Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5D8F51B1D1657BF366614511A20581BDED03B32FBCD5E9D471AF986BA436211B/0/323830333a626130303a3430303a3a2f33392d3430203d3e203532323836.roa
File:                     323830333a626130303a3430303a3a2f33392d3430203d3e203532323836.roa (raw, json)
Hash identifier:          GXrkuKV2GH0R+cCFIb4IBCzoDIsqlQ9bZ1EtV8fKt1U=
Subject key identifier:   12:52:7E:DF:DD:00:31:9A:00:E8:2F:FC:39:1F:85:45:FF:47:2C:7E
Certificate issuer:       /CN=241DE049AC3C932631785D79E6569AB7CF57A340
Certificate serial:       7F020F314C2772610C771E12FDAF18A7A697A1E0
Authority key identifier: 24:1D:E0:49:AC:3C:93:26:31:78:5D:79:E6:56:9A:B7:CF:57:A3:40
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/241DE049AC3C932631785D79E6569AB7CF57A340.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5D8F51B1D1657BF366614511A20581BDED03B32FBCD5E9D471AF986BA436211B/0/323830333a626130303a3430303a3a2f33392d3430203d3e203532323836.roa
Signing time:             Tue 04 Feb 2025 18:01:13 +0000
ROA not before:           Tue 04 Feb 2025 17:56:13 +0000
ROA not after:            Tue 03 Feb 2026 18:01:13 +0000
asID:                     52286
IP address blocks:        2803:ba00:400::/39 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5D8F51B1D1657BF366614511A20581BDED03B32FBCD5E9D471AF986BA436211B/0/241DE049AC3C932631785D79E6569AB7CF57A340.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5D8F51B1D1657BF366614511A20581BDED03B32FBCD5E9D471AF986BA436211B/0/241DE049AC3C932631785D79E6569AB7CF57A340.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/241DE049AC3C932631785D79E6569AB7CF57A340.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:02:0f:31:4c:27:72:61:0c:77:1e:12:fd:af:18:a7:a6:97:a1:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=241DE049AC3C932631785D79E6569AB7CF57A340
        Validity
            Not Before: Feb  4 17:56:13 2025 GMT
            Not After : Feb  3 18:01:13 2026 GMT
        Subject: CN=12527EDFDD00319A00E82FFC391F8545FF472C7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:aa:40:ee:96:27:c6:52:ca:b0:b3:b5:8e:62:
                    ff:bc:f8:1a:2b:95:5a:ec:16:b4:23:39:07:28:6b:
                    b8:ba:a7:eb:fd:9f:35:ac:ad:70:66:49:d0:71:4a:
                    fe:b3:90:d4:ca:4b:40:5f:19:ce:63:8c:ec:29:99:
                    48:29:d6:2a:1a:9f:24:eb:e7:7d:fa:cb:28:c9:5f:
                    d9:01:85:ff:5e:9a:ee:14:62:5d:cc:fc:a0:09:65:
                    7f:ef:ed:e2:79:3d:6f:eb:64:90:6d:6e:a8:8a:1d:
                    b1:fc:f9:37:4e:50:6e:59:f7:3d:28:18:45:26:66:
                    30:92:c1:d5:ec:e4:0f:69:3d:40:21:f3:c1:47:5b:
                    57:d3:a5:23:c8:cb:fd:51:bb:b4:d4:31:06:d6:88:
                    00:52:d6:3d:26:84:f2:83:59:35:c2:71:ea:f7:fe:
                    60:29:15:3c:18:2c:65:00:d3:ea:51:a5:40:8b:e8:
                    e9:4d:84:23:2f:c0:88:80:ea:23:ba:d2:d8:e9:58:
                    eb:b8:8d:99:2c:91:63:f9:f2:b2:e1:99:05:a9:78:
                    a7:54:66:87:10:84:e3:37:ee:eb:cb:4a:e5:9e:54:
                    d7:12:8c:5a:93:3a:14:d6:66:ce:5b:4c:ff:d9:63:
                    29:a5:f8:db:c0:85:c5:e4:ec:37:d6:c6:1e:d8:ae:
                    14:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:52:7E:DF:DD:00:31:9A:00:E8:2F:FC:39:1F:85:45:FF:47:2C:7E
            X509v3 Authority Key Identifier:
                keyid:24:1D:E0:49:AC:3C:93:26:31:78:5D:79:E6:56:9A:B7:CF:57:A3:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5D8F51B1D1657BF366614511A20581BDED03B32FBCD5E9D471AF986BA436211B/0/241DE049AC3C932631785D79E6569AB7CF57A340.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/241DE049AC3C932631785D79E6569AB7CF57A340.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5D8F51B1D1657BF366614511A20581BDED03B32FBCD5E9D471AF986BA436211B/0/323830333a626130303a3430303a3a2f33392d3430203d3e203532323836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ba00:400::/39

    Signature Algorithm: sha256WithRSAEncryption
         4c:55:8d:9a:2d:d5:3c:0d:f8:67:96:b6:90:df:51:a3:f0:ce:
         58:55:57:cd:94:73:65:b5:d2:8a:47:05:ae:78:ee:28:ed:ff:
         ec:26:3e:f6:27:31:15:36:9c:d7:50:a1:f6:7a:52:84:0d:1b:
         db:4c:01:09:0a:3b:4a:bc:ec:b6:b9:0d:b9:49:29:34:98:ab:
         d9:55:51:48:a9:ca:2a:cc:85:96:8d:3e:06:de:06:fc:31:51:
         56:fe:3b:ec:1d:b4:e4:a3:f3:f5:e1:59:f2:e6:74:f6:ed:a9:
         41:29:ff:42:01:c1:46:12:d4:2d:a1:c6:a6:20:3d:81:de:6f:
         4e:20:1a:d1:83:90:09:f0:1c:9c:b3:ee:ce:5e:f2:56:d8:7a:
         fc:eb:96:42:22:d4:b4:9c:37:5a:f1:21:f2:99:cd:16:8b:f6:
         83:93:04:d0:6d:e4:04:ba:5c:c8:39:1c:c1:fa:72:d7:6e:97:
         ff:0f:24:d9:36:10:d8:52:c0:7d:42:39:01:4d:2b:97:c9:a2:
         01:fa:6c:9a:96:5b:91:82:dd:c5:73:df:a2:d0:e7:99:6c:c1:
         2e:5e:45:35:a6:c6:50:1e:65:f3:20:77:d3:ce:cc:ea:6c:bc:
         57:60:f2:53:c5:f8:e7:d2:fd:0e:61:b5:17:9f:1d:da:c7:9a:
         b8:67:f9:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:09:28 2025 by rpki-client