Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2D66870EAB0E4932805F4DB0951805820E1B8AF8C9798AB906AEF05EFEB6C1D6/0/323830333a356164303a31633a3a2f34372d3438203d3e20323734303739.roa
File:                     323830333a356164303a31633a3a2f34372d3438203d3e20323734303739.roa (raw, json)
Hash identifier:          MsOabWj/LORmWHCb4OBSakm+Yk9e5drkqGYVfEfJlt8=
Subject key identifier:   C1:F2:FA:40:54:83:58:58:8A:39:AF:FF:08:D4:D6:D6:A4:57:47:E5
Certificate issuer:       /CN=515E3AA341EF8349020D7BF59BE54DC21A5116E4
Certificate serial:       179436334A4E8AE73AA7112E09CB7AC98DB4D3AD
Authority key identifier: 51:5E:3A:A3:41:EF:83:49:02:0D:7B:F5:9B:E5:4D:C2:1A:51:16:E4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/515E3AA341EF8349020D7BF59BE54DC21A5116E4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2D66870EAB0E4932805F4DB0951805820E1B8AF8C9798AB906AEF05EFEB6C1D6/0/323830333a356164303a31633a3a2f34372d3438203d3e20323734303739.roa
Signing time:             Wed 09 Jul 2025 03:00:03 +0000
ROA not before:           Wed 09 Jul 2025 02:55:03 +0000
ROA not after:            Wed 08 Jul 2026 03:00:03 +0000
asID:                     274079
IP address blocks:        2803:5ad0:1c::/47 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2D66870EAB0E4932805F4DB0951805820E1B8AF8C9798AB906AEF05EFEB6C1D6/0/515E3AA341EF8349020D7BF59BE54DC21A5116E4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2D66870EAB0E4932805F4DB0951805820E1B8AF8C9798AB906AEF05EFEB6C1D6/0/515E3AA341EF8349020D7BF59BE54DC21A5116E4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/515E3AA341EF8349020D7BF59BE54DC21A5116E4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Jul 2025 03:26:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:94:36:33:4a:4e:8a:e7:3a:a7:11:2e:09:cb:7a:c9:8d:b4:d3:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=515E3AA341EF8349020D7BF59BE54DC21A5116E4
        Validity
            Not Before: Jul  9 02:55:03 2025 GMT
            Not After : Jul  8 03:00:03 2026 GMT
        Subject: CN=C1F2FA40548358588A39AFFF08D4D6D6A45747E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c2:45:e5:71:08:08:2c:2e:14:68:b3:22:02:
                    ea:1e:38:79:de:94:87:bf:a7:8b:4b:de:c7:d3:bb:
                    05:7b:66:23:47:88:ba:dd:a9:2c:05:51:12:51:b8:
                    8c:55:49:64:11:79:bb:27:c0:13:76:4f:e5:49:62:
                    0f:27:07:bb:50:ad:2d:5c:15:52:c0:1b:0a:0a:64:
                    06:a8:c6:cc:33:d2:69:56:4f:39:be:f3:8e:f6:c7:
                    88:7d:2e:0a:66:7c:ae:42:24:fc:37:a2:19:7c:52:
                    69:09:f3:de:cf:4c:e0:ce:87:eb:02:ba:fe:1b:7b:
                    d3:e8:83:27:f8:31:45:6a:df:1f:02:65:05:18:f7:
                    89:18:b3:31:23:0c:72:fa:94:38:83:5b:6a:20:e0:
                    4a:63:0d:54:06:ca:19:89:bf:3a:78:8a:1a:20:08:
                    aa:0f:45:93:99:7c:d2:f0:de:83:11:c8:cf:30:ba:
                    0b:84:ba:a7:4e:9a:c3:2c:0e:ab:ec:0d:a4:8b:c9:
                    e9:e3:12:1e:05:82:d5:35:3e:c7:7b:e9:18:ad:47:
                    58:2a:d5:12:75:94:68:73:ea:65:48:b8:a0:71:35:
                    7e:af:50:a4:c1:aa:31:33:e3:c8:c1:e8:fb:bf:55:
                    66:d9:85:1b:45:c5:b4:71:64:fd:12:aa:13:ed:dd:
                    b3:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:F2:FA:40:54:83:58:58:8A:39:AF:FF:08:D4:D6:D6:A4:57:47:E5
            X509v3 Authority Key Identifier:
                keyid:51:5E:3A:A3:41:EF:83:49:02:0D:7B:F5:9B:E5:4D:C2:1A:51:16:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2D66870EAB0E4932805F4DB0951805820E1B8AF8C9798AB906AEF05EFEB6C1D6/0/515E3AA341EF8349020D7BF59BE54DC21A5116E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/515E3AA341EF8349020D7BF59BE54DC21A5116E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2D66870EAB0E4932805F4DB0951805820E1B8AF8C9798AB906AEF05EFEB6C1D6/0/323830333a356164303a31633a3a2f34372d3438203d3e20323734303739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5ad0:1c::/47

    Signature Algorithm: sha256WithRSAEncryption
         21:a7:85:7b:51:55:9f:ea:87:d8:a9:20:5f:86:a0:b2:8c:90:
         78:4c:86:c4:e8:27:2d:41:9f:23:89:79:2f:ce:fc:d3:1e:bc:
         2d:99:ff:4e:4a:f1:52:aa:a0:67:c0:27:61:43:0c:59:50:66:
         aa:e9:7a:54:87:db:cb:f2:8a:76:9c:d3:34:97:77:db:5b:22:
         45:b7:19:6a:17:e2:5c:17:89:a6:ee:69:90:16:74:48:74:12:
         e2:87:11:43:67:02:c2:30:dc:30:e6:66:0a:3c:27:b0:64:ba:
         19:ba:80:02:f1:c6:9e:e5:6a:ed:51:14:1f:42:be:f8:a0:a1:
         aa:16:68:5d:ea:53:74:fc:be:0e:ec:33:ed:bc:7e:c5:f6:b1:
         f3:5f:14:08:29:cd:7f:e3:4d:4d:f5:db:49:b9:fc:c5:a2:79:
         a2:5a:45:77:64:67:70:e9:e7:9f:9f:9d:38:d0:d0:35:9d:ec:
         fe:ad:f1:52:99:1d:45:c2:23:29:70:58:b2:9f:3b:f5:6e:ca:
         dc:ac:53:30:06:fe:9c:ec:27:d4:24:1e:d9:bb:93:4a:2b:65:
         11:2b:43:0c:21:52:19:37:70:a3:42:d6:f2:0a:9a:99:3c:fc:
         17:e8:6f:5e:1a:d2:02:40:77:ad:98:64:82:0a:5f:26:44:6f:
         90:aa:ed:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 23:12:15 2025 by rpki-client