Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8D4BB2421C24D19F3123B0C681B01AD82A92941582C9DABB9493E097F3F2F893/0/323830333a626265303a3730303a3a2f34302d3430203d3e20323730303838.roa
File:                     323830333a626265303a3730303a3a2f34302d3430203d3e20323730303838.roa (raw, json)
Hash identifier:          o7NrEuniVWzoQAY2qF07C3VrwLtcPb89+eqsYRONXDM=
Subject key identifier:   32:0C:89:CF:EB:53:47:65:97:58:68:B7:65:51:ED:97:EE:B9:D4:2B
Certificate issuer:       /CN=08AA2E4D3C7CDF9626D331ACD38D1719F3D4A72D
Certificate serial:       6C9CC09DC922BDF1DC08D95E9630A54B0DFF4B23
Authority key identifier: 08:AA:2E:4D:3C:7C:DF:96:26:D3:31:AC:D3:8D:17:19:F3:D4:A7:2D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08AA2E4D3C7CDF9626D331ACD38D1719F3D4A72D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8D4BB2421C24D19F3123B0C681B01AD82A92941582C9DABB9493E097F3F2F893/0/323830333a626265303a3730303a3a2f34302d3430203d3e20323730303838.roa
Signing time:             Wed 29 Jan 2025 15:30:02 +0000
ROA not before:           Wed 29 Jan 2025 15:25:02 +0000
ROA not after:            Wed 28 Jan 2026 15:30:02 +0000
asID:                     270088
IP address blocks:        2803:bbe0:700::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8D4BB2421C24D19F3123B0C681B01AD82A92941582C9DABB9493E097F3F2F893/0/08AA2E4D3C7CDF9626D331ACD38D1719F3D4A72D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8D4BB2421C24D19F3123B0C681B01AD82A92941582C9DABB9493E097F3F2F893/0/08AA2E4D3C7CDF9626D331ACD38D1719F3D4A72D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08AA2E4D3C7CDF9626D331ACD38D1719F3D4A72D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:9c:c0:9d:c9:22:bd:f1:dc:08:d9:5e:96:30:a5:4b:0d:ff:4b:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08AA2E4D3C7CDF9626D331ACD38D1719F3D4A72D
        Validity
            Not Before: Jan 29 15:25:02 2025 GMT
            Not After : Jan 28 15:30:02 2026 GMT
        Subject: CN=320C89CFEB534765975868B76551ED97EEB9D42B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:7d:01:68:a0:ec:ee:65:90:86:76:87:cf:37:
                    fa:16:c7:43:e0:50:f6:ea:12:30:41:bd:77:68:bb:
                    cc:65:db:b7:cb:96:77:13:b6:6f:8e:3d:d8:3d:9c:
                    a9:ca:7d:79:91:eb:29:89:21:93:37:e4:85:ad:b8:
                    36:53:15:9e:dd:a7:a3:38:f9:0a:8d:a5:62:0a:a6:
                    88:d6:37:a3:7e:96:47:5f:f0:12:3e:48:27:65:1d:
                    56:13:db:17:fa:8b:e0:7a:ba:ef:68:c4:16:f7:da:
                    8b:a3:1a:0c:85:4d:f7:fe:77:09:86:7f:37:3b:99:
                    fa:cc:8e:fc:56:80:73:b8:35:20:6d:e2:e7:7f:2d:
                    95:5c:a6:95:9d:ad:f2:ee:d5:54:48:48:5b:ec:b8:
                    80:63:34:6d:8f:79:23:64:9f:f4:b0:4b:00:8b:da:
                    8b:31:17:db:44:83:07:70:4a:10:f1:2e:93:9b:56:
                    42:b8:83:26:ac:30:a2:35:bc:47:57:7b:42:b0:89:
                    8e:8e:6a:1b:6a:d9:72:50:d4:9a:8d:04:d5:39:0d:
                    35:e7:c9:2c:a0:3f:05:fe:99:d4:9d:0b:bd:95:f6:
                    71:cd:ee:50:ab:ca:5d:c4:41:5a:1a:da:c0:6d:39:
                    b5:36:e3:fe:e7:eb:16:ba:d8:25:93:24:c6:70:f3:
                    3f:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:0C:89:CF:EB:53:47:65:97:58:68:B7:65:51:ED:97:EE:B9:D4:2B
            X509v3 Authority Key Identifier:
                keyid:08:AA:2E:4D:3C:7C:DF:96:26:D3:31:AC:D3:8D:17:19:F3:D4:A7:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8D4BB2421C24D19F3123B0C681B01AD82A92941582C9DABB9493E097F3F2F893/0/08AA2E4D3C7CDF9626D331ACD38D1719F3D4A72D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08AA2E4D3C7CDF9626D331ACD38D1719F3D4A72D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8D4BB2421C24D19F3123B0C681B01AD82A92941582C9DABB9493E097F3F2F893/0/323830333a626265303a3730303a3a2f34302d3430203d3e20323730303838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:bbe0:700::/40

    Signature Algorithm: sha256WithRSAEncryption
         8e:c1:3f:1b:41:dd:8c:77:1a:24:70:7d:2d:00:96:6a:f6:51:
         6b:d0:10:4f:d6:01:15:c3:31:79:ac:49:5f:bb:81:70:0c:27:
         6f:bf:d9:38:b2:cd:94:5b:68:6a:0c:de:8a:f0:d3:80:b5:ad:
         2d:d3:e1:ba:30:f7:1b:43:65:17:18:eb:64:89:ce:f5:97:9d:
         4b:16:57:d5:4e:03:ae:ca:fa:d3:72:5e:aa:90:d8:15:cc:54:
         6f:92:91:ee:4a:e8:35:69:84:14:1d:98:7f:0a:31:e0:69:20:
         94:e0:67:9b:2e:82:a2:0d:bc:c2:f5:7f:ad:e3:d4:b0:7d:08:
         85:e6:b5:96:0a:45:92:94:28:ef:0b:ec:e5:ae:50:70:62:be:
         be:c9:67:8d:36:6e:04:6e:0a:82:ff:2a:44:df:93:e5:a0:9d:
         58:52:3b:cb:27:53:f3:b7:35:15:53:68:eb:f8:09:62:ff:85:
         99:33:9a:e8:27:a7:9e:40:25:de:15:e3:47:e0:e2:18:8f:65:
         b4:82:18:b2:38:6d:62:ce:3e:62:16:b3:50:58:9f:42:a7:59:
         db:b6:ca:36:9a:ad:d7:06:e2:6a:60:a1:3f:8d:1d:18:e5:c5:
         b8:db:74:fd:46:f9:04:65:03:4a:40:84:f6:8f:7f:60:b0:35:
         29:f7:d2:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:59:12 2025 by rpki-client