Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/562007B8D4AA26144087F9C3E5F9D39ECE56BD4ED09786DE15147C9557175406/0/323830333a633331303a666430303a3a2f34302d3438203d3e20323731393735.roa
File:                     323830333a633331303a666430303a3a2f34302d3438203d3e20323731393735.roa (raw, json)
Hash identifier:          OCyBlbuz71st0s4AAn+4H5qJpEUsa2+37p9na9EQ7Wk=
Subject key identifier:   56:A1:B9:87:30:22:8F:A5:57:6F:08:A5:46:1F:20:9D:1D:DF:12:64
Certificate issuer:       /CN=906C41A68E3475138AF53A5B55627EDE35432068
Certificate serial:       54B2FE9F83CBEF53B5346A4A71E014EB26346527
Authority key identifier: 90:6C:41:A6:8E:34:75:13:8A:F5:3A:5B:55:62:7E:DE:35:43:20:68
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/906C41A68E3475138AF53A5B55627EDE35432068.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/562007B8D4AA26144087F9C3E5F9D39ECE56BD4ED09786DE15147C9557175406/0/323830333a633331303a666430303a3a2f34302d3438203d3e20323731393735.roa
Signing time:             Tue 18 Feb 2025 01:35:00 +0000
ROA not before:           Tue 18 Feb 2025 01:30:00 +0000
ROA not after:            Tue 17 Feb 2026 01:35:00 +0000
asID:                     271975
IP address blocks:        2803:c310:fd00::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/562007B8D4AA26144087F9C3E5F9D39ECE56BD4ED09786DE15147C9557175406/0/906C41A68E3475138AF53A5B55627EDE35432068.crl
                          rsync://repository.lacnic.net/rpki/lacnic/562007B8D4AA26144087F9C3E5F9D39ECE56BD4ED09786DE15147C9557175406/0/906C41A68E3475138AF53A5B55627EDE35432068.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/906C41A68E3475138AF53A5B55627EDE35432068.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:b2:fe:9f:83:cb:ef:53:b5:34:6a:4a:71:e0:14:eb:26:34:65:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=906C41A68E3475138AF53A5B55627EDE35432068
        Validity
            Not Before: Feb 18 01:30:00 2025 GMT
            Not After : Feb 17 01:35:00 2026 GMT
        Subject: CN=56A1B98730228FA5576F08A5461F209D1DDF1264
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:45:26:51:6e:90:ac:73:bb:2b:27:45:eb:0e:
                    ae:91:21:3b:a7:8b:cc:94:e9:6f:02:85:1b:32:37:
                    1e:52:92:8b:96:c0:b3:4e:23:1a:4f:97:c4:eb:e0:
                    b4:97:05:08:e0:b2:92:ac:a2:ea:6b:56:78:a6:7b:
                    72:57:87:ad:8f:5a:ef:54:d6:11:23:c8:9f:ec:58:
                    f6:6b:0d:82:2b:a3:95:ec:e7:ba:e5:59:28:9b:d2:
                    d0:0b:ac:3e:ca:86:c7:ce:7d:9c:74:41:3b:bd:a7:
                    5c:30:46:ff:22:b5:ef:54:e8:35:6e:7b:c8:49:de:
                    80:8a:4e:3e:8c:64:6c:00:9e:58:fc:5f:f8:1e:c6:
                    46:57:cb:6d:99:0c:92:3b:82:6f:e0:52:b8:1d:89:
                    d5:3a:47:61:8f:1f:45:de:30:c1:ea:cc:24:0f:e4:
                    f0:d4:c8:7f:31:85:9a:66:c5:71:16:c6:25:49:44:
                    39:30:43:c1:8c:da:79:32:ac:0e:50:e5:16:d1:47:
                    42:17:c9:84:b1:e3:1b:a2:8f:78:2e:bb:e8:2d:45:
                    96:cb:c4:02:16:ec:1c:8c:6a:b9:65:fc:f0:c4:fe:
                    fb:9b:72:36:df:39:e2:c6:04:84:85:d5:2c:a7:c1:
                    65:8c:36:4d:e1:73:08:b2:5e:aa:69:79:98:43:27:
                    c7:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:A1:B9:87:30:22:8F:A5:57:6F:08:A5:46:1F:20:9D:1D:DF:12:64
            X509v3 Authority Key Identifier:
                keyid:90:6C:41:A6:8E:34:75:13:8A:F5:3A:5B:55:62:7E:DE:35:43:20:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/562007B8D4AA26144087F9C3E5F9D39ECE56BD4ED09786DE15147C9557175406/0/906C41A68E3475138AF53A5B55627EDE35432068.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/906C41A68E3475138AF53A5B55627EDE35432068.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/562007B8D4AA26144087F9C3E5F9D39ECE56BD4ED09786DE15147C9557175406/0/323830333a633331303a666430303a3a2f34302d3438203d3e20323731393735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c310:fd00::/40

    Signature Algorithm: sha256WithRSAEncryption
         bb:40:39:23:fe:14:e8:e0:25:6a:e5:bc:fb:bd:59:5e:6a:4d:
         b9:67:b5:15:36:38:90:c3:cd:64:37:f8:94:43:3b:02:71:5e:
         8f:77:32:b9:37:bf:48:91:a5:11:28:69:62:89:97:2b:10:25:
         c2:8c:3a:65:43:62:7a:b9:4d:01:52:23:34:70:38:8b:80:da:
         3f:01:2b:8e:1b:78:0b:d9:3d:85:c4:ba:89:3d:af:f0:94:47:
         33:e3:90:58:8b:f7:a8:ee:3c:6d:2a:50:3a:5b:28:8f:a8:3e:
         14:05:c2:34:db:8e:8b:5b:92:93:1f:69:a6:b0:70:5a:06:bd:
         58:8d:15:02:3c:1e:76:83:2d:bb:c2:fc:04:64:a5:bf:e9:07:
         41:8c:4f:8b:47:42:8e:ce:26:b2:06:70:50:62:3a:09:df:31:
         a4:02:76:23:bd:e5:ba:71:91:84:4b:e5:8e:e5:d2:9d:8c:cb:
         70:eb:8e:2c:18:d3:75:4b:db:ed:ae:fc:01:96:b9:0b:c5:28:
         bb:fd:60:64:94:1b:ee:55:7e:16:3b:49:b8:62:80:bf:24:a9:
         2e:5e:1c:6c:05:11:d7:27:1c:e5:2e:a9:d2:16:4f:ba:88:71:
         fe:74:27:68:4a:63:1b:e5:71:11:42:17:ab:8d:27:27:00:0b:
         4a:be:90:7b
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Apr 6 01:49:40 2025 by rpki-client