Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C3B0F2C03FCD0076B644D853626A3157A56FC4FE37B1941F0159760C7D5DB0B5/0/323830313a303a3365303a3a2f34382d3438203d3e203532333934.roa
File:                     323830313a303a3365303a3a2f34382d3438203d3e203532333934.roa (raw, json)
Hash identifier:          MjM9Z1csXj4AnEm5K2l5lDY3nd5bhDUdyjmt77FwK3U=
Subject key identifier:   81:EF:DF:72:AF:7E:F6:80:77:0E:57:25:CD:DE:7D:0B:6E:0F:55:24
Certificate issuer:       /CN=0BC40038D7F4C4663CAF584B7D98BC198DB79EAA
Certificate serial:       35EDF1351EAB9736AE972CEF09E1B8B381E8272F
Authority key identifier: 0B:C4:00:38:D7:F4:C4:66:3C:AF:58:4B:7D:98:BC:19:8D:B7:9E:AA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0BC40038D7F4C4663CAF584B7D98BC198DB79EAA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C3B0F2C03FCD0076B644D853626A3157A56FC4FE37B1941F0159760C7D5DB0B5/0/323830313a303a3365303a3a2f34382d3438203d3e203532333934.roa
Signing time:             Tue 04 Feb 2025 18:12:32 +0000
ROA not before:           Tue 04 Feb 2025 18:07:32 +0000
ROA not after:            Tue 03 Feb 2026 18:12:32 +0000
asID:                     52394
IP address blocks:        2801:0:3e0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C3B0F2C03FCD0076B644D853626A3157A56FC4FE37B1941F0159760C7D5DB0B5/0/0BC40038D7F4C4663CAF584B7D98BC198DB79EAA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C3B0F2C03FCD0076B644D853626A3157A56FC4FE37B1941F0159760C7D5DB0B5/0/0BC40038D7F4C4663CAF584B7D98BC198DB79EAA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0BC40038D7F4C4663CAF584B7D98BC198DB79EAA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 12 Apr 2025 00:47:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:ed:f1:35:1e:ab:97:36:ae:97:2c:ef:09:e1:b8:b3:81:e8:27:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0BC40038D7F4C4663CAF584B7D98BC198DB79EAA
        Validity
            Not Before: Feb  4 18:07:32 2025 GMT
            Not After : Feb  3 18:12:32 2026 GMT
        Subject: CN=81EFDF72AF7EF680770E5725CDDE7D0B6E0F5524
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:f2:30:53:48:cb:61:30:c5:1e:d6:61:ad:9c:
                    94:e6:db:79:0e:66:c5:94:05:ae:b4:12:23:a7:d5:
                    cd:ca:f7:fd:a8:8d:cd:a1:a5:42:ad:53:7c:25:ad:
                    77:d8:41:c2:91:b5:e5:63:15:80:f7:2f:45:5e:47:
                    d6:cf:a4:9f:5d:d8:aa:57:0f:b3:8f:d3:e3:48:2e:
                    d3:16:bb:46:98:61:00:f0:25:90:60:82:4f:70:f3:
                    5d:db:88:7e:06:17:1c:2e:61:9c:f9:3a:31:21:2c:
                    a6:27:86:fb:94:d3:d6:36:4f:03:cc:2b:ec:c1:7c:
                    e7:d0:bc:85:a3:9a:28:64:19:15:3b:01:eb:dc:52:
                    f1:1c:44:d7:c5:e2:36:10:a8:26:d4:1a:d3:0e:1c:
                    14:90:f0:39:90:a6:49:fa:8f:96:86:30:1f:99:05:
                    f4:ed:17:d4:5d:6f:89:3b:96:af:9a:1b:bf:86:ca:
                    e2:86:fb:e6:2b:9e:d3:d9:6f:bb:e7:af:c0:8e:17:
                    0e:1a:00:0f:0c:42:58:bb:27:fe:02:fe:6d:db:00:
                    49:dc:e5:0b:87:59:b5:9b:84:0d:35:4c:94:12:d9:
                    a3:29:f5:05:0a:fc:0b:66:0c:51:a4:39:8b:d5:46:
                    bf:49:bf:a9:b5:09:6f:fa:c0:cd:b1:a9:f5:a5:ef:
                    8f:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:EF:DF:72:AF:7E:F6:80:77:0E:57:25:CD:DE:7D:0B:6E:0F:55:24
            X509v3 Authority Key Identifier:
                keyid:0B:C4:00:38:D7:F4:C4:66:3C:AF:58:4B:7D:98:BC:19:8D:B7:9E:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C3B0F2C03FCD0076B644D853626A3157A56FC4FE37B1941F0159760C7D5DB0B5/0/0BC40038D7F4C4663CAF584B7D98BC198DB79EAA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0BC40038D7F4C4663CAF584B7D98BC198DB79EAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C3B0F2C03FCD0076B644D853626A3157A56FC4FE37B1941F0159760C7D5DB0B5/0/323830313a303a3365303a3a2f34382d3438203d3e203532333934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:0:3e0::/48

    Signature Algorithm: sha256WithRSAEncryption
         4b:3c:d5:57:2d:1f:c1:a7:02:1f:ae:f1:9f:0e:42:98:e0:d3:
         d1:fc:df:2b:ce:6f:b4:1a:48:85:59:ba:69:15:f8:10:4d:ab:
         b1:95:ab:c7:9d:a6:34:b3:0d:ba:63:49:cc:41:bf:dd:dd:3a:
         1b:bf:f8:e1:56:7c:c9:0d:cb:0f:87:17:14:58:63:54:f7:42:
         cc:96:b4:4c:49:74:4e:f6:6f:28:fe:fc:2c:3a:85:2b:42:b7:
         e1:d9:7d:f3:4b:77:27:82:9c:bf:5b:7d:3e:44:61:cc:c0:82:
         87:b8:78:8a:14:3e:93:ec:d9:61:6e:c0:93:23:10:21:a9:7c:
         d8:34:e1:5e:01:b3:ce:13:b5:14:13:e4:92:10:b9:88:24:9e:
         10:44:12:df:00:8f:94:d6:13:2c:42:21:21:59:4e:4c:1f:58:
         d6:f6:f6:69:58:2f:1a:62:f8:9c:d1:45:ed:32:f6:05:f0:1b:
         d6:c6:95:fd:11:24:7f:06:d5:d8:e6:69:03:b9:0d:90:41:63:
         de:5c:00:83:34:9a:eb:ee:10:8a:fb:1d:51:38:10:31:a9:c4:
         a3:80:dc:2e:5b:e4:9a:b9:0b:59:8f:99:32:2b:47:ab:b2:91:
         e4:9d:a4:55:71:17:8d:77:cf:5b:d1:e9:52:30:c9:42:5f:53:
         a4:ef:81:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 06:52:52 2025 by rpki-client