Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/841A1D6C56D9A2431ED62D8750469F5B37A27ECFF512D14BC177814101F49D12/0/323830333a663932303a3830303a3a2f34302d3430203d3e20323636363739.roa
File:                     323830333a663932303a3830303a3a2f34302d3430203d3e20323636363739.roa (raw, json)
Hash identifier:          DdeybVgtY2lLcSX12zOfQkvFW5gVg3GTVzmz6b85HII=
Subject key identifier:   A2:B4:7B:35:4B:EE:13:03:DB:3E:40:6F:17:9C:9B:7D:4D:53:C0:34
Certificate issuer:       /CN=A8F348342236CEF0874883E7673551354708EDDE
Certificate serial:       7B4A30A3633241A3A96EF333444142A69D73A3FD
Authority key identifier: A8:F3:48:34:22:36:CE:F0:87:48:83:E7:67:35:51:35:47:08:ED:DE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8F348342236CEF0874883E7673551354708EDDE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/841A1D6C56D9A2431ED62D8750469F5B37A27ECFF512D14BC177814101F49D12/0/323830333a663932303a3830303a3a2f34302d3430203d3e20323636363739.roa
Signing time:             Wed 19 Feb 2025 04:15:01 +0000
ROA not before:           Wed 19 Feb 2025 04:10:01 +0000
ROA not after:            Wed 18 Feb 2026 04:15:01 +0000
asID:                     266679
IP address blocks:        2803:f920:800::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/841A1D6C56D9A2431ED62D8750469F5B37A27ECFF512D14BC177814101F49D12/0/A8F348342236CEF0874883E7673551354708EDDE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/841A1D6C56D9A2431ED62D8750469F5B37A27ECFF512D14BC177814101F49D12/0/A8F348342236CEF0874883E7673551354708EDDE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8F348342236CEF0874883E7673551354708EDDE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 04:49:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:4a:30:a3:63:32:41:a3:a9:6e:f3:33:44:41:42:a6:9d:73:a3:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8F348342236CEF0874883E7673551354708EDDE
        Validity
            Not Before: Feb 19 04:10:01 2025 GMT
            Not After : Feb 18 04:15:01 2026 GMT
        Subject: CN=A2B47B354BEE1303DB3E406F179C9B7D4D53C034
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:50:d1:e9:b4:67:ca:76:ba:c0:32:a9:90:5f:
                    37:8a:89:5a:dc:73:a3:44:57:59:b0:14:5e:b4:5e:
                    e1:96:35:16:c7:11:8c:8c:ca:2b:6b:b2:a5:91:b1:
                    94:29:ee:3e:67:7e:f5:c1:c3:93:c9:42:30:2a:44:
                    0e:75:1f:19:2f:ef:1c:cd:e8:33:55:d5:d2:27:57:
                    ca:32:c7:e3:d4:40:38:29:82:bb:7b:28:ff:85:6e:
                    9c:9c:30:25:f4:84:3d:66:ff:eb:c7:ae:62:18:e1:
                    3d:1a:10:36:4f:7a:a0:4c:09:5e:b8:34:07:c9:e6:
                    12:4b:eb:5e:96:68:c9:3e:12:55:61:75:d5:9d:4f:
                    8f:e8:59:31:67:98:f6:af:b9:0f:ec:0d:b2:a2:a7:
                    01:35:55:1f:8c:ad:10:23:29:c7:f6:2b:f2:28:c5:
                    40:32:87:01:24:1e:fc:9b:15:fb:a9:4c:f5:0d:44:
                    b9:a8:10:cf:65:2e:08:c4:af:a9:3b:52:56:12:44:
                    cf:dd:24:0c:7a:52:7c:3c:5c:b3:33:b3:ef:c2:0b:
                    a4:e9:17:d2:af:19:03:61:bf:4d:ce:53:f2:7d:04:
                    79:ad:f7:49:f9:50:89:85:c8:c4:2d:0d:97:f1:a4:
                    5d:2c:cb:8d:0a:47:6d:53:97:be:ed:7f:57:9a:fa:
                    02:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:B4:7B:35:4B:EE:13:03:DB:3E:40:6F:17:9C:9B:7D:4D:53:C0:34
            X509v3 Authority Key Identifier:
                keyid:A8:F3:48:34:22:36:CE:F0:87:48:83:E7:67:35:51:35:47:08:ED:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/841A1D6C56D9A2431ED62D8750469F5B37A27ECFF512D14BC177814101F49D12/0/A8F348342236CEF0874883E7673551354708EDDE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8F348342236CEF0874883E7673551354708EDDE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/841A1D6C56D9A2431ED62D8750469F5B37A27ECFF512D14BC177814101F49D12/0/323830333a663932303a3830303a3a2f34302d3430203d3e20323636363739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f920:800::/40

    Signature Algorithm: sha256WithRSAEncryption
         14:07:9a:80:9a:72:6d:d3:84:68:f3:7a:73:39:dc:84:6f:1f:
         db:00:be:7c:46:5e:97:81:5f:fb:f5:d3:78:f5:53:31:f5:a4:
         9e:4c:5f:7e:41:ea:37:47:37:f7:83:9c:eb:d4:8c:d9:9b:31:
         52:eb:84:ad:4a:27:da:fc:0d:b8:4d:d6:8d:ef:dc:98:a9:d8:
         b6:1a:44:5d:e0:44:24:d5:17:dd:e1:2d:d4:32:81:ed:4f:f6:
         34:d4:91:bd:77:c7:19:94:02:15:d1:b3:50:e9:a8:44:18:ff:
         42:d8:7a:d5:a0:8e:32:f8:1a:2b:cd:0b:d2:58:ae:47:10:ec:
         20:6b:12:8d:af:74:af:d4:7b:3c:2d:1d:45:14:27:c2:65:62:
         93:37:b9:36:4a:b6:6c:04:0d:0f:b7:58:54:91:d9:37:b3:0b:
         85:d3:a7:02:7c:d6:d5:c8:a7:34:a0:9a:9b:19:68:de:9d:d1:
         8b:ac:06:c5:40:6f:96:d8:6f:65:7e:63:4b:da:98:d1:de:af:
         a0:71:d6:e4:2e:74:3b:81:bc:f0:e1:17:6c:16:11:f4:26:02:
         b4:55:65:f8:aa:3f:d0:83:73:4d:72:38:e1:d1:68:8b:8a:ea:
         32:6e:89:7b:aa:96:9f:0b:87:bb:80:99:38:db:d1:ae:10:61:
         b6:57:8b:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:55:19 2025 by rpki-client