Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/88D2FC1F0B8527B79264CD3CDDC10726CB30A399160BB4044AD90BD66E10B91D/0/323830333a3931303a3a2f33322d3332203d3e20323732303039.roa
File:                     323830333a3931303a3a2f33322d3332203d3e20323732303039.roa (raw, json)
Hash identifier:          ANQH2+Z8gyy4atxL+a3/UFsRuRzzs+sPB3vLx6o9i+s=
Subject key identifier:   B7:A9:C8:27:68:C2:88:51:03:DC:E6:80:D9:51:5F:38:D9:60:00:8A
Certificate issuer:       /CN=4C07ED76182959652B8E9E133053015F589BFC7F
Certificate serial:       57C1AB11C1F374C08324175A8B713D566FE7C9D9
Authority key identifier: 4C:07:ED:76:18:29:59:65:2B:8E:9E:13:30:53:01:5F:58:9B:FC:7F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4C07ED76182959652B8E9E133053015F589BFC7F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/88D2FC1F0B8527B79264CD3CDDC10726CB30A399160BB4044AD90BD66E10B91D/0/323830333a3931303a3a2f33322d3332203d3e20323732303039.roa
Signing time:             Tue 07 Jan 2025 16:00:00 +0000
ROA not before:           Tue 07 Jan 2025 15:55:00 +0000
ROA not after:            Tue 06 Jan 2026 16:00:00 +0000
asID:                     272009
IP address blocks:        2803:910::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/88D2FC1F0B8527B79264CD3CDDC10726CB30A399160BB4044AD90BD66E10B91D/0/4C07ED76182959652B8E9E133053015F589BFC7F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/88D2FC1F0B8527B79264CD3CDDC10726CB30A399160BB4044AD90BD66E10B91D/0/4C07ED76182959652B8E9E133053015F589BFC7F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4C07ED76182959652B8E9E133053015F589BFC7F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 10 Feb 2025 03:47:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:c1:ab:11:c1:f3:74:c0:83:24:17:5a:8b:71:3d:56:6f:e7:c9:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C07ED76182959652B8E9E133053015F589BFC7F
        Validity
            Not Before: Jan  7 15:55:00 2025 GMT
            Not After : Jan  6 16:00:00 2026 GMT
        Subject: CN=B7A9C82768C2885103DCE680D9515F38D960008A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d5:32:b8:5c:36:ec:3e:71:ee:28:c4:18:a3:
                    8a:65:dd:c1:60:e7:b4:11:01:ba:53:e6:dc:72:ef:
                    7f:0e:da:bf:2f:8d:05:c8:09:65:74:9e:81:4c:ed:
                    fc:27:df:8d:48:76:fd:55:47:82:63:dd:ab:90:5e:
                    1f:7e:f4:14:27:5a:7d:01:90:fa:c4:c5:54:8f:a3:
                    ab:03:eb:90:b1:cd:c7:66:43:f1:4a:d9:7b:74:35:
                    11:83:0f:bf:85:a3:15:54:58:8a:c7:0a:66:d1:ad:
                    7c:1b:57:42:05:95:2d:47:62:9e:d5:77:9c:43:bd:
                    d0:f6:34:88:f8:12:6f:37:a9:35:60:f8:5d:1c:98:
                    f5:7f:ef:84:19:0c:04:31:dc:db:fe:2a:c2:be:21:
                    29:6c:41:a6:d7:5c:43:14:6f:48:d6:15:f6:4c:8e:
                    18:0f:91:90:49:ea:9d:1a:05:a0:d9:86:a3:70:20:
                    d0:d6:c4:2b:84:e3:53:94:9a:5c:89:f6:4a:08:7b:
                    ad:1e:50:d1:19:12:25:05:b0:82:41:72:4f:cd:0f:
                    60:f8:0f:f7:d9:cb:d3:66:46:e0:15:a6:cd:be:af:
                    5b:65:5a:3f:d4:78:be:37:99:76:d4:6b:c4:ba:f6:
                    e9:f3:c8:1d:81:0b:d9:74:0f:71:1e:d0:01:e1:66:
                    3d:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:A9:C8:27:68:C2:88:51:03:DC:E6:80:D9:51:5F:38:D9:60:00:8A
            X509v3 Authority Key Identifier:
                keyid:4C:07:ED:76:18:29:59:65:2B:8E:9E:13:30:53:01:5F:58:9B:FC:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/88D2FC1F0B8527B79264CD3CDDC10726CB30A399160BB4044AD90BD66E10B91D/0/4C07ED76182959652B8E9E133053015F589BFC7F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4C07ED76182959652B8E9E133053015F589BFC7F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/88D2FC1F0B8527B79264CD3CDDC10726CB30A399160BB4044AD90BD66E10B91D/0/323830333a3931303a3a2f33322d3332203d3e20323732303039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:910::/32

    Signature Algorithm: sha256WithRSAEncryption
         40:a0:af:bf:13:78:07:e8:6e:eb:22:fd:c9:88:e4:e0:1b:45:
         11:1e:2d:1f:53:e3:0e:f6:ba:8a:bb:b8:df:b9:2b:2d:c7:dc:
         43:c8:71:ac:9e:23:ee:4a:f2:12:e1:88:e7:b0:7d:23:bc:20:
         3c:c6:c3:6d:67:48:54:e2:35:84:81:77:b3:c2:c3:0b:dc:60:
         5a:78:ae:9f:4c:91:1c:90:48:68:cf:cc:25:68:76:93:9f:4a:
         b6:d8:fd:31:c7:43:ee:49:fe:49:2c:8b:6f:ea:80:2d:20:22:
         95:7f:d7:1c:a3:76:3d:23:53:ef:57:e0:56:c0:1b:45:c2:36:
         c0:b6:68:53:fd:fa:af:41:ce:1f:5f:c0:99:48:4e:24:82:93:
         cc:26:bb:02:40:ad:ce:c6:3d:54:9f:fd:0c:b3:50:6f:f9:68:
         67:16:5e:e2:11:9c:ea:96:15:d4:8d:f3:dc:ca:18:e5:ba:f7:
         f8:60:28:6d:40:a0:ea:e7:9a:a2:3c:f0:96:c6:84:7d:69:ca:
         c1:3e:04:ea:88:ca:bc:20:c6:df:d7:31:31:cc:8c:49:5c:78:
         a7:c0:94:d0:ac:20:41:74:13:59:1a:a6:e5:2c:d2:05:11:d3:
         5d:11:66:7e:ee:11:b8:c6:0c:28:2a:ed:e1:e5:ba:03:f6:d1:
         20:2a:40:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 10:47:27 2025 by rpki-client