Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D7EC5FC67A92022DABE8B3963D804B8CB36B1042698E73C93081010C65889BE6/0/323830333a313565303a3130303a3a2f34302d3430203d3e20323730303337.roa
File:                     323830333a313565303a3130303a3a2f34302d3430203d3e20323730303337.roa (raw, json)
Hash identifier:          afDBY6RgL8J+QM0V9yBTWpvBliXiVAK0/oWSOBYun9Y=
Subject key identifier:   47:99:18:43:86:85:1D:45:B5:33:95:B7:C9:F5:F6:69:59:1D:1F:59
Certificate issuer:       /CN=9BC7FB723211AEDC038D47F1F6A375939FD56624
Certificate serial:       78209BBE2A8BBC8AAC64CF8E22FB83B72D150E7B
Authority key identifier: 9B:C7:FB:72:32:11:AE:DC:03:8D:47:F1:F6:A3:75:93:9F:D5:66:24
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BC7FB723211AEDC038D47F1F6A375939FD56624.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D7EC5FC67A92022DABE8B3963D804B8CB36B1042698E73C93081010C65889BE6/0/323830333a313565303a3130303a3a2f34302d3430203d3e20323730303337.roa
Signing time:             Tue 04 Feb 2025 18:04:12 +0000
ROA not before:           Tue 04 Feb 2025 17:59:12 +0000
ROA not after:            Tue 03 Feb 2026 18:04:12 +0000
asID:                     270037
IP address blocks:        2803:15e0:100::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D7EC5FC67A92022DABE8B3963D804B8CB36B1042698E73C93081010C65889BE6/0/9BC7FB723211AEDC038D47F1F6A375939FD56624.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D7EC5FC67A92022DABE8B3963D804B8CB36B1042698E73C93081010C65889BE6/0/9BC7FB723211AEDC038D47F1F6A375939FD56624.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BC7FB723211AEDC038D47F1F6A375939FD56624.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:20:9b:be:2a:8b:bc:8a:ac:64:cf:8e:22:fb:83:b7:2d:15:0e:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BC7FB723211AEDC038D47F1F6A375939FD56624
        Validity
            Not Before: Feb  4 17:59:12 2025 GMT
            Not After : Feb  3 18:04:12 2026 GMT
        Subject: CN=4799184386851D45B53395B7C9F5F669591D1F59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b0:2d:c9:9a:0c:54:e7:f4:59:ad:a7:1f:fb:
                    b4:b8:40:a4:32:ca:b4:27:e9:db:a9:5c:3f:72:20:
                    dc:c6:36:52:d3:6f:75:4d:a6:fe:58:c1:ce:ab:f9:
                    25:3f:5e:43:01:6e:c6:6e:7c:f6:0e:64:66:23:95:
                    0d:f5:61:09:b5:82:65:59:fc:d6:08:a8:3c:96:a2:
                    d9:8e:92:82:87:fc:78:b4:4e:ad:38:33:2d:da:d0:
                    67:18:9c:1a:3f:e9:f4:64:46:ab:47:51:71:6d:8a:
                    f9:cc:19:3f:ea:8a:d8:a0:b3:ac:27:09:df:a0:e4:
                    c1:a7:f1:bf:0b:d5:00:0b:81:08:86:8b:9d:12:0b:
                    d4:4d:34:ee:8d:a3:a7:8e:7b:6f:c6:ab:2f:a7:b6:
                    0d:58:02:08:39:f8:8b:39:57:f7:71:eb:a2:5f:8b:
                    1f:f2:2b:65:0d:91:26:aa:61:53:75:65:57:ca:a0:
                    5f:e5:0f:ff:9e:1d:1d:b2:5c:4b:cc:62:2a:29:15:
                    93:db:26:cb:ae:e5:9b:74:1f:66:da:d9:77:9f:1e:
                    bd:01:14:92:d7:ea:fb:fc:18:81:3b:43:9f:bc:d7:
                    f0:cc:c9:f5:c5:0a:d7:13:20:3e:91:e0:74:e0:39:
                    77:80:e2:05:b1:d4:f7:f3:dd:b5:b7:ed:0d:44:39:
                    f3:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:99:18:43:86:85:1D:45:B5:33:95:B7:C9:F5:F6:69:59:1D:1F:59
            X509v3 Authority Key Identifier:
                keyid:9B:C7:FB:72:32:11:AE:DC:03:8D:47:F1:F6:A3:75:93:9F:D5:66:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D7EC5FC67A92022DABE8B3963D804B8CB36B1042698E73C93081010C65889BE6/0/9BC7FB723211AEDC038D47F1F6A375939FD56624.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BC7FB723211AEDC038D47F1F6A375939FD56624.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D7EC5FC67A92022DABE8B3963D804B8CB36B1042698E73C93081010C65889BE6/0/323830333a313565303a3130303a3a2f34302d3430203d3e20323730303337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:15e0:100::/40

    Signature Algorithm: sha256WithRSAEncryption
         5f:a7:f7:af:06:96:4f:29:a7:f6:11:b3:51:52:8b:5d:2f:e9:
         ea:96:b1:18:20:40:63:8a:65:5a:b0:22:b4:04:58:af:c1:4c:
         db:31:77:d9:f2:69:7a:ff:b0:80:76:95:e3:28:54:1a:8b:3f:
         2e:55:2f:e4:45:06:40:8d:d4:99:31:99:99:be:83:eb:6d:23:
         9a:7f:d0:26:74:f9:63:4a:8d:34:1e:e7:70:16:c9:18:27:7c:
         91:ef:ae:e5:f9:3c:d5:14:f0:29:43:31:3e:73:c3:d4:55:b6:
         11:ec:3e:1d:ad:9e:0b:de:61:16:03:7c:d1:d4:4c:3b:d1:2f:
         5f:91:f7:92:48:d8:f9:3b:1a:5e:21:1e:39:80:22:7a:b9:77:
         36:51:31:c5:87:7a:88:66:ef:8d:e1:71:3f:a9:75:c1:1f:1e:
         69:65:b1:83:2e:bb:be:f9:81:9e:9b:91:8c:24:ee:7c:ab:8b:
         63:a7:6b:a5:b8:58:be:78:d3:a1:d5:21:b3:1f:5a:ed:12:d5:
         28:1e:65:e9:f4:2e:f4:9e:fb:37:61:f4:f8:cc:10:37:44:1f:
         18:38:30:7d:4d:f5:76:0f:c3:1c:80:98:89:54:8e:24:f1:02:
         57:e4:ef:a4:a8:e5:e4:93:4b:35:6d:07:89:04:79:b1:7c:57:
         73:35:f4:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:00:09 2025 by rpki-client