Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/04B2585B1DE5EF4EF7CF0720D78D521461F36D732862185DE75BD8B5896FD242/0/323830333a333430303a3a2f33322d3438203d3e20323632323237.roa
File:                     323830333a333430303a3a2f33322d3438203d3e20323632323237.roa (raw, json)
Hash identifier:          TgpbkHBXMPnYnn+P/5vNvrGGwR7cNDEynn0Ny3y3WIc=
Subject key identifier:   F9:C3:77:B6:7A:9F:68:EE:FC:F7:17:F6:37:23:08:DF:6E:45:78:46
Certificate issuer:       /CN=F07AC2C3313D74F22585389241B3BE2A7B89D7BF
Certificate serial:       08207C5E3DE3C9A11B5043161EF7BE6870D294F2
Authority key identifier: F0:7A:C2:C3:31:3D:74:F2:25:85:38:92:41:B3:BE:2A:7B:89:D7:BF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F07AC2C3313D74F22585389241B3BE2A7B89D7BF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/04B2585B1DE5EF4EF7CF0720D78D521461F36D732862185DE75BD8B5896FD242/0/323830333a333430303a3a2f33322d3438203d3e20323632323237.roa
Signing time:             Fri 14 Mar 2025 14:20:00 +0000
ROA not before:           Fri 14 Mar 2025 14:15:00 +0000
ROA not after:            Fri 13 Mar 2026 14:20:00 +0000
asID:                     262227
IP address blocks:        2803:3400::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/04B2585B1DE5EF4EF7CF0720D78D521461F36D732862185DE75BD8B5896FD242/0/F07AC2C3313D74F22585389241B3BE2A7B89D7BF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/04B2585B1DE5EF4EF7CF0720D78D521461F36D732862185DE75BD8B5896FD242/0/F07AC2C3313D74F22585389241B3BE2A7B89D7BF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F07AC2C3313D74F22585389241B3BE2A7B89D7BF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:12:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:20:7c:5e:3d:e3:c9:a1:1b:50:43:16:1e:f7:be:68:70:d2:94:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F07AC2C3313D74F22585389241B3BE2A7B89D7BF
        Validity
            Not Before: Mar 14 14:15:00 2025 GMT
            Not After : Mar 13 14:20:00 2026 GMT
        Subject: CN=F9C377B67A9F68EEFCF717F6372308DF6E457846
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:aa:d6:3f:49:91:62:09:61:fa:56:8e:7e:6a:
                    24:9b:e8:c8:b8:09:50:55:1e:2e:56:5b:81:6b:88:
                    89:3a:7e:a8:cd:13:8e:82:f6:75:47:b2:ab:46:4c:
                    74:8c:21:42:24:7c:f8:a2:42:56:c2:79:26:7c:96:
                    7d:73:ea:ae:31:4f:93:34:9d:ac:ce:6d:ed:38:99:
                    cf:d9:4c:67:a0:4e:9f:2f:52:9d:6d:0f:49:e8:64:
                    24:92:f2:55:5e:63:98:0a:40:8c:6c:6e:1d:20:db:
                    4b:68:1e:6b:a2:6d:97:34:9b:79:2b:ea:df:76:04:
                    f8:30:90:48:24:bd:13:23:1d:28:fe:65:37:55:84:
                    8b:a3:d5:23:13:1e:05:87:a0:ec:73:8a:86:76:c3:
                    35:54:5c:1c:cd:0c:ad:be:4c:46:d8:2c:83:47:f6:
                    a3:f1:d1:9f:4c:4b:b2:e3:72:1b:5e:9e:eb:ac:96:
                    a8:b2:74:34:13:e0:27:2f:9c:9d:c4:ee:59:ad:41:
                    38:8f:2d:37:cf:97:c9:f3:53:62:27:aa:7c:c8:b6:
                    ac:63:f2:fd:d6:07:ec:4c:34:66:54:45:7d:1a:93:
                    90:05:eb:a0:92:ad:cf:fa:5f:42:87:a0:55:79:e0:
                    4d:60:52:7a:de:41:90:e3:2d:4d:7b:d8:0f:02:d4:
                    fa:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:C3:77:B6:7A:9F:68:EE:FC:F7:17:F6:37:23:08:DF:6E:45:78:46
            X509v3 Authority Key Identifier:
                keyid:F0:7A:C2:C3:31:3D:74:F2:25:85:38:92:41:B3:BE:2A:7B:89:D7:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/04B2585B1DE5EF4EF7CF0720D78D521461F36D732862185DE75BD8B5896FD242/0/F07AC2C3313D74F22585389241B3BE2A7B89D7BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F07AC2C3313D74F22585389241B3BE2A7B89D7BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/04B2585B1DE5EF4EF7CF0720D78D521461F36D732862185DE75BD8B5896FD242/0/323830333a333430303a3a2f33322d3438203d3e20323632323237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3400::/32

    Signature Algorithm: sha256WithRSAEncryption
         b0:7a:c9:d2:a0:90:7b:d7:52:d2:bc:5c:67:ea:4f:f9:15:27:
         02:cd:c8:84:4b:22:26:ca:c6:29:45:85:52:72:1b:1a:e1:30:
         29:9b:df:da:68:73:fe:ee:5f:6a:86:21:11:e7:1c:a4:b7:64:
         c2:62:f4:05:ee:aa:93:42:b5:14:f8:b1:ff:18:39:1d:b3:55:
         68:87:e2:44:fa:c7:da:86:3e:50:62:3f:ab:4e:ee:18:9d:27:
         d9:b5:29:38:e3:71:c9:89:74:bb:92:d0:b6:4f:25:91:96:41:
         31:1d:b4:54:cf:f6:2e:b4:f8:3c:ef:fd:5a:a0:10:cf:33:e9:
         37:e5:03:fc:78:30:e3:11:11:59:23:ae:9f:a8:f3:96:33:2d:
         bb:36:30:86:a6:3d:92:0a:b4:93:31:51:5a:05:e7:9d:60:32:
         50:bc:a0:bf:3c:6f:56:39:71:3b:8a:cd:55:19:5c:76:03:5a:
         ef:89:f7:72:f6:d7:3f:16:ce:f7:e9:3c:22:d7:a4:91:17:d3:
         67:44:a7:6c:3f:df:d4:de:d7:9a:4f:ef:79:83:36:49:fb:55:
         a8:26:31:e3:52:c0:96:ea:4a:94:80:fa:13:7d:cc:64:23:6a:
         a8:40:a1:c3:b6:b9:44:9a:a6:0e:17:76:0a:12:39:a9:66:2d:
         d2:c3:9d:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:57:45 2025 by rpki-client