Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2A20CC709CA1D69F74BBA7E6E87FF5DD4B3783F9CA1824D2A782004E591867AB/0/323830333a653631303a3a2f33322d3438203d3e20323731393435.roa
File:                     323830333a653631303a3a2f33322d3438203d3e20323731393435.roa (raw, json)
Hash identifier:          a7t+zVzbeaN4f4tbA9er0zMetnGFdNu/lk4RYt0RGOM=
Subject key identifier:   E2:F3:C7:19:86:AD:E3:63:D4:99:83:0E:6C:42:B1:25:FF:4A:08:E4
Certificate issuer:       /CN=9F65C4A0CB01A2D647B2277C58097FEFE3D80AC3
Certificate serial:       5D9EC292FCBD3652413804C9B5746612FDC105B0
Authority key identifier: 9F:65:C4:A0:CB:01:A2:D6:47:B2:27:7C:58:09:7F:EF:E3:D8:0A:C3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F65C4A0CB01A2D647B2277C58097FEFE3D80AC3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2A20CC709CA1D69F74BBA7E6E87FF5DD4B3783F9CA1824D2A782004E591867AB/0/323830333a653631303a3a2f33322d3438203d3e20323731393435.roa
Signing time:             Tue 04 Feb 2025 18:40:44 +0000
ROA not before:           Tue 04 Feb 2025 18:35:44 +0000
ROA not after:            Tue 03 Feb 2026 18:40:44 +0000
asID:                     271945
IP address blocks:        2803:e610::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2A20CC709CA1D69F74BBA7E6E87FF5DD4B3783F9CA1824D2A782004E591867AB/0/9F65C4A0CB01A2D647B2277C58097FEFE3D80AC3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2A20CC709CA1D69F74BBA7E6E87FF5DD4B3783F9CA1824D2A782004E591867AB/0/9F65C4A0CB01A2D647B2277C58097FEFE3D80AC3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F65C4A0CB01A2D647B2277C58097FEFE3D80AC3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:9e:c2:92:fc:bd:36:52:41:38:04:c9:b5:74:66:12:fd:c1:05:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F65C4A0CB01A2D647B2277C58097FEFE3D80AC3
        Validity
            Not Before: Feb  4 18:35:44 2025 GMT
            Not After : Feb  3 18:40:44 2026 GMT
        Subject: CN=E2F3C71986ADE363D499830E6C42B125FF4A08E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:6c:93:2d:2c:59:a3:0f:70:d8:a2:f4:e4:41:
                    02:bf:08:1c:eb:e6:58:04:27:34:de:0f:e2:ca:df:
                    9d:04:04:1c:69:4e:fc:c6:20:ab:68:da:f4:1e:df:
                    fc:ba:ab:1d:45:48:23:20:31:e0:68:e1:3c:99:93:
                    06:ff:49:3c:9d:a5:58:43:04:ec:b2:91:ae:a2:36:
                    73:66:53:ec:69:91:0c:8f:fe:5a:cf:a6:32:59:33:
                    e2:d9:d2:c9:4c:b0:2a:ee:cc:4d:16:55:f9:d3:a5:
                    68:97:52:dc:e6:86:a1:71:8b:f0:e1:fb:d8:22:ef:
                    9a:6f:80:05:fb:61:12:56:b8:74:60:c6:32:90:bc:
                    c8:ee:db:d2:41:8b:11:bc:8b:af:ce:e4:67:1b:61:
                    04:9c:19:9a:c3:96:9f:4b:aa:e2:ed:ce:51:af:be:
                    b9:5b:a4:9e:f9:62:79:fe:26:e4:e5:2b:37:44:ef:
                    ae:7b:b2:0a:ec:89:a0:9c:27:7d:68:69:04:a3:6b:
                    10:30:61:48:28:d2:e9:e1:f4:27:37:ac:0f:98:61:
                    1b:99:0c:7a:3a:4a:b7:1a:a9:3c:d8:11:30:fc:a3:
                    5d:82:d9:1a:38:d2:6d:58:5c:b9:81:10:f8:71:70:
                    82:b3:ad:c2:33:7c:c9:92:2a:69:8f:06:bc:ca:a9:
                    9d:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:F3:C7:19:86:AD:E3:63:D4:99:83:0E:6C:42:B1:25:FF:4A:08:E4
            X509v3 Authority Key Identifier:
                keyid:9F:65:C4:A0:CB:01:A2:D6:47:B2:27:7C:58:09:7F:EF:E3:D8:0A:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2A20CC709CA1D69F74BBA7E6E87FF5DD4B3783F9CA1824D2A782004E591867AB/0/9F65C4A0CB01A2D647B2277C58097FEFE3D80AC3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F65C4A0CB01A2D647B2277C58097FEFE3D80AC3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2A20CC709CA1D69F74BBA7E6E87FF5DD4B3783F9CA1824D2A782004E591867AB/0/323830333a653631303a3a2f33322d3438203d3e20323731393435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e610::/32

    Signature Algorithm: sha256WithRSAEncryption
         7b:30:77:62:07:58:94:4e:2b:d4:85:8f:23:eb:b0:b5:4b:8a:
         a1:b0:48:25:35:85:0c:ef:13:10:07:fc:b7:0d:2b:f7:a9:8d:
         18:1c:7f:5c:92:27:b1:bb:19:52:47:21:43:62:87:28:25:19:
         b5:fe:94:c2:91:45:6b:76:a3:41:26:ae:ad:71:f4:8c:84:6b:
         97:7e:53:eb:8b:2c:be:9a:9a:7f:b4:6f:e1:0c:c2:9c:16:1c:
         58:de:ed:40:16:fa:03:64:1c:5f:a6:5e:73:ec:3b:5a:a5:e7:
         99:68:74:92:40:f3:23:eb:c8:e8:53:24:28:22:e9:df:f0:e6:
         da:e0:45:62:ff:a6:77:31:00:1b:13:99:15:e6:76:cf:24:5a:
         9a:15:cd:95:8c:00:15:18:2f:35:94:cb:b2:ac:83:e8:cc:20:
         6c:2a:48:d1:3e:48:08:d0:37:1f:5f:ba:bd:7e:57:10:22:b6:
         bb:25:fe:a1:30:3c:ba:d6:1c:49:50:c7:6e:01:b3:5e:f9:c7:
         b6:4d:78:f9:0d:b3:74:f2:33:03:ed:61:8b:30:7f:40:84:f1:
         f0:d9:4a:be:39:a1:9b:1d:15:1e:47:5f:05:76:5a:c6:2e:74:
         1e:70:21:15:5c:9a:2c:76:f0:e8:b8:31:05:bc:81:bc:bc:53:
         22:7e:bb:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:08:38 2025 by rpki-client