Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2F663D871C47F98FA362BB55B113EC6F4FE373B3813690D8AAB17695CB1DFFD8/0/323830333a386231303a3a2f33322d3332203d3e20323732303733.roa
File:                     323830333a386231303a3a2f33322d3332203d3e20323732303733.roa (raw, json)
Hash identifier:          MoDs6HT93M+rFgY+VC5xSnDbIDCVdwwUyZbDWl5/reM=
Subject key identifier:   FF:D9:D3:01:6F:CD:1C:6A:D8:4B:93:97:3B:C9:E4:DC:A2:C5:03:F4
Certificate issuer:       /CN=9AFA60D4E92B5689530450825C9C35894D0EB152
Certificate serial:       24417CEA6A74DC2FA45CD1366F6CC74FF1063044
Authority key identifier: 9A:FA:60:D4:E9:2B:56:89:53:04:50:82:5C:9C:35:89:4D:0E:B1:52
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9AFA60D4E92B5689530450825C9C35894D0EB152.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2F663D871C47F98FA362BB55B113EC6F4FE373B3813690D8AAB17695CB1DFFD8/0/323830333a386231303a3a2f33322d3332203d3e20323732303733.roa
Signing time:             Tue 04 Feb 2025 18:42:24 +0000
ROA not before:           Tue 04 Feb 2025 18:37:24 +0000
ROA not after:            Tue 03 Feb 2026 18:42:24 +0000
asID:                     272073
IP address blocks:        2803:8b10::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2F663D871C47F98FA362BB55B113EC6F4FE373B3813690D8AAB17695CB1DFFD8/0/9AFA60D4E92B5689530450825C9C35894D0EB152.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2F663D871C47F98FA362BB55B113EC6F4FE373B3813690D8AAB17695CB1DFFD8/0/9AFA60D4E92B5689530450825C9C35894D0EB152.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9AFA60D4E92B5689530450825C9C35894D0EB152.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 04:49:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:41:7c:ea:6a:74:dc:2f:a4:5c:d1:36:6f:6c:c7:4f:f1:06:30:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9AFA60D4E92B5689530450825C9C35894D0EB152
        Validity
            Not Before: Feb  4 18:37:24 2025 GMT
            Not After : Feb  3 18:42:24 2026 GMT
        Subject: CN=FFD9D3016FCD1C6AD84B93973BC9E4DCA2C503F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:ff:ba:b0:17:61:61:92:33:26:c0:24:c2:fb:
                    8b:d4:86:a9:91:87:87:3c:4d:2e:08:73:dd:2b:f8:
                    a9:2c:00:ee:dc:5a:c5:05:46:29:15:19:cd:72:5a:
                    cc:e3:4b:45:00:7c:4d:a7:5b:33:c9:2b:5d:5d:8a:
                    c5:90:20:87:e7:2e:47:e5:ad:df:5c:e0:e8:a8:2c:
                    3a:47:1e:7a:e4:0a:aa:30:f5:94:74:58:1c:ac:21:
                    dd:8d:43:80:a7:6d:67:7e:eb:46:13:f0:d9:84:96:
                    d0:86:53:0f:34:00:93:1c:16:a6:86:dc:cd:0c:a5:
                    48:50:1f:4c:ce:65:15:f9:02:5c:42:60:98:73:0d:
                    ff:d8:81:3e:1b:dd:e7:e5:51:38:91:f7:09:9f:3c:
                    20:8f:89:2f:df:6b:61:93:41:2a:b2:19:56:91:30:
                    ea:a0:0a:ab:13:f7:ff:b5:f1:71:a7:e8:20:71:6d:
                    96:76:cb:e7:f3:bd:3b:e3:ba:27:58:83:6f:cd:11:
                    ad:17:cd:e8:aa:ff:56:c5:1e:e9:99:e2:1a:17:7e:
                    c6:52:64:1d:78:9a:5d:93:a9:c7:ae:da:34:1b:0c:
                    4f:53:fa:69:b6:ea:3e:cf:de:74:d0:ad:df:3b:f1:
                    e4:ac:07:47:a4:cb:8d:5e:ae:85:c0:88:51:da:4f:
                    e9:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:D9:D3:01:6F:CD:1C:6A:D8:4B:93:97:3B:C9:E4:DC:A2:C5:03:F4
            X509v3 Authority Key Identifier:
                keyid:9A:FA:60:D4:E9:2B:56:89:53:04:50:82:5C:9C:35:89:4D:0E:B1:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2F663D871C47F98FA362BB55B113EC6F4FE373B3813690D8AAB17695CB1DFFD8/0/9AFA60D4E92B5689530450825C9C35894D0EB152.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9AFA60D4E92B5689530450825C9C35894D0EB152.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2F663D871C47F98FA362BB55B113EC6F4FE373B3813690D8AAB17695CB1DFFD8/0/323830333a386231303a3a2f33322d3332203d3e20323732303733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8b10::/32

    Signature Algorithm: sha256WithRSAEncryption
         92:f8:c1:04:34:ea:af:b7:92:53:db:8b:d8:86:cd:d0:4c:03:
         bc:9a:f5:f5:0e:9f:03:dd:42:ca:ee:16:b8:21:96:82:fa:bc:
         fa:e6:b4:fa:78:4b:cc:4c:ef:33:26:c8:c1:27:d4:01:f8:dd:
         6e:b2:9e:12:7a:d9:ae:7a:13:bc:05:f4:08:76:57:7b:aa:fd:
         5d:a4:b0:ad:86:e8:bf:de:5b:bd:42:4d:aa:fe:1d:bb:77:a0:
         ee:88:b4:55:8f:f3:35:e0:b3:44:da:34:08:91:a1:00:83:0f:
         91:24:94:c4:7b:63:ac:25:b2:6e:c8:32:bd:4d:e9:fa:dd:ff:
         19:ae:a9:aa:4a:02:fd:9b:1a:e2:2f:1f:7c:d7:a5:01:ff:b3:
         08:7c:1f:75:33:ab:17:8f:e6:f1:ce:fc:f5:d5:c0:57:d6:e3:
         85:e7:93:a0:ee:bc:f9:45:a7:4b:21:2f:45:05:69:9c:a5:60:
         bc:3d:5c:cd:bd:df:0c:9d:fa:18:b2:52:96:f1:f7:0d:b9:37:
         42:31:af:ea:52:97:1c:12:2e:13:b1:97:49:03:72:15:3b:75:
         9e:7b:7e:dd:ca:55:d3:bf:7e:f6:cc:be:23:4a:9b:f9:20:bd:
         24:ad:31:63:db:9f:3b:94:28:ec:2a:11:c4:f0:42:2d:65:ab:
         d8:92:7b:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 00:55:38 2025 by rpki-client