Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0C2180DC903369DE1C3CF9FFC6550F636DE30653A7C87AF922F332DB526CA6CB/0/323830333a613131303a3a2f33322d3438203d3e20323731393838.roa
File:                     323830333a613131303a3a2f33322d3438203d3e20323731393838.roa (raw, json)
Hash identifier:          NMXnsFscz0TxcKInJ5JWDewWxPdEDcrNcSmWrtVeo1U=
Subject key identifier:   8E:46:D7:E9:E2:8C:24:F5:5A:9F:A3:DE:C8:89:DC:15:F7:59:41:19
Certificate issuer:       /CN=59376E3F9B5862851D2A49DD8F419E64763739BB
Certificate serial:       543C00C693DC8FF18252F0696A42724EF8EC4558
Authority key identifier: 59:37:6E:3F:9B:58:62:85:1D:2A:49:DD:8F:41:9E:64:76:37:39:BB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59376E3F9B5862851D2A49DD8F419E64763739BB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0C2180DC903369DE1C3CF9FFC6550F636DE30653A7C87AF922F332DB526CA6CB/0/323830333a613131303a3a2f33322d3438203d3e20323731393838.roa
Signing time:             Tue 04 Feb 2025 18:03:31 +0000
ROA not before:           Tue 04 Feb 2025 17:58:31 +0000
ROA not after:            Tue 03 Feb 2026 18:03:31 +0000
asID:                     271988
IP address blocks:        2803:a110::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0C2180DC903369DE1C3CF9FFC6550F636DE30653A7C87AF922F332DB526CA6CB/0/59376E3F9B5862851D2A49DD8F419E64763739BB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0C2180DC903369DE1C3CF9FFC6550F636DE30653A7C87AF922F332DB526CA6CB/0/59376E3F9B5862851D2A49DD8F419E64763739BB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59376E3F9B5862851D2A49DD8F419E64763739BB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 14:41:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:3c:00:c6:93:dc:8f:f1:82:52:f0:69:6a:42:72:4e:f8:ec:45:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59376E3F9B5862851D2A49DD8F419E64763739BB
        Validity
            Not Before: Feb  4 17:58:31 2025 GMT
            Not After : Feb  3 18:03:31 2026 GMT
        Subject: CN=8E46D7E9E28C24F55A9FA3DEC889DC15F7594119
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:74:45:fc:07:1e:d7:33:48:f6:c1:9c:60:5c:
                    5c:3e:af:5b:87:94:d6:99:fe:43:6d:17:0c:47:03:
                    e8:8c:c9:0e:e3:6c:0a:28:f0:53:67:02:be:1d:ce:
                    8b:b1:b8:f7:76:2f:9d:66:5c:3d:46:bf:2b:7e:1d:
                    ab:09:7d:3b:a1:07:88:5d:ab:13:25:16:72:cd:d9:
                    32:42:31:f3:df:ac:fc:44:22:51:01:29:1e:8e:16:
                    40:f4:af:64:3b:86:be:bc:4f:12:9c:e9:90:4e:39:
                    bb:6a:44:b8:93:35:f0:ef:09:9e:3c:0c:fc:2b:27:
                    b5:55:b2:80:82:b0:c6:83:77:94:45:3a:0a:12:df:
                    59:48:e8:6c:17:88:6c:28:10:cc:3e:24:df:b5:cc:
                    3c:dc:e3:af:77:2e:57:30:20:96:f5:cc:82:6b:11:
                    23:8e:92:64:64:e7:6d:c1:10:4a:37:bd:7f:3a:0e:
                    d1:11:8d:8f:bf:76:c9:61:59:24:89:e1:ed:1f:6b:
                    0e:92:d1:b7:82:96:92:a5:6a:1f:03:d0:09:fa:6d:
                    69:47:c8:18:83:e3:58:39:29:d3:f8:54:64:f0:01:
                    9d:74:9d:b1:a8:4d:8e:e4:1f:19:1e:14:d1:ed:fa:
                    01:e0:b6:84:4a:1f:80:25:92:f7:5e:c8:31:74:4c:
                    d8:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:46:D7:E9:E2:8C:24:F5:5A:9F:A3:DE:C8:89:DC:15:F7:59:41:19
            X509v3 Authority Key Identifier:
                keyid:59:37:6E:3F:9B:58:62:85:1D:2A:49:DD:8F:41:9E:64:76:37:39:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0C2180DC903369DE1C3CF9FFC6550F636DE30653A7C87AF922F332DB526CA6CB/0/59376E3F9B5862851D2A49DD8F419E64763739BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59376E3F9B5862851D2A49DD8F419E64763739BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0C2180DC903369DE1C3CF9FFC6550F636DE30653A7C87AF922F332DB526CA6CB/0/323830333a613131303a3a2f33322d3438203d3e20323731393838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:a110::/32

    Signature Algorithm: sha256WithRSAEncryption
         a8:c8:f2:41:96:21:1c:5a:cb:67:f6:ae:2a:bc:d7:e2:b4:83:
         2a:0f:94:db:9a:42:98:3d:c7:92:0d:02:e7:bd:29:24:51:d8:
         78:d1:ab:51:9b:9c:44:f0:cb:10:a3:b0:c2:84:6e:ab:4c:8d:
         a5:ae:ef:41:9a:7d:da:82:6e:58:8c:f6:ca:66:81:e1:13:44:
         b2:d4:6f:0c:57:d8:a4:00:72:f4:9c:7a:ec:cd:9c:40:d9:0d:
         10:10:13:75:78:10:6e:d6:ee:4f:f1:94:08:93:d4:72:47:ff:
         4e:d9:5a:c8:e0:3c:08:97:61:5d:46:a1:b2:90:25:4e:74:79:
         d4:a6:67:76:0e:f9:26:0a:de:15:0d:28:36:79:be:8a:18:84:
         87:76:1f:14:56:8f:98:88:67:c2:f4:3f:38:d2:8d:25:fd:3b:
         f0:cd:d4:d0:29:79:5d:ca:29:aa:46:81:37:98:f2:66:fd:96:
         44:3c:5e:46:75:e6:39:c1:fe:86:20:02:04:f5:8d:e9:29:6f:
         c2:c6:71:5a:a6:16:01:20:d6:3b:0c:d1:fd:57:fe:f3:3a:98:
         82:8c:a3:af:a8:41:de:b9:f4:b4:50:59:4d:67:a0:09:bd:aa:
         b7:17:ad:f7:f4:7b:ea:fd:f5:6a:34:aa:05:e5:3c:96:bb:e0:
         8b:1a:f3:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 12:56:50 2025 by rpki-client