Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/309E06623B9100973607B535033D4B01FBAC223124EA729AE5FA68B1ABE0526D/0/323830333a633031303a3a2f33322d3438203d3e20323731373939.roa
File:                     323830333a633031303a3a2f33322d3438203d3e20323731373939.roa (raw, json)
Hash identifier:          9G/2CjWq4fkkw3t2JMY8Z2+7yfPlrCPzBNxiOSKDwPo=
Subject key identifier:   EB:6D:A8:A5:7F:DE:A5:DE:76:DA:CA:E9:98:45:46:B0:69:E6:B5:E2
Certificate issuer:       /CN=E0E7EC2EA8323A90800666A965A1CF94DCC7114A
Certificate serial:       3B99B47F75C1D7216C0C7A24DFEEC6D55E0302EA
Authority key identifier: E0:E7:EC:2E:A8:32:3A:90:80:06:66:A9:65:A1:CF:94:DC:C7:11:4A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E0E7EC2EA8323A90800666A965A1CF94DCC7114A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/309E06623B9100973607B535033D4B01FBAC223124EA729AE5FA68B1ABE0526D/0/323830333a633031303a3a2f33322d3438203d3e20323731373939.roa
Signing time:             Tue 04 Feb 2025 18:01:30 +0000
ROA not before:           Tue 04 Feb 2025 17:56:30 +0000
ROA not after:            Tue 03 Feb 2026 18:01:30 +0000
asID:                     271799
IP address blocks:        2803:c010::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/309E06623B9100973607B535033D4B01FBAC223124EA729AE5FA68B1ABE0526D/0/E0E7EC2EA8323A90800666A965A1CF94DCC7114A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/309E06623B9100973607B535033D4B01FBAC223124EA729AE5FA68B1ABE0526D/0/E0E7EC2EA8323A90800666A965A1CF94DCC7114A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E0E7EC2EA8323A90800666A965A1CF94DCC7114A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 18:22:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:99:b4:7f:75:c1:d7:21:6c:0c:7a:24:df:ee:c6:d5:5e:03:02:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E0E7EC2EA8323A90800666A965A1CF94DCC7114A
        Validity
            Not Before: Feb  4 17:56:30 2025 GMT
            Not After : Feb  3 18:01:30 2026 GMT
        Subject: CN=EB6DA8A57FDEA5DE76DACAE9984546B069E6B5E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:03:6f:e3:90:d3:ab:1b:ac:c8:51:fb:ec:4c:
                    7a:ba:b5:2c:87:a7:5b:f4:9a:80:a8:e1:00:6c:d4:
                    34:9e:2e:9a:ca:4b:41:75:86:98:37:f5:d1:ec:b2:
                    a3:08:c1:0a:dd:b3:a3:bb:02:de:4b:62:39:cb:f6:
                    3a:65:16:a9:c1:fa:d4:ff:23:19:e1:94:d2:2e:4f:
                    50:2f:98:e2:8d:38:e8:c7:7a:66:fb:b0:6e:00:f3:
                    93:c5:9d:7c:71:6a:17:4d:17:66:c8:e7:b9:50:89:
                    c2:e3:83:af:4b:ff:a8:1f:26:9d:57:c6:9c:30:bd:
                    2b:c1:d1:5d:69:b0:b5:74:7c:aa:18:b4:ae:12:1a:
                    f0:d3:1e:da:09:b0:3f:b9:ca:92:a4:76:7e:c4:f2:
                    1b:44:d5:ef:80:d2:2f:62:67:40:81:a2:97:68:48:
                    cd:9b:93:38:cb:c8:1d:98:14:35:73:c8:1e:32:92:
                    ef:2b:aa:78:da:9f:57:55:2c:4c:48:59:7f:b2:9b:
                    d6:e0:ed:96:17:82:8d:05:0b:03:13:28:75:34:a9:
                    11:ef:8b:5a:82:10:e0:67:86:dd:6f:4f:02:61:08:
                    60:4d:89:d1:66:df:b2:cb:d1:c4:3e:3b:e4:c4:82:
                    04:7e:d1:5a:e1:31:9a:bc:af:24:26:aa:de:9f:02:
                    a4:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:6D:A8:A5:7F:DE:A5:DE:76:DA:CA:E9:98:45:46:B0:69:E6:B5:E2
            X509v3 Authority Key Identifier:
                keyid:E0:E7:EC:2E:A8:32:3A:90:80:06:66:A9:65:A1:CF:94:DC:C7:11:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/309E06623B9100973607B535033D4B01FBAC223124EA729AE5FA68B1ABE0526D/0/E0E7EC2EA8323A90800666A965A1CF94DCC7114A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E0E7EC2EA8323A90800666A965A1CF94DCC7114A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/309E06623B9100973607B535033D4B01FBAC223124EA729AE5FA68B1ABE0526D/0/323830333a633031303a3a2f33322d3438203d3e20323731373939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c010::/32

    Signature Algorithm: sha256WithRSAEncryption
         58:dc:aa:ce:09:91:10:6e:a8:19:af:7f:5f:76:ca:64:a2:0b:
         c8:b4:4d:10:63:9f:f7:e8:8d:88:1a:8e:ec:e7:96:5b:dc:09:
         40:cb:d1:0b:03:79:e9:b3:92:ff:99:61:94:38:69:f4:e7:28:
         ad:77:8b:57:95:0f:2f:80:77:65:ee:74:c0:10:2d:11:c9:13:
         a2:5e:6c:5d:ab:f6:1c:39:93:b8:e7:77:23:50:91:26:82:01:
         b2:56:7b:9e:37:f7:85:77:d0:d8:b2:36:24:5e:81:98:6c:73:
         2c:49:07:b2:63:87:b9:be:10:35:ad:8f:be:6b:5a:be:a0:29:
         15:a4:5e:a9:d7:fb:fe:29:24:12:58:82:b3:aa:02:9e:cb:61:
         cc:05:72:2d:b9:89:04:b5:b3:93:6e:91:30:7f:51:42:e1:98:
         eb:41:7a:61:3f:99:c8:82:27:50:6b:ce:c3:bf:00:d0:43:0c:
         c5:63:68:b7:91:8c:29:3c:5d:3b:29:e3:15:28:9e:c4:bb:97:
         22:7d:86:2a:e8:f7:1f:fa:aa:86:72:e0:09:b7:4b:06:7d:98:
         44:d2:f7:3a:2e:1b:2e:d5:9f:32:c4:19:8d:79:5a:5f:3f:c6:
         fa:d9:a4:5b:9c:f6:41:06:c9:9e:d6:25:b6:4d:47:19:f1:2f:
         7d:bd:72:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:45:00 2025 by rpki-client