Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/30A2F43F3FB56944F31F8E74892769A0D2CFC2B00810BC0FE0D7E86178F99BF3/0/323830333a373136303a3a2f33322d3332203d3e20323634373635.roa
File:                     323830333a373136303a3a2f33322d3332203d3e20323634373635.roa (raw, json)
Hash identifier:          NYZwRQ5qnNx5ONlUNvI5Kl/3hT3CA6Xl+cbr42ckopQ=
Subject key identifier:   44:4C:85:2B:58:FA:EE:B4:84:3B:4F:58:7D:86:11:6E:FC:50:4B:58
Certificate issuer:       /CN=D1FFBC86B25B487736235C5CA0D6DD004C0CAA6A
Certificate serial:       0E8A06217D2DB3444A772D12D24775C7D263659A
Authority key identifier: D1:FF:BC:86:B2:5B:48:77:36:23:5C:5C:A0:D6:DD:00:4C:0C:AA:6A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D1FFBC86B25B487736235C5CA0D6DD004C0CAA6A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/30A2F43F3FB56944F31F8E74892769A0D2CFC2B00810BC0FE0D7E86178F99BF3/0/323830333a373136303a3a2f33322d3332203d3e20323634373635.roa
Signing time:             Tue 04 Feb 2025 18:34:41 +0000
ROA not before:           Tue 04 Feb 2025 18:29:41 +0000
ROA not after:            Tue 03 Feb 2026 18:34:41 +0000
asID:                     264765
IP address blocks:        2803:7160::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/30A2F43F3FB56944F31F8E74892769A0D2CFC2B00810BC0FE0D7E86178F99BF3/0/D1FFBC86B25B487736235C5CA0D6DD004C0CAA6A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/30A2F43F3FB56944F31F8E74892769A0D2CFC2B00810BC0FE0D7E86178F99BF3/0/D1FFBC86B25B487736235C5CA0D6DD004C0CAA6A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D1FFBC86B25B487736235C5CA0D6DD004C0CAA6A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 17:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:8a:06:21:7d:2d:b3:44:4a:77:2d:12:d2:47:75:c7:d2:63:65:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1FFBC86B25B487736235C5CA0D6DD004C0CAA6A
        Validity
            Not Before: Feb  4 18:29:41 2025 GMT
            Not After : Feb  3 18:34:41 2026 GMT
        Subject: CN=444C852B58FAEEB4843B4F587D86116EFC504B58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:8f:8b:f0:85:6b:77:b4:c2:41:0b:61:45:fa:
                    44:d6:52:5b:7f:22:72:72:a3:24:4c:0f:95:36:45:
                    73:3c:2a:65:7d:52:33:bf:c8:87:a0:88:a8:23:13:
                    7b:65:d7:2c:d9:0f:53:42:80:fd:6d:b4:1d:b4:5d:
                    27:5c:15:92:77:fd:0e:17:96:c1:18:94:e6:cf:a3:
                    be:31:8e:43:64:a3:9b:e3:a8:16:52:d5:63:5b:4c:
                    a7:09:59:05:b7:f5:bb:8c:1f:9a:77:d1:cb:eb:6f:
                    cf:21:f9:d9:c2:35:85:e8:a5:65:83:b5:e3:df:31:
                    dd:f9:d7:9f:34:08:75:db:c0:a2:d7:69:28:dc:8f:
                    a1:f0:03:16:fe:9f:00:3b:57:c4:08:fa:83:7f:f1:
                    fd:22:87:b8:9c:d5:9b:ff:f9:9a:ed:fd:1d:f0:3d:
                    b2:50:cc:ff:e7:17:bc:cb:cd:62:6e:38:7d:28:75:
                    89:06:df:26:a9:a8:3d:79:92:f6:73:b8:f8:db:3c:
                    7e:a9:90:c8:9c:11:ff:b3:51:43:02:da:87:ca:38:
                    89:d3:12:29:f1:39:fe:f3:2a:b6:2e:85:a5:a1:b4:
                    b4:6e:8c:cb:10:5e:79:e6:fc:f2:b3:96:a4:46:51:
                    09:3c:8a:d5:ee:3e:f8:5c:be:83:cc:1c:e1:51:07:
                    4c:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:4C:85:2B:58:FA:EE:B4:84:3B:4F:58:7D:86:11:6E:FC:50:4B:58
            X509v3 Authority Key Identifier:
                keyid:D1:FF:BC:86:B2:5B:48:77:36:23:5C:5C:A0:D6:DD:00:4C:0C:AA:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/30A2F43F3FB56944F31F8E74892769A0D2CFC2B00810BC0FE0D7E86178F99BF3/0/D1FFBC86B25B487736235C5CA0D6DD004C0CAA6A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D1FFBC86B25B487736235C5CA0D6DD004C0CAA6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/30A2F43F3FB56944F31F8E74892769A0D2CFC2B00810BC0FE0D7E86178F99BF3/0/323830333a373136303a3a2f33322d3332203d3e20323634373635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7160::/32

    Signature Algorithm: sha256WithRSAEncryption
         ca:f4:02:f0:3f:38:5e:61:0c:4e:39:8b:05:b8:43:f6:57:af:
         fa:63:5a:53:d6:6a:58:56:9f:83:cd:81:6b:7c:e8:6c:63:bc:
         a6:a6:d8:43:4b:9e:e5:75:06:e4:7c:fa:b5:c9:21:0e:ad:4a:
         49:5f:2c:55:de:c9:90:7a:79:cc:5a:67:50:ca:02:2d:b5:c3:
         77:7d:fe:a3:27:23:29:85:aa:da:66:ae:8d:db:69:db:b3:de:
         a8:db:fd:9e:45:81:b5:d0:23:b9:a2:ed:12:b8:07:be:19:e9:
         63:f7:03:73:0f:14:c1:97:83:1b:2d:51:e9:d5:cb:2e:30:dc:
         a3:49:77:e3:c0:1e:44:bd:1c:32:44:a7:36:ca:0f:62:ac:76:
         38:0f:72:dd:19:f6:2f:30:ac:db:52:fe:4f:07:ed:15:a5:fd:
         36:9c:85:de:ef:d4:da:82:3b:cd:f7:bc:ef:57:82:d4:03:c8:
         24:db:a8:4a:0e:7b:70:59:34:a9:0c:70:99:f1:87:9a:c7:75:
         75:b4:58:83:39:7d:4d:b6:a6:ba:2c:74:e8:97:a9:ef:23:04:
         49:85:c8:66:63:d2:3a:b3:1e:d2:05:fb:37:e7:3f:c1:d6:28:
         39:e6:e9:22:99:d3:79:5d:4f:63:9b:fc:b2:18:62:b2:0e:d4:
         a3:d8:be:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 00:24:43 2025 by rpki-client