Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AB7DD4B24DA964B2F0F2497083EB6219C1BA77A7AF55488952597910589F3B75/0/323830333a663065303a3a2f33322d3438203d3e20323639383634.roa
File:                     323830333a663065303a3a2f33322d3438203d3e20323639383634.roa (raw, json)
Hash identifier:          9C83ajoMz+aV5g7+JH8Wv4jFfAuKipILEydM2267OW0=
Subject key identifier:   17:8F:28:A1:D6:5D:09:55:29:02:EF:AD:40:49:56:BC:37:0B:54:77
Certificate issuer:       /CN=4F4B9F71CC12D5FF90BEEDA372D687689D069F57
Certificate serial:       538C09CF492B7AB43E51E9E0BBD097174F63273E
Authority key identifier: 4F:4B:9F:71:CC:12:D5:FF:90:BE:ED:A3:72:D6:87:68:9D:06:9F:57
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4F4B9F71CC12D5FF90BEEDA372D687689D069F57.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AB7DD4B24DA964B2F0F2497083EB6219C1BA77A7AF55488952597910589F3B75/0/323830333a663065303a3a2f33322d3438203d3e20323639383634.roa
Signing time:             Tue 04 Feb 2025 18:16:07 +0000
ROA not before:           Tue 04 Feb 2025 18:11:07 +0000
ROA not after:            Tue 03 Feb 2026 18:16:07 +0000
asID:                     269864
IP address blocks:        2803:f0e0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AB7DD4B24DA964B2F0F2497083EB6219C1BA77A7AF55488952597910589F3B75/0/4F4B9F71CC12D5FF90BEEDA372D687689D069F57.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AB7DD4B24DA964B2F0F2497083EB6219C1BA77A7AF55488952597910589F3B75/0/4F4B9F71CC12D5FF90BEEDA372D687689D069F57.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4F4B9F71CC12D5FF90BEEDA372D687689D069F57.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 08:45:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:8c:09:cf:49:2b:7a:b4:3e:51:e9:e0:bb:d0:97:17:4f:63:27:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F4B9F71CC12D5FF90BEEDA372D687689D069F57
        Validity
            Not Before: Feb  4 18:11:07 2025 GMT
            Not After : Feb  3 18:16:07 2026 GMT
        Subject: CN=178F28A1D65D09552902EFAD404956BC370B5477
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:6f:51:a1:d0:c0:1f:ff:90:bd:6d:29:6d:56:
                    54:c5:62:ee:c2:c7:84:fb:b2:a5:68:45:e3:58:5e:
                    2c:2d:d5:ac:b9:19:24:ed:fa:37:aa:39:e7:f7:4f:
                    f3:d2:77:53:f6:3a:3f:1f:27:c7:44:6f:47:27:ef:
                    6f:b6:5a:95:4b:18:29:61:89:38:01:3e:60:01:2e:
                    84:6f:e8:c4:c7:7f:50:ce:c5:d5:6e:88:f5:dc:27:
                    3e:cd:60:4d:99:b3:32:c6:b9:31:8f:aa:8d:9d:e5:
                    73:b8:9e:1d:5d:bc:6d:90:d4:82:1b:f1:af:d8:85:
                    79:25:b0:f0:d4:8a:7a:47:2e:74:b0:ae:73:ca:67:
                    d6:b9:d8:d7:b4:82:e8:22:75:a6:b2:6d:ff:1b:d3:
                    67:8a:36:64:03:d7:58:bc:06:77:d1:b7:a7:62:c1:
                    7d:a4:df:c6:06:a6:2e:28:7d:61:28:a5:aa:57:5b:
                    2d:01:27:c3:65:69:db:da:5d:74:72:20:24:0a:bd:
                    9a:20:21:1f:fc:ec:d2:8e:11:e2:2e:20:7b:42:94:
                    91:62:f9:63:d8:fe:11:f8:4a:35:95:9a:f5:9c:25:
                    56:e9:05:ba:88:8a:32:1a:21:61:47:9a:7e:c5:8b:
                    09:5e:6e:28:20:e0:7e:86:91:ac:90:55:df:1f:cc:
                    9f:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:8F:28:A1:D6:5D:09:55:29:02:EF:AD:40:49:56:BC:37:0B:54:77
            X509v3 Authority Key Identifier:
                keyid:4F:4B:9F:71:CC:12:D5:FF:90:BE:ED:A3:72:D6:87:68:9D:06:9F:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AB7DD4B24DA964B2F0F2497083EB6219C1BA77A7AF55488952597910589F3B75/0/4F4B9F71CC12D5FF90BEEDA372D687689D069F57.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4F4B9F71CC12D5FF90BEEDA372D687689D069F57.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AB7DD4B24DA964B2F0F2497083EB6219C1BA77A7AF55488952597910589F3B75/0/323830333a663065303a3a2f33322d3438203d3e20323639383634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f0e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         69:95:6c:a0:4f:10:72:99:cb:ba:08:71:ac:d9:d9:c8:02:19:
         ad:49:e1:75:d9:5f:d1:17:37:b0:e7:7a:82:d2:ff:0a:9c:07:
         07:aa:61:40:58:1d:c0:27:45:bf:7d:a3:bc:f8:68:4a:a6:93:
         79:a1:cf:3d:3e:27:12:24:e1:67:1e:e0:71:fa:e8:ed:7f:5b:
         e0:61:a7:e4:e1:5b:11:17:34:62:02:74:f0:7c:ea:3c:7c:b0:
         37:17:ef:55:49:af:5f:34:a5:8f:83:af:58:fc:77:63:be:46:
         8a:36:3d:e6:2a:20:bc:bf:23:12:5b:4f:0f:39:fc:ff:1b:04:
         86:2e:db:f1:8c:55:b9:e1:03:a1:e4:8f:08:01:62:e8:42:26:
         86:a0:b1:d7:e0:5a:28:5e:76:bd:97:c6:0a:9b:a3:c0:2f:ed:
         d2:0f:1d:a8:16:4b:e4:bd:b8:b2:11:22:92:3d:21:da:de:d5:
         e0:cf:e1:a2:68:0c:80:7f:f2:4d:d8:7a:62:be:27:86:8a:91:
         30:6c:65:24:b0:38:33:35:a8:73:23:07:88:99:b1:da:ae:88:
         a4:e4:e0:7b:6e:af:98:16:1c:02:60:d0:c0:8e:99:0b:b9:03:
         47:99:47:a0:d3:cc:56:c0:69:74:03:48:f7:85:cb:95:25:3f:
         a6:4b:eb:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:50:41 2025 by rpki-client