Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0434853173CE0B5198644701F5B2882F655588676B47D78C8522D4C52498BFD1/0/323830333a646331303a3a2f33322d3634203d3e20323731383831.roa
File:                     323830333a646331303a3a2f33322d3634203d3e20323731383831.roa (raw, json)
Hash identifier:          bDotGXx5dLCRsmjxkw+AFAsdX4R6C4XuEVexHFBWJiY=
Subject key identifier:   53:62:39:92:69:20:1B:C2:C4:BC:AE:98:64:D7:7B:42:76:BD:46:06
Certificate issuer:       /CN=4B5260CA1AC2523F94022706248B4D5E9A1729ED
Certificate serial:       118F2DECD59AB7E26CECF0E0A2C362117D8E89BA
Authority key identifier: 4B:52:60:CA:1A:C2:52:3F:94:02:27:06:24:8B:4D:5E:9A:17:29:ED
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4B5260CA1AC2523F94022706248B4D5E9A1729ED.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0434853173CE0B5198644701F5B2882F655588676B47D78C8522D4C52498BFD1/0/323830333a646331303a3a2f33322d3634203d3e20323731383831.roa
Signing time:             Tue 04 Feb 2025 18:33:47 +0000
ROA not before:           Tue 04 Feb 2025 18:28:47 +0000
ROA not after:            Tue 03 Feb 2026 18:33:47 +0000
asID:                     271881
IP address blocks:        2803:dc10::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0434853173CE0B5198644701F5B2882F655588676B47D78C8522D4C52498BFD1/0/4B5260CA1AC2523F94022706248B4D5E9A1729ED.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0434853173CE0B5198644701F5B2882F655588676B47D78C8522D4C52498BFD1/0/4B5260CA1AC2523F94022706248B4D5E9A1729ED.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4B5260CA1AC2523F94022706248B4D5E9A1729ED.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 09:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:8f:2d:ec:d5:9a:b7:e2:6c:ec:f0:e0:a2:c3:62:11:7d:8e:89:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B5260CA1AC2523F94022706248B4D5E9A1729ED
        Validity
            Not Before: Feb  4 18:28:47 2025 GMT
            Not After : Feb  3 18:33:47 2026 GMT
        Subject: CN=5362399269201BC2C4BCAE9864D77B4276BD4606
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:b6:fd:69:61:f2:e5:47:00:1a:b1:be:3e:fc:
                    18:8f:ba:e4:b2:7c:de:55:ee:d8:df:4e:02:44:e3:
                    a4:85:6f:a7:69:93:42:d8:8c:f3:41:63:9d:29:8c:
                    7a:64:b0:c1:9e:eb:08:cf:fc:0e:fd:e3:f5:55:5c:
                    f9:e2:74:40:81:08:99:9c:bc:73:3a:0c:ec:dc:b4:
                    0b:25:b5:44:19:12:b0:04:3e:88:fc:32:82:c9:24:
                    2a:a3:a8:91:ae:69:d8:c2:33:44:b7:a0:44:b0:8c:
                    fc:a7:18:75:37:cd:6d:95:47:f7:1c:50:75:ab:fc:
                    86:e0:48:1d:c2:f5:36:90:39:de:a5:2a:45:b7:d7:
                    ad:ae:36:e8:53:25:50:60:be:5f:3e:79:11:2a:79:
                    d8:0d:40:a2:de:bd:82:31:ff:19:0b:09:11:cd:a5:
                    cd:7b:41:73:a1:f1:6a:7d:a5:36:1b:f1:21:2a:81:
                    80:f7:bc:d4:8f:41:06:64:e3:43:45:57:f7:14:64:
                    c3:00:76:7f:08:55:30:e4:cd:55:ca:83:86:6d:f1:
                    f4:5b:4e:4d:dc:c4:b8:7a:3f:12:aa:7c:21:01:e0:
                    6f:b8:e5:b1:2c:58:36:54:7c:50:13:06:b8:21:68:
                    35:c9:c2:00:10:00:94:ae:4b:22:0e:53:eb:e1:86:
                    f7:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:62:39:92:69:20:1B:C2:C4:BC:AE:98:64:D7:7B:42:76:BD:46:06
            X509v3 Authority Key Identifier:
                keyid:4B:52:60:CA:1A:C2:52:3F:94:02:27:06:24:8B:4D:5E:9A:17:29:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0434853173CE0B5198644701F5B2882F655588676B47D78C8522D4C52498BFD1/0/4B5260CA1AC2523F94022706248B4D5E9A1729ED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4B5260CA1AC2523F94022706248B4D5E9A1729ED.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0434853173CE0B5198644701F5B2882F655588676B47D78C8522D4C52498BFD1/0/323830333a646331303a3a2f33322d3634203d3e20323731383831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:dc10::/32

    Signature Algorithm: sha256WithRSAEncryption
         6e:fa:68:60:68:d9:6c:c1:2b:9a:08:1d:12:c5:09:9b:43:dc:
         f3:17:ba:01:d6:2c:52:9f:6d:16:5d:6b:ea:7f:2e:e6:be:c0:
         b4:00:ee:b8:68:d5:2d:5a:24:71:3e:1c:8f:47:04:c5:92:d8:
         21:ea:bb:fa:6f:3f:2a:29:98:18:e3:05:27:20:47:2c:24:93:
         e6:b6:7d:5d:e3:ee:fb:46:11:61:a9:cf:59:d2:41:e1:cb:ec:
         a2:f1:d8:0e:25:45:17:14:05:32:10:73:b1:57:d4:bf:a5:c1:
         3d:9a:9c:b7:04:55:36:6d:19:86:aa:49:f9:40:45:67:ab:bd:
         4d:ca:cf:15:f0:51:ff:40:74:0e:9e:a1:32:f4:5f:4f:14:e0:
         1b:ab:ba:1d:d5:cb:48:b7:12:03:28:1d:ec:88:c0:70:cd:03:
         08:64:fa:1d:3c:f9:39:63:0e:6f:07:fc:d2:84:35:32:61:2c:
         90:0d:4b:80:da:9f:c8:b9:49:3b:5e:1d:85:5f:49:4d:03:9b:
         18:ab:7e:52:cb:1b:6e:f6:ac:6c:d8:36:8b:1e:6b:12:d7:67:
         a7:ca:0f:cf:85:d4:9b:b9:22:ac:23:b8:ef:f2:5a:60:71:07:
         2a:b0:ca:a9:a6:f2:0b:c9:70:94:b8:8f:96:cb:8a:d3:3b:22:
         89:78:58:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 21:47:44 2025 by rpki-client