Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2E22BB65B9A19ECE421C5C61C066DAC09116DA181FA1682C9B57C185F0DA7BC2/0/323830333a636631303a3a2f33322d3438203d3e20323732313139.roa
File:                     323830333a636631303a3a2f33322d3438203d3e20323732313139.roa (raw, json)
Hash identifier:          wdn0bT+aUjmcpRB9I9CPSFT9z/fdJjBM+ABDk5au6i0=
Subject key identifier:   F9:FB:A6:0E:80:E1:9F:FB:AA:A1:F4:74:F9:FE:B6:44:86:DB:68:97
Certificate issuer:       /CN=24E49374E540033D3850F3DEB6307B9396818D78
Certificate serial:       38D7DA4248B5E43C0D6B69A04E9FB9F12DAE63AF
Authority key identifier: 24:E4:93:74:E5:40:03:3D:38:50:F3:DE:B6:30:7B:93:96:81:8D:78
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24E49374E540033D3850F3DEB6307B9396818D78.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2E22BB65B9A19ECE421C5C61C066DAC09116DA181FA1682C9B57C185F0DA7BC2/0/323830333a636631303a3a2f33322d3438203d3e20323732313139.roa
Signing time:             Wed 05 Mar 2025 14:11:21 +0000
ROA not before:           Wed 05 Mar 2025 14:06:21 +0000
ROA not after:            Wed 04 Mar 2026 14:11:21 +0000
asID:                     272119
IP address blocks:        2803:cf10::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2E22BB65B9A19ECE421C5C61C066DAC09116DA181FA1682C9B57C185F0DA7BC2/0/24E49374E540033D3850F3DEB6307B9396818D78.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2E22BB65B9A19ECE421C5C61C066DAC09116DA181FA1682C9B57C185F0DA7BC2/0/24E49374E540033D3850F3DEB6307B9396818D78.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24E49374E540033D3850F3DEB6307B9396818D78.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 14:49:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:d7:da:42:48:b5:e4:3c:0d:6b:69:a0:4e:9f:b9:f1:2d:ae:63:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24E49374E540033D3850F3DEB6307B9396818D78
        Validity
            Not Before: Mar  5 14:06:21 2025 GMT
            Not After : Mar  4 14:11:21 2026 GMT
        Subject: CN=F9FBA60E80E19FFBAAA1F474F9FEB64486DB6897
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:5f:f8:48:2b:31:92:b4:a3:bf:cd:2e:90:e5:
                    01:b4:67:bd:24:58:a8:ff:03:31:31:67:e7:b0:d0:
                    f2:02:0f:17:2a:18:47:fc:26:c6:3b:1d:f7:a9:cb:
                    12:1d:d5:1f:34:7e:37:47:d3:19:f2:ee:64:32:b2:
                    d3:aa:d8:1c:4c:17:3a:61:8d:c9:bf:de:ef:9e:3b:
                    d2:c9:99:2c:b3:70:6f:70:74:82:b4:89:86:e8:28:
                    16:16:a0:cc:26:80:f5:72:72:9d:57:63:dc:ae:66:
                    7f:b6:7f:f8:32:f7:cb:3e:37:96:c8:b4:4b:f7:a4:
                    9d:9e:a9:25:9f:b6:69:c9:b5:e2:87:29:e1:96:84:
                    c5:7e:81:32:8e:31:2c:f1:fd:fb:02:08:ae:76:7e:
                    05:37:66:12:5a:63:25:0a:12:e9:f1:cd:b9:72:a2:
                    cc:1e:30:2b:af:7f:70:c1:46:41:93:94:fc:a4:4c:
                    95:9c:87:ab:2d:0c:84:40:f0:e2:70:3f:b0:b3:3a:
                    28:f5:8a:ed:e7:16:3b:15:3e:e9:b3:99:17:bb:1a:
                    d6:28:c5:07:a9:42:7f:4b:24:99:75:41:c9:ab:a7:
                    ac:5d:c1:88:ea:91:2d:07:56:c3:0d:8f:34:f3:44:
                    46:e7:b6:41:4c:90:23:a0:3d:5c:f1:6b:79:58:3c:
                    91:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:FB:A6:0E:80:E1:9F:FB:AA:A1:F4:74:F9:FE:B6:44:86:DB:68:97
            X509v3 Authority Key Identifier:
                keyid:24:E4:93:74:E5:40:03:3D:38:50:F3:DE:B6:30:7B:93:96:81:8D:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2E22BB65B9A19ECE421C5C61C066DAC09116DA181FA1682C9B57C185F0DA7BC2/0/24E49374E540033D3850F3DEB6307B9396818D78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24E49374E540033D3850F3DEB6307B9396818D78.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2E22BB65B9A19ECE421C5C61C066DAC09116DA181FA1682C9B57C185F0DA7BC2/0/323830333a636631303a3a2f33322d3438203d3e20323732313139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:cf10::/32

    Signature Algorithm: sha256WithRSAEncryption
         5b:33:50:32:88:2a:90:08:ef:cc:f0:25:2a:39:77:88:ed:2d:
         0d:fc:c0:29:19:ee:5f:34:6c:fd:34:53:5b:41:4e:06:a3:d3:
         1f:f8:3d:ba:11:10:e6:04:23:57:55:98:14:c7:20:24:16:1d:
         49:32:d6:e5:c0:37:d2:61:62:a4:75:fe:e9:77:86:6c:bc:34:
         2c:1c:0c:1e:31:9d:47:0c:8c:bc:5e:2b:cf:0e:46:d9:0b:08:
         ce:43:66:8d:9b:18:44:5f:55:e8:de:6a:52:f3:f6:37:64:19:
         af:1c:15:22:c2:6d:c3:2b:0c:d4:c9:e1:ff:df:74:9f:79:e4:
         34:44:3c:ea:28:d7:ff:54:07:df:51:b5:f3:26:84:11:82:64:
         34:de:17:a3:38:41:3d:a3:53:28:7e:e2:4d:fb:94:bb:77:bc:
         32:a6:66:de:07:3a:51:a7:62:1a:a9:32:7a:3e:14:90:4b:c0:
         1d:ec:22:10:64:1d:4e:78:fd:62:00:64:c7:99:51:e6:a0:99:
         1d:30:2e:9b:27:b1:02:14:d0:57:e6:00:40:b6:43:26:a8:71:
         7c:f0:fc:57:b9:e2:18:7c:61:60:d4:c5:92:8d:5f:76:a1:e2:
         c8:df:cf:8f:8d:70:ee:57:1f:bb:d7:e7:44:41:2c:e6:bb:d1:
         7f:8b:6c:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:18:01 2025 by rpki-client