Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/54C44F39A16EA01F4700CA77DC5F9303139D23448EB7171A35A2AD0B08FF0371/0/323830333a653231303a3a2f33322d3438203d3e20323731393037.roa
File:                     323830333a653231303a3a2f33322d3438203d3e20323731393037.roa (raw, json)
Hash identifier:          nFtVhDTmbqT2eDTW1jhG8kHtSak8HzDgL+FCZrrLcas=
Subject key identifier:   84:8E:9C:5A:F9:6B:39:FF:D1:9B:0D:77:39:92:82:78:72:1A:DB:B9
Certificate issuer:       /CN=2240B644D1FD422B45BF149B24CCCE788AE6DF25
Certificate serial:       41C1209C72D687798AB6AFF34DCCBE854BEB2998
Authority key identifier: 22:40:B6:44:D1:FD:42:2B:45:BF:14:9B:24:CC:CE:78:8A:E6:DF:25
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2240B644D1FD422B45BF149B24CCCE788AE6DF25.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/54C44F39A16EA01F4700CA77DC5F9303139D23448EB7171A35A2AD0B08FF0371/0/323830333a653231303a3a2f33322d3438203d3e20323731393037.roa
Signing time:             Tue 04 Feb 2025 18:54:48 +0000
ROA not before:           Tue 04 Feb 2025 18:49:48 +0000
ROA not after:            Tue 03 Feb 2026 18:54:48 +0000
asID:                     271907
IP address blocks:        2803:e210::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/54C44F39A16EA01F4700CA77DC5F9303139D23448EB7171A35A2AD0B08FF0371/0/2240B644D1FD422B45BF149B24CCCE788AE6DF25.crl
                          rsync://repository.lacnic.net/rpki/lacnic/54C44F39A16EA01F4700CA77DC5F9303139D23448EB7171A35A2AD0B08FF0371/0/2240B644D1FD422B45BF149B24CCCE788AE6DF25.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2240B644D1FD422B45BF149B24CCCE788AE6DF25.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 15:38:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:c1:20:9c:72:d6:87:79:8a:b6:af:f3:4d:cc:be:85:4b:eb:29:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2240B644D1FD422B45BF149B24CCCE788AE6DF25
        Validity
            Not Before: Feb  4 18:49:48 2025 GMT
            Not After : Feb  3 18:54:48 2026 GMT
        Subject: CN=848E9C5AF96B39FFD19B0D7739928278721ADBB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:0a:32:26:55:e9:3c:a3:dc:bd:31:51:67:20:
                    16:06:8e:fc:af:6a:b9:1b:09:aa:81:78:6b:50:26:
                    d5:c3:d2:58:8f:58:1e:d3:5a:79:83:ab:2d:4d:a6:
                    da:6e:a0:a3:13:0a:25:b2:2e:a7:aa:9b:24:63:dc:
                    58:5b:ee:ab:f4:50:d7:b3:9f:e9:d8:2b:0d:c7:d2:
                    f9:80:15:03:7c:84:79:5a:c1:70:34:e2:e3:ba:eb:
                    39:10:41:7b:ad:8f:41:30:58:f0:8f:68:04:07:51:
                    19:ac:92:5d:7c:69:94:47:c5:7c:0a:f3:b5:28:b4:
                    81:7d:4f:a2:50:21:43:00:89:65:0e:04:0d:4e:01:
                    16:d7:16:07:fe:3d:27:58:ec:d5:e0:f2:3c:4c:40:
                    51:22:2c:35:a9:d5:4b:96:08:4d:0b:83:8d:ed:50:
                    da:e2:74:b6:24:84:de:73:a7:e3:9f:59:d8:92:b7:
                    1d:3c:b6:9c:e4:b9:95:13:19:42:79:14:f3:08:fa:
                    7c:7f:1a:2e:ba:cc:70:9d:3e:d7:53:5b:07:e0:70:
                    f7:ed:16:6e:a5:6f:f4:27:93:4f:f5:da:ac:af:d0:
                    68:86:1a:5f:60:9a:26:27:fa:17:1d:30:61:cb:80:
                    f0:bc:a8:1a:ef:07:80:06:c0:b6:a1:7f:00:18:68:
                    2f:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:8E:9C:5A:F9:6B:39:FF:D1:9B:0D:77:39:92:82:78:72:1A:DB:B9
            X509v3 Authority Key Identifier:
                keyid:22:40:B6:44:D1:FD:42:2B:45:BF:14:9B:24:CC:CE:78:8A:E6:DF:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/54C44F39A16EA01F4700CA77DC5F9303139D23448EB7171A35A2AD0B08FF0371/0/2240B644D1FD422B45BF149B24CCCE788AE6DF25.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2240B644D1FD422B45BF149B24CCCE788AE6DF25.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/54C44F39A16EA01F4700CA77DC5F9303139D23448EB7171A35A2AD0B08FF0371/0/323830333a653231303a3a2f33322d3438203d3e20323731393037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e210::/32

    Signature Algorithm: sha256WithRSAEncryption
         5d:78:9b:d1:e5:3c:d8:e5:09:4b:66:f2:b5:e5:8f:37:a6:40:
         77:c3:3e:8a:29:56:fc:d6:ca:a9:02:0d:93:fd:9f:7e:a7:fe:
         60:f2:62:ac:e9:f0:00:51:ab:b5:ba:59:d2:79:bb:cc:7a:f8:
         42:a5:f9:5a:2e:d0:0d:9f:48:17:51:8e:d7:bc:72:66:4b:46:
         3e:d6:c8:81:89:4f:33:2e:0b:5d:5b:da:de:29:28:91:f6:73:
         9e:1f:15:ba:7b:a9:97:24:15:e3:e9:f4:8a:18:da:ef:86:f6:
         d4:f1:6f:57:8a:58:7c:8b:91:b7:c6:eb:d4:00:04:14:69:14:
         d5:29:9d:40:1f:f6:87:d7:51:64:14:27:d4:24:e8:4a:b9:f7:
         c0:24:98:b0:4e:d7:f9:f3:87:e2:c9:92:fa:4a:12:0b:1a:f1:
         f2:5d:c9:12:9f:2a:fe:39:91:bd:98:f4:8b:47:51:e3:08:a7:
         04:21:92:22:aa:c9:7a:17:03:86:f8:ac:46:86:bf:57:80:1a:
         60:d6:89:fb:0e:c2:54:d0:4a:fd:50:46:3a:28:9d:2b:cd:08:
         61:5c:57:2f:26:ef:14:9a:44:3f:5c:16:7a:d5:df:2e:dd:60:
         ea:8e:fb:cb:30:bb:bb:e8:45:68:c2:ec:72:63:0b:8a:71:55:
         09:80:a7:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:59:06 2025 by rpki-client