Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/272467CD58545DB3C91B9FD59703A48BA0F1BACF3D5C56AA7C90CBE691CC6F44/0/323830333a663234303a333030303a3a2f33362d3336203d3e203631353038.roa
File:                     323830333a663234303a333030303a3a2f33362d3336203d3e203631353038.roa (raw, json)
Hash identifier:          PagPdDWykjYtYb1BuCnFEbdpA3wAO3E6FUOsJ4h5VMs=
Subject key identifier:   87:DF:F0:A4:44:D8:BF:82:E4:E6:16:24:73:A0:AD:22:A9:15:87:55
Certificate issuer:       /CN=818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD
Certificate serial:       2D12FD24F31FF9A392166A6B1F51C64FBF8A55FF
Authority key identifier: 81:8F:5B:44:DD:81:3B:A4:BC:8A:04:C7:D2:55:04:2F:1A:E4:B2:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/272467CD58545DB3C91B9FD59703A48BA0F1BACF3D5C56AA7C90CBE691CC6F44/0/323830333a663234303a333030303a3a2f33362d3336203d3e203631353038.roa
Signing time:             Tue 04 Feb 2025 18:28:54 +0000
ROA not before:           Tue 04 Feb 2025 18:23:54 +0000
ROA not after:            Tue 03 Feb 2026 18:28:54 +0000
asID:                     61508
IP address blocks:        2803:f240:3000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/272467CD58545DB3C91B9FD59703A48BA0F1BACF3D5C56AA7C90CBE691CC6F44/0/818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/272467CD58545DB3C91B9FD59703A48BA0F1BACF3D5C56AA7C90CBE691CC6F44/0/818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 04:59:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:12:fd:24:f3:1f:f9:a3:92:16:6a:6b:1f:51:c6:4f:bf:8a:55:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD
        Validity
            Not Before: Feb  4 18:23:54 2025 GMT
            Not After : Feb  3 18:28:54 2026 GMT
        Subject: CN=87DFF0A444D8BF82E4E6162473A0AD22A9158755
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:79:63:51:20:b5:17:3f:3f:3b:28:16:67:be:
                    aa:45:b7:7a:31:9e:b8:8c:0a:04:7d:5a:1b:96:26:
                    ac:ed:a2:ad:64:14:23:da:06:99:98:37:a3:be:83:
                    f1:79:c1:0a:ce:84:c2:d6:dc:ad:0c:c4:cd:d4:c5:
                    94:2c:00:37:96:dc:0e:07:f6:56:42:84:44:20:34:
                    11:0f:40:de:b7:67:3d:7e:d0:c3:97:03:47:16:be:
                    f0:76:e6:f0:23:6b:9b:8b:6a:28:d8:76:6f:7a:a5:
                    a1:89:ed:69:a9:0f:83:35:73:a4:37:dd:bf:e9:97:
                    65:d0:d2:72:d9:45:05:ef:8b:e6:9e:80:a5:99:81:
                    ea:17:d7:58:db:f7:e9:4d:17:5f:23:4c:35:1b:2f:
                    af:80:fa:44:15:d4:a8:e4:43:33:ca:47:11:fa:05:
                    0c:eb:04:0b:9b:0e:64:16:5e:8f:6a:aa:a8:a2:23:
                    1b:4c:96:47:f9:55:fe:39:87:f5:ec:97:b3:f9:2f:
                    82:70:77:d7:b6:0b:52:ef:32:60:76:08:af:37:95:
                    28:b9:a2:8b:6f:ce:2d:b1:2f:b1:c7:46:9b:4e:4c:
                    a8:56:83:89:27:0f:e0:d2:d4:6d:1a:93:8a:66:aa:
                    c9:52:17:8a:84:fb:af:55:d2:b6:f1:de:01:4d:bf:
                    c3:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:DF:F0:A4:44:D8:BF:82:E4:E6:16:24:73:A0:AD:22:A9:15:87:55
            X509v3 Authority Key Identifier:
                keyid:81:8F:5B:44:DD:81:3B:A4:BC:8A:04:C7:D2:55:04:2F:1A:E4:B2:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/272467CD58545DB3C91B9FD59703A48BA0F1BACF3D5C56AA7C90CBE691CC6F44/0/818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/272467CD58545DB3C91B9FD59703A48BA0F1BACF3D5C56AA7C90CBE691CC6F44/0/323830333a663234303a333030303a3a2f33362d3336203d3e203631353038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f240:3000::/36

    Signature Algorithm: sha256WithRSAEncryption
         35:55:cd:25:ad:1e:c9:dd:15:c6:94:56:b7:21:08:37:fc:ea:
         b1:ba:dc:25:96:49:a0:f5:aa:fd:0a:44:37:7f:2b:3a:36:bd:
         14:bb:52:6a:ec:fb:32:7e:56:d8:86:3f:d2:93:6a:9e:22:ef:
         c0:7b:b0:38:d3:fe:7c:ee:07:17:4d:f8:19:e9:1f:05:e1:84:
         09:9f:f7:1d:55:f6:40:51:a1:af:9d:ba:d7:85:28:ba:6d:30:
         27:72:a1:00:33:c7:af:e7:06:86:f4:52:4e:a1:9e:e9:14:f6:
         54:b3:ac:af:64:ce:18:72:d1:0d:0a:53:40:4c:00:68:19:07:
         a5:83:f3:21:47:06:62:88:d1:ef:92:4e:f1:74:5f:05:a1:25:
         c1:20:aa:47:3d:4c:9a:7b:f7:d6:e3:33:48:90:ce:98:f6:dc:
         2a:f3:0d:51:21:77:6f:f6:3b:14:7d:e3:cf:d7:c0:1f:35:a9:
         58:eb:f3:9f:19:ba:35:18:e1:da:ef:45:da:c6:45:70:58:29:
         7f:66:2b:97:90:d3:69:27:6b:45:54:ae:fc:40:92:20:af:e8:
         dd:03:d1:f3:4d:a9:e6:a1:b5:74:1b:2b:d0:a0:ba:36:ec:a9:
         54:fb:d1:02:f1:20:b3:54:5c:63:d2:b3:06:3e:03:32:b5:8e:
         83:36:fd:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:07:57 2025 by rpki-client