Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DCD67801167D0EF074FF13AE5977B421687A21F08DFD1541521481D4D8E35A05/0/323830333a333438303a3430303a3a2f33382d3338203d3e203532343139.roa
File:                     323830333a333438303a3430303a3a2f33382d3338203d3e203532343139.roa (raw, json)
Hash identifier:          9/+SvF2tdKKJtHn13w4wYH74oN6nuNoKMtv/KOAzrJU=
Subject key identifier:   8D:F3:7A:C3:3D:7F:B0:F1:E2:1C:76:EB:F0:A7:83:B4:53:E2:0A:5E
Certificate issuer:       /CN=D8D44DD84F3FDBD732870581DB91456D40862FA2
Certificate serial:       728522EEC71D718C798EFA8834BF19EB44B6B5CC
Authority key identifier: D8:D4:4D:D8:4F:3F:DB:D7:32:87:05:81:DB:91:45:6D:40:86:2F:A2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8D44DD84F3FDBD732870581DB91456D40862FA2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DCD67801167D0EF074FF13AE5977B421687A21F08DFD1541521481D4D8E35A05/0/323830333a333438303a3430303a3a2f33382d3338203d3e203532343139.roa
Signing time:             Tue 04 Feb 2025 18:22:38 +0000
ROA not before:           Tue 04 Feb 2025 18:17:38 +0000
ROA not after:            Tue 03 Feb 2026 18:22:38 +0000
asID:                     52419
IP address blocks:        2803:3480:400::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DCD67801167D0EF074FF13AE5977B421687A21F08DFD1541521481D4D8E35A05/0/D8D44DD84F3FDBD732870581DB91456D40862FA2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DCD67801167D0EF074FF13AE5977B421687A21F08DFD1541521481D4D8E35A05/0/D8D44DD84F3FDBD732870581DB91456D40862FA2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8D44DD84F3FDBD732870581DB91456D40862FA2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:85:22:ee:c7:1d:71:8c:79:8e:fa:88:34:bf:19:eb:44:b6:b5:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8D44DD84F3FDBD732870581DB91456D40862FA2
        Validity
            Not Before: Feb  4 18:17:38 2025 GMT
            Not After : Feb  3 18:22:38 2026 GMT
        Subject: CN=8DF37AC33D7FB0F1E21C76EBF0A783B453E20A5E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:8c:32:2c:05:0d:64:38:08:7c:9e:71:64:f1:
                    76:4e:f9:88:c3:27:70:29:88:3c:44:36:9b:73:78:
                    c4:6d:c5:22:aa:f2:47:41:f8:75:66:bb:88:66:db:
                    03:ca:1f:6f:d1:eb:f3:6c:74:0d:04:a6:2c:40:55:
                    f5:71:ac:31:92:06:b7:81:e1:f4:0c:1e:cb:fd:5e:
                    2f:a3:ca:7f:c8:ea:55:7d:1e:21:47:13:d5:44:16:
                    60:81:6f:2a:3e:ce:e0:fa:61:08:02:ad:a9:c4:b9:
                    50:a5:68:51:d3:e0:5b:8e:f4:0f:3a:87:0d:f3:61:
                    72:f8:73:8b:9f:d8:e0:84:23:0b:91:4a:e7:3f:c7:
                    52:fc:bf:34:65:02:f9:43:3d:d3:4d:85:a9:53:3c:
                    59:f7:3d:54:2c:07:e3:ab:0a:b1:94:a0:6b:1e:a4:
                    cd:0d:0a:ca:c3:f7:8f:64:d6:7e:9d:f7:18:92:40:
                    0d:07:93:3e:b5:50:17:22:c8:b5:18:38:66:dd:1b:
                    ae:a0:3d:da:ae:ef:31:be:dc:a1:1a:2a:37:e6:b3:
                    76:19:6b:78:de:08:17:0f:d3:4c:50:f5:2d:b9:50:
                    a4:16:2b:98:5c:f2:47:20:bb:00:6f:1e:ec:05:2e:
                    90:c6:31:96:05:ae:ae:fd:e4:8f:b5:65:84:30:5b:
                    b6:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:F3:7A:C3:3D:7F:B0:F1:E2:1C:76:EB:F0:A7:83:B4:53:E2:0A:5E
            X509v3 Authority Key Identifier:
                keyid:D8:D4:4D:D8:4F:3F:DB:D7:32:87:05:81:DB:91:45:6D:40:86:2F:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DCD67801167D0EF074FF13AE5977B421687A21F08DFD1541521481D4D8E35A05/0/D8D44DD84F3FDBD732870581DB91456D40862FA2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8D44DD84F3FDBD732870581DB91456D40862FA2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DCD67801167D0EF074FF13AE5977B421687A21F08DFD1541521481D4D8E35A05/0/323830333a333438303a3430303a3a2f33382d3338203d3e203532343139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3480:400::/38

    Signature Algorithm: sha256WithRSAEncryption
         91:6c:bd:f2:44:f8:9b:c6:00:b8:0e:33:a6:af:83:c2:6c:1a:
         eb:bf:bf:f0:49:d3:6b:ce:3d:33:8c:cf:95:3e:2a:c7:3e:d7:
         31:00:1e:b2:e4:05:5b:4f:25:c5:e9:51:d7:3a:38:06:b1:bc:
         ba:5f:f6:a2:87:9c:0c:fe:56:8d:45:e3:b4:f8:da:35:08:58:
         cf:94:b7:0f:4f:76:e9:3a:a9:95:e1:9f:9c:b5:86:b0:1b:2c:
         31:37:d1:47:a3:45:0f:e0:19:68:a2:9d:1b:ef:ec:7a:66:fa:
         89:18:61:b6:8c:07:8f:17:ae:6b:d5:d2:26:36:0f:50:71:03:
         87:01:65:1c:71:ae:a5:fa:e4:74:e1:78:63:60:e4:a9:53:87:
         f6:52:69:76:08:35:6d:9d:1b:de:6a:73:3b:4a:d8:3e:74:5e:
         79:b1:44:4d:92:bf:ca:e3:ec:66:a6:ef:c2:ce:51:05:0c:43:
         fc:57:a4:a9:d1:5a:23:1c:2d:ac:72:b1:f2:aa:b0:17:10:66:
         67:b9:ce:72:5a:b4:4a:b3:32:be:87:20:89:c1:11:5d:8f:d7:
         06:3a:1b:0e:bd:b8:53:75:dc:1e:c4:e4:37:53:62:96:04:af:
         82:f0:91:0a:9a:91:09:5b:74:6d:f1:e7:1c:19:00:0c:30:a5:
         c8:39:95:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:10:11 2025 by rpki-client