Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/406BFEAC47888E79323A6C0453295FBD53E061F93D6CE47410D5A2381489A351/0/323830333a323631303a323a3a2f34372d3438203d3e20323731393432.roa
File:                     323830333a323631303a323a3a2f34372d3438203d3e20323731393432.roa (raw, json)
Hash identifier:          M1XFsP/k3hayoX5UccdQkr03R30rI+R0e41Wz3YhWBI=
Subject key identifier:   F8:3E:AE:E2:32:79:D0:E3:73:B8:4A:52:66:F4:A8:BE:C3:75:CB:2D
Certificate issuer:       /CN=B6403C53F9B05EDE5B902522724143F306D488E7
Certificate serial:       7472D964F4CECAB50BCF279378FD96F92AF0723F
Authority key identifier: B6:40:3C:53:F9:B0:5E:DE:5B:90:25:22:72:41:43:F3:06:D4:88:E7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6403C53F9B05EDE5B902522724143F306D488E7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/406BFEAC47888E79323A6C0453295FBD53E061F93D6CE47410D5A2381489A351/0/323830333a323631303a323a3a2f34372d3438203d3e20323731393432.roa
Signing time:             Tue 04 Feb 2025 18:28:20 +0000
ROA not before:           Tue 04 Feb 2025 18:23:20 +0000
ROA not after:            Tue 03 Feb 2026 18:28:20 +0000
asID:                     271942
IP address blocks:        2803:2610:2::/47 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/406BFEAC47888E79323A6C0453295FBD53E061F93D6CE47410D5A2381489A351/0/B6403C53F9B05EDE5B902522724143F306D488E7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/406BFEAC47888E79323A6C0453295FBD53E061F93D6CE47410D5A2381489A351/0/B6403C53F9B05EDE5B902522724143F306D488E7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6403C53F9B05EDE5B902522724143F306D488E7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 17:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:72:d9:64:f4:ce:ca:b5:0b:cf:27:93:78:fd:96:f9:2a:f0:72:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6403C53F9B05EDE5B902522724143F306D488E7
        Validity
            Not Before: Feb  4 18:23:20 2025 GMT
            Not After : Feb  3 18:28:20 2026 GMT
        Subject: CN=F83EAEE23279D0E373B84A5266F4A8BEC375CB2D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:06:3f:89:17:db:64:89:85:0f:61:93:78:cc:
                    1e:b1:6e:b9:89:c8:16:f8:84:d4:26:30:5f:c8:4f:
                    a4:c1:02:78:ae:a7:84:a1:e3:46:8b:3e:b9:74:08:
                    92:b7:51:1e:0e:c5:59:97:7e:e2:a1:7d:90:90:08:
                    84:cc:7d:11:9c:1b:6e:ce:09:1d:b8:ae:aa:b5:52:
                    4f:a0:df:24:94:dc:23:9c:90:29:52:03:f6:32:d0:
                    c1:ef:61:2f:c3:fb:96:27:b4:0e:3f:ed:e4:d5:7b:
                    d7:e1:09:c8:6c:8b:da:42:b4:6e:02:0f:9b:e8:0b:
                    7e:a6:f9:34:bb:73:cb:04:31:7e:2d:b0:cd:19:e9:
                    9a:98:31:7a:6c:d8:4f:c2:08:ee:e1:85:dd:cd:81:
                    1f:e3:95:46:c7:24:a1:a3:28:de:af:81:29:d0:41:
                    6a:f0:81:46:ba:88:7a:8a:d3:cc:1f:c2:e7:17:d8:
                    b8:29:8d:ff:1a:46:ca:57:38:54:50:97:01:aa:f7:
                    02:17:9c:df:d5:a2:c4:02:7d:06:71:fe:ec:52:ec:
                    c8:1b:6f:f6:87:ed:60:b9:85:96:9e:6d:d7:1e:57:
                    0a:92:88:8c:49:53:21:b2:b7:3a:c6:b7:f5:5d:4c:
                    75:42:cb:25:fe:28:cc:4d:7b:19:51:ab:93:7a:6d:
                    e5:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:3E:AE:E2:32:79:D0:E3:73:B8:4A:52:66:F4:A8:BE:C3:75:CB:2D
            X509v3 Authority Key Identifier:
                keyid:B6:40:3C:53:F9:B0:5E:DE:5B:90:25:22:72:41:43:F3:06:D4:88:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/406BFEAC47888E79323A6C0453295FBD53E061F93D6CE47410D5A2381489A351/0/B6403C53F9B05EDE5B902522724143F306D488E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6403C53F9B05EDE5B902522724143F306D488E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/406BFEAC47888E79323A6C0453295FBD53E061F93D6CE47410D5A2381489A351/0/323830333a323631303a323a3a2f34372d3438203d3e20323731393432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2610:2::/47

    Signature Algorithm: sha256WithRSAEncryption
         6b:18:85:62:b9:b1:39:f5:f3:28:87:96:df:62:66:ca:d7:f9:
         74:85:8f:85:54:47:ce:28:f8:9a:87:0e:93:ee:f6:94:7c:ed:
         d7:4b:d4:b7:e8:6f:40:9a:95:cf:1f:55:41:fb:7e:d6:90:6e:
         4d:a7:52:5f:0b:ce:c6:2e:a2:1a:f9:d3:47:44:f7:2a:92:78:
         d8:26:b7:fb:e8:66:3c:bc:92:ef:e4:4a:72:14:ae:ae:36:57:
         cb:7f:48:af:1b:92:d2:aa:37:54:31:d3:a0:f7:f5:c4:85:dc:
         b0:5f:81:81:e9:38:fe:2a:95:85:92:e9:ca:88:88:1a:9b:18:
         79:88:37:64:64:f7:bf:b5:84:03:dd:57:fe:c2:df:77:8b:07:
         d5:27:5e:ec:f1:60:78:0c:7a:6e:22:7b:0f:0a:a6:97:94:fe:
         78:70:ec:81:7b:ed:25:42:72:76:4e:20:64:42:66:dc:08:fa:
         a6:14:23:4c:cc:08:61:cf:a6:19:6b:93:55:de:8f:b6:ac:3c:
         ec:77:84:e7:94:bd:54:86:fe:34:23:52:e4:6d:3c:75:e4:0d:
         8c:99:33:dc:8d:e4:6f:55:89:8e:b0:0d:9e:0e:cf:61:5a:e5:
         86:e1:83:3b:08:44:45:2f:60:c8:22:da:5b:8e:16:85:53:aa:
         c1:34:e8:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 12:03:36 2025 by rpki-client