Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/35A1A47C82E544353E4BD3679D25528DD336C0C3BE7F9C8B88454E7C417B69FF/0/323830333a363030303a3a2f33322d313238203d3e203532323238.roa
File:                     323830333a363030303a3a2f33322d313238203d3e203532323238.roa (raw, json)
Hash identifier:          IEvc3l30uMHt/qDpUYXRjERpssB7U0R+Q/YrMjK18q0=
Subject key identifier:   C3:97:7B:76:2C:BD:1B:A9:3F:4C:74:2B:0A:E7:DE:39:E9:B4:1C:98
Certificate issuer:       /CN=F511ACBA72E80C00FEC13D30AC676138A7AC48C7
Certificate serial:       3EBDCB613D27134991BF43C6A85695C172D51B2C
Authority key identifier: F5:11:AC:BA:72:E8:0C:00:FE:C1:3D:30:AC:67:61:38:A7:AC:48:C7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F511ACBA72E80C00FEC13D30AC676138A7AC48C7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/35A1A47C82E544353E4BD3679D25528DD336C0C3BE7F9C8B88454E7C417B69FF/0/323830333a363030303a3a2f33322d313238203d3e203532323238.roa
Signing time:             Tue 04 Feb 2025 18:01:48 +0000
ROA not before:           Tue 04 Feb 2025 17:56:48 +0000
ROA not after:            Tue 03 Feb 2026 18:01:48 +0000
asID:                     52228
IP address blocks:        2803:6000::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/35A1A47C82E544353E4BD3679D25528DD336C0C3BE7F9C8B88454E7C417B69FF/0/F511ACBA72E80C00FEC13D30AC676138A7AC48C7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/35A1A47C82E544353E4BD3679D25528DD336C0C3BE7F9C8B88454E7C417B69FF/0/F511ACBA72E80C00FEC13D30AC676138A7AC48C7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F511ACBA72E80C00FEC13D30AC676138A7AC48C7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:bd:cb:61:3d:27:13:49:91:bf:43:c6:a8:56:95:c1:72:d5:1b:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F511ACBA72E80C00FEC13D30AC676138A7AC48C7
        Validity
            Not Before: Feb  4 17:56:48 2025 GMT
            Not After : Feb  3 18:01:48 2026 GMT
        Subject: CN=C3977B762CBD1BA93F4C742B0AE7DE39E9B41C98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ba:ad:c3:bb:f8:48:04:f5:b8:a6:ab:93:ae:
                    ee:41:51:70:a9:1b:75:cc:93:ca:7c:2d:01:7b:ac:
                    29:87:67:e6:8b:57:30:45:30:e6:06:33:74:84:fe:
                    ef:5f:7d:2c:94:08:e9:8f:b2:2a:39:8d:9f:f0:60:
                    2a:cc:7b:a1:96:42:77:d8:24:0c:b2:63:b7:70:46:
                    bf:8b:f4:a4:5d:e4:3d:1c:0c:33:64:58:37:30:41:
                    26:50:c2:30:d7:67:d1:b4:87:27:84:cb:1a:41:84:
                    9a:6c:66:dc:be:cc:eb:c6:a4:4a:41:dd:46:10:05:
                    10:ac:a1:66:74:06:52:b8:d0:be:78:5b:08:0a:21:
                    af:f3:b5:83:b5:e3:b7:1b:6b:de:c6:e2:28:66:fb:
                    24:c0:02:f7:f5:30:b0:a8:ec:38:a1:3a:bd:b2:f1:
                    57:e1:4e:e3:92:b0:23:33:5f:6e:0b:88:aa:a5:20:
                    a8:e0:be:75:15:dd:33:78:90:04:ec:9a:bb:48:91:
                    59:aa:1d:03:1f:ca:ec:60:69:f3:0c:97:e0:79:40:
                    05:71:41:4d:fc:62:fd:3f:28:21:59:2d:07:94:39:
                    77:54:77:d9:5f:9f:49:3a:17:af:86:7f:ed:d1:82:
                    34:bd:ad:1e:e2:a9:cc:53:94:74:ac:a1:4e:8c:a9:
                    ea:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:97:7B:76:2C:BD:1B:A9:3F:4C:74:2B:0A:E7:DE:39:E9:B4:1C:98
            X509v3 Authority Key Identifier:
                keyid:F5:11:AC:BA:72:E8:0C:00:FE:C1:3D:30:AC:67:61:38:A7:AC:48:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/35A1A47C82E544353E4BD3679D25528DD336C0C3BE7F9C8B88454E7C417B69FF/0/F511ACBA72E80C00FEC13D30AC676138A7AC48C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F511ACBA72E80C00FEC13D30AC676138A7AC48C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/35A1A47C82E544353E4BD3679D25528DD336C0C3BE7F9C8B88454E7C417B69FF/0/323830333a363030303a3a2f33322d313238203d3e203532323238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6000::/32

    Signature Algorithm: sha256WithRSAEncryption
         57:b7:d0:a3:27:26:d0:ae:f3:0d:ef:21:db:d4:a2:e6:26:8a:
         8c:25:6c:99:51:86:6c:3f:12:c0:33:b8:e0:60:1d:81:89:bb:
         77:f3:92:c5:c2:aa:e5:7b:cb:54:c6:3b:4d:d1:91:5a:9f:9f:
         cc:30:51:d6:d6:91:55:72:ee:d6:5c:b7:2f:d7:4c:f4:84:4b:
         67:22:b8:88:20:7e:59:97:df:4f:53:fc:b7:b5:10:ad:e9:89:
         24:b0:43:ee:53:0d:86:f2:47:ea:d3:35:6d:b2:f8:f2:5b:e6:
         4f:52:1e:f9:99:38:0e:60:d0:91:87:d8:b4:8e:53:49:09:af:
         3f:52:ae:43:8b:dd:73:48:6f:d3:3d:02:0d:be:fd:b5:87:f0:
         65:f0:3b:c3:5b:6a:1d:dc:e3:f3:87:50:b0:b4:18:1d:56:5a:
         ea:05:b3:4e:e6:5d:9c:ba:81:29:f0:c3:ec:72:df:c4:13:f3:
         49:f6:c7:fa:f1:0b:45:ac:eb:8b:ff:d4:6e:7c:d5:33:5f:88:
         8b:9a:7a:58:55:a4:b1:0a:c4:75:8a:2b:86:be:3c:8c:4d:75:
         ab:96:40:10:91:03:85:0b:2f:5f:ac:91:c5:f7:30:08:8a:55:
         d7:5e:eb:e8:d9:21:2c:9c:6d:c6:2f:ca:e8:5b:e9:5e:c8:55:
         ba:8c:4f:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:21:27 2025 by rpki-client