Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2BF4446931D73DAA5C04224B9B4E8CAB707A0D0001FAB451301919F0CCE5495C/0/323830333a666136303a3a2f33322d3332203d3e20323637383838.roa
File:                     323830333a666136303a3a2f33322d3332203d3e20323637383838.roa (raw, json)
Hash identifier:          B/ARnJCUi2ZD4qfN1o7wK1KhSUowotIfhVo6GZiSjV4=
Subject key identifier:   15:9C:6B:F4:35:98:60:BF:9B:5D:82:CF:E1:45:9F:B6:20:86:47:1D
Certificate issuer:       /CN=F95D41A266B696530FEE7FE49A3D027D06AAA4D8
Certificate serial:       4010EA4389668F19B41BC395F1FD3921FBEBCF30
Authority key identifier: F9:5D:41:A2:66:B6:96:53:0F:EE:7F:E4:9A:3D:02:7D:06:AA:A4:D8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F95D41A266B696530FEE7FE49A3D027D06AAA4D8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2BF4446931D73DAA5C04224B9B4E8CAB707A0D0001FAB451301919F0CCE5495C/0/323830333a666136303a3a2f33322d3332203d3e20323637383838.roa
Signing time:             Tue 04 Feb 2025 17:59:29 +0000
ROA not before:           Tue 04 Feb 2025 17:54:29 +0000
ROA not after:            Tue 03 Feb 2026 17:59:29 +0000
asID:                     267888
IP address blocks:        2803:fa60::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2BF4446931D73DAA5C04224B9B4E8CAB707A0D0001FAB451301919F0CCE5495C/0/F95D41A266B696530FEE7FE49A3D027D06AAA4D8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2BF4446931D73DAA5C04224B9B4E8CAB707A0D0001FAB451301919F0CCE5495C/0/F95D41A266B696530FEE7FE49A3D027D06AAA4D8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F95D41A266B696530FEE7FE49A3D027D06AAA4D8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 20:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:10:ea:43:89:66:8f:19:b4:1b:c3:95:f1:fd:39:21:fb:eb:cf:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F95D41A266B696530FEE7FE49A3D027D06AAA4D8
        Validity
            Not Before: Feb  4 17:54:29 2025 GMT
            Not After : Feb  3 17:59:29 2026 GMT
        Subject: CN=159C6BF4359860BF9B5D82CFE1459FB62086471D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e9:9d:6e:fd:88:f6:3d:e4:95:28:06:08:7b:
                    62:d2:4e:02:2c:b4:74:af:81:4e:4a:db:2d:a4:f3:
                    1f:6b:ac:03:ad:1a:92:9b:bd:23:b9:b6:0b:e2:88:
                    0e:80:4c:85:a8:71:02:70:ba:e4:1c:42:ec:fd:47:
                    e9:a8:94:5c:6a:e6:a3:43:54:37:a8:74:8d:54:56:
                    b8:7c:e1:04:e2:8d:be:1e:d0:e0:b9:66:f2:3b:64:
                    c9:5d:12:ef:1c:b4:ba:9f:fa:87:90:9d:e6:99:ef:
                    e6:0d:c5:16:44:c4:87:19:81:78:b1:1b:51:32:15:
                    e6:d6:fc:21:97:be:aa:0f:93:c7:fb:2b:24:d2:fd:
                    4c:67:89:1f:96:ef:1f:d9:42:48:24:af:07:57:6a:
                    15:3c:73:7f:84:67:63:32:4b:05:a9:d6:e3:9a:39:
                    91:28:57:cc:33:4d:5a:d7:a2:e7:e4:8f:88:d0:75:
                    8e:9d:e6:03:a5:80:f3:4e:f7:56:68:0e:bd:2c:ca:
                    d0:a5:c9:19:5e:d3:f5:0f:bd:9d:86:c0:3f:3d:19:
                    f1:b1:44:c4:3e:14:ee:d6:62:48:3e:b2:2e:5c:52:
                    45:4c:51:ef:2c:f1:d0:10:c8:06:b0:8f:f5:86:2f:
                    5c:c3:e3:dd:1b:4b:51:54:e7:f8:75:bd:0f:3c:83:
                    6b:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:9C:6B:F4:35:98:60:BF:9B:5D:82:CF:E1:45:9F:B6:20:86:47:1D
            X509v3 Authority Key Identifier:
                keyid:F9:5D:41:A2:66:B6:96:53:0F:EE:7F:E4:9A:3D:02:7D:06:AA:A4:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2BF4446931D73DAA5C04224B9B4E8CAB707A0D0001FAB451301919F0CCE5495C/0/F95D41A266B696530FEE7FE49A3D027D06AAA4D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F95D41A266B696530FEE7FE49A3D027D06AAA4D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2BF4446931D73DAA5C04224B9B4E8CAB707A0D0001FAB451301919F0CCE5495C/0/323830333a666136303a3a2f33322d3332203d3e20323637383838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:fa60::/32

    Signature Algorithm: sha256WithRSAEncryption
         24:b2:a3:a4:1e:78:4e:57:7a:fa:35:18:93:15:b6:50:a7:ee:
         62:f4:1d:b4:8e:22:80:00:d1:19:58:63:98:bf:66:11:80:9e:
         d7:d2:56:87:f8:31:18:91:de:af:b3:e4:7e:3e:fb:4f:d4:7e:
         bf:dd:17:12:9e:0e:6f:e4:6c:c9:28:9c:b1:95:3a:a1:20:2e:
         93:41:92:ab:fe:c0:3c:f1:e7:3a:79:08:98:89:c8:fd:35:4a:
         4a:c6:e2:4a:10:19:de:24:c0:8e:3d:9b:a6:f1:7e:84:ff:cd:
         cb:19:90:25:8b:27:84:86:25:7e:8a:e4:8f:ca:1e:d9:08:33:
         45:d8:91:2d:c2:df:fa:96:0a:bc:aa:e5:77:f1:f2:0c:fa:c9:
         91:86:86:97:c4:33:23:3b:f9:8f:7a:bd:5e:c8:39:03:a7:8f:
         dc:16:06:39:43:fc:94:0f:a4:ef:d6:6e:2f:46:a7:a6:df:22:
         92:9d:d8:d6:ee:c2:0f:fd:3b:05:2b:2d:2b:ba:90:22:9e:4f:
         e6:36:0b:26:b6:4a:21:79:58:3a:26:29:e1:f8:55:a7:29:6a:
         26:c4:e0:c5:44:25:ac:06:4b:39:da:1f:13:62:c9:d3:ab:28:
         63:36:4b:f5:45:81:a0:48:93:8a:34:7b:02:25:dd:a9:8f:5a:
         c7:ac:10:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 21:33:35 2025 by rpki-client