Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/91F3C1ECF874A453A4947E40E8F04A99F468AD3BF17A8132380702EE8748718C/0/323830333a396163303a3a2f33322d3438203d3e20323731383832.roa
File:                     323830333a396163303a3a2f33322d3438203d3e20323731383832.roa (raw, json)
Hash identifier:          PC7+F+5JF8mUNajEjRVajzRUMEmcXPL1R8ZIt3aWZoA=
Subject key identifier:   87:4E:AE:25:3E:D6:F3:53:5A:05:C3:0F:CC:33:6A:60:93:8D:02:EB
Certificate issuer:       /CN=089B798E1BD051786195E5F9D02238D550A5EAD7
Certificate serial:       72ABADDD67400D3EA919152F3765ED3513B05E24
Authority key identifier: 08:9B:79:8E:1B:D0:51:78:61:95:E5:F9:D0:22:38:D5:50:A5:EA:D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/089B798E1BD051786195E5F9D02238D550A5EAD7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/91F3C1ECF874A453A4947E40E8F04A99F468AD3BF17A8132380702EE8748718C/0/323830333a396163303a3a2f33322d3438203d3e20323731383832.roa
Signing time:             Tue 04 Feb 2025 18:32:15 +0000
ROA not before:           Tue 04 Feb 2025 18:27:15 +0000
ROA not after:            Tue 03 Feb 2026 18:32:15 +0000
asID:                     271882
IP address blocks:        2803:9ac0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/91F3C1ECF874A453A4947E40E8F04A99F468AD3BF17A8132380702EE8748718C/0/089B798E1BD051786195E5F9D02238D550A5EAD7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/91F3C1ECF874A453A4947E40E8F04A99F468AD3BF17A8132380702EE8748718C/0/089B798E1BD051786195E5F9D02238D550A5EAD7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/089B798E1BD051786195E5F9D02238D550A5EAD7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 04:49:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:ab:ad:dd:67:40:0d:3e:a9:19:15:2f:37:65:ed:35:13:b0:5e:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=089B798E1BD051786195E5F9D02238D550A5EAD7
        Validity
            Not Before: Feb  4 18:27:15 2025 GMT
            Not After : Feb  3 18:32:15 2026 GMT
        Subject: CN=874EAE253ED6F3535A05C30FCC336A60938D02EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c1:55:ba:ec:d8:81:18:d8:d7:a7:2c:fc:98:
                    c2:44:3a:48:67:c4:3c:33:ff:32:2c:89:38:38:ea:
                    fe:e9:f3:e0:7b:53:f6:f3:07:ff:83:b5:39:2e:51:
                    82:bd:f3:56:2d:2a:fd:64:73:31:71:d5:71:aa:2b:
                    a0:56:ce:f9:3a:95:ef:3e:49:dd:6b:c5:d4:b3:90:
                    57:7c:fa:a3:c2:1d:16:ae:5c:1b:59:6d:bf:99:49:
                    01:a9:81:c4:2a:e2:b4:b8:f3:ca:79:cb:1f:2a:14:
                    ab:d0:35:ca:66:c9:85:90:a5:c6:d5:df:ec:38:50:
                    45:df:ac:ab:cd:71:19:11:c4:ae:60:4f:11:61:0c:
                    11:62:e4:24:d0:92:6d:8f:e4:86:69:15:53:60:30:
                    33:39:7a:24:4d:14:0e:84:25:c3:16:e4:30:38:44:
                    0c:e4:0b:bb:35:fe:5f:5a:8b:f3:b9:eb:14:01:69:
                    e1:5c:3d:01:11:9a:24:14:be:40:49:1f:44:77:26:
                    c1:b7:6a:d4:88:a2:bb:a8:21:ee:93:33:af:94:fb:
                    18:38:43:c6:1a:fd:5a:f1:42:0e:cd:e6:24:30:56:
                    33:26:8c:e7:56:96:da:65:c4:e4:43:69:ea:84:a9:
                    c6:49:33:be:e3:f7:ea:59:3e:1b:26:86:d8:de:60:
                    1e:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:4E:AE:25:3E:D6:F3:53:5A:05:C3:0F:CC:33:6A:60:93:8D:02:EB
            X509v3 Authority Key Identifier:
                keyid:08:9B:79:8E:1B:D0:51:78:61:95:E5:F9:D0:22:38:D5:50:A5:EA:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/91F3C1ECF874A453A4947E40E8F04A99F468AD3BF17A8132380702EE8748718C/0/089B798E1BD051786195E5F9D02238D550A5EAD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/089B798E1BD051786195E5F9D02238D550A5EAD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/91F3C1ECF874A453A4947E40E8F04A99F468AD3BF17A8132380702EE8748718C/0/323830333a396163303a3a2f33322d3438203d3e20323731383832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9ac0::/32

    Signature Algorithm: sha256WithRSAEncryption
         7d:7f:89:05:7b:63:fe:4a:d9:5c:7a:7c:a4:10:88:0a:f8:85:
         61:84:ab:f1:62:a4:f7:28:e0:05:9a:93:25:4a:09:93:c4:4f:
         9e:f0:63:cf:b8:03:8e:70:47:ca:87:3f:6b:f5:d1:42:f1:8e:
         be:14:da:d9:43:98:f7:fa:e4:79:ba:92:d9:c0:4c:2b:aa:22:
         d0:fe:1d:14:eb:81:f9:ae:6a:8b:bf:d7:9f:9a:33:cc:53:46:
         0c:9c:46:b6:6c:aa:cb:37:b3:6a:9c:d9:5f:9b:77:23:7d:e0:
         04:08:9b:f7:6c:9f:b4:70:d3:f0:4b:15:61:6d:7d:6b:e2:ea:
         92:aa:c0:15:13:f9:0d:65:74:8d:63:19:0b:fe:8d:06:2b:61:
         7f:de:58:cd:e5:17:85:fa:88:92:ce:05:45:bc:28:34:ca:42:
         b4:52:c2:95:ec:2b:ad:f2:0b:e3:b0:df:37:36:9a:ae:27:83:
         ba:f9:05:54:9e:24:df:20:02:fb:fc:a0:a8:1e:70:75:ec:a3:
         1d:18:6c:db:76:21:93:4f:a1:6b:40:13:e9:42:27:f1:5f:41:
         0c:91:94:ea:b6:0d:13:ed:50:99:cb:32:e9:37:86:47:da:c1:
         96:22:c4:6c:05:1e:c8:1a:64:1e:13:97:81:1f:3d:80:48:f6:
         5d:0c:59:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 22:17:14 2025 by rpki-client