client