Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B71DF8E839AF34312DD7D71FB39907842FD27DE7EC1B331829FF182E1A10C3E9/0/323830333a616539303a323a3a2f34382d3438203d3e20323632353839.roa
File:                     323830333a616539303a323a3a2f34382d3438203d3e20323632353839.roa (raw, json)
Hash identifier:          DXk30HUkaAHJG9yMr7B7/u5XLTWmhMVgnOy4OWNtUf8=
Subject key identifier:   FD:87:A4:4C:B5:EA:B8:B1:59:55:F6:D9:F2:43:CF:47:DC:65:09:4A
Certificate issuer:       /CN=4B167B483874A127B2C4F0C2ACD9F1EFCDB0210A
Certificate serial:       433E24D8C12A09AC1B12F04791C0E749E9FC3379
Authority key identifier: 4B:16:7B:48:38:74:A1:27:B2:C4:F0:C2:AC:D9:F1:EF:CD:B0:21:0A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4B167B483874A127B2C4F0C2ACD9F1EFCDB0210A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B71DF8E839AF34312DD7D71FB39907842FD27DE7EC1B331829FF182E1A10C3E9/0/323830333a616539303a323a3a2f34382d3438203d3e20323632353839.roa
Signing time:             Tue 04 Feb 2025 18:15:42 +0000
ROA not before:           Tue 04 Feb 2025 18:10:42 +0000
ROA not after:            Tue 03 Feb 2026 18:15:42 +0000
asID:                     262589
IP address blocks:        2803:ae90:2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B71DF8E839AF34312DD7D71FB39907842FD27DE7EC1B331829FF182E1A10C3E9/0/4B167B483874A127B2C4F0C2ACD9F1EFCDB0210A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B71DF8E839AF34312DD7D71FB39907842FD27DE7EC1B331829FF182E1A10C3E9/0/4B167B483874A127B2C4F0C2ACD9F1EFCDB0210A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4B167B483874A127B2C4F0C2ACD9F1EFCDB0210A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:3e:24:d8:c1:2a:09:ac:1b:12:f0:47:91:c0:e7:49:e9:fc:33:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B167B483874A127B2C4F0C2ACD9F1EFCDB0210A
        Validity
            Not Before: Feb  4 18:10:42 2025 GMT
            Not After : Feb  3 18:15:42 2026 GMT
        Subject: CN=FD87A44CB5EAB8B15955F6D9F243CF47DC65094A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:46:60:60:17:3f:ae:10:24:65:2e:17:0a:1d:
                    39:57:8b:f0:9c:07:ef:3a:74:af:e8:49:16:c6:09:
                    93:2c:5e:c1:34:80:a2:2b:14:60:b1:1d:45:b5:b6:
                    e9:9f:b1:09:e8:22:61:08:95:55:f0:46:f0:dd:1a:
                    83:40:ad:ec:2e:5e:19:55:04:d5:56:fd:2b:20:34:
                    20:72:c6:e2:8e:27:ea:13:d7:5d:a8:a8:c7:d7:83:
                    80:df:de:80:50:c1:28:4a:d9:09:9a:ae:5d:c5:63:
                    80:e6:41:fd:f7:fd:58:ed:69:a1:82:86:30:68:cc:
                    c4:ff:c3:4c:d4:c3:1a:d3:05:00:e6:3e:95:91:ec:
                    37:b4:66:d9:7b:6f:d9:08:fe:d5:4f:f8:e5:22:61:
                    d6:c4:ab:c4:d8:92:9b:f9:0c:23:33:9c:89:2e:3c:
                    ae:40:95:c2:06:6b:58:51:f3:cd:63:59:61:3d:04:
                    5b:dd:2d:e6:ad:84:23:b5:3a:76:aa:b6:91:ce:f7:
                    32:03:54:8c:d7:0e:79:db:51:78:bf:40:68:2f:dd:
                    d6:a9:9d:33:dc:cf:0c:8e:50:9a:a1:6d:dd:d3:04:
                    03:28:23:2d:1a:fc:b6:73:83:55:60:12:8d:54:cf:
                    87:03:99:24:b7:5c:c9:6c:1c:47:73:45:04:20:8f:
                    a9:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:87:A4:4C:B5:EA:B8:B1:59:55:F6:D9:F2:43:CF:47:DC:65:09:4A
            X509v3 Authority Key Identifier:
                keyid:4B:16:7B:48:38:74:A1:27:B2:C4:F0:C2:AC:D9:F1:EF:CD:B0:21:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B71DF8E839AF34312DD7D71FB39907842FD27DE7EC1B331829FF182E1A10C3E9/0/4B167B483874A127B2C4F0C2ACD9F1EFCDB0210A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4B167B483874A127B2C4F0C2ACD9F1EFCDB0210A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B71DF8E839AF34312DD7D71FB39907842FD27DE7EC1B331829FF182E1A10C3E9/0/323830333a616539303a323a3a2f34382d3438203d3e20323632353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ae90:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         0c:9e:79:23:c8:70:93:90:b3:2e:0c:e8:f4:25:48:95:24:35:
         73:a5:58:8c:af:ea:70:8e:5b:7e:fd:08:49:4f:74:79:42:8b:
         fe:05:c9:91:f2:bb:0e:81:4d:5a:78:f9:86:88:b1:77:42:18:
         c9:08:81:c8:fb:2d:96:7a:1d:45:fb:d7:5d:2d:4f:f5:9d:e7:
         21:74:65:be:77:ae:fe:5f:00:44:11:d0:df:01:2d:05:ee:e9:
         99:a5:46:41:79:c1:17:8b:19:ac:58:42:f5:f3:ef:1d:cd:1a:
         ad:08:b3:c8:a6:eb:7b:1c:57:53:85:12:6b:58:51:2a:5e:a7:
         57:24:d2:7d:7b:78:47:c2:53:8b:35:b7:04:e2:b3:d5:98:b8:
         ac:90:d7:7c:e9:0e:a5:a7:f0:56:27:a0:db:4d:91:4f:2e:2f:
         df:d8:06:d0:0e:b3:6c:fc:6a:34:d4:e5:b6:05:4d:f4:fd:ec:
         ca:e7:39:65:5d:bf:07:42:fe:01:a5:97:b2:ee:6d:a0:f9:45:
         a2:d0:72:89:e3:4b:de:99:75:5c:60:f3:9a:e8:43:78:0e:e4:
         fc:96:de:21:c8:34:4a:4f:88:4d:a6:ea:50:30:99:e3:04:de:
         e9:35:02:af:24:1c:22:9e:00:b4:3a:93:4f:08:0b:92:25:8a:
         0c:f1:f0:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:59:02 2025 by rpki-client