Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2D66870EAB0E4932805F4DB0951805820E1B8AF8C9798AB906AEF05EFEB6C1D6/0/323830333a356164303a31323a3a2f34372d3438203d3e20323734303739.roa
File:                     323830333a356164303a31323a3a2f34372d3438203d3e20323734303739.roa (raw, json)
Hash identifier:          o5AbjhMuel8yRt1DxLyAizlI/3Q13TgtNTZCgvhgZWg=
Subject key identifier:   0E:E5:02:71:EB:A8:FB:81:A7:CF:A8:08:79:28:A7:98:F5:CD:BC:63
Certificate issuer:       /CN=515E3AA341EF8349020D7BF59BE54DC21A5116E4
Certificate serial:       59653B2BF9B7BE96A0C7016F169B7DEDE4843D3A
Authority key identifier: 51:5E:3A:A3:41:EF:83:49:02:0D:7B:F5:9B:E5:4D:C2:1A:51:16:E4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/515E3AA341EF8349020D7BF59BE54DC21A5116E4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2D66870EAB0E4932805F4DB0951805820E1B8AF8C9798AB906AEF05EFEB6C1D6/0/323830333a356164303a31323a3a2f34372d3438203d3e20323734303739.roa
Signing time:             Wed 09 Jul 2025 03:00:00 +0000
ROA not before:           Wed 09 Jul 2025 02:55:00 +0000
ROA not after:            Wed 08 Jul 2026 03:00:00 +0000
asID:                     274079
IP address blocks:        2803:5ad0:12::/47 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2D66870EAB0E4932805F4DB0951805820E1B8AF8C9798AB906AEF05EFEB6C1D6/0/515E3AA341EF8349020D7BF59BE54DC21A5116E4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2D66870EAB0E4932805F4DB0951805820E1B8AF8C9798AB906AEF05EFEB6C1D6/0/515E3AA341EF8349020D7BF59BE54DC21A5116E4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/515E3AA341EF8349020D7BF59BE54DC21A5116E4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Jul 2025 03:26:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:65:3b:2b:f9:b7:be:96:a0:c7:01:6f:16:9b:7d:ed:e4:84:3d:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=515E3AA341EF8349020D7BF59BE54DC21A5116E4
        Validity
            Not Before: Jul  9 02:55:00 2025 GMT
            Not After : Jul  8 03:00:00 2026 GMT
        Subject: CN=0EE50271EBA8FB81A7CFA8087928A798F5CDBC63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:db:4e:bd:e7:13:0a:0d:0e:ec:1e:b6:ad:ac:
                    73:e9:dd:a7:52:58:90:72:65:42:f7:f9:65:b9:75:
                    8b:d4:9e:bc:c1:1b:57:ac:43:cd:85:aa:90:29:87:
                    8a:14:6c:11:3f:da:17:71:f5:48:b4:53:ca:6e:29:
                    05:b3:f1:78:d7:df:da:4a:9b:a8:61:30:97:a0:a7:
                    46:65:17:9b:23:37:13:d5:d3:78:40:15:d6:c9:8b:
                    10:67:de:74:69:a6:1b:bc:48:4b:b2:80:75:43:f4:
                    65:91:60:40:43:b6:f4:5a:88:1a:e4:d1:7b:d2:55:
                    9e:75:3d:ce:0f:a1:16:d0:a3:fb:aa:c1:ad:a4:8a:
                    29:53:01:7d:5d:b2:ed:35:39:2a:b3:42:f6:c6:e8:
                    a4:b1:91:4a:3c:05:b4:47:a3:a6:e9:c9:6d:b3:4b:
                    97:b0:2d:7c:b6:60:23:36:32:54:cf:77:a0:75:fe:
                    ce:46:cf:93:25:a5:1c:e7:58:fe:c8:af:7b:fa:be:
                    ae:38:dc:9d:66:23:2a:46:51:f8:e6:44:56:f2:a7:
                    44:39:28:0a:29:0f:ea:ba:f1:c1:22:9e:0f:fb:93:
                    e5:38:2a:a8:de:64:b2:0d:47:23:a7:bb:4d:9c:ba:
                    e5:4a:1c:ec:2e:8c:17:f3:3e:b2:0c:6a:16:eb:91:
                    77:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:E5:02:71:EB:A8:FB:81:A7:CF:A8:08:79:28:A7:98:F5:CD:BC:63
            X509v3 Authority Key Identifier:
                keyid:51:5E:3A:A3:41:EF:83:49:02:0D:7B:F5:9B:E5:4D:C2:1A:51:16:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2D66870EAB0E4932805F4DB0951805820E1B8AF8C9798AB906AEF05EFEB6C1D6/0/515E3AA341EF8349020D7BF59BE54DC21A5116E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/515E3AA341EF8349020D7BF59BE54DC21A5116E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2D66870EAB0E4932805F4DB0951805820E1B8AF8C9798AB906AEF05EFEB6C1D6/0/323830333a356164303a31323a3a2f34372d3438203d3e20323734303739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5ad0:12::/47

    Signature Algorithm: sha256WithRSAEncryption
         be:ee:90:35:2f:25:2e:f5:50:77:03:17:00:a6:47:1a:93:1a:
         3f:d8:a9:8c:6f:ee:26:ec:8e:e0:97:23:53:54:3d:07:50:36:
         9d:a6:2a:71:99:63:f3:3e:4a:d7:a2:d5:8d:23:be:ca:0a:03:
         f5:2b:31:e2:33:bc:be:75:e3:b7:a2:1d:15:bf:dc:a2:5f:48:
         1d:92:78:7a:65:40:2d:f1:58:4b:0d:5b:0f:0f:42:22:48:09:
         84:4a:7c:97:87:e6:39:8e:1b:19:9b:ef:67:0f:71:04:19:b9:
         54:ca:ac:db:2f:87:8e:5f:30:08:1d:1e:8c:ab:bd:33:09:52:
         ed:76:a8:d1:fe:73:da:25:87:ba:b3:b8:21:c5:99:2d:46:d9:
         05:a7:50:c4:6b:1e:73:2c:7e:29:22:af:31:88:1a:1e:f6:92:
         e1:fc:2b:fa:17:00:d7:09:42:8a:09:ab:3d:0c:13:33:95:09:
         cb:27:9e:ab:e4:67:ca:ea:f5:31:d3:f9:ea:f8:65:77:b8:a6:
         c2:e2:0a:da:c8:a6:d2:d8:70:ff:c5:46:6e:fc:6a:10:50:61:
         ef:b1:ac:2e:db:a8:4a:d0:df:fb:bc:a7:03:41:43:f9:e5:91:
         16:04:8f:b9:a2:36:b6:f5:fc:15:b6:6a:76:c0:5e:2e:91:42:
         13:dd:a3:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 02:51:48 2025 by rpki-client