Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/542E757E31F446C1586E3282CD56FD78A4E72ADDDC1B7F948ACB12604420A539/0/323830333a393931303a633030303a3a2f33342d3438203d3e203634313336.roa
File:                     323830333a393931303a633030303a3a2f33342d3438203d3e203634313336.roa (raw, json)
Hash identifier:          T1d7eFozbMEEOJsd+657cLDsCwuERdWN1ibnspr+2Tk=
Subject key identifier:   89:B8:F5:A3:B4:77:A2:A2:35:6A:5E:7F:A0:60:E8:9E:8A:42:4D:20
Certificate issuer:       /CN=08C48F0EB922B5862C93AA1420F66615674E8BA1
Certificate serial:       284F4009BBBB824DEF03828C4F54B180EE0316CD
Authority key identifier: 08:C4:8F:0E:B9:22:B5:86:2C:93:AA:14:20:F6:66:15:67:4E:8B:A1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08C48F0EB922B5862C93AA1420F66615674E8BA1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/542E757E31F446C1586E3282CD56FD78A4E72ADDDC1B7F948ACB12604420A539/0/323830333a393931303a633030303a3a2f33342d3438203d3e203634313336.roa
Signing time:             Tue 04 Feb 2025 18:24:13 +0000
ROA not before:           Tue 04 Feb 2025 18:19:13 +0000
ROA not after:            Tue 03 Feb 2026 18:24:13 +0000
asID:                     64136
IP address blocks:        2803:9910:c000::/34 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/542E757E31F446C1586E3282CD56FD78A4E72ADDDC1B7F948ACB12604420A539/0/08C48F0EB922B5862C93AA1420F66615674E8BA1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/542E757E31F446C1586E3282CD56FD78A4E72ADDDC1B7F948ACB12604420A539/0/08C48F0EB922B5862C93AA1420F66615674E8BA1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08C48F0EB922B5862C93AA1420F66615674E8BA1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:4f:40:09:bb:bb:82:4d:ef:03:82:8c:4f:54:b1:80:ee:03:16:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08C48F0EB922B5862C93AA1420F66615674E8BA1
        Validity
            Not Before: Feb  4 18:19:13 2025 GMT
            Not After : Feb  3 18:24:13 2026 GMT
        Subject: CN=89B8F5A3B477A2A2356A5E7FA060E89E8A424D20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:fd:6c:93:8e:60:99:50:3c:e0:56:a8:2a:b1:
                    7f:0b:b4:ba:28:56:cf:98:ea:a4:84:75:a5:73:74:
                    3c:41:4e:a7:1e:bc:79:10:81:8d:8e:e6:29:44:07:
                    6c:30:95:da:21:38:7f:3a:10:39:16:13:00:8c:56:
                    03:05:fc:94:48:ca:0c:9a:58:e6:d6:49:e8:e9:dd:
                    42:03:a8:e7:57:9b:90:39:1f:a5:4c:76:05:4c:0a:
                    6d:b3:06:25:a3:48:72:bb:fa:00:2a:85:04:89:33:
                    ae:19:88:8d:46:e1:6d:e7:38:46:7e:24:3a:a5:16:
                    59:92:39:da:bc:4f:73:2f:84:91:37:cd:2e:e6:3c:
                    e5:78:99:e7:b1:40:e9:84:f0:3d:66:58:b1:11:d3:
                    3a:10:89:80:6e:7c:83:dc:c9:0c:c5:6b:8b:61:1e:
                    a6:7f:b2:8a:df:4f:c0:04:c5:a6:31:c1:87:a0:74:
                    0e:cc:23:25:b7:00:0a:06:3b:e1:59:4b:e4:95:5a:
                    08:ab:88:11:f2:30:c5:b1:e3:ab:d6:d8:e9:9f:75:
                    bf:db:a4:af:9c:22:11:2e:a7:b3:47:6d:bc:0e:cc:
                    23:a3:b2:c1:6a:87:dd:45:96:39:0c:f3:47:c1:58:
                    5b:72:91:36:1a:14:08:30:e7:f2:d7:f7:84:59:ca:
                    74:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:B8:F5:A3:B4:77:A2:A2:35:6A:5E:7F:A0:60:E8:9E:8A:42:4D:20
            X509v3 Authority Key Identifier:
                keyid:08:C4:8F:0E:B9:22:B5:86:2C:93:AA:14:20:F6:66:15:67:4E:8B:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/542E757E31F446C1586E3282CD56FD78A4E72ADDDC1B7F948ACB12604420A539/0/08C48F0EB922B5862C93AA1420F66615674E8BA1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08C48F0EB922B5862C93AA1420F66615674E8BA1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/542E757E31F446C1586E3282CD56FD78A4E72ADDDC1B7F948ACB12604420A539/0/323830333a393931303a633030303a3a2f33342d3438203d3e203634313336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9910:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         00:6d:91:95:c6:27:85:24:55:60:c1:cd:eb:ea:29:64:e5:88:
         05:1e:b3:61:8e:30:8d:57:84:c9:c5:22:33:58:90:f7:1e:92:
         eb:bc:dc:c7:92:0b:a1:26:0d:7c:10:2d:e9:7a:d9:8c:3a:1c:
         d2:24:01:79:3e:68:3e:ea:99:c5:d5:de:59:60:19:5f:3f:42:
         05:44:dd:09:68:05:1a:f4:4f:a7:22:4c:54:12:e5:75:37:f7:
         4c:03:7f:ac:45:40:5f:a9:0f:26:f2:38:99:8a:cc:27:36:0c:
         79:40:b4:d5:2f:2c:7d:8c:06:10:48:70:06:cc:c3:2d:0f:6b:
         aa:48:16:40:c1:c2:7c:f9:12:60:b0:d2:f5:bb:aa:5b:a0:2a:
         53:d1:d6:df:37:0c:eb:f8:cf:94:d6:fe:2b:db:b9:41:34:82:
         40:46:5f:e1:b6:46:f7:7e:fa:49:6b:57:94:cf:08:89:cd:cd:
         74:f4:c8:f5:ff:14:3d:78:f8:55:28:c3:a1:aa:fc:bc:d6:3e:
         19:1a:47:0e:58:0f:25:a1:d3:f3:05:b8:f5:66:eb:d7:9e:dc:
         72:af:a2:3f:12:96:04:fe:9c:1a:b3:02:6a:de:8c:40:37:1b:
         ac:cb:57:c4:72:86:44:37:8c:cb:9e:64:96:1c:2c:2f:e9:ec:
         6f:cd:5f:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 06:19:51 2025 by rpki-client