Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D074091ABD4AC0C45CE98A084B2572D23DA224081356C9D61467810DBB6180CD/0/323830313a3130393a3a2f34342d3434203d3e20323732313336.roa
File:                     323830313a3130393a3a2f34342d3434203d3e20323732313336.roa (raw, json)
Hash identifier:          gDaeFAj3B2LBxoJQDMw3ezf04wDU/CC9mVvhcAGRyYM=
Subject key identifier:   78:B5:ED:D2:44:19:F9:B3:C7:C5:09:1D:13:A0:39:FD:11:1D:AC:B1
Certificate issuer:       /CN=03CA54765F0951D369734386CF982D71F5CB5403
Certificate serial:       5C9F8418A8A83E5248D3BAF29CE88A0ED393DC9E
Authority key identifier: 03:CA:54:76:5F:09:51:D3:69:73:43:86:CF:98:2D:71:F5:CB:54:03
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/03CA54765F0951D369734386CF982D71F5CB5403.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D074091ABD4AC0C45CE98A084B2572D23DA224081356C9D61467810DBB6180CD/0/323830313a3130393a3a2f34342d3434203d3e20323732313336.roa
Signing time:             Tue 04 Feb 2025 18:46:37 +0000
ROA not before:           Tue 04 Feb 2025 18:41:37 +0000
ROA not after:            Tue 03 Feb 2026 18:46:37 +0000
asID:                     272136
IP address blocks:        2801:109::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D074091ABD4AC0C45CE98A084B2572D23DA224081356C9D61467810DBB6180CD/0/03CA54765F0951D369734386CF982D71F5CB5403.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D074091ABD4AC0C45CE98A084B2572D23DA224081356C9D61467810DBB6180CD/0/03CA54765F0951D369734386CF982D71F5CB5403.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/03CA54765F0951D369734386CF982D71F5CB5403.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 13:27:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:9f:84:18:a8:a8:3e:52:48:d3:ba:f2:9c:e8:8a:0e:d3:93:dc:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03CA54765F0951D369734386CF982D71F5CB5403
        Validity
            Not Before: Feb  4 18:41:37 2025 GMT
            Not After : Feb  3 18:46:37 2026 GMT
        Subject: CN=78B5EDD24419F9B3C7C5091D13A039FD111DACB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:52:c2:ac:6e:e5:36:55:8b:45:50:83:40:81:
                    ce:0f:7b:03:06:69:01:c5:e9:c8:ea:68:2b:c8:7b:
                    c8:42:11:1a:96:39:45:7d:57:2d:37:ed:33:2d:a7:
                    72:30:59:72:84:20:25:7a:74:c1:6e:be:28:38:39:
                    76:8a:d1:32:15:fe:99:65:43:6f:6a:26:db:88:ad:
                    26:67:94:ee:56:82:19:23:f8:e5:96:02:ca:1b:79:
                    d4:d9:30:aa:39:39:50:e5:5d:e9:51:f0:f4:73:ca:
                    c1:43:59:d8:4f:c7:d0:3c:b4:76:86:5c:ee:6a:1e:
                    bb:84:17:1e:e2:ba:43:47:49:f6:6e:70:dd:4f:d0:
                    3d:f1:2c:39:2e:99:08:7f:d2:24:f7:2b:9b:9d:5a:
                    ce:d5:67:d2:44:ab:11:20:b6:5c:92:4c:7b:f4:b0:
                    69:4d:8a:2b:2d:b4:1c:b2:02:b9:ea:8f:d6:db:5c:
                    32:73:2a:30:fb:2a:14:04:70:76:82:56:f9:65:54:
                    53:9c:4a:ec:3c:a9:dc:28:60:d6:2c:cf:1b:c2:49:
                    a7:2f:61:87:20:35:a0:29:8b:32:7e:e1:65:de:e4:
                    5c:53:52:5b:b1:c0:17:c5:dd:b5:51:35:c2:ef:08:
                    ce:be:7a:d5:ca:e8:ae:90:3c:d6:d4:44:a9:5b:7b:
                    b3:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:B5:ED:D2:44:19:F9:B3:C7:C5:09:1D:13:A0:39:FD:11:1D:AC:B1
            X509v3 Authority Key Identifier:
                keyid:03:CA:54:76:5F:09:51:D3:69:73:43:86:CF:98:2D:71:F5:CB:54:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D074091ABD4AC0C45CE98A084B2572D23DA224081356C9D61467810DBB6180CD/0/03CA54765F0951D369734386CF982D71F5CB5403.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/03CA54765F0951D369734386CF982D71F5CB5403.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D074091ABD4AC0C45CE98A084B2572D23DA224081356C9D61467810DBB6180CD/0/323830313a3130393a3a2f34342d3434203d3e20323732313336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:109::/44

    Signature Algorithm: sha256WithRSAEncryption
         dd:54:f0:a3:7a:cb:e8:4c:a5:1c:e4:61:d4:c6:4a:87:80:54:
         88:24:41:fe:62:fa:d5:e2:a5:7c:52:5c:2d:22:db:25:7b:3b:
         d8:0d:1c:d5:e3:b3:f2:cd:97:cc:ca:8d:c6:fc:4e:19:73:3f:
         f8:e9:19:1b:0e:94:2f:17:81:08:9b:20:42:7b:37:43:cd:41:
         c7:f7:8b:fb:21:3a:9c:ac:6d:58:00:c2:ff:51:06:be:18:95:
         a3:9a:65:4a:80:72:b4:04:64:74:7a:c5:6f:23:32:9d:33:94:
         04:e2:56:cb:01:2e:47:51:69:e8:f2:50:61:b6:be:4e:fa:fd:
         97:c8:85:14:b3:38:92:8b:b6:0d:c4:36:bc:d6:f0:68:c7:93:
         2c:1e:b3:eb:04:13:7a:f6:d0:43:c4:da:e1:39:67:13:79:ac:
         74:40:8f:97:a4:63:22:ee:8f:17:0d:e3:09:fe:9d:7d:0c:3a:
         ed:4f:b6:fc:43:51:db:c7:13:5f:68:56:93:00:4b:89:3d:aa:
         8e:16:20:0a:f9:22:b0:90:15:a2:1a:ee:c0:8d:04:ac:ea:93:
         c3:d8:61:e6:d2:cd:21:a1:b0:d3:25:a9:9b:66:0a:e4:62:6c:
         a7:89:2b:29:36:d9:78:f7:59:1b:14:fe:f2:f3:95:39:7d:77:
         3b:8b:b1:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:54:53 2025 by rpki-client