Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B3E50B11115C084D6BA8197C0580CAAFEFDFD546F917BF6C3FCE3125AD581653/0/323830333a346139303a3a2f34382d3438203d3e20323732383735.roa
File:                     323830333a346139303a3a2f34382d3438203d3e20323732383735.roa (raw, json)
Hash identifier:          B45c5y0Ppcj4RVp/w6gXIJ7rZ3gNqgcfi6qEYmom33g=
Subject key identifier:   A7:D0:98:EC:9A:0A:21:2D:3E:FA:96:74:AF:AA:75:C5:B5:26:9A:3D
Certificate issuer:       /CN=3CCAFF3C26A38C5EE9BF02C49848A13D82DFE81F
Certificate serial:       14FD8F50F3663C68E154A828F45B07EB2678C9BF
Authority key identifier: 3C:CA:FF:3C:26:A3:8C:5E:E9:BF:02:C4:98:48:A1:3D:82:DF:E8:1F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3CCAFF3C26A38C5EE9BF02C49848A13D82DFE81F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B3E50B11115C084D6BA8197C0580CAAFEFDFD546F917BF6C3FCE3125AD581653/0/323830333a346139303a3a2f34382d3438203d3e20323732383735.roa
Signing time:             Tue 04 Feb 2025 18:43:33 +0000
ROA not before:           Tue 04 Feb 2025 18:38:33 +0000
ROA not after:            Tue 03 Feb 2026 18:43:33 +0000
asID:                     272875
IP address blocks:        2803:4a90::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B3E50B11115C084D6BA8197C0580CAAFEFDFD546F917BF6C3FCE3125AD581653/0/3CCAFF3C26A38C5EE9BF02C49848A13D82DFE81F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B3E50B11115C084D6BA8197C0580CAAFEFDFD546F917BF6C3FCE3125AD581653/0/3CCAFF3C26A38C5EE9BF02C49848A13D82DFE81F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3CCAFF3C26A38C5EE9BF02C49848A13D82DFE81F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:fd:8f:50:f3:66:3c:68:e1:54:a8:28:f4:5b:07:eb:26:78:c9:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3CCAFF3C26A38C5EE9BF02C49848A13D82DFE81F
        Validity
            Not Before: Feb  4 18:38:33 2025 GMT
            Not After : Feb  3 18:43:33 2026 GMT
        Subject: CN=A7D098EC9A0A212D3EFA9674AFAA75C5B5269A3D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:fc:04:af:8e:3f:49:f8:25:7d:fb:91:88:c5:
                    13:6d:ea:59:6e:5e:96:79:9e:8e:39:7f:ae:bd:f9:
                    be:dc:98:17:ba:0e:65:8a:57:98:8f:c9:93:65:30:
                    36:31:32:65:4e:c1:94:e4:ef:23:2c:15:9a:9a:4a:
                    c1:62:10:65:28:60:7f:69:c9:41:2d:06:1c:28:31:
                    5f:2d:32:d0:c1:0b:b7:63:94:8a:68:4b:af:1b:47:
                    8d:fb:75:f5:7f:70:a5:3b:8e:1c:21:d4:57:d4:fb:
                    0b:ad:a4:02:f2:72:36:70:b6:da:5a:b5:5d:94:e7:
                    38:a9:25:1e:b1:61:10:11:0c:8b:5c:63:73:6a:d4:
                    4f:b8:ca:74:76:25:56:b0:69:4a:1e:21:8a:e8:ef:
                    04:a0:b9:81:84:7c:df:4d:0b:08:c0:0d:bb:e4:50:
                    ed:6b:57:0a:9e:fa:6c:80:9f:73:ea:e8:45:26:d7:
                    40:11:54:b9:c7:8f:ae:6a:ae:96:ad:52:86:a2:61:
                    36:05:64:d4:c1:4c:e9:e5:50:3f:da:60:e8:af:19:
                    fc:e0:0c:35:b2:cb:06:e4:c5:36:54:f9:6d:40:14:
                    98:f5:f3:1f:9b:b7:8a:68:2a:ea:61:ea:0c:a5:0b:
                    59:5c:2e:36:7d:92:ec:5b:0f:81:02:06:33:4e:ad:
                    75:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:D0:98:EC:9A:0A:21:2D:3E:FA:96:74:AF:AA:75:C5:B5:26:9A:3D
            X509v3 Authority Key Identifier:
                keyid:3C:CA:FF:3C:26:A3:8C:5E:E9:BF:02:C4:98:48:A1:3D:82:DF:E8:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B3E50B11115C084D6BA8197C0580CAAFEFDFD546F917BF6C3FCE3125AD581653/0/3CCAFF3C26A38C5EE9BF02C49848A13D82DFE81F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3CCAFF3C26A38C5EE9BF02C49848A13D82DFE81F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B3E50B11115C084D6BA8197C0580CAAFEFDFD546F917BF6C3FCE3125AD581653/0/323830333a346139303a3a2f34382d3438203d3e20323732383735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4a90::/48

    Signature Algorithm: sha256WithRSAEncryption
         72:9a:d1:85:a6:0a:66:5b:5a:d2:74:e3:e8:d9:23:49:12:34:
         bd:79:32:f8:11:46:92:76:50:ea:0b:51:de:cd:8f:3c:eb:9a:
         54:35:01:09:23:47:b1:31:6b:ff:f9:b4:aa:8a:8f:55:9e:a0:
         39:86:fc:96:44:56:65:33:77:45:e4:69:e0:d8:46:aa:a2:df:
         64:09:c9:25:ae:f6:a0:91:50:9f:c6:50:67:c3:0c:9f:0e:cd:
         99:4a:4f:3f:ab:87:23:a9:c1:58:fd:b9:5d:f0:ca:2e:4f:ac:
         4f:65:a3:70:c1:fb:95:57:bd:29:1d:09:63:59:d0:89:65:a5:
         62:2b:47:88:f7:e2:3c:6b:86:11:8f:33:ed:02:df:df:c9:4f:
         3d:48:e5:2f:a3:5b:b8:dc:f8:da:c7:62:f2:d8:7b:0b:bd:86:
         d9:25:bf:f0:ff:8e:49:a9:8c:21:04:60:e4:5b:b8:6f:d7:63:
         18:35:3d:7c:8e:ba:c0:32:96:76:f8:75:4c:6e:d6:42:61:e8:
         ab:84:bf:84:ce:74:66:f3:a2:be:40:af:40:1e:c1:d5:45:f3:
         29:9c:0d:8b:38:86:17:15:14:22:a1:af:1a:33:63:32:39:47:
         4e:ff:0e:be:28:3b:b2:6a:b6:7c:bb:0d:e2:a5:47:46:48:65:
         8c:a1:a4:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:08:05 2025 by rpki-client