Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CB47BEC5845FEF89B4F49F9AED43CA62E31AA56C53BA38AEC090599569E48945/0/323830333a396130303a3a2f33322d3634203d3e20323632323339.roa
File:                     323830333a396130303a3a2f33322d3634203d3e20323632323339.roa (raw, json)
Hash identifier:          citHkMORl8VOwFnUoCOsDSWEBnLt9WZyxxMrubZw9zk=
Subject key identifier:   DF:06:C0:E8:4F:93:10:27:92:8C:73:7E:C7:90:E0:12:83:70:20:CF
Certificate issuer:       /CN=39446F5E8A4A60A5A4F426FBE7E72968C16C1EFF
Certificate serial:       50FFA26D145D882FDCF4BB0F610898ED3E428485
Authority key identifier: 39:44:6F:5E:8A:4A:60:A5:A4:F4:26:FB:E7:E7:29:68:C1:6C:1E:FF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/39446F5E8A4A60A5A4F426FBE7E72968C16C1EFF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CB47BEC5845FEF89B4F49F9AED43CA62E31AA56C53BA38AEC090599569E48945/0/323830333a396130303a3a2f33322d3634203d3e20323632323339.roa
Signing time:             Tue 04 Feb 2025 18:01:39 +0000
ROA not before:           Tue 04 Feb 2025 17:56:39 +0000
ROA not after:            Tue 03 Feb 2026 18:01:39 +0000
asID:                     262239
IP address blocks:        2803:9a00::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CB47BEC5845FEF89B4F49F9AED43CA62E31AA56C53BA38AEC090599569E48945/0/39446F5E8A4A60A5A4F426FBE7E72968C16C1EFF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CB47BEC5845FEF89B4F49F9AED43CA62E31AA56C53BA38AEC090599569E48945/0/39446F5E8A4A60A5A4F426FBE7E72968C16C1EFF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/39446F5E8A4A60A5A4F426FBE7E72968C16C1EFF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 20 Feb 2025 16:28:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:ff:a2:6d:14:5d:88:2f:dc:f4:bb:0f:61:08:98:ed:3e:42:84:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39446F5E8A4A60A5A4F426FBE7E72968C16C1EFF
        Validity
            Not Before: Feb  4 17:56:39 2025 GMT
            Not After : Feb  3 18:01:39 2026 GMT
        Subject: CN=DF06C0E84F931027928C737EC790E012837020CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:4d:e8:af:f0:a2:fa:cb:03:91:14:3e:2b:6c:
                    88:df:98:65:4f:d8:42:a0:ca:a3:1d:cd:58:29:c3:
                    36:69:44:92:52:83:74:69:5d:a6:f5:19:33:f5:7c:
                    39:30:06:88:67:3a:6c:ff:8e:8c:62:1b:fa:dd:64:
                    82:b8:58:9c:48:91:d9:90:32:6e:e2:f9:a6:bb:e6:
                    82:b4:70:ad:93:13:7b:53:40:e7:c6:f1:90:d3:a1:
                    e0:67:d8:56:83:f0:81:51:51:10:88:3a:25:e1:10:
                    73:a3:d9:ae:15:05:4e:92:d8:64:7d:9d:71:ec:4a:
                    25:11:43:e7:45:d9:e0:db:8a:9b:6d:f9:e4:ab:a5:
                    fe:1d:ec:d6:7b:21:e7:ce:a9:49:43:0e:16:8e:f8:
                    de:79:f2:9d:7a:c1:55:af:09:fb:27:7d:6b:5b:3e:
                    f2:ae:ea:e2:2d:0b:ad:3d:e1:b7:8b:b9:13:bb:c6:
                    47:0e:27:e6:a0:fb:4d:db:9b:f7:bb:ac:3b:3d:a8:
                    11:a5:97:92:7f:c4:14:df:27:b2:83:0f:11:6d:3c:
                    de:3d:9a:c8:5d:24:a4:af:96:d1:93:ee:28:5e:c1:
                    eb:68:68:cb:02:75:d6:a5:73:e4:5c:98:aa:06:b5:
                    6e:f4:84:5d:97:88:aa:10:d2:c3:e1:aa:04:94:22:
                    6d:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:06:C0:E8:4F:93:10:27:92:8C:73:7E:C7:90:E0:12:83:70:20:CF
            X509v3 Authority Key Identifier:
                keyid:39:44:6F:5E:8A:4A:60:A5:A4:F4:26:FB:E7:E7:29:68:C1:6C:1E:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CB47BEC5845FEF89B4F49F9AED43CA62E31AA56C53BA38AEC090599569E48945/0/39446F5E8A4A60A5A4F426FBE7E72968C16C1EFF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/39446F5E8A4A60A5A4F426FBE7E72968C16C1EFF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CB47BEC5845FEF89B4F49F9AED43CA62E31AA56C53BA38AEC090599569E48945/0/323830333a396130303a3a2f33322d3634203d3e20323632323339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9a00::/32

    Signature Algorithm: sha256WithRSAEncryption
         03:3a:1e:81:ca:e3:27:30:46:1f:cd:85:32:c9:73:b3:57:aa:
         0b:9e:36:cb:b8:da:6a:ab:f4:3f:3f:ad:c1:42:84:34:85:59:
         9f:13:d2:7c:be:b6:ce:1c:c7:45:45:73:0b:97:c7:02:0d:c3:
         a2:69:ee:fe:23:23:a3:95:2f:09:3b:80:9b:21:ce:58:ea:6e:
         93:7d:54:0d:7e:2d:ce:ee:6f:9f:1a:a7:62:26:f6:51:ad:c1:
         05:13:f9:68:fc:02:ab:90:bb:63:cb:59:2c:67:15:97:65:d0:
         07:e2:89:56:94:69:13:ac:04:1d:ff:5f:59:3b:84:30:e6:86:
         ed:6c:2e:ba:2b:e4:bb:98:e3:04:34:10:43:6c:69:68:fc:1e:
         27:3a:c5:9a:ce:65:91:ff:e0:9a:f5:a5:82:08:c7:ba:17:39:
         32:4d:e3:e3:db:a0:c4:4e:5a:19:c0:76:88:94:98:eb:0d:d5:
         a7:54:44:fd:bf:9d:84:1f:27:00:08:18:b6:83:b3:50:3d:be:
         fd:78:f4:2c:93:9c:7b:f4:a9:00:78:ec:5e:c3:e9:ec:cf:00:
         06:10:93:44:06:0f:e3:f2:c0:a0:59:c0:b7:d6:38:ca:a8:7e:
         6f:50:e6:f1:30:95:db:1d:5b:72:d9:d5:51:e7:db:3c:71:11:
         a7:6b:71:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 02:12:37 2025 by rpki-client