Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2D66870EAB0E4932805F4DB0951805820E1B8AF8C9798AB906AEF05EFEB6C1D6/0/323830333a356164303a343a3a2f34372d3438203d3e20323734303739.roa
File:                     323830333a356164303a343a3a2f34372d3438203d3e20323734303739.roa (raw, json)
Hash identifier:          G9xbEvNmr3xRx9bLOvyhHSGKFyQHYsn/fb4m66HGQ48=
Subject key identifier:   88:FB:DB:BE:6E:8B:57:C3:FE:2E:8D:AE:56:2C:11:48:CB:57:9C:35
Certificate issuer:       /CN=515E3AA341EF8349020D7BF59BE54DC21A5116E4
Certificate serial:       422D65808AC4291C19B1189DB551DFFDE5B70A8B
Authority key identifier: 51:5E:3A:A3:41:EF:83:49:02:0D:7B:F5:9B:E5:4D:C2:1A:51:16:E4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/515E3AA341EF8349020D7BF59BE54DC21A5116E4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2D66870EAB0E4932805F4DB0951805820E1B8AF8C9798AB906AEF05EFEB6C1D6/0/323830333a356164303a343a3a2f34372d3438203d3e20323734303739.roa
Signing time:             Wed 09 Jul 2025 03:00:04 +0000
ROA not before:           Wed 09 Jul 2025 02:55:04 +0000
ROA not after:            Wed 08 Jul 2026 03:00:04 +0000
asID:                     274079
IP address blocks:        2803:5ad0:4::/47 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2D66870EAB0E4932805F4DB0951805820E1B8AF8C9798AB906AEF05EFEB6C1D6/0/515E3AA341EF8349020D7BF59BE54DC21A5116E4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2D66870EAB0E4932805F4DB0951805820E1B8AF8C9798AB906AEF05EFEB6C1D6/0/515E3AA341EF8349020D7BF59BE54DC21A5116E4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/515E3AA341EF8349020D7BF59BE54DC21A5116E4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Jul 2025 03:26:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:2d:65:80:8a:c4:29:1c:19:b1:18:9d:b5:51:df:fd:e5:b7:0a:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=515E3AA341EF8349020D7BF59BE54DC21A5116E4
        Validity
            Not Before: Jul  9 02:55:04 2025 GMT
            Not After : Jul  8 03:00:04 2026 GMT
        Subject: CN=88FBDBBE6E8B57C3FE2E8DAE562C1148CB579C35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a8:33:bd:52:a3:ab:90:78:29:68:80:85:93:
                    4c:f4:5b:86:55:0a:22:ec:be:f1:82:fe:1d:cd:75:
                    5b:e6:6e:21:82:50:e5:06:1f:2d:2b:f2:07:db:67:
                    24:50:e4:e2:28:65:34:be:5a:b9:cc:e1:0e:fb:4d:
                    44:3e:95:82:45:78:b4:a5:83:94:bc:92:b6:18:91:
                    f8:14:9c:85:a8:d4:d7:70:49:a8:a8:b8:e7:2f:f4:
                    64:4d:c3:95:bc:ee:f4:d0:9c:90:71:73:76:04:9a:
                    1d:18:1f:2b:5b:be:2e:6a:30:e8:dd:13:33:88:db:
                    e3:33:8e:18:dc:28:78:09:4d:24:46:63:e8:a0:0a:
                    c9:10:8b:bd:92:7e:51:47:bf:a5:05:ac:a0:a1:6c:
                    45:86:1c:ee:d1:75:06:1f:86:ed:07:4b:6f:9f:e1:
                    07:37:28:ff:e9:8d:fe:8d:66:5c:4b:25:36:0c:ec:
                    ed:2c:49:9e:41:55:e5:29:7e:b8:ef:0d:65:2c:1a:
                    df:fc:6d:91:a5:a9:e0:f4:56:b9:e5:f6:eb:d9:f0:
                    70:7e:1c:20:e7:16:93:9c:6e:f0:8a:a1:8d:80:b8:
                    cf:73:85:37:90:2e:d9:41:e8:c9:08:15:ce:03:af:
                    8d:b3:58:de:c6:ac:6c:16:ee:40:d2:dd:7c:41:42:
                    26:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:FB:DB:BE:6E:8B:57:C3:FE:2E:8D:AE:56:2C:11:48:CB:57:9C:35
            X509v3 Authority Key Identifier:
                keyid:51:5E:3A:A3:41:EF:83:49:02:0D:7B:F5:9B:E5:4D:C2:1A:51:16:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2D66870EAB0E4932805F4DB0951805820E1B8AF8C9798AB906AEF05EFEB6C1D6/0/515E3AA341EF8349020D7BF59BE54DC21A5116E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/515E3AA341EF8349020D7BF59BE54DC21A5116E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2D66870EAB0E4932805F4DB0951805820E1B8AF8C9798AB906AEF05EFEB6C1D6/0/323830333a356164303a343a3a2f34372d3438203d3e20323734303739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5ad0:4::/47

    Signature Algorithm: sha256WithRSAEncryption
         44:23:b3:31:09:23:c7:43:0a:af:20:b3:5b:8c:83:cd:e3:9a:
         f7:5a:4e:72:a3:f2:d9:0f:b4:22:3b:9e:a7:cd:6a:58:82:b3:
         0e:ce:9e:dd:b8:54:ba:8f:5a:54:df:07:d9:82:74:19:97:dc:
         95:7d:5e:36:b7:0d:9f:46:d5:26:92:b4:67:b8:47:bb:7c:91:
         ef:ad:fb:61:77:aa:4b:1b:d6:66:4a:ba:ec:69:bc:3c:a2:4e:
         d3:74:b0:0d:17:c3:23:bd:d0:6a:5c:c3:71:1b:8d:e5:0b:43:
         9d:d3:2e:7e:08:6f:8c:d4:3a:78:6f:eb:37:87:00:ca:91:90:
         fb:f6:30:a1:86:1e:5c:ed:ce:18:35:a1:06:a8:32:36:30:c7:
         88:22:af:0e:d7:b8:e3:78:09:80:98:8d:59:43:07:34:49:70:
         ed:2e:51:3f:a4:bc:e6:dd:c4:29:c6:11:b7:8b:61:c0:11:3e:
         0a:36:6a:d8:c2:fe:4a:dc:6f:6c:d5:17:31:84:99:ae:c7:ed:
         89:ab:45:4d:cd:f0:2a:70:ea:fd:90:7c:3b:af:44:ad:1d:88:
         0c:6e:97:bf:64:76:14:86:64:04:b0:d2:4e:c2:d0:68:6e:66:
         08:14:2c:5a:7d:9a:a9:48:7d:3e:a8:40:5d:44:4c:93:a5:26:
         01:87:f3:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 02:53:45 2025 by rpki-client