Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5972D5CC3498C9D38CCA4EDED1834EFA9897C62416814DECD3DD848AA977377A/0/323830333a326139303a3330303a3a2f34302d3430203d3e20323732383737.roa
File:                     323830333a326139303a3330303a3a2f34302d3430203d3e20323732383737.roa (raw, json)
Hash identifier:          9Q8owQXMJrYhaBBfvWgTZow6kdTrDtU/7RPLht3LL0w=
Subject key identifier:   5F:75:5A:38:EC:BB:A5:68:8F:38:B6:C1:5E:90:EC:77:28:FB:4E:08
Certificate issuer:       /CN=E19BC5FA671BC143D11A298D8E45D012F8B59DB8
Certificate serial:       2D933452F57A7A08C9BF736F8E0F845461C4EF8C
Authority key identifier: E1:9B:C5:FA:67:1B:C1:43:D1:1A:29:8D:8E:45:D0:12:F8:B5:9D:B8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E19BC5FA671BC143D11A298D8E45D012F8B59DB8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5972D5CC3498C9D38CCA4EDED1834EFA9897C62416814DECD3DD848AA977377A/0/323830333a326139303a3330303a3a2f34302d3430203d3e20323732383737.roa
Signing time:             Tue 04 Feb 2025 18:32:20 +0000
ROA not before:           Tue 04 Feb 2025 18:27:20 +0000
ROA not after:            Tue 03 Feb 2026 18:32:20 +0000
asID:                     272877
IP address blocks:        2803:2a90:300::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5972D5CC3498C9D38CCA4EDED1834EFA9897C62416814DECD3DD848AA977377A/0/E19BC5FA671BC143D11A298D8E45D012F8B59DB8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5972D5CC3498C9D38CCA4EDED1834EFA9897C62416814DECD3DD848AA977377A/0/E19BC5FA671BC143D11A298D8E45D012F8B59DB8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E19BC5FA671BC143D11A298D8E45D012F8B59DB8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:93:34:52:f5:7a:7a:08:c9:bf:73:6f:8e:0f:84:54:61:c4:ef:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E19BC5FA671BC143D11A298D8E45D012F8B59DB8
        Validity
            Not Before: Feb  4 18:27:20 2025 GMT
            Not After : Feb  3 18:32:20 2026 GMT
        Subject: CN=5F755A38ECBBA5688F38B6C15E90EC7728FB4E08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:89:18:8d:de:42:a0:27:07:07:ec:f6:05:3f:
                    52:0d:e4:5a:77:3f:eb:7b:65:25:47:81:2c:b8:36:
                    99:c0:18:ca:32:43:24:e9:eb:51:7e:10:ab:1e:e2:
                    75:4e:91:80:fb:b2:11:68:e7:bd:00:ea:bf:7b:3c:
                    9c:89:1e:55:ee:f5:80:d9:4a:1b:99:5f:af:e5:5e:
                    4f:b8:be:72:a6:9a:4c:ac:08:2f:5d:56:4a:52:b8:
                    2d:62:10:8a:ab:da:c4:05:28:84:07:c1:d0:7d:87:
                    f4:ef:e0:21:9b:d3:63:37:93:e7:a3:77:ca:17:f8:
                    88:94:0b:c2:bc:8b:fd:f3:7a:e7:29:55:44:88:bb:
                    e2:80:08:34:05:dd:78:66:0c:21:d4:e3:0b:38:0d:
                    a2:6f:8c:2b:dd:66:73:ce:05:53:b5:59:b6:17:c9:
                    1b:bc:a6:8a:fd:6d:b6:7b:58:f7:8f:cd:56:1b:12:
                    51:bd:bd:35:e0:1a:9b:d0:bc:83:d4:83:28:5d:63:
                    f2:3b:64:b5:34:41:42:29:7f:99:a8:f5:5a:4d:64:
                    0e:93:1c:99:3d:87:05:9d:74:1a:ee:10:90:4d:c4:
                    19:f0:d4:4f:76:26:90:bf:b9:3d:79:af:e1:5f:ee:
                    b9:ac:35:26:f8:41:3e:33:c4:85:d9:d0:49:42:b1:
                    82:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:75:5A:38:EC:BB:A5:68:8F:38:B6:C1:5E:90:EC:77:28:FB:4E:08
            X509v3 Authority Key Identifier:
                keyid:E1:9B:C5:FA:67:1B:C1:43:D1:1A:29:8D:8E:45:D0:12:F8:B5:9D:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5972D5CC3498C9D38CCA4EDED1834EFA9897C62416814DECD3DD848AA977377A/0/E19BC5FA671BC143D11A298D8E45D012F8B59DB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E19BC5FA671BC143D11A298D8E45D012F8B59DB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5972D5CC3498C9D38CCA4EDED1834EFA9897C62416814DECD3DD848AA977377A/0/323830333a326139303a3330303a3a2f34302d3430203d3e20323732383737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2a90:300::/40

    Signature Algorithm: sha256WithRSAEncryption
         c1:67:74:2b:b0:21:f9:4c:07:aa:24:f8:ec:9d:1a:0a:7f:33:
         41:98:14:ce:44:a6:4c:7f:32:a7:fd:92:f4:86:cf:87:89:18:
         af:42:38:00:a9:78:09:a7:21:da:da:da:69:24:37:34:7c:a9:
         82:dd:72:e7:a7:0c:5e:6d:8b:d3:12:5f:ee:a0:8a:03:22:c2:
         d6:89:f1:0f:75:a0:b2:c6:e4:73:de:32:c6:20:c2:b4:ea:57:
         1e:af:0f:6d:22:2c:c4:8f:e0:ef:45:36:dc:c8:3e:18:35:a6:
         80:4e:b3:f7:5d:fe:3b:57:0e:81:a9:25:01:9b:6d:66:fa:d9:
         cc:01:3a:d8:5d:94:37:4d:9a:d8:fe:60:68:79:f5:08:22:26:
         07:d4:67:5e:08:2e:56:37:b1:a0:e8:85:04:4f:30:9d:aa:45:
         59:42:55:fc:12:ff:38:1b:1c:64:0c:fa:0f:fb:ac:7c:77:31:
         59:18:fd:b7:94:45:b6:c6:37:0c:9e:0c:14:f2:62:06:84:2d:
         d6:dc:07:67:5c:f6:25:2b:46:ab:cb:87:ad:d3:04:e9:5c:df:
         2f:5c:bf:b1:60:9a:fe:7e:fc:3e:71:2c:4e:fc:25:d2:7e:d9:
         f5:f3:54:c9:ae:ec:ec:65:72:e7:45:45:f2:59:a7:ba:8d:d3:
         74:f2:eb:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:11:57 2025 by rpki-client