Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/30CC8E928CEFD03411023C0EDE689D1B7B796364201C2AC9B99E515B83A7F74D/0/323830333a386361303a3a2f33362d3336203d3e20323636383332.roa
File:                     323830333a386361303a3a2f33362d3336203d3e20323636383332.roa (raw, json)
Hash identifier:          Kqehn07/9nwDXy6XjlFxxNlW1Xhyt4f0zyNJ9vOF1Hs=
Subject key identifier:   85:72:2E:14:AE:16:43:56:28:DD:F3:EF:ED:75:58:CF:BB:D7:B4:37
Certificate issuer:       /CN=CB51CF25AE68F0C858FEB51FF72D964BE568AA54
Certificate serial:       3FA78CAC861FB5C2D2A7A1EB0F683AB9ABEE82AA
Authority key identifier: CB:51:CF:25:AE:68:F0:C8:58:FE:B5:1F:F7:2D:96:4B:E5:68:AA:54
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB51CF25AE68F0C858FEB51FF72D964BE568AA54.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/30CC8E928CEFD03411023C0EDE689D1B7B796364201C2AC9B99E515B83A7F74D/0/323830333a386361303a3a2f33362d3336203d3e20323636383332.roa
Signing time:             Fri 24 Jan 2025 17:00:03 +0000
ROA not before:           Fri 24 Jan 2025 16:55:03 +0000
ROA not after:            Fri 23 Jan 2026 17:00:03 +0000
asID:                     266832
IP address blocks:        2803:8ca0::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/30CC8E928CEFD03411023C0EDE689D1B7B796364201C2AC9B99E515B83A7F74D/0/CB51CF25AE68F0C858FEB51FF72D964BE568AA54.crl
                          rsync://repository.lacnic.net/rpki/lacnic/30CC8E928CEFD03411023C0EDE689D1B7B796364201C2AC9B99E515B83A7F74D/0/CB51CF25AE68F0C858FEB51FF72D964BE568AA54.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB51CF25AE68F0C858FEB51FF72D964BE568AA54.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 20:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:a7:8c:ac:86:1f:b5:c2:d2:a7:a1:eb:0f:68:3a:b9:ab:ee:82:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CB51CF25AE68F0C858FEB51FF72D964BE568AA54
        Validity
            Not Before: Jan 24 16:55:03 2025 GMT
            Not After : Jan 23 17:00:03 2026 GMT
        Subject: CN=85722E14AE16435628DDF3EFED7558CFBBD7B437
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:0b:48:69:90:81:71:2d:d9:f1:23:b6:b1:18:
                    85:0d:e7:ea:70:01:dd:18:9e:0a:4b:a4:e4:21:0b:
                    1e:27:da:c3:33:fe:ab:bc:20:65:42:a3:d4:eb:c5:
                    18:80:b3:ec:21:99:83:9e:c3:af:ea:4a:09:ae:6a:
                    8a:6c:dc:ba:5b:68:b7:26:5e:9c:98:44:0c:f1:f1:
                    f8:86:33:c9:4d:ec:70:77:6c:25:c3:bd:88:70:24:
                    0e:64:5b:8e:de:78:79:c9:e8:18:11:76:11:40:65:
                    ad:d6:26:19:d7:18:6b:bc:0e:6f:a0:5e:05:03:62:
                    f1:4c:40:21:d4:55:3b:39:b6:0c:4f:54:ae:39:f1:
                    d5:5d:13:6a:39:5a:e7:d6:a6:65:49:ed:4f:ae:4b:
                    f7:7f:c7:83:b5:37:55:e5:71:d0:da:57:db:9b:69:
                    98:fc:e4:73:57:f3:2a:b3:70:47:7e:86:1e:5d:6c:
                    4b:2a:36:95:72:d3:d0:c3:fa:65:8d:fd:84:b7:c7:
                    a2:a0:82:12:18:75:e3:b2:9b:f7:2f:92:69:22:1b:
                    14:aa:fd:5c:71:d8:8b:71:a7:56:db:94:55:12:82:
                    7f:16:0b:68:29:bb:89:3d:c0:74:62:d6:18:c4:2b:
                    44:ba:59:63:16:56:4a:8f:85:65:54:2a:a4:60:4b:
                    f9:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:72:2E:14:AE:16:43:56:28:DD:F3:EF:ED:75:58:CF:BB:D7:B4:37
            X509v3 Authority Key Identifier:
                keyid:CB:51:CF:25:AE:68:F0:C8:58:FE:B5:1F:F7:2D:96:4B:E5:68:AA:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/30CC8E928CEFD03411023C0EDE689D1B7B796364201C2AC9B99E515B83A7F74D/0/CB51CF25AE68F0C858FEB51FF72D964BE568AA54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB51CF25AE68F0C858FEB51FF72D964BE568AA54.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/30CC8E928CEFD03411023C0EDE689D1B7B796364201C2AC9B99E515B83A7F74D/0/323830333a386361303a3a2f33362d3336203d3e20323636383332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8ca0::/36

    Signature Algorithm: sha256WithRSAEncryption
         1c:7e:cf:fb:d7:9a:c7:50:98:f3:85:aa:29:b6:67:74:c1:d5:
         38:43:3d:2f:42:66:b5:b0:78:ce:9f:61:fd:34:93:85:71:1e:
         6f:ad:45:92:8d:b1:9c:48:70:08:32:c5:1b:b9:2d:1d:16:4a:
         73:03:c3:37:fb:0c:5a:d9:54:9e:02:c6:9a:4e:14:b7:b1:2d:
         40:97:ec:57:69:7f:99:21:d8:81:31:01:10:02:1c:c1:a8:cd:
         c9:ce:41:76:28:08:c8:d6:b8:66:ee:e9:45:b2:c2:28:2a:ad:
         3e:1e:38:23:89:7a:01:09:9d:1b:b3:34:9b:5d:a7:99:3c:d8:
         ad:f1:61:93:1c:d9:71:38:72:63:2b:b7:37:b9:57:bb:e8:dd:
         70:13:fe:4b:39:54:ff:51:ee:11:4a:64:fc:95:48:50:67:90:
         32:f6:e7:2b:c1:76:07:01:97:b6:c0:9b:e0:bd:89:ef:d4:ed:
         8e:16:f5:41:b7:c3:38:ad:fa:e7:c1:91:56:10:a8:ff:31:f1:
         51:1b:98:9c:0f:45:88:ef:a4:35:a6:0f:cc:65:6c:81:14:58:
         24:bf:a5:66:69:d0:f7:5d:76:3c:41:9d:b7:82:90:6a:62:03:
         8a:75:10:88:3e:29:9c:2b:6b:df:70:ac:e5:e0:bc:15:57:c6:
         74:02:ca:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 21:40:46 2025 by rpki-client