Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/288024DE8736033154151253525598CEC89B9A0DE075117B13A60C8B7128E2D0/0/323830333a6134303a3a2f34372d3438203d3e20323633383137.roa
File:                     323830333a6134303a3a2f34372d3438203d3e20323633383137.roa (raw, json)
Hash identifier:          XWNi85D6pU10hEJTHjZn+WiGf73bs2QkJLnS19kOcn0=
Subject key identifier:   32:A2:69:5D:4A:B7:AE:ED:4D:BA:A8:B4:FA:2E:F4:3E:86:6D:0B:C9
Certificate issuer:       /CN=BE7683A0995880FB51F3BF98293EDECD286AF6A3
Certificate serial:       67CC0AB702DC20B66B962ACDA67AA9CDE0892D42
Authority key identifier: BE:76:83:A0:99:58:80:FB:51:F3:BF:98:29:3E:DE:CD:28:6A:F6:A3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BE7683A0995880FB51F3BF98293EDECD286AF6A3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/288024DE8736033154151253525598CEC89B9A0DE075117B13A60C8B7128E2D0/0/323830333a6134303a3a2f34372d3438203d3e20323633383137.roa
Signing time:             Tue 04 Feb 2025 18:07:01 +0000
ROA not before:           Tue 04 Feb 2025 18:02:01 +0000
ROA not after:            Tue 03 Feb 2026 18:07:01 +0000
asID:                     263817
IP address blocks:        2803:a40::/47 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/288024DE8736033154151253525598CEC89B9A0DE075117B13A60C8B7128E2D0/0/BE7683A0995880FB51F3BF98293EDECD286AF6A3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/288024DE8736033154151253525598CEC89B9A0DE075117B13A60C8B7128E2D0/0/BE7683A0995880FB51F3BF98293EDECD286AF6A3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BE7683A0995880FB51F3BF98293EDECD286AF6A3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:cc:0a:b7:02:dc:20:b6:6b:96:2a:cd:a6:7a:a9:cd:e0:89:2d:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE7683A0995880FB51F3BF98293EDECD286AF6A3
        Validity
            Not Before: Feb  4 18:02:01 2025 GMT
            Not After : Feb  3 18:07:01 2026 GMT
        Subject: CN=32A2695D4AB7AEED4DBAA8B4FA2EF43E866D0BC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:ef:56:00:5c:f0:a7:34:5f:60:83:dc:be:ed:
                    2f:74:16:73:69:2f:7e:f2:4e:25:d0:41:73:c7:54:
                    37:cb:6f:19:fa:ae:66:f8:4e:fd:46:b4:ee:dc:61:
                    29:7c:e4:07:8f:0e:d6:55:a5:06:6e:1c:d0:03:41:
                    e3:0c:8c:db:c5:b6:ea:5e:0b:0f:df:35:5c:c1:45:
                    30:df:da:7b:90:70:45:4b:91:7c:ff:c5:93:5d:ba:
                    13:57:af:0c:f8:31:55:fa:0f:2e:1e:92:72:f4:1c:
                    17:0c:a5:9d:a9:21:22:14:da:50:b3:cd:4c:93:a3:
                    af:70:e7:4a:97:48:bc:0a:51:43:60:d1:02:39:fe:
                    a6:49:ff:56:8b:24:4e:87:f3:a9:4f:05:fb:44:b8:
                    fc:7e:16:ac:ac:30:8d:4a:57:96:f0:66:52:26:e9:
                    9c:0e:d5:b9:c6:20:17:34:21:e2:a8:ce:60:f9:71:
                    9a:96:88:aa:8b:3f:2f:86:77:eb:45:ba:3f:4c:4b:
                    c7:d0:ea:8b:84:43:b3:7e:8a:69:65:57:73:f8:ab:
                    45:6f:1c:93:a9:61:ef:fc:b5:77:45:5a:3a:37:9b:
                    af:e8:57:d9:87:86:fc:17:1a:fa:3f:f3:47:9a:d7:
                    a9:eb:0c:56:13:49:e3:35:bc:84:97:b9:b2:a9:f2:
                    be:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:A2:69:5D:4A:B7:AE:ED:4D:BA:A8:B4:FA:2E:F4:3E:86:6D:0B:C9
            X509v3 Authority Key Identifier:
                keyid:BE:76:83:A0:99:58:80:FB:51:F3:BF:98:29:3E:DE:CD:28:6A:F6:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/288024DE8736033154151253525598CEC89B9A0DE075117B13A60C8B7128E2D0/0/BE7683A0995880FB51F3BF98293EDECD286AF6A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BE7683A0995880FB51F3BF98293EDECD286AF6A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/288024DE8736033154151253525598CEC89B9A0DE075117B13A60C8B7128E2D0/0/323830333a6134303a3a2f34372d3438203d3e20323633383137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:a40::/47

    Signature Algorithm: sha256WithRSAEncryption
         69:cf:9f:34:47:d0:61:f6:b0:fc:62:a7:30:99:45:f7:64:4e:
         56:f9:b0:57:62:e2:27:56:bd:27:d1:83:ad:d8:ff:c8:d9:3b:
         5a:94:4f:d3:0d:30:c1:52:e5:50:4b:8b:b2:aa:1a:71:5b:96:
         4b:32:d7:d8:8d:89:a2:c9:2c:bc:02:51:c6:ad:86:43:d0:84:
         b5:ed:e6:a4:bf:6b:54:93:38:9c:b2:63:5e:b6:48:6b:ef:ad:
         3e:1e:cf:cf:7c:1a:92:ce:88:be:b5:e1:84:fb:6c:47:b1:44:
         77:a3:00:c9:89:fb:1b:14:c9:84:58:b6:1d:75:63:34:26:9e:
         4c:42:5d:d2:10:32:d4:b4:d4:02:1a:db:f5:85:b9:5b:2e:78:
         03:be:99:51:f1:fd:4a:2c:b0:cf:91:a8:fd:cc:1a:f2:a1:b5:
         c8:8c:eb:bb:d3:40:47:4b:0b:0b:f7:26:6d:fd:79:d4:de:7f:
         55:69:80:a8:b5:de:76:55:95:b1:68:54:3a:50:9a:d5:ff:6e:
         aa:68:6a:d2:13:3d:06:15:8e:b3:a0:83:7d:90:fb:d1:bc:9f:
         5c:a9:c6:f1:d4:d3:76:7c:e2:04:44:1f:44:a3:c4:4d:0e:b5:
         a7:ef:a7:18:1e:07:27:b8:d7:53:b5:37:ef:39:10:92:5e:9d:
         b5:df:8b:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:10:31 2025 by rpki-client