Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8D4BB2421C24D19F3123B0C681B01AD82A92941582C9DABB9493E097F3F2F893/0/323830333a626265303a3930303a3a2f34302d3430203d3e20323730303838.roa
File:                     323830333a626265303a3930303a3a2f34302d3430203d3e20323730303838.roa (raw, json)
Hash identifier:          agE0M0lFtQc1VANpkHA6fajhH2henOEPVncqTPZduXg=
Subject key identifier:   2E:38:B5:A3:ED:08:6B:F7:30:02:26:FB:8B:59:13:8F:F8:08:0E:A3
Certificate issuer:       /CN=08AA2E4D3C7CDF9626D331ACD38D1719F3D4A72D
Certificate serial:       5F5A35D587629F208CC3D553633E2B7EF6C8E3A6
Authority key identifier: 08:AA:2E:4D:3C:7C:DF:96:26:D3:31:AC:D3:8D:17:19:F3:D4:A7:2D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08AA2E4D3C7CDF9626D331ACD38D1719F3D4A72D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8D4BB2421C24D19F3123B0C681B01AD82A92941582C9DABB9493E097F3F2F893/0/323830333a626265303a3930303a3a2f34302d3430203d3e20323730303838.roa
Signing time:             Wed 29 Jan 2025 15:30:01 +0000
ROA not before:           Wed 29 Jan 2025 15:25:01 +0000
ROA not after:            Wed 28 Jan 2026 15:30:01 +0000
asID:                     270088
IP address blocks:        2803:bbe0:900::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8D4BB2421C24D19F3123B0C681B01AD82A92941582C9DABB9493E097F3F2F893/0/08AA2E4D3C7CDF9626D331ACD38D1719F3D4A72D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8D4BB2421C24D19F3123B0C681B01AD82A92941582C9DABB9493E097F3F2F893/0/08AA2E4D3C7CDF9626D331ACD38D1719F3D4A72D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08AA2E4D3C7CDF9626D331ACD38D1719F3D4A72D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:5a:35:d5:87:62:9f:20:8c:c3:d5:53:63:3e:2b:7e:f6:c8:e3:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08AA2E4D3C7CDF9626D331ACD38D1719F3D4A72D
        Validity
            Not Before: Jan 29 15:25:01 2025 GMT
            Not After : Jan 28 15:30:01 2026 GMT
        Subject: CN=2E38B5A3ED086BF7300226FB8B59138FF8080EA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:0b:e7:6d:35:1c:3e:59:03:f2:78:29:8c:2d:
                    03:ac:85:94:ef:83:1f:00:8c:77:65:ae:2f:c1:78:
                    fd:70:3a:0b:55:f4:6d:ad:ee:37:89:c6:ea:62:29:
                    a3:d0:1d:f5:a3:b6:28:2e:75:61:29:04:28:e7:8a:
                    b1:3e:46:41:37:f6:93:39:37:a6:8c:82:7f:ab:ea:
                    7e:a6:9c:92:0b:cd:ba:8b:82:01:e4:bd:db:7a:25:
                    b2:91:c1:45:8d:3f:7e:81:62:3f:0e:d0:eb:b7:8c:
                    34:86:1c:f4:f8:4b:f3:3c:71:64:cb:fa:f4:d0:51:
                    c5:77:df:65:8a:75:06:43:db:be:b2:69:06:31:dd:
                    39:cd:d6:41:7b:cf:72:c7:f6:b4:d8:b7:2c:cd:a9:
                    ed:00:b1:54:97:2a:e7:5f:30:32:a8:0c:b2:4c:eb:
                    5f:17:b5:ab:28:02:13:b1:ef:d6:96:77:50:42:98:
                    0a:ce:b8:80:c2:14:60:6d:12:35:ea:29:36:ec:6a:
                    f7:9d:b1:0c:2a:ab:70:ee:fa:43:26:71:f3:22:8b:
                    df:72:b7:f3:b8:c5:59:b3:02:e6:43:47:f0:c6:40:
                    ad:28:3f:35:45:41:02:3e:29:6f:2b:96:2f:38:1e:
                    b9:ac:29:90:3f:6f:16:d1:cd:1d:00:3b:b6:d2:1a:
                    6f:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:38:B5:A3:ED:08:6B:F7:30:02:26:FB:8B:59:13:8F:F8:08:0E:A3
            X509v3 Authority Key Identifier:
                keyid:08:AA:2E:4D:3C:7C:DF:96:26:D3:31:AC:D3:8D:17:19:F3:D4:A7:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8D4BB2421C24D19F3123B0C681B01AD82A92941582C9DABB9493E097F3F2F893/0/08AA2E4D3C7CDF9626D331ACD38D1719F3D4A72D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08AA2E4D3C7CDF9626D331ACD38D1719F3D4A72D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8D4BB2421C24D19F3123B0C681B01AD82A92941582C9DABB9493E097F3F2F893/0/323830333a626265303a3930303a3a2f34302d3430203d3e20323730303838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:bbe0:900::/40

    Signature Algorithm: sha256WithRSAEncryption
         3e:74:4a:e3:4b:aa:9f:47:30:03:d6:cc:00:e5:cf:9b:73:60:
         87:0d:b2:8a:19:d2:d7:bd:62:9f:d4:c0:d7:1e:37:cb:3d:c1:
         67:45:84:57:87:c4:c7:a7:70:c7:b3:c2:89:1b:14:6f:c7:b7:
         36:2a:30:73:3f:9b:2e:fd:cc:81:89:b7:00:e8:ac:92:80:6f:
         8e:b0:66:cf:67:cc:62:8f:9c:d7:d7:e9:fa:5b:d0:e1:49:14:
         8d:a0:b1:43:e8:a6:1e:93:53:a9:75:2f:6d:36:d2:d0:25:79:
         71:8e:03:14:74:3e:60:9d:00:65:c1:dc:29:d0:7e:8d:98:b7:
         66:5e:95:28:6d:20:83:6e:47:4c:13:8c:03:28:ae:1d:39:c2:
         01:3d:ec:55:b3:52:95:14:14:2e:87:4d:78:55:39:7a:5d:c0:
         07:79:18:82:e0:54:6a:b0:7f:8b:dd:59:17:db:fd:62:1c:1b:
         88:13:5d:ea:9c:aa:d3:d6:48:3c:fa:d3:d6:44:3b:f8:d1:85:
         e4:ae:10:71:1e:3d:e5:41:60:7d:90:4e:2f:79:2f:07:a1:fe:
         02:fb:14:33:a1:70:95:61:97:76:0b:b7:d4:73:19:8a:e3:ed:
         dd:96:fe:33:54:12:32:65:e6:ed:37:16:ef:3b:7c:44:cc:de:
         ed:1e:58:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:59:10 2025 by rpki-client