Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5278F37F1642B64D1FD578A67CF9C30558AFFBFD91E92CA601F8DEA9CF4D183F/0/323830333a396231303a613a3a2f34382d3438203d3e20323732303832.roa
File:                     323830333a396231303a613a3a2f34382d3438203d3e20323732303832.roa (raw, json)
Hash identifier:          s42H4qtAC9tN3O13GzpGh9BUS4x9TcRJpymfiXFmy/U=
Subject key identifier:   9B:66:D3:9D:71:6D:50:07:6F:8F:B5:B2:05:AF:47:DA:50:40:0D:4B
Certificate issuer:       /CN=2C415A98264D3E5779D52AFE687F01FA75663605
Certificate serial:       3CA24EBC0782B33B532C976070E3B19397063478
Authority key identifier: 2C:41:5A:98:26:4D:3E:57:79:D5:2A:FE:68:7F:01:FA:75:66:36:05
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C415A98264D3E5779D52AFE687F01FA75663605.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5278F37F1642B64D1FD578A67CF9C30558AFFBFD91E92CA601F8DEA9CF4D183F/0/323830333a396231303a613a3a2f34382d3438203d3e20323732303832.roa
Signing time:             Tue 04 Feb 2025 18:44:00 +0000
ROA not before:           Tue 04 Feb 2025 18:39:00 +0000
ROA not after:            Tue 03 Feb 2026 18:44:00 +0000
asID:                     272082
IP address blocks:        2803:9b10:a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5278F37F1642B64D1FD578A67CF9C30558AFFBFD91E92CA601F8DEA9CF4D183F/0/2C415A98264D3E5779D52AFE687F01FA75663605.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5278F37F1642B64D1FD578A67CF9C30558AFFBFD91E92CA601F8DEA9CF4D183F/0/2C415A98264D3E5779D52AFE687F01FA75663605.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C415A98264D3E5779D52AFE687F01FA75663605.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:a2:4e:bc:07:82:b3:3b:53:2c:97:60:70:e3:b1:93:97:06:34:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C415A98264D3E5779D52AFE687F01FA75663605
        Validity
            Not Before: Feb  4 18:39:00 2025 GMT
            Not After : Feb  3 18:44:00 2026 GMT
        Subject: CN=9B66D39D716D50076F8FB5B205AF47DA50400D4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:9f:66:bd:18:3f:b4:bc:42:8d:ba:22:da:3f:
                    76:e1:90:53:ac:c2:3f:58:1f:cf:ec:2e:a7:b7:39:
                    6f:06:68:d8:ee:07:7d:c6:ee:4c:fe:1e:ce:f9:4b:
                    56:05:ef:88:f0:70:a3:53:0d:62:34:58:f6:cf:a7:
                    38:d5:0e:7d:94:85:f7:9d:95:64:7f:ba:6e:7c:0a:
                    bc:db:38:22:e0:d5:b8:65:93:e2:2d:55:67:bb:a7:
                    b5:3b:c9:02:9e:a2:7e:fa:96:9c:96:f4:7a:e9:08:
                    23:27:20:3a:c8:5e:16:ac:44:f5:cb:d8:f7:de:b6:
                    23:2a:07:1e:95:99:8c:cf:1c:d3:f3:71:7e:8a:09:
                    7c:ba:6d:50:ba:f7:2b:b0:a4:64:dd:f2:fd:c6:67:
                    e1:a2:a4:85:d8:9f:eb:fa:b6:d8:71:0e:d8:31:ba:
                    72:ed:c3:4b:50:40:9f:98:ac:07:fc:9c:09:9d:72:
                    33:41:53:b4:0c:a5:f2:26:41:f6:3a:a0:b5:ab:92:
                    af:06:f1:ca:32:73:21:36:8b:3e:6b:9e:31:cb:23:
                    0a:84:86:5f:36:86:e8:6f:20:b8:29:26:46:7d:38:
                    76:fe:d8:01:9e:cc:54:05:76:bc:e3:7a:e9:5a:0b:
                    7a:2e:57:f4:bb:af:07:4e:a1:0d:87:c1:55:0f:d6:
                    f1:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:66:D3:9D:71:6D:50:07:6F:8F:B5:B2:05:AF:47:DA:50:40:0D:4B
            X509v3 Authority Key Identifier:
                keyid:2C:41:5A:98:26:4D:3E:57:79:D5:2A:FE:68:7F:01:FA:75:66:36:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5278F37F1642B64D1FD578A67CF9C30558AFFBFD91E92CA601F8DEA9CF4D183F/0/2C415A98264D3E5779D52AFE687F01FA75663605.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C415A98264D3E5779D52AFE687F01FA75663605.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5278F37F1642B64D1FD578A67CF9C30558AFFBFD91E92CA601F8DEA9CF4D183F/0/323830333a396231303a613a3a2f34382d3438203d3e20323732303832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9b10:a::/48

    Signature Algorithm: sha256WithRSAEncryption
         2a:56:6a:a5:df:eb:05:a3:34:d7:f1:8a:8b:0d:32:79:3d:5c:
         73:22:3f:c5:ae:3e:92:d4:dd:af:60:e0:9c:a0:26:9f:50:43:
         d3:86:f7:74:77:5a:57:4e:bd:ca:66:a9:ca:58:a0:30:d0:07:
         d2:7d:e4:8d:aa:e0:7f:7d:f1:a6:b6:8f:f1:26:09:12:d8:7e:
         74:8f:6c:29:9b:ac:0c:16:d8:23:ac:f6:8f:41:b3:9b:f7:bc:
         a7:da:33:d8:39:63:45:70:81:48:fa:9c:f3:6f:a8:86:95:8f:
         57:a3:e9:1e:4b:22:74:74:ee:47:49:b9:9f:3f:75:7e:47:1f:
         91:fd:e0:6d:4b:03:df:e7:a4:8b:8a:2b:bd:7e:b6:04:af:3f:
         0e:40:08:04:22:25:69:9f:64:57:41:97:af:4d:22:15:1a:8e:
         5e:a0:46:ab:12:2e:24:8f:4b:20:4e:f9:ac:cc:a8:9c:0d:a9:
         ab:89:6b:8a:3e:0e:60:92:11:9e:80:45:84:a4:ba:69:45:1d:
         7d:58:67:08:10:02:e1:c7:5b:c8:9c:34:5e:89:57:40:66:56:
         66:4c:9d:29:b1:e5:eb:58:53:13:25:23:8f:91:0c:d1:b0:2f:
         7d:94:a1:8c:ea:62:4c:75:b3:99:4f:89:12:c1:ae:d0:55:b0:
         ba:bd:ba:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:55:42 2025 by rpki-client