Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BF5590544443B30345E096F57B882E70CEBAA45B4D65631AFBBB71D32F233DE1/0/323830333a336539303a3130303a3a2f34302d3430203d3e20323732393233.roa
File:                     323830333a336539303a3130303a3a2f34302d3430203d3e20323732393233.roa (raw, json)
Hash identifier:          iolzmjCgtfB8e2lXrH+vFZHIFWY52FU1yDv0Bsgfyyo=
Subject key identifier:   D9:96:60:D6:A3:1E:D9:8D:6F:02:DF:4A:98:D0:5F:19:E7:47:C1:D0
Certificate issuer:       /CN=066347F3B4CE39202F57E5F9BBA727C66DF7D360
Certificate serial:       03CB02E9B78C0EB8EB303FF00C2CE3EAFC8F75CD
Authority key identifier: 06:63:47:F3:B4:CE:39:20:2F:57:E5:F9:BB:A7:27:C6:6D:F7:D3:60
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/066347F3B4CE39202F57E5F9BBA727C66DF7D360.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BF5590544443B30345E096F57B882E70CEBAA45B4D65631AFBBB71D32F233DE1/0/323830333a336539303a3130303a3a2f34302d3430203d3e20323732393233.roa
Signing time:             Tue 04 Feb 2025 18:49:24 +0000
ROA not before:           Tue 04 Feb 2025 18:44:24 +0000
ROA not after:            Tue 03 Feb 2026 18:49:24 +0000
asID:                     272923
IP address blocks:        2803:3e90:100::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BF5590544443B30345E096F57B882E70CEBAA45B4D65631AFBBB71D32F233DE1/0/066347F3B4CE39202F57E5F9BBA727C66DF7D360.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BF5590544443B30345E096F57B882E70CEBAA45B4D65631AFBBB71D32F233DE1/0/066347F3B4CE39202F57E5F9BBA727C66DF7D360.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/066347F3B4CE39202F57E5F9BBA727C66DF7D360.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 23:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:cb:02:e9:b7:8c:0e:b8:eb:30:3f:f0:0c:2c:e3:ea:fc:8f:75:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=066347F3B4CE39202F57E5F9BBA727C66DF7D360
        Validity
            Not Before: Feb  4 18:44:24 2025 GMT
            Not After : Feb  3 18:49:24 2026 GMT
        Subject: CN=D99660D6A31ED98D6F02DF4A98D05F19E747C1D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d1:0e:21:4f:c9:bd:92:22:29:e0:4b:a7:eb:
                    6b:f0:c8:26:ac:47:be:de:4b:1a:10:92:c2:3f:42:
                    f1:6f:fa:69:99:a4:f2:80:44:f6:6f:e2:89:f3:68:
                    4e:44:30:5f:ef:f2:dd:23:6c:a9:e2:e0:04:0d:83:
                    ba:fe:6e:fd:27:59:bb:0c:f3:5e:b4:ec:a9:a7:3b:
                    5f:d1:89:9d:b4:d1:62:df:c6:ee:30:7b:fa:95:2c:
                    0c:13:3b:df:1e:e0:b1:d5:41:da:50:44:48:78:29:
                    b8:0d:0a:e2:4c:18:53:2f:19:7e:a9:96:77:78:5f:
                    31:a0:9f:ca:7e:9f:65:fb:aa:eb:b3:f4:3e:3c:f8:
                    0d:9d:29:dc:af:57:8c:3b:c9:98:53:d4:42:89:60:
                    cb:70:fc:f5:42:bd:1d:d2:41:7b:48:23:8a:49:86:
                    d2:f8:31:69:44:32:5c:7e:0f:03:66:13:94:91:84:
                    46:47:86:a2:6a:5c:d5:de:37:c6:5d:cb:12:aa:a9:
                    1c:c8:49:6e:28:b3:e9:90:4b:91:6b:41:de:b2:1b:
                    02:52:95:32:eb:68:bf:cf:74:9e:0b:4c:56:ba:0a:
                    c8:8e:fb:57:56:7e:6b:34:b6:13:a0:49:30:e3:50:
                    f4:cb:d0:29:0a:2d:3e:67:ba:ff:c9:ad:b3:f6:40:
                    b1:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:96:60:D6:A3:1E:D9:8D:6F:02:DF:4A:98:D0:5F:19:E7:47:C1:D0
            X509v3 Authority Key Identifier:
                keyid:06:63:47:F3:B4:CE:39:20:2F:57:E5:F9:BB:A7:27:C6:6D:F7:D3:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BF5590544443B30345E096F57B882E70CEBAA45B4D65631AFBBB71D32F233DE1/0/066347F3B4CE39202F57E5F9BBA727C66DF7D360.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/066347F3B4CE39202F57E5F9BBA727C66DF7D360.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BF5590544443B30345E096F57B882E70CEBAA45B4D65631AFBBB71D32F233DE1/0/323830333a336539303a3130303a3a2f34302d3430203d3e20323732393233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3e90:100::/40

    Signature Algorithm: sha256WithRSAEncryption
         7a:dd:05:35:83:a0:37:db:02:76:bb:32:84:06:5b:24:8e:ec:
         3a:5c:6a:3e:42:08:f6:1b:5b:75:14:87:5c:13:68:c0:7e:20:
         8b:ad:2b:2f:e6:56:2c:bd:f4:82:44:23:31:cf:ea:ef:5d:b5:
         18:a5:1a:58:16:bc:30:a6:b3:75:c4:dd:15:91:b7:2d:57:08:
         7f:86:29:fb:16:e9:13:ac:0c:29:2c:67:2a:d6:91:8f:9e:bb:
         1e:a3:3f:fc:79:43:e8:50:fe:50:b4:2a:27:e4:cd:47:93:ce:
         9c:47:10:c8:70:ee:67:0b:04:e1:99:11:c8:bb:9b:db:83:cc:
         50:ac:0b:95:59:97:ac:32:5a:72:97:ae:db:5c:e4:81:f2:12:
         db:b3:af:7f:8a:5e:e1:5f:99:66:16:52:bf:98:e7:dd:4e:2e:
         fb:41:ec:f6:27:1a:9e:5f:26:7b:8b:d6:b4:de:4f:a7:1a:2d:
         c1:6a:56:06:e3:28:2e:8a:ad:dd:a7:f2:7a:e2:66:49:6a:f1:
         cb:8f:9a:ab:92:65:54:68:87:81:99:7d:41:f0:65:0d:f1:ab:
         11:22:47:84:6e:e5:86:5d:87:c2:d5:ea:14:73:43:58:68:fb:
         65:73:e0:d2:83:b0:1a:3c:fb:45:d7:2e:2d:ed:f6:01:65:a4:
         42:d6:96:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 10:36:18 2025 by rpki-client