Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8D4BB2421C24D19F3123B0C681B01AD82A92941582C9DABB9493E097F3F2F893/0/323830333a626265303a3330303a3a2f34302d3430203d3e20323730303838.roa
File:                     323830333a626265303a3330303a3a2f34302d3430203d3e20323730303838.roa (raw, json)
Hash identifier:          8h2uDdgfaZ4MbK3x3qz2dsLdU7kQsgQN4HrefxIXDE4=
Subject key identifier:   81:EB:05:8E:A9:EF:1B:66:EF:6A:E3:41:74:8A:33:66:BC:61:45:3D
Certificate issuer:       /CN=08AA2E4D3C7CDF9626D331ACD38D1719F3D4A72D
Certificate serial:       27F52F9313897DFB7347C5478A2794BFE749124B
Authority key identifier: 08:AA:2E:4D:3C:7C:DF:96:26:D3:31:AC:D3:8D:17:19:F3:D4:A7:2D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08AA2E4D3C7CDF9626D331ACD38D1719F3D4A72D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8D4BB2421C24D19F3123B0C681B01AD82A92941582C9DABB9493E097F3F2F893/0/323830333a626265303a3330303a3a2f34302d3430203d3e20323730303838.roa
Signing time:             Wed 29 Jan 2025 15:30:00 +0000
ROA not before:           Wed 29 Jan 2025 15:25:00 +0000
ROA not after:            Wed 28 Jan 2026 15:30:00 +0000
asID:                     270088
IP address blocks:        2803:bbe0:300::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8D4BB2421C24D19F3123B0C681B01AD82A92941582C9DABB9493E097F3F2F893/0/08AA2E4D3C7CDF9626D331ACD38D1719F3D4A72D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8D4BB2421C24D19F3123B0C681B01AD82A92941582C9DABB9493E097F3F2F893/0/08AA2E4D3C7CDF9626D331ACD38D1719F3D4A72D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08AA2E4D3C7CDF9626D331ACD38D1719F3D4A72D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:f5:2f:93:13:89:7d:fb:73:47:c5:47:8a:27:94:bf:e7:49:12:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08AA2E4D3C7CDF9626D331ACD38D1719F3D4A72D
        Validity
            Not Before: Jan 29 15:25:00 2025 GMT
            Not After : Jan 28 15:30:00 2026 GMT
        Subject: CN=81EB058EA9EF1B66EF6AE341748A3366BC61453D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:71:fa:48:70:57:2d:05:fd:4f:6d:16:f6:25:
                    42:d2:81:3e:5f:96:5a:60:60:6c:de:9b:94:58:2f:
                    5b:5b:60:7b:6c:1d:ff:9f:dc:a8:ae:32:46:72:87:
                    67:81:1c:5b:ef:9f:cb:4d:7f:30:2f:25:20:cc:68:
                    e1:d9:b6:b7:6e:eb:96:0f:41:a1:0a:15:69:33:87:
                    04:fa:a9:f9:06:8b:36:a2:f8:4b:fc:bd:3c:ee:68:
                    ec:92:6f:bb:98:c9:ab:d7:87:2d:be:23:ce:b8:15:
                    56:03:11:d5:36:1a:94:e2:aa:58:85:82:78:0f:fb:
                    0e:b3:49:7b:4d:df:86:1b:81:42:4c:4a:33:f4:5c:
                    ac:cb:73:54:f8:30:43:73:49:c2:49:fa:47:59:4d:
                    87:12:c0:70:09:d2:0e:28:ad:35:68:6b:ad:49:ac:
                    2a:d2:29:e4:1f:df:b3:67:7e:94:93:bc:61:30:34:
                    3e:33:68:68:54:cc:8f:28:e7:aa:f5:2e:ac:0e:ac:
                    06:c0:3a:e8:a8:40:4f:fb:07:00:5a:3f:43:d9:0f:
                    60:e4:40:28:d3:cb:94:bc:51:78:27:04:94:20:9b:
                    95:ba:46:da:71:14:8b:90:41:7c:30:bc:86:a0:36:
                    9d:a8:73:a7:c5:c1:17:3d:41:92:fd:14:8d:09:0e:
                    a5:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:EB:05:8E:A9:EF:1B:66:EF:6A:E3:41:74:8A:33:66:BC:61:45:3D
            X509v3 Authority Key Identifier:
                keyid:08:AA:2E:4D:3C:7C:DF:96:26:D3:31:AC:D3:8D:17:19:F3:D4:A7:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8D4BB2421C24D19F3123B0C681B01AD82A92941582C9DABB9493E097F3F2F893/0/08AA2E4D3C7CDF9626D331ACD38D1719F3D4A72D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08AA2E4D3C7CDF9626D331ACD38D1719F3D4A72D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8D4BB2421C24D19F3123B0C681B01AD82A92941582C9DABB9493E097F3F2F893/0/323830333a626265303a3330303a3a2f34302d3430203d3e20323730303838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:bbe0:300::/40

    Signature Algorithm: sha256WithRSAEncryption
         6d:f4:29:10:3d:7b:d5:af:c5:74:ce:21:ae:6f:fe:ca:9e:1b:
         45:fe:3b:fa:9e:18:a2:50:97:a8:e6:92:5d:52:e4:5e:3a:65:
         bc:a2:cb:77:20:5c:8b:5a:4a:42:da:4d:4f:36:cd:73:11:ee:
         f1:2d:c0:fd:c7:10:e5:a6:8d:5f:7b:0a:54:a3:57:39:0a:b1:
         f8:c5:61:b3:b2:55:20:9c:b3:6f:d5:dc:fe:d7:ac:e5:8f:74:
         ff:20:83:53:4e:dd:5d:62:b2:7c:cc:d7:dd:99:d9:86:e0:e8:
         f3:ab:84:24:15:4b:43:48:49:5b:93:87:bc:ee:43:08:e9:be:
         e7:99:f2:13:9c:ae:2b:c7:95:1f:65:a3:40:1c:07:17:00:61:
         60:c2:ae:c3:33:e7:f7:f7:48:5f:d5:5e:83:ff:5f:ee:88:23:
         f3:8f:e7:f3:c5:cd:e6:ca:14:ea:9a:0b:ab:3d:ad:08:83:63:
         52:91:36:9c:6f:cf:d8:2d:07:e7:1f:f2:62:de:ec:e2:87:61:
         6f:f7:ce:e1:e0:7c:24:3f:43:31:50:80:64:19:80:53:b5:36:
         ee:75:0f:85:bf:c4:a7:af:19:35:e9:e2:7f:9f:58:f2:a8:b8:
         22:43:37:6b:e8:8f:a1:75:12:16:38:1c:23:fb:fe:ff:6e:15:
         4f:97:79:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:57:41 2025 by rpki-client