Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8D4BB2421C24D19F3123B0C681B01AD82A92941582C9DABB9493E097F3F2F893/0/323830333a626265303a6630303a3a2f34302d3430203d3e20323730303838.roa
File:                     323830333a626265303a6630303a3a2f34302d3430203d3e20323730303838.roa (raw, json)
Hash identifier:          eAf2ZQ77Qs2bxfokzka5p0VzhIZvsCKr6m9j0JFQmB0=
Subject key identifier:   AC:88:F3:4C:C0:64:BB:65:B0:69:27:5B:3F:3B:2B:70:B0:DB:93:F3
Certificate issuer:       /CN=08AA2E4D3C7CDF9626D331ACD38D1719F3D4A72D
Certificate serial:       447F697235CE77FC17A87C0C8828E2352A1DE95C
Authority key identifier: 08:AA:2E:4D:3C:7C:DF:96:26:D3:31:AC:D3:8D:17:19:F3:D4:A7:2D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08AA2E4D3C7CDF9626D331ACD38D1719F3D4A72D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8D4BB2421C24D19F3123B0C681B01AD82A92941582C9DABB9493E097F3F2F893/0/323830333a626265303a6630303a3a2f34302d3430203d3e20323730303838.roa
Signing time:             Wed 29 Jan 2025 15:30:02 +0000
ROA not before:           Wed 29 Jan 2025 15:25:02 +0000
ROA not after:            Wed 28 Jan 2026 15:30:02 +0000
asID:                     270088
IP address blocks:        2803:bbe0:f00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8D4BB2421C24D19F3123B0C681B01AD82A92941582C9DABB9493E097F3F2F893/0/08AA2E4D3C7CDF9626D331ACD38D1719F3D4A72D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8D4BB2421C24D19F3123B0C681B01AD82A92941582C9DABB9493E097F3F2F893/0/08AA2E4D3C7CDF9626D331ACD38D1719F3D4A72D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08AA2E4D3C7CDF9626D331ACD38D1719F3D4A72D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:7f:69:72:35:ce:77:fc:17:a8:7c:0c:88:28:e2:35:2a:1d:e9:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08AA2E4D3C7CDF9626D331ACD38D1719F3D4A72D
        Validity
            Not Before: Jan 29 15:25:02 2025 GMT
            Not After : Jan 28 15:30:02 2026 GMT
        Subject: CN=AC88F34CC064BB65B069275B3F3B2B70B0DB93F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:5b:27:59:96:cf:bf:db:42:c1:0e:4e:00:91:
                    6c:07:13:bd:71:98:37:56:84:ce:95:b7:e9:5f:f8:
                    3d:2d:af:76:ad:24:7e:20:91:e3:ff:db:09:53:6b:
                    3c:49:de:6e:84:3e:5e:c5:6c:b9:e9:37:a4:92:a2:
                    7c:c4:cb:c9:22:9d:de:dc:81:05:fe:02:3c:77:e1:
                    fc:0d:90:c0:9c:1f:c7:fe:bf:ad:4d:7f:0b:51:a2:
                    9c:bf:4d:ed:46:de:20:1a:36:8f:0f:39:05:63:7f:
                    2d:ea:ac:41:72:19:07:af:e3:c5:a4:7c:26:cc:ba:
                    35:51:ce:e1:06:87:f4:28:cb:69:69:1c:6b:fb:33:
                    c2:ea:7b:ff:91:75:14:0d:46:28:1f:b6:ab:fb:25:
                    99:36:f7:13:27:20:aa:75:66:f3:6f:9d:34:69:16:
                    f4:c2:97:c5:c7:9e:8e:51:73:a1:73:ef:3e:df:5c:
                    fe:f4:c8:76:37:9c:4f:60:26:42:e5:b0:39:98:63:
                    d2:f0:d7:b4:83:73:d3:ef:d8:b5:d3:2a:1b:09:b4:
                    86:62:f4:df:b3:c5:2b:bb:93:fa:f7:6a:06:33:fb:
                    ff:83:19:2c:b6:b3:ec:d3:47:24:ba:d6:03:e7:1f:
                    55:68:e3:5e:39:f8:75:60:05:92:b2:05:5a:df:39:
                    ef:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:88:F3:4C:C0:64:BB:65:B0:69:27:5B:3F:3B:2B:70:B0:DB:93:F3
            X509v3 Authority Key Identifier:
                keyid:08:AA:2E:4D:3C:7C:DF:96:26:D3:31:AC:D3:8D:17:19:F3:D4:A7:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8D4BB2421C24D19F3123B0C681B01AD82A92941582C9DABB9493E097F3F2F893/0/08AA2E4D3C7CDF9626D331ACD38D1719F3D4A72D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08AA2E4D3C7CDF9626D331ACD38D1719F3D4A72D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8D4BB2421C24D19F3123B0C681B01AD82A92941582C9DABB9493E097F3F2F893/0/323830333a626265303a6630303a3a2f34302d3430203d3e20323730303838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:bbe0:f00::/40

    Signature Algorithm: sha256WithRSAEncryption
         4e:f7:49:a8:35:66:cb:7b:00:5a:91:ee:dd:05:a1:a7:ea:b6:
         37:29:5e:2b:a8:4a:7b:a8:4e:0c:51:8d:2c:7a:c8:03:39:36:
         f2:e3:d3:cb:c4:d8:85:74:68:36:79:f6:e7:eb:51:84:85:c8:
         1d:27:96:3d:3c:69:04:c4:5f:80:a3:87:50:c7:98:a8:3d:c3:
         ac:de:4f:60:0c:40:79:f6:f1:d9:03:69:74:ff:51:81:62:90:
         70:4f:cc:38:13:21:f6:aa:f1:d1:e0:14:10:65:38:bd:95:63:
         9a:42:0e:c2:67:27:b7:1e:c1:98:09:d7:c0:95:03:ba:8b:61:
         eb:94:06:ea:b6:26:74:e4:d4:2c:38:44:bf:96:18:6e:17:ff:
         2d:f1:f6:da:53:6e:6b:28:50:73:18:d2:fe:c5:80:c9:9d:b8:
         17:06:28:58:f9:b9:99:14:fa:af:8f:b8:37:06:2e:92:1a:b4:
         02:69:aa:ec:47:ff:98:1b:50:43:4f:99:8d:12:4e:57:6a:c1:
         54:1e:85:81:7d:dc:b8:68:93:27:d8:48:20:be:8e:3e:32:a5:
         25:7a:f8:32:58:bb:5e:00:bd:85:f1:4e:2a:14:22:50:93:20:
         66:bf:0d:52:88:ab:98:a9:5d:8c:1b:4c:a8:85:8c:fc:0c:d2:
         42:9b:99:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:57:40 2025 by rpki-client