Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EFD47FE509B3E64564E5815935D08E7559B5703FABFC8F219F3F8E142FFF6AA4/0/323830333a373239303a3930303a3a2f34302d3430203d3e20323732383639.roa
File:                     323830333a373239303a3930303a3a2f34302d3430203d3e20323732383639.roa (raw, json)
Hash identifier:          NEkmLh7vjpY+/hXOwQPrED4EKtOlWJ13xL+kVHCqIMk=
Subject key identifier:   7D:C4:DB:DA:21:CA:07:C6:9D:4C:18:A4:4D:2D:69:69:E4:D1:2B:3C
Certificate issuer:       /CN=AEDA4138555E38BF0984DD9CC6D87B98B58F3D88
Certificate serial:       72E4BEE7EB59535C54A6F76E8520205203500922
Authority key identifier: AE:DA:41:38:55:5E:38:BF:09:84:DD:9C:C6:D8:7B:98:B5:8F:3D:88
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AEDA4138555E38BF0984DD9CC6D87B98B58F3D88.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EFD47FE509B3E64564E5815935D08E7559B5703FABFC8F219F3F8E142FFF6AA4/0/323830333a373239303a3930303a3a2f34302d3430203d3e20323732383639.roa
Signing time:             Tue 04 Feb 2025 18:28:07 +0000
ROA not before:           Tue 04 Feb 2025 18:23:07 +0000
ROA not after:            Tue 03 Feb 2026 18:28:07 +0000
asID:                     272869
IP address blocks:        2803:7290:900::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EFD47FE509B3E64564E5815935D08E7559B5703FABFC8F219F3F8E142FFF6AA4/0/AEDA4138555E38BF0984DD9CC6D87B98B58F3D88.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EFD47FE509B3E64564E5815935D08E7559B5703FABFC8F219F3F8E142FFF6AA4/0/AEDA4138555E38BF0984DD9CC6D87B98B58F3D88.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AEDA4138555E38BF0984DD9CC6D87B98B58F3D88.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 04:49:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:e4:be:e7:eb:59:53:5c:54:a6:f7:6e:85:20:20:52:03:50:09:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEDA4138555E38BF0984DD9CC6D87B98B58F3D88
        Validity
            Not Before: Feb  4 18:23:07 2025 GMT
            Not After : Feb  3 18:28:07 2026 GMT
        Subject: CN=7DC4DBDA21CA07C69D4C18A44D2D6969E4D12B3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c7:ee:04:a4:6c:98:67:11:8b:e3:99:5f:03:
                    6d:95:4c:8a:53:79:6e:71:4f:40:b6:d2:36:26:72:
                    8a:2b:1b:fb:24:56:c8:78:ae:ff:3c:12:5a:6f:2c:
                    9c:92:a5:17:96:d3:be:c7:cf:62:e5:ba:99:e0:99:
                    b8:b3:ea:e1:1a:ef:05:65:b2:8e:5b:32:d4:07:d2:
                    1d:dc:b5:22:b6:25:ee:15:75:a3:26:c4:50:22:dc:
                    42:b7:00:bd:8a:04:9d:99:23:39:ff:9d:a9:5e:3f:
                    2c:49:2c:1a:a4:af:f2:bc:50:61:8f:7c:1c:0a:24:
                    9e:da:88:4c:d2:f5:cb:54:3b:a5:24:31:e3:25:b8:
                    0b:bb:e8:4d:f6:24:83:95:eb:7a:7c:dc:4a:89:49:
                    d9:cc:28:13:0d:05:40:91:43:72:c3:5a:fb:61:fa:
                    10:58:95:aa:c6:66:be:f2:d9:ca:7f:b4:53:fc:08:
                    3f:86:2f:b3:36:70:57:f5:2a:d7:7d:a5:c1:e8:4e:
                    d7:54:11:d1:6f:95:86:38:b6:31:73:b7:67:4f:67:
                    0c:e0:77:48:e5:7d:01:bc:59:66:6e:cd:7c:2f:ec:
                    96:28:bf:f4:cd:40:c3:2e:a8:78:38:2c:0a:8d:bb:
                    59:44:cd:a9:82:38:1d:9b:49:84:26:60:5f:af:40:
                    c9:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:C4:DB:DA:21:CA:07:C6:9D:4C:18:A4:4D:2D:69:69:E4:D1:2B:3C
            X509v3 Authority Key Identifier:
                keyid:AE:DA:41:38:55:5E:38:BF:09:84:DD:9C:C6:D8:7B:98:B5:8F:3D:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EFD47FE509B3E64564E5815935D08E7559B5703FABFC8F219F3F8E142FFF6AA4/0/AEDA4138555E38BF0984DD9CC6D87B98B58F3D88.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AEDA4138555E38BF0984DD9CC6D87B98B58F3D88.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EFD47FE509B3E64564E5815935D08E7559B5703FABFC8F219F3F8E142FFF6AA4/0/323830333a373239303a3930303a3a2f34302d3430203d3e20323732383639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7290:900::/40

    Signature Algorithm: sha256WithRSAEncryption
         b2:d7:7d:53:0e:d9:af:96:42:36:6a:e2:56:d5:ab:6e:c2:ca:
         fd:2c:dc:51:b3:bc:e5:1c:c6:35:76:de:e7:63:a5:51:a3:e4:
         84:6b:ef:50:df:16:2a:8c:e9:fe:c6:2c:89:0c:fc:13:28:a4:
         e4:0f:f3:20:dc:94:2c:fb:70:a6:a9:4a:48:88:fc:f1:b6:86:
         7d:da:a4:ef:3c:43:73:10:8d:4c:59:9d:7d:97:8e:f9:7e:59:
         bc:0b:84:83:bc:29:40:2b:7c:06:e4:61:d3:53:85:9f:91:2e:
         8e:c1:24:e4:15:0d:ad:f4:d0:50:8a:f5:6c:35:49:5f:3b:10:
         56:35:a1:37:0a:69:64:25:cf:9e:3d:6c:8b:bc:8b:19:29:3a:
         77:41:3b:ce:da:56:1f:78:38:4a:fd:31:b6:38:87:6d:56:33:
         48:48:2e:8b:45:69:91:55:f2:e4:fc:83:09:f5:2c:74:d4:59:
         01:5a:ae:4a:50:8c:4b:16:34:ef:ce:94:8c:ed:3b:d1:7d:80:
         93:d8:e0:fd:ca:48:a6:4a:e8:99:68:db:4c:dc:d8:06:34:f5:
         b9:6e:dd:78:f7:92:fd:7f:fb:92:6b:c5:a6:8d:17:eb:84:9a:
         71:43:ea:ba:e7:4c:9d:4a:bc:e9:96:7e:f7:79:ad:21:8b:b4:
         55:a0:ba:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:57:51 2025 by rpki-client