Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/542E757E31F446C1586E3282CD56FD78A4E72ADDDC1B7F948ACB12604420A539/0/323830333a393931303a3a2f33322d3333203d3e203634313335.roa
File:                     323830333a393931303a3a2f33322d3333203d3e203634313335.roa (raw, json)
Hash identifier:          rpSSpWyLRA9wrf1t+O3i9EYR9P/VRH1I0GekWt0GpQ4=
Subject key identifier:   4E:BB:11:57:09:ED:D8:B7:5C:B6:2E:15:C1:51:F3:DB:43:36:EC:12
Certificate issuer:       /CN=08C48F0EB922B5862C93AA1420F66615674E8BA1
Certificate serial:       2DDEA89E3E8D4B7BAF2EC19C095EE4E8ACB27B
Authority key identifier: 08:C4:8F:0E:B9:22:B5:86:2C:93:AA:14:20:F6:66:15:67:4E:8B:A1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08C48F0EB922B5862C93AA1420F66615674E8BA1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/542E757E31F446C1586E3282CD56FD78A4E72ADDDC1B7F948ACB12604420A539/0/323830333a393931303a3a2f33322d3333203d3e203634313335.roa
Signing time:             Tue 04 Feb 2025 18:24:13 +0000
ROA not before:           Tue 04 Feb 2025 18:19:13 +0000
ROA not after:            Tue 03 Feb 2026 18:24:13 +0000
asID:                     64135
IP address blocks:        2803:9910::/32 maxlen: 33
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/542E757E31F446C1586E3282CD56FD78A4E72ADDDC1B7F948ACB12604420A539/0/08C48F0EB922B5862C93AA1420F66615674E8BA1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/542E757E31F446C1586E3282CD56FD78A4E72ADDDC1B7F948ACB12604420A539/0/08C48F0EB922B5862C93AA1420F66615674E8BA1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08C48F0EB922B5862C93AA1420F66615674E8BA1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 20:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:de:a8:9e:3e:8d:4b:7b:af:2e:c1:9c:09:5e:e4:e8:ac:b2:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08C48F0EB922B5862C93AA1420F66615674E8BA1
        Validity
            Not Before: Feb  4 18:19:13 2025 GMT
            Not After : Feb  3 18:24:13 2026 GMT
        Subject: CN=4EBB115709EDD8B75CB62E15C151F3DB4336EC12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:70:55:15:9a:51:d2:2a:68:fe:94:d9:a5:e2:
                    14:f2:b9:c0:00:e8:e0:1c:ad:36:02:7b:ae:23:e6:
                    71:c9:fe:fa:29:a9:5b:a2:2e:b8:52:85:a2:04:33:
                    2d:df:68:c6:43:92:4f:47:66:15:76:b2:77:06:91:
                    7f:fe:5d:cb:b4:d8:16:07:04:cd:b7:ea:4b:65:9e:
                    51:52:68:62:92:8e:7a:ea:47:0a:d2:72:05:d3:cf:
                    8f:db:57:f5:dc:ad:97:29:63:df:24:7d:d5:aa:5c:
                    e9:c1:42:5a:2f:2c:fa:6c:6e:32:ee:ea:9e:87:ac:
                    7e:01:6c:e0:9e:a7:68:88:28:7b:11:67:46:d6:42:
                    1a:e4:07:56:87:e5:9d:f8:5c:b0:ce:e3:41:b5:05:
                    9b:d6:56:4c:69:63:85:37:2a:50:09:1c:3f:14:56:
                    00:41:db:a9:10:00:4f:af:94:9c:b5:60:c0:f7:af:
                    65:1d:37:7f:60:b4:f3:e5:97:1c:a8:df:0e:e6:0e:
                    f5:fb:5e:e0:7c:d1:84:ef:25:fd:67:d2:a5:84:a8:
                    0f:77:ec:c3:a1:da:5f:31:86:2c:94:5c:30:f9:b9:
                    7b:54:dd:c6:72:52:77:65:e2:6f:60:5a:16:fe:c1:
                    86:3e:89:b8:81:e4:26:fa:5e:8a:46:74:bf:28:4f:
                    ad:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:BB:11:57:09:ED:D8:B7:5C:B6:2E:15:C1:51:F3:DB:43:36:EC:12
            X509v3 Authority Key Identifier:
                keyid:08:C4:8F:0E:B9:22:B5:86:2C:93:AA:14:20:F6:66:15:67:4E:8B:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/542E757E31F446C1586E3282CD56FD78A4E72ADDDC1B7F948ACB12604420A539/0/08C48F0EB922B5862C93AA1420F66615674E8BA1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08C48F0EB922B5862C93AA1420F66615674E8BA1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/542E757E31F446C1586E3282CD56FD78A4E72ADDDC1B7F948ACB12604420A539/0/323830333a393931303a3a2f33322d3333203d3e203634313335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9910::/32

    Signature Algorithm: sha256WithRSAEncryption
         2c:86:27:b6:9c:f7:89:53:9c:aa:18:a2:32:f1:63:e4:a0:ea:
         0a:8d:1e:52:2c:10:5f:45:33:9c:0f:09:b7:c7:ee:05:72:41:
         fb:af:81:d1:e6:c0:f0:f3:48:59:50:7f:19:81:a5:15:44:25:
         d6:72:34:80:ff:73:ac:9b:15:ea:35:ea:c5:de:08:2c:9a:65:
         74:f7:c4:7f:1c:10:b8:36:df:ef:ba:b8:43:7f:7d:4c:0a:29:
         20:1d:3e:33:0d:da:a3:e2:70:70:95:a6:e0:75:48:5e:ba:8d:
         63:ab:81:46:2f:6f:63:f9:c0:50:bd:ed:b6:f9:75:2f:47:06:
         98:b7:15:a8:d5:3d:b7:e0:e7:f8:2e:69:a8:74:f5:d9:c9:92:
         d7:6c:e5:63:a7:6d:91:c8:ea:00:05:0f:77:ed:1f:cc:cc:84:
         e0:2c:cb:17:a2:b1:e2:70:d2:d3:12:13:1d:91:e5:3d:65:29:
         0f:a1:1c:a4:13:5d:e3:3a:9d:5a:e8:76:8d:ca:ec:3c:2c:8e:
         6b:ed:0b:35:c5:e2:62:12:02:74:0b:0f:61:0b:0c:b4:3e:e6:
         39:41:c3:30:b3:fc:91:45:da:42:8c:f7:fc:7a:95:24:54:78:
         59:29:24:fd:1c:dd:c4:96:b9:e2:27:2b:36:21:c1:81:11:fa:
         49:ef:4d:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 01:05:53 2025 by rpki-client