Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CB47BEC5845FEF89B4F49F9AED43CA62E31AA56C53BA38AEC090599569E48945/0/323830333a396130303a62623a3a2f34382d3634203d3e20323632323339.roa
File:                     323830333a396130303a62623a3a2f34382d3634203d3e20323632323339.roa (raw, json)
Hash identifier:          4V8gcAih4z974vso1VuVI2kYUSKujqUG3sDSbsMJzBs=
Subject key identifier:   46:A5:71:4C:9D:4F:3D:EA:21:7B:62:D5:3E:71:8C:4D:C3:FB:BE:1D
Certificate issuer:       /CN=39446F5E8A4A60A5A4F426FBE7E72968C16C1EFF
Certificate serial:       260B39F38037468DD8829CABC97CFEF8D29A2F8F
Authority key identifier: 39:44:6F:5E:8A:4A:60:A5:A4:F4:26:FB:E7:E7:29:68:C1:6C:1E:FF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/39446F5E8A4A60A5A4F426FBE7E72968C16C1EFF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CB47BEC5845FEF89B4F49F9AED43CA62E31AA56C53BA38AEC090599569E48945/0/323830333a396130303a62623a3a2f34382d3634203d3e20323632323339.roa
Signing time:             Tue 04 Feb 2025 18:01:38 +0000
ROA not before:           Tue 04 Feb 2025 17:56:38 +0000
ROA not after:            Tue 03 Feb 2026 18:01:38 +0000
asID:                     262239
IP address blocks:        2803:9a00:bb::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CB47BEC5845FEF89B4F49F9AED43CA62E31AA56C53BA38AEC090599569E48945/0/39446F5E8A4A60A5A4F426FBE7E72968C16C1EFF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CB47BEC5845FEF89B4F49F9AED43CA62E31AA56C53BA38AEC090599569E48945/0/39446F5E8A4A60A5A4F426FBE7E72968C16C1EFF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/39446F5E8A4A60A5A4F426FBE7E72968C16C1EFF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 20 Feb 2025 16:28:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:0b:39:f3:80:37:46:8d:d8:82:9c:ab:c9:7c:fe:f8:d2:9a:2f:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39446F5E8A4A60A5A4F426FBE7E72968C16C1EFF
        Validity
            Not Before: Feb  4 17:56:38 2025 GMT
            Not After : Feb  3 18:01:38 2026 GMT
        Subject: CN=46A5714C9D4F3DEA217B62D53E718C4DC3FBBE1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:20:56:bf:da:7a:27:4d:18:3a:98:40:62:46:
                    d0:09:a6:10:fb:db:32:bd:7f:26:30:c4:6d:70:e2:
                    e7:bb:a3:db:1a:d1:b0:2a:37:36:31:31:f3:b7:ba:
                    98:41:a0:5a:af:74:bf:1f:31:b0:e9:44:fb:49:8f:
                    65:9b:0a:ec:a2:b8:1e:3a:f7:74:db:5c:78:a2:8b:
                    af:07:16:e1:d3:e0:5b:16:11:86:98:32:7e:66:92:
                    06:8c:54:ec:8d:d6:b3:29:f8:8b:41:22:3e:99:c9:
                    8e:1d:a1:91:8f:4c:05:d5:15:31:a0:46:98:ee:57:
                    33:7c:ba:cd:4a:f9:22:77:24:94:fb:ca:1e:5f:c5:
                    43:0e:67:3e:09:e4:90:a1:3f:f4:b6:e7:c0:3a:2d:
                    03:53:d6:3f:ba:90:c2:5d:b2:a4:20:94:2d:ae:1f:
                    8c:a4:6f:a9:d0:31:6f:93:e6:23:50:36:bd:f1:02:
                    af:e3:27:2c:86:49:ba:ba:d6:e1:a1:23:72:af:70:
                    e1:bf:b8:f2:f8:7f:a3:62:16:79:eb:08:c2:e2:9d:
                    77:6c:73:0c:01:a0:39:a6:c3:99:ed:98:e0:88:45:
                    c4:8f:e8:15:98:ea:5d:2a:90:6e:b9:6a:4e:dc:4c:
                    95:72:36:22:c2:ba:2e:5d:da:2b:c4:ff:b6:fd:0b:
                    23:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:A5:71:4C:9D:4F:3D:EA:21:7B:62:D5:3E:71:8C:4D:C3:FB:BE:1D
            X509v3 Authority Key Identifier:
                keyid:39:44:6F:5E:8A:4A:60:A5:A4:F4:26:FB:E7:E7:29:68:C1:6C:1E:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CB47BEC5845FEF89B4F49F9AED43CA62E31AA56C53BA38AEC090599569E48945/0/39446F5E8A4A60A5A4F426FBE7E72968C16C1EFF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/39446F5E8A4A60A5A4F426FBE7E72968C16C1EFF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CB47BEC5845FEF89B4F49F9AED43CA62E31AA56C53BA38AEC090599569E48945/0/323830333a396130303a62623a3a2f34382d3634203d3e20323632323339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9a00:bb::/48

    Signature Algorithm: sha256WithRSAEncryption
         33:a8:87:da:5e:15:0a:df:95:36:bc:01:1f:df:3a:b3:69:c2:
         16:f4:ab:68:13:ad:d3:ac:f3:ea:40:b1:aa:d5:43:ed:08:e4:
         c8:6c:de:87:81:3c:a5:7f:be:16:4e:7e:da:17:c6:77:53:ce:
         e5:97:dd:80:a0:5e:4a:d3:68:d4:dc:c7:01:97:dd:e4:ce:a4:
         47:70:72:da:d1:e2:32:d1:c5:77:c5:84:a4:38:26:c2:e4:d8:
         16:61:6f:2f:bf:fb:01:72:0a:85:65:a3:24:81:b7:f4:ed:de:
         6f:1a:79:ac:59:67:e7:7d:14:8f:39:8c:df:85:8e:1a:99:31:
         90:04:4e:af:76:b3:8d:e5:95:b9:14:71:38:a4:0c:61:41:df:
         30:49:bf:8a:61:fb:0f:65:fc:5a:e2:7a:bc:c4:50:06:67:ca:
         ea:1d:e8:2f:3e:83:f0:f4:f3:e5:e6:fb:21:96:84:31:d5:b1:
         ea:14:ec:ce:4b:b1:3b:c3:f7:a9:68:43:8f:ad:d9:49:4c:c6:
         4b:e4:b2:41:32:a4:1b:b8:00:43:29:a1:69:b1:15:98:3a:ef:
         b6:50:33:24:57:a0:cb:04:bc:f0:07:d0:ec:f0:21:19:36:e0:
         59:1e:2f:72:31:33:e0:f1:c0:47:19:1f:20:d5:5e:75:68:b3:
         57:44:11:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 00:44:39 2025 by rpki-client