Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7F1BAC3DF81D728FE33F58A60AF7891D1158B48200EB81ADB7503F11FDBAD88D/0/323830333a326631303a3a2f33322d3438203d3e20323732313230.roa
File:                     323830333a326631303a3a2f33322d3438203d3e20323732313230.roa (raw, json)
Hash identifier:          aqwSANcdU2sVnCSGj36FBrvZQgcbmLjYxZlH5xOblCc=
Subject key identifier:   DB:79:72:06:98:87:BA:53:54:8F:49:D3:37:64:F6:9A:A1:5B:2F:36
Certificate issuer:       /CN=908B9094C8B149DC985FB82F0C0A3737EDDA8A40
Certificate serial:       1604A1F6B84145DAE2349EFA8DF60C944426704B
Authority key identifier: 90:8B:90:94:C8:B1:49:DC:98:5F:B8:2F:0C:0A:37:37:ED:DA:8A:40
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/908B9094C8B149DC985FB82F0C0A3737EDDA8A40.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7F1BAC3DF81D728FE33F58A60AF7891D1158B48200EB81ADB7503F11FDBAD88D/0/323830333a326631303a3a2f33322d3438203d3e20323732313230.roa
Signing time:             Tue 04 Feb 2025 20:07:38 +0000
ROA not before:           Tue 04 Feb 2025 20:02:38 +0000
ROA not after:            Tue 03 Feb 2026 20:07:38 +0000
asID:                     272120
IP address blocks:        2803:2f10::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7F1BAC3DF81D728FE33F58A60AF7891D1158B48200EB81ADB7503F11FDBAD88D/0/908B9094C8B149DC985FB82F0C0A3737EDDA8A40.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7F1BAC3DF81D728FE33F58A60AF7891D1158B48200EB81ADB7503F11FDBAD88D/0/908B9094C8B149DC985FB82F0C0A3737EDDA8A40.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/908B9094C8B149DC985FB82F0C0A3737EDDA8A40.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:04:a1:f6:b8:41:45:da:e2:34:9e:fa:8d:f6:0c:94:44:26:70:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=908B9094C8B149DC985FB82F0C0A3737EDDA8A40
        Validity
            Not Before: Feb  4 20:02:38 2025 GMT
            Not After : Feb  3 20:07:38 2026 GMT
        Subject: CN=DB7972069887BA53548F49D33764F69AA15B2F36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c4:fa:18:db:e5:bf:5e:6f:23:e1:98:63:2e:
                    e8:ee:9d:d9:85:f8:68:d3:ae:8b:c2:88:d4:a8:37:
                    9e:66:65:49:07:3a:f0:47:ef:65:46:2b:42:2e:6c:
                    18:bf:01:fa:46:a6:bf:00:3d:49:09:88:82:b9:5f:
                    68:c6:e1:c5:f3:ae:1f:74:67:02:c6:5e:ba:08:41:
                    e3:cb:cf:80:65:5b:e5:ea:a9:37:e9:79:93:72:09:
                    4d:bc:06:d7:75:6e:06:1d:9e:99:cd:99:d7:59:f9:
                    62:50:f2:e8:05:ec:67:07:5c:9f:cd:be:20:4d:12:
                    fc:3c:a9:63:de:d1:c0:16:f4:00:a7:33:13:4b:fb:
                    ef:36:5e:04:7a:d7:7f:37:45:63:06:7d:57:3d:f3:
                    ba:04:c0:37:f5:36:fc:18:95:47:6f:38:91:8e:6a:
                    91:44:ca:2c:e8:bd:2c:9c:e2:9e:96:a7:b6:27:18:
                    af:83:f1:2f:2f:8a:9f:3b:fb:92:b7:8f:9a:ba:2b:
                    39:10:aa:1b:12:2c:19:e1:f5:8b:03:5a:f9:e9:f3:
                    fc:d3:53:a9:0b:ae:e3:c7:52:10:24:20:b7:b8:3b:
                    e0:14:c1:2c:e8:72:d9:9e:7a:48:3a:0d:20:3a:e5:
                    28:6e:ca:3e:85:8f:3a:cb:2f:ee:d5:e0:91:fa:9c:
                    2e:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:79:72:06:98:87:BA:53:54:8F:49:D3:37:64:F6:9A:A1:5B:2F:36
            X509v3 Authority Key Identifier:
                keyid:90:8B:90:94:C8:B1:49:DC:98:5F:B8:2F:0C:0A:37:37:ED:DA:8A:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7F1BAC3DF81D728FE33F58A60AF7891D1158B48200EB81ADB7503F11FDBAD88D/0/908B9094C8B149DC985FB82F0C0A3737EDDA8A40.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/908B9094C8B149DC985FB82F0C0A3737EDDA8A40.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7F1BAC3DF81D728FE33F58A60AF7891D1158B48200EB81ADB7503F11FDBAD88D/0/323830333a326631303a3a2f33322d3438203d3e20323732313230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2f10::/32

    Signature Algorithm: sha256WithRSAEncryption
         06:08:d2:62:8d:ed:1d:b6:81:d5:5d:8f:83:e2:72:94:e3:bd:
         e8:ae:fd:10:98:be:d8:92:e1:9d:33:71:c3:be:c4:5b:b4:4f:
         2c:1e:0e:53:1f:83:21:b6:b1:d9:fc:f0:ae:d4:d2:a1:f4:a2:
         9b:d2:ec:cf:f0:39:42:43:0d:0e:dd:33:f1:03:9d:6f:8b:f8:
         9e:11:81:c8:95:f6:e0:81:22:72:f1:8e:00:a9:aa:e9:30:4e:
         6e:6c:55:33:43:5e:06:24:bf:b4:c8:dc:a7:df:d2:94:5a:07:
         28:0e:a4:83:73:9b:2f:ae:33:ac:97:4d:c7:cb:0d:3d:89:e4:
         3d:e0:65:e4:91:32:4c:1a:d3:a7:9a:20:4c:85:8c:bf:5f:3c:
         9d:e4:25:c3:4d:0c:62:f3:b3:82:f1:fd:67:0a:63:de:7b:b5:
         f4:07:78:36:a6:fd:b5:13:52:e1:97:3f:08:4b:56:6d:2b:8a:
         30:0f:0f:a0:80:db:8d:e6:f3:07:5e:db:72:86:cf:85:22:cb:
         29:08:54:82:e9:0b:60:a1:3b:ff:e0:a1:5c:48:e4:f1:99:df:
         32:61:59:fd:24:90:d5:17:1f:1a:c1:90:54:a8:a3:12:fd:96:
         d2:0e:50:ba:37:cc:87:ea:a6:8f:9d:57:a3:a6:e1:c2:d2:89:
         f3:43:b3:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:06:39 2025 by rpki-client