Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9F0414A690C6398D5C5675D5BB60F39D1588A13F003881671E58745965475F75/0/323830333a396539303a3a2f33362d3336203d3e20323732393231.roa
File:                     323830333a396539303a3a2f33362d3336203d3e20323732393231.roa (raw, json)
Hash identifier:          dIySIz9venbFkDuq1nv6I3pR4Cl4d7Y+MAYd/RMrcTU=
Subject key identifier:   10:5D:3F:61:AD:BE:B4:F8:3B:43:EE:66:7C:76:4E:D6:36:87:FB:C7
Certificate issuer:       /CN=9AAD2F02A801741992977CEB681E0BF3863AF511
Certificate serial:       11C0746461C297EEE778E7B60E13A02132FF4C07
Authority key identifier: 9A:AD:2F:02:A8:01:74:19:92:97:7C:EB:68:1E:0B:F3:86:3A:F5:11
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9AAD2F02A801741992977CEB681E0BF3863AF511.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9F0414A690C6398D5C5675D5BB60F39D1588A13F003881671E58745965475F75/0/323830333a396539303a3a2f33362d3336203d3e20323732393231.roa
Signing time:             Tue 25 Feb 2025 15:50:01 +0000
ROA not before:           Tue 25 Feb 2025 15:45:01 +0000
ROA not after:            Tue 24 Feb 2026 15:50:01 +0000
asID:                     272921
IP address blocks:        2803:9e90::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9F0414A690C6398D5C5675D5BB60F39D1588A13F003881671E58745965475F75/0/9AAD2F02A801741992977CEB681E0BF3863AF511.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9F0414A690C6398D5C5675D5BB60F39D1588A13F003881671E58745965475F75/0/9AAD2F02A801741992977CEB681E0BF3863AF511.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9AAD2F02A801741992977CEB681E0BF3863AF511.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 20:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:c0:74:64:61:c2:97:ee:e7:78:e7:b6:0e:13:a0:21:32:ff:4c:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9AAD2F02A801741992977CEB681E0BF3863AF511
        Validity
            Not Before: Feb 25 15:45:01 2025 GMT
            Not After : Feb 24 15:50:01 2026 GMT
        Subject: CN=105D3F61ADBEB4F83B43EE667C764ED63687FBC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c2:fa:29:0b:42:da:d4:75:c3:ed:5b:52:09:
                    c9:59:f3:f8:e7:c7:ca:4b:17:51:74:89:90:1c:d2:
                    eb:6e:5f:cd:d7:1d:46:f7:bf:2b:1e:87:ec:b1:81:
                    3c:a4:89:eb:3e:03:36:de:18:f5:81:98:91:59:4b:
                    a9:16:87:b6:8e:aa:9a:bd:79:52:59:4a:2c:2b:0e:
                    0a:cc:74:df:0e:2f:5f:15:60:00:5c:ca:4d:6a:61:
                    da:d7:c7:db:8f:b3:09:17:f1:61:b0:9e:59:43:70:
                    41:0c:99:17:d7:72:c3:97:48:34:d2:fe:65:42:9a:
                    ed:c0:4f:fa:a4:31:88:0b:07:39:d2:20:8e:ba:99:
                    2a:ba:ed:04:6b:dd:26:9b:8f:56:5a:58:ce:94:04:
                    3f:b1:b9:8f:ce:73:39:22:45:8f:d1:e6:d3:58:a0:
                    a8:bf:0d:15:69:5e:96:42:71:61:76:9e:d9:54:36:
                    d4:63:07:c0:51:90:70:1c:56:a0:de:9d:5b:3a:22:
                    43:0f:75:4f:7e:a8:f4:e7:3f:6a:5c:af:15:27:1a:
                    fd:e6:8c:8a:62:85:54:33:83:b5:99:30:48:84:be:
                    ce:22:3f:75:31:7e:3a:c5:b9:95:d6:c8:3f:73:f6:
                    7c:d3:58:1d:fb:ee:4f:b9:00:f5:83:d1:49:85:92:
                    03:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:5D:3F:61:AD:BE:B4:F8:3B:43:EE:66:7C:76:4E:D6:36:87:FB:C7
            X509v3 Authority Key Identifier:
                keyid:9A:AD:2F:02:A8:01:74:19:92:97:7C:EB:68:1E:0B:F3:86:3A:F5:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9F0414A690C6398D5C5675D5BB60F39D1588A13F003881671E58745965475F75/0/9AAD2F02A801741992977CEB681E0BF3863AF511.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9AAD2F02A801741992977CEB681E0BF3863AF511.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9F0414A690C6398D5C5675D5BB60F39D1588A13F003881671E58745965475F75/0/323830333a396539303a3a2f33362d3336203d3e20323732393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9e90::/36

    Signature Algorithm: sha256WithRSAEncryption
         38:51:23:f9:08:52:16:47:69:78:48:49:a8:72:8d:41:a9:cc:
         54:d9:ae:f2:2d:3e:97:db:e6:8d:c7:b1:ff:6e:d7:51:5f:70:
         6e:9b:af:fd:39:bb:e9:f8:48:50:60:2c:c1:2d:ed:3e:40:c9:
         03:2c:6a:01:e3:49:a6:a2:94:67:d4:5d:b2:98:c2:f9:83:9d:
         d4:23:98:f3:4c:94:8e:9b:f7:08:62:16:00:93:c1:ce:67:3d:
         c3:80:78:f3:1c:84:45:d5:49:e3:1c:ce:84:10:9a:44:5f:57:
         82:f1:a5:e2:00:82:2e:f0:91:ff:de:5e:42:8f:ad:4b:65:df:
         29:34:53:91:b2:1c:72:74:0e:98:b4:f6:a8:96:33:d6:90:a8:
         71:01:03:78:c2:66:f0:7c:75:44:d0:a2:81:ce:80:c2:a5:04:
         f4:bd:59:df:ac:02:50:33:8c:d3:63:cb:a9:b7:f6:31:63:ef:
         94:49:28:ed:bf:1d:4e:37:55:78:ff:86:da:77:d5:ad:bb:a9:
         7b:2b:d9:1d:b8:81:c6:74:78:2b:40:b4:46:2b:c3:f9:4b:3d:
         16:e1:c0:64:ca:3a:c6:83:a2:e5:12:c8:0b:b5:ac:d4:98:bb:
         17:f8:3c:3f:b1:10:f6:d6:77:74:b0:7a:ac:d1:44:3a:37:b1:
         38:83:90:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:47:56 2025 by rpki-client