Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D7EC5FC67A92022DABE8B3963D804B8CB36B1042698E73C93081010C65889BE6/0/323830333a313565303a3730303a3a2f34302d3430203d3e20323730303337.roa
File:                     323830333a313565303a3730303a3a2f34302d3430203d3e20323730303337.roa (raw, json)
Hash identifier:          h5RDL25GmGie+YS+tgESTg23GrFQ0LtFif7I97YCuAw=
Subject key identifier:   41:E2:0B:A8:A8:F9:DD:A6:DE:61:28:E2:D3:FB:73:7C:58:82:E2:A7
Certificate issuer:       /CN=9BC7FB723211AEDC038D47F1F6A375939FD56624
Certificate serial:       66102CF22B026155939EBEEE9B10D2C691351453
Authority key identifier: 9B:C7:FB:72:32:11:AE:DC:03:8D:47:F1:F6:A3:75:93:9F:D5:66:24
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BC7FB723211AEDC038D47F1F6A375939FD56624.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D7EC5FC67A92022DABE8B3963D804B8CB36B1042698E73C93081010C65889BE6/0/323830333a313565303a3730303a3a2f34302d3430203d3e20323730303337.roa
Signing time:             Tue 04 Feb 2025 18:04:13 +0000
ROA not before:           Tue 04 Feb 2025 17:59:13 +0000
ROA not after:            Tue 03 Feb 2026 18:04:13 +0000
asID:                     270037
IP address blocks:        2803:15e0:700::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D7EC5FC67A92022DABE8B3963D804B8CB36B1042698E73C93081010C65889BE6/0/9BC7FB723211AEDC038D47F1F6A375939FD56624.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D7EC5FC67A92022DABE8B3963D804B8CB36B1042698E73C93081010C65889BE6/0/9BC7FB723211AEDC038D47F1F6A375939FD56624.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BC7FB723211AEDC038D47F1F6A375939FD56624.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:10:2c:f2:2b:02:61:55:93:9e:be:ee:9b:10:d2:c6:91:35:14:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BC7FB723211AEDC038D47F1F6A375939FD56624
        Validity
            Not Before: Feb  4 17:59:13 2025 GMT
            Not After : Feb  3 18:04:13 2026 GMT
        Subject: CN=41E20BA8A8F9DDA6DE6128E2D3FB737C5882E2A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:55:9d:ea:23:fb:52:95:5f:17:93:cb:33:4d:
                    d7:7b:2e:06:db:b8:b8:6a:b9:28:75:60:fe:e9:ff:
                    a9:0a:0f:09:a7:2f:0d:8d:a1:4e:a8:1a:de:fe:93:
                    ea:79:c8:55:42:d7:e4:ff:d8:c7:a8:ee:3a:6a:5e:
                    2d:68:9f:c5:10:8b:f1:25:38:fa:12:bd:e1:d6:d4:
                    68:52:28:5a:f9:0d:6a:c5:d0:3a:c9:1a:7a:33:e8:
                    81:72:b5:c5:44:5e:9e:ce:6a:86:8a:6e:b1:49:be:
                    07:86:7a:ba:04:49:96:6d:55:c4:59:f5:3e:d8:02:
                    d9:72:6c:d9:33:77:e7:b0:f3:bc:c0:ea:d6:fe:ff:
                    24:55:10:55:5f:df:6d:1b:44:ad:e8:f7:04:a2:c8:
                    4a:91:29:33:3f:38:73:5b:e4:fc:7e:9c:c5:65:db:
                    d7:8c:8b:8c:ce:7e:ae:17:21:64:40:3a:86:4c:03:
                    dc:ff:d3:6e:55:30:71:30:91:b3:7d:ae:8b:b1:8a:
                    9d:90:37:88:4d:da:6d:13:fa:f6:8b:92:44:58:06:
                    24:3b:ba:ed:56:cb:f5:4b:bb:94:2c:b4:77:e1:f1:
                    ad:89:01:27:e4:79:8e:f3:88:30:99:ef:c0:12:83:
                    ac:05:15:80:06:e7:31:a7:7f:71:e1:94:ab:44:98:
                    4e:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:E2:0B:A8:A8:F9:DD:A6:DE:61:28:E2:D3:FB:73:7C:58:82:E2:A7
            X509v3 Authority Key Identifier:
                keyid:9B:C7:FB:72:32:11:AE:DC:03:8D:47:F1:F6:A3:75:93:9F:D5:66:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D7EC5FC67A92022DABE8B3963D804B8CB36B1042698E73C93081010C65889BE6/0/9BC7FB723211AEDC038D47F1F6A375939FD56624.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BC7FB723211AEDC038D47F1F6A375939FD56624.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D7EC5FC67A92022DABE8B3963D804B8CB36B1042698E73C93081010C65889BE6/0/323830333a313565303a3730303a3a2f34302d3430203d3e20323730303337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:15e0:700::/40

    Signature Algorithm: sha256WithRSAEncryption
         80:93:f7:d7:5a:9d:8d:c0:cd:a4:70:47:33:e1:a5:fa:28:40:
         66:a6:ea:fa:dd:5f:01:a9:21:d7:33:b4:c5:89:b0:7c:b2:50:
         2a:2a:33:3e:22:33:45:9a:2d:99:22:49:05:d0:74:3e:8b:b4:
         be:ef:9a:c3:60:7a:dc:a0:5e:a9:c9:4c:d2:60:03:16:d7:1e:
         2c:52:a1:93:0f:54:8a:5d:f6:0c:75:ad:c3:6d:29:4c:45:7f:
         64:6c:46:73:a7:02:57:4a:ad:51:47:21:cb:7f:21:57:4e:fc:
         bb:65:9e:bc:ba:62:03:73:70:d0:85:fc:09:57:da:12:ad:ae:
         16:11:57:84:20:8a:0a:a4:0d:78:73:33:57:ef:92:d6:86:ee:
         42:5d:82:fe:98:30:2b:94:fb:ce:32:a0:fb:f8:5c:2d:88:cc:
         c1:b3:17:fd:05:60:df:44:4d:9e:56:7c:6c:d4:0e:8e:82:24:
         e7:21:94:a2:27:f9:17:39:a6:e4:ef:80:bc:8c:a2:cd:fb:f4:
         54:25:14:ae:99:17:f6:fe:9c:7b:45:ae:ff:0f:42:91:b0:69:
         f2:1d:37:81:71:42:21:25:04:54:f0:fb:7e:42:54:74:fb:2d:
         a9:bd:07:4e:cf:6d:60:88:aa:5a:b3:7b:1d:c1:8b:99:a8:79:
         61:50:cd:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:00:08 2025 by rpki-client