Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E41CE691B08760A0641E220B8E03A5787F57C34E88F28CAA98C11A3A7FA64747/0/323830333a323435303a3930303a3a2f34302d3430203d3e20323733313237.roa
File:                     323830333a323435303a3930303a3a2f34302d3430203d3e20323733313237.roa (raw, json)
Hash identifier:          v68+S0jS2Gks8yfssqWwARrRvp36roP0knmznBh7xK8=
Subject key identifier:   7A:D5:37:6D:DE:FF:BD:6E:8C:E9:E7:3B:4B:4F:BB:8B:F7:B1:17:92
Certificate issuer:       /CN=DEAC1E4CE5E1BC80684189997E462EC74999BF58
Certificate serial:       5771CD1300D60EC2D7C59FCEDC7743039E3238E3
Authority key identifier: DE:AC:1E:4C:E5:E1:BC:80:68:41:89:99:7E:46:2E:C7:49:99:BF:58
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DEAC1E4CE5E1BC80684189997E462EC74999BF58.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E41CE691B08760A0641E220B8E03A5787F57C34E88F28CAA98C11A3A7FA64747/0/323830333a323435303a3930303a3a2f34302d3430203d3e20323733313237.roa
Signing time:             Tue 04 Feb 2025 18:38:05 +0000
ROA not before:           Tue 04 Feb 2025 18:33:05 +0000
ROA not after:            Tue 03 Feb 2026 18:38:05 +0000
asID:                     273127
IP address blocks:        2803:2450:900::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E41CE691B08760A0641E220B8E03A5787F57C34E88F28CAA98C11A3A7FA64747/0/DEAC1E4CE5E1BC80684189997E462EC74999BF58.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E41CE691B08760A0641E220B8E03A5787F57C34E88F28CAA98C11A3A7FA64747/0/DEAC1E4CE5E1BC80684189997E462EC74999BF58.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DEAC1E4CE5E1BC80684189997E462EC74999BF58.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:71:cd:13:00:d6:0e:c2:d7:c5:9f:ce:dc:77:43:03:9e:32:38:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DEAC1E4CE5E1BC80684189997E462EC74999BF58
        Validity
            Not Before: Feb  4 18:33:05 2025 GMT
            Not After : Feb  3 18:38:05 2026 GMT
        Subject: CN=7AD5376DDEFFBD6E8CE9E73B4B4FBB8BF7B11792
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:2e:53:27:32:c1:1c:51:14:99:32:76:c1:69:
                    91:8c:21:55:ad:e4:e7:fd:a2:01:cc:fd:d4:07:9b:
                    79:a7:ae:0e:65:90:15:9a:a3:22:82:d1:64:33:56:
                    d3:71:c5:58:b9:85:ed:89:e3:a7:d0:ed:92:48:0c:
                    b9:40:d2:54:f4:d0:74:a5:87:44:c9:9a:90:09:86:
                    40:15:68:eb:12:dd:35:ce:19:63:03:d9:e4:f2:bc:
                    d1:44:67:46:8c:57:57:d5:36:2b:ef:47:ce:d4:8c:
                    aa:93:8d:e6:03:07:21:80:57:9e:bb:ee:59:2e:05:
                    ba:03:ed:91:02:0f:9f:c1:d0:dd:51:8e:b8:08:48:
                    c2:9c:cd:0b:eb:8b:94:04:2c:9c:0d:dc:0f:61:4b:
                    b4:b9:5e:e4:54:d1:8b:58:d7:2f:79:4b:a3:0d:9d:
                    4e:4b:4e:0f:ff:0c:c4:f9:74:28:0c:e0:35:69:1f:
                    f4:dc:3e:53:4c:30:f9:21:f7:6c:db:92:7a:3a:8a:
                    2a:b4:f8:09:55:da:c3:71:ce:64:b3:69:f0:ca:e9:
                    2a:d6:f6:fb:62:af:29:25:8e:2b:1e:57:d3:c5:6b:
                    ee:00:2a:21:3d:4f:10:8c:b5:0a:26:dd:c3:c1:f3:
                    55:f7:66:b0:d6:52:0f:be:83:ce:33:df:dc:17:5f:
                    82:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:D5:37:6D:DE:FF:BD:6E:8C:E9:E7:3B:4B:4F:BB:8B:F7:B1:17:92
            X509v3 Authority Key Identifier:
                keyid:DE:AC:1E:4C:E5:E1:BC:80:68:41:89:99:7E:46:2E:C7:49:99:BF:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E41CE691B08760A0641E220B8E03A5787F57C34E88F28CAA98C11A3A7FA64747/0/DEAC1E4CE5E1BC80684189997E462EC74999BF58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DEAC1E4CE5E1BC80684189997E462EC74999BF58.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E41CE691B08760A0641E220B8E03A5787F57C34E88F28CAA98C11A3A7FA64747/0/323830333a323435303a3930303a3a2f34302d3430203d3e20323733313237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2450:900::/40

    Signature Algorithm: sha256WithRSAEncryption
         91:2d:c1:45:27:50:99:b9:7f:39:a1:6b:ff:5e:44:09:3b:ad:
         7d:06:33:6c:63:09:bd:9c:95:6d:cc:ab:db:7d:33:bd:19:51:
         f8:08:b5:93:bb:eb:7b:77:a2:28:90:a7:09:25:84:a9:d8:be:
         a1:1a:03:ab:c1:98:a6:0b:53:eb:e8:6c:ba:9f:fc:28:e2:a3:
         47:7a:f4:e8:b0:01:55:0b:e0:1b:d8:6d:11:a2:f2:7d:03:ea:
         8e:93:0d:ad:1a:94:1d:4e:b6:39:3e:bb:fc:62:bf:ee:97:79:
         45:5f:83:43:58:97:60:9b:98:c8:da:f8:74:89:88:2e:22:36:
         5c:08:06:c3:aa:cc:5f:93:42:09:2c:3b:d1:b8:f9:81:c4:b2:
         7e:ce:29:b8:71:be:8a:5a:c2:5b:b6:05:29:20:a1:ea:81:b8:
         95:2a:69:62:dd:3f:53:0b:a2:7e:88:ea:db:d4:2a:d7:6f:52:
         28:c1:95:ae:eb:6f:22:b2:2e:d6:14:06:19:44:b3:5c:30:e2:
         f6:cf:87:68:64:ce:2c:28:57:68:0c:28:4b:09:76:cb:f1:43:
         99:3d:aa:a9:e3:3c:9a:12:83:ad:91:27:00:76:be:e9:89:b9:
         e2:ee:b4:54:c3:70:b8:4a:9c:6e:67:d1:32:a0:24:ed:e3:46:
         2b:65:e4:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:31:10 2025 by rpki-client