Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9C90199A26FC4C3B4378784207C6FDEFD924245D60C6B84C87C517DCB0A637F1/0/323830333a313339303a3a2f33322d3438203d3e20323733303230.roa
File:                     323830333a313339303a3a2f33322d3438203d3e20323733303230.roa (raw, json)
Hash identifier:          R8hScWxaf0D6unDrSQw+WLljgDZgGWMOhXh9qUZKkt4=
Subject key identifier:   FE:15:BB:59:72:99:DF:8A:D5:29:F9:23:17:41:71:F4:34:C3:A7:B2
Certificate issuer:       /CN=2A36D11026748140183D59FD0064F6742F81E00C
Certificate serial:       44FA30A670029A34CDC9AD8BEBDA0C3380EAA13A
Authority key identifier: 2A:36:D1:10:26:74:81:40:18:3D:59:FD:00:64:F6:74:2F:81:E0:0C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2A36D11026748140183D59FD0064F6742F81E00C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9C90199A26FC4C3B4378784207C6FDEFD924245D60C6B84C87C517DCB0A637F1/0/323830333a313339303a3a2f33322d3438203d3e20323733303230.roa
Signing time:             Tue 04 Feb 2025 20:02:34 +0000
ROA not before:           Tue 04 Feb 2025 19:57:34 +0000
ROA not after:            Tue 03 Feb 2026 20:02:34 +0000
asID:                     273020
IP address blocks:        2803:1390::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9C90199A26FC4C3B4378784207C6FDEFD924245D60C6B84C87C517DCB0A637F1/0/2A36D11026748140183D59FD0064F6742F81E00C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9C90199A26FC4C3B4378784207C6FDEFD924245D60C6B84C87C517DCB0A637F1/0/2A36D11026748140183D59FD0064F6742F81E00C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2A36D11026748140183D59FD0064F6742F81E00C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:fa:30:a6:70:02:9a:34:cd:c9:ad:8b:eb:da:0c:33:80:ea:a1:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A36D11026748140183D59FD0064F6742F81E00C
        Validity
            Not Before: Feb  4 19:57:34 2025 GMT
            Not After : Feb  3 20:02:34 2026 GMT
        Subject: CN=FE15BB597299DF8AD529F923174171F434C3A7B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:61:22:da:16:13:a2:7a:4e:4d:32:e0:cc:ed:
                    3b:c3:a6:e1:58:f9:a7:67:9c:f1:da:d5:df:bb:8f:
                    1a:01:a9:d5:f1:30:3c:3c:0c:38:60:f2:71:94:b1:
                    f9:fc:10:60:b1:f4:29:77:b8:db:b3:54:00:73:d1:
                    79:c4:b7:41:87:fb:78:57:e8:49:94:e0:3c:5a:79:
                    2d:ff:ba:24:4b:66:e9:2c:8a:e9:83:03:bf:49:56:
                    09:13:e5:c0:6e:6c:21:8a:73:78:c8:81:c6:6c:0b:
                    4c:3a:6d:d4:04:03:c4:04:9d:35:6e:a5:c9:66:8d:
                    e0:35:0b:81:dd:d6:3a:89:38:92:49:b3:ac:8a:78:
                    17:d8:64:42:79:d5:ec:04:9f:f5:c4:08:6d:1b:d4:
                    10:47:1d:2d:c0:5c:ff:6d:9b:5d:93:aa:34:fb:3d:
                    ab:c4:eb:fe:3a:0a:c1:2c:04:3b:f0:6a:b6:38:e0:
                    90:6a:37:cd:30:f7:38:ea:ce:88:07:b6:94:a5:c6:
                    75:c0:78:a1:a4:48:0a:22:68:96:ec:e2:57:b7:d7:
                    70:c7:a0:ae:60:bc:1a:d5:3e:df:c7:98:23:19:0f:
                    e6:82:7e:ae:6e:27:2f:b4:17:1b:cc:3c:28:31:8d:
                    d0:63:d4:15:2f:fe:56:6a:0f:dd:b5:35:06:c1:76:
                    13:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:15:BB:59:72:99:DF:8A:D5:29:F9:23:17:41:71:F4:34:C3:A7:B2
            X509v3 Authority Key Identifier:
                keyid:2A:36:D1:10:26:74:81:40:18:3D:59:FD:00:64:F6:74:2F:81:E0:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9C90199A26FC4C3B4378784207C6FDEFD924245D60C6B84C87C517DCB0A637F1/0/2A36D11026748140183D59FD0064F6742F81E00C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2A36D11026748140183D59FD0064F6742F81E00C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9C90199A26FC4C3B4378784207C6FDEFD924245D60C6B84C87C517DCB0A637F1/0/323830333a313339303a3a2f33322d3438203d3e20323733303230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1390::/32

    Signature Algorithm: sha256WithRSAEncryption
         22:79:e7:30:f1:e3:49:40:84:64:d3:46:db:3a:59:45:5b:76:
         02:6a:64:03:b8:f9:90:0c:4e:f6:df:ab:19:81:f0:37:5a:8e:
         ad:57:a0:6e:a9:eb:f4:89:e1:6c:9c:d0:1e:e9:c5:68:f8:cf:
         61:37:06:00:52:bf:83:7b:04:ec:a7:fd:fb:75:b1:b6:96:43:
         61:84:05:9e:ac:a4:40:bd:ca:6e:52:1b:91:1f:ac:24:f4:82:
         c1:5f:35:91:cc:cd:b5:02:ce:b5:fc:fc:83:e0:4f:e2:53:72:
         85:65:ea:83:68:ae:9d:5e:59:b4:b7:a1:16:ce:e1:fc:e0:d9:
         bf:6a:ba:58:87:bf:f3:08:fe:7b:40:23:e2:4e:bf:a7:56:bd:
         82:d5:c1:a1:51:7c:30:76:71:5b:0c:a0:08:33:d3:2d:97:d6:
         ad:40:89:e2:22:09:d8:be:19:88:46:e7:41:94:dc:41:26:9b:
         81:e2:1b:81:6b:36:1a:df:ea:9c:7e:1d:b1:4d:5c:7c:6d:e3:
         cb:81:23:a6:e9:07:46:05:5a:22:d9:d1:30:09:f6:fd:c9:50:
         05:bb:23:df:93:ef:b9:22:5b:b0:4f:c2:37:ba:fa:e2:41:2c:
         22:08:2f:15:82:b7:c7:74:19:5c:33:fd:41:3a:d2:aa:74:48:
         78:02:1b:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:55:54 2025 by rpki-client