Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/03939F0BF8E56AEA332FE3197C5216F24C76B3AD17F468811344295DE85E5DC6/0/323830313a31333a643030303a3a2f34382d3438203d3e20323635363930.roa
File:                     323830313a31333a643030303a3a2f34382d3438203d3e20323635363930.roa (raw, json)
Hash identifier:          V60pJWxHkCQZvKs/3IWBRcl8qVaseMfk1OHfjmg5CVQ=
Subject key identifier:   C7:B7:6C:D4:B7:C0:24:68:7A:57:27:D2:AC:96:29:17:A2:CC:A9:A7
Certificate issuer:       /CN=047342C3AA3AFAD52A4E32CF9E37034613ECA066
Certificate serial:       692A0DA9998B8FE31FD72E3A890746308C807750
Authority key identifier: 04:73:42:C3:AA:3A:FA:D5:2A:4E:32:CF:9E:37:03:46:13:EC:A0:66
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/047342C3AA3AFAD52A4E32CF9E37034613ECA066.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/03939F0BF8E56AEA332FE3197C5216F24C76B3AD17F468811344295DE85E5DC6/0/323830313a31333a643030303a3a2f34382d3438203d3e20323635363930.roa
Signing time:             Tue 04 Feb 2025 18:25:24 +0000
ROA not before:           Tue 04 Feb 2025 18:20:24 +0000
ROA not after:            Tue 03 Feb 2026 18:25:24 +0000
asID:                     265690
IP address blocks:        2801:13:d000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/03939F0BF8E56AEA332FE3197C5216F24C76B3AD17F468811344295DE85E5DC6/0/047342C3AA3AFAD52A4E32CF9E37034613ECA066.crl
                          rsync://repository.lacnic.net/rpki/lacnic/03939F0BF8E56AEA332FE3197C5216F24C76B3AD17F468811344295DE85E5DC6/0/047342C3AA3AFAD52A4E32CF9E37034613ECA066.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/047342C3AA3AFAD52A4E32CF9E37034613ECA066.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 03:51:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:2a:0d:a9:99:8b:8f:e3:1f:d7:2e:3a:89:07:46:30:8c:80:77:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=047342C3AA3AFAD52A4E32CF9E37034613ECA066
        Validity
            Not Before: Feb  4 18:20:24 2025 GMT
            Not After : Feb  3 18:25:24 2026 GMT
        Subject: CN=C7B76CD4B7C024687A5727D2AC962917A2CCA9A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:6e:a3:cf:f1:af:78:3a:50:92:e4:d2:a6:1c:
                    ec:f4:b2:af:13:d0:87:03:5f:d1:7a:eb:3d:9b:21:
                    be:dc:2e:1a:30:2f:56:ad:4d:ff:2c:57:cf:f3:4a:
                    87:dc:88:d1:1f:22:33:10:f7:02:af:75:9d:44:ce:
                    d9:2a:9d:c6:47:32:c0:ec:ef:11:fd:51:60:7a:c8:
                    cd:73:da:f7:75:ba:04:4c:25:ff:68:be:aa:f3:47:
                    89:5d:95:75:e9:3d:eb:7c:40:7b:ed:0a:ba:57:85:
                    c5:a2:22:c7:ff:94:82:40:2d:e1:2a:5a:07:83:0a:
                    01:89:48:30:7a:59:22:a3:09:e9:c8:29:03:9e:74:
                    8b:e7:df:69:18:51:14:28:03:dd:07:77:77:03:d7:
                    50:67:7b:41:78:34:bb:52:93:38:2d:e7:ad:c6:4b:
                    93:78:a4:21:b9:bc:bb:6b:5a:51:37:25:b9:0d:e2:
                    5e:3b:8a:1b:5d:61:40:4c:7c:da:60:41:0f:10:f4:
                    80:b3:36:32:dc:90:46:ce:07:40:80:3a:4c:79:b5:
                    e6:31:46:a9:b8:0e:76:15:9f:22:3d:74:4c:db:05:
                    12:3a:af:09:b5:e2:74:4c:35:69:ee:ab:7c:af:2a:
                    56:96:24:99:2e:56:ce:81:a9:ce:2b:74:ef:39:d6:
                    42:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:B7:6C:D4:B7:C0:24:68:7A:57:27:D2:AC:96:29:17:A2:CC:A9:A7
            X509v3 Authority Key Identifier:
                keyid:04:73:42:C3:AA:3A:FA:D5:2A:4E:32:CF:9E:37:03:46:13:EC:A0:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/03939F0BF8E56AEA332FE3197C5216F24C76B3AD17F468811344295DE85E5DC6/0/047342C3AA3AFAD52A4E32CF9E37034613ECA066.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/047342C3AA3AFAD52A4E32CF9E37034613ECA066.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/03939F0BF8E56AEA332FE3197C5216F24C76B3AD17F468811344295DE85E5DC6/0/323830313a31333a643030303a3a2f34382d3438203d3e20323635363930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:13:d000::/48

    Signature Algorithm: sha256WithRSAEncryption
         37:cf:74:2e:82:69:fb:24:55:db:3c:c2:32:56:2c:ae:5d:aa:
         87:d2:4c:4f:08:ac:32:c8:b6:51:65:cd:32:e7:a6:8c:14:68:
         22:8e:db:f9:e9:13:89:f0:bd:e5:09:12:14:70:57:26:73:b1:
         a6:19:f7:fd:ed:ac:8f:61:ec:16:b9:bf:44:6c:78:8e:f9:9a:
         5e:89:0b:c3:66:9d:e4:47:c9:57:6a:4a:6e:c6:5b:8e:2f:cb:
         11:e5:1c:01:f7:71:ab:3d:74:aa:a5:05:5d:07:e2:a6:d7:0d:
         5a:49:89:15:13:f9:19:fb:19:78:35:79:de:b5:f5:f7:23:0a:
         be:5a:15:3d:69:70:9e:98:0b:00:14:55:2d:59:06:72:c6:8b:
         75:95:1b:7e:e0:c8:2f:ea:f3:10:d0:04:18:f0:1f:ca:01:0b:
         b6:c4:50:c2:b5:a7:05:95:4b:22:60:c7:47:ec:a8:59:02:b3:
         d0:c4:16:71:3d:99:20:8f:f8:57:0a:8a:7c:84:d2:be:ef:a9:
         3b:03:a5:15:6b:52:d1:18:2f:67:49:45:87:ac:1c:07:dc:82:
         a0:b1:b4:07:fd:4c:60:25:97:22:b7:d4:31:68:c0:0f:98:76:
         85:85:68:a2:da:de:3f:2a:4a:9f:26:b4:a2:1e:49:34:7c:5d:
         24:1a:9e:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 20:22:37 2025 by rpki-client