Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/413D72ABA5C1F5AE1BE97667EDF4E0F83F8D3880B9AF109BDCAA978EEE5086E1/0/323830333a3263303a663230303a3a2f34312d3432203d3e20323634383330.roa
File:                     323830333a3263303a663230303a3a2f34312d3432203d3e20323634383330.roa (raw, json)
Hash identifier:          zuMni3+KzFTVO/6mmT2A3TyX+N4y3iOtd3LsD7PokYg=
Subject key identifier:   C4:C9:EB:71:2F:62:BC:DC:81:89:6C:99:D0:16:5F:19:B4:7D:88:8F
Certificate issuer:       /CN=EEFCF62476998633F8D62C020C074FEF5CD0077E
Certificate serial:       58CDB38A4FFF5555C8E61612C5F9DC5675899A9C
Authority key identifier: EE:FC:F6:24:76:99:86:33:F8:D6:2C:02:0C:07:4F:EF:5C:D0:07:7E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EEFCF62476998633F8D62C020C074FEF5CD0077E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/413D72ABA5C1F5AE1BE97667EDF4E0F83F8D3880B9AF109BDCAA978EEE5086E1/0/323830333a3263303a663230303a3a2f34312d3432203d3e20323634383330.roa
Signing time:             Tue 04 Feb 2025 19:58:31 +0000
ROA not before:           Tue 04 Feb 2025 19:53:31 +0000
ROA not after:            Tue 03 Feb 2026 19:58:31 +0000
asID:                     264830
IP address blocks:        2803:2c0:f200::/41 maxlen: 42
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/413D72ABA5C1F5AE1BE97667EDF4E0F83F8D3880B9AF109BDCAA978EEE5086E1/0/EEFCF62476998633F8D62C020C074FEF5CD0077E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/413D72ABA5C1F5AE1BE97667EDF4E0F83F8D3880B9AF109BDCAA978EEE5086E1/0/EEFCF62476998633F8D62C020C074FEF5CD0077E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EEFCF62476998633F8D62C020C074FEF5CD0077E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:cd:b3:8a:4f:ff:55:55:c8:e6:16:12:c5:f9:dc:56:75:89:9a:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EEFCF62476998633F8D62C020C074FEF5CD0077E
        Validity
            Not Before: Feb  4 19:53:31 2025 GMT
            Not After : Feb  3 19:58:31 2026 GMT
        Subject: CN=C4C9EB712F62BCDC81896C99D0165F19B47D888F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:6e:6f:69:21:ca:00:02:3c:3b:37:5c:92:8b:
                    94:7a:95:09:7d:a7:8a:17:c6:a7:1b:dc:10:17:58:
                    d4:9e:1f:e7:ea:f5:eb:d4:25:f1:7c:85:1c:33:23:
                    a3:ea:1c:ca:b2:39:8e:d8:4c:f9:22:a8:0c:df:7b:
                    cb:f7:08:a7:7c:e7:05:f9:5d:a2:56:9b:d0:22:96:
                    38:71:6a:9e:36:5b:5e:a4:da:01:41:a4:0c:39:f6:
                    b4:55:fb:57:15:e2:0c:fc:a4:dc:19:cc:2a:dc:a6:
                    d8:6a:b5:8f:f2:95:c9:a7:0f:62:fc:de:8f:92:58:
                    27:0f:f8:61:76:d4:8f:1b:a2:dc:91:34:2a:f9:c3:
                    ea:09:da:ff:a9:ed:5a:ef:4f:9d:e9:dc:06:20:b4:
                    d6:2c:e8:60:70:81:86:c7:ba:fd:07:7a:cf:1f:2b:
                    8f:6b:ae:dd:86:93:93:ba:c7:53:16:37:95:5f:c0:
                    47:f1:91:5e:bf:67:92:55:52:40:63:0c:47:c2:34:
                    bd:01:b8:f4:08:70:1d:09:93:f3:6f:2e:5a:87:fa:
                    27:bd:64:9a:bf:4d:f2:9a:49:ba:5d:10:3c:5f:aa:
                    96:98:98:4a:76:9e:20:3e:15:58:75:7f:70:79:63:
                    09:55:cc:30:b9:66:83:8a:a0:11:ff:98:94:2c:91:
                    f2:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:C9:EB:71:2F:62:BC:DC:81:89:6C:99:D0:16:5F:19:B4:7D:88:8F
            X509v3 Authority Key Identifier:
                keyid:EE:FC:F6:24:76:99:86:33:F8:D6:2C:02:0C:07:4F:EF:5C:D0:07:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/413D72ABA5C1F5AE1BE97667EDF4E0F83F8D3880B9AF109BDCAA978EEE5086E1/0/EEFCF62476998633F8D62C020C074FEF5CD0077E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EEFCF62476998633F8D62C020C074FEF5CD0077E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/413D72ABA5C1F5AE1BE97667EDF4E0F83F8D3880B9AF109BDCAA978EEE5086E1/0/323830333a3263303a663230303a3a2f34312d3432203d3e20323634383330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2c0:f200::/41

    Signature Algorithm: sha256WithRSAEncryption
         76:1b:82:6a:53:7d:b2:68:33:8c:cb:40:fa:3e:0a:d8:c9:a0:
         5e:d1:db:fa:fb:51:4a:94:69:6a:34:93:d5:77:d4:1e:05:e7:
         84:01:3b:9b:6d:ec:9a:d1:c2:c9:c5:ad:5a:54:48:85:90:82:
         2d:d3:0c:dd:95:0c:ea:aa:e2:26:95:0a:dd:d2:82:40:b3:ef:
         42:82:8f:d8:bd:9f:b4:fa:62:ae:f2:8e:03:8d:0c:c3:fd:69:
         1b:0e:7e:9c:ea:bb:89:ac:e6:3e:19:5d:6a:63:e9:1b:56:1b:
         75:2d:c8:53:fd:07:8b:13:91:af:4b:93:55:10:8b:e1:c1:41:
         87:55:ae:7d:94:32:da:ab:fa:3f:75:b6:7e:b1:fa:a8:76:0a:
         ee:0c:22:c5:53:47:0d:25:84:e5:4a:b2:90:43:9f:b6:6e:39:
         59:ef:8e:16:ac:9d:bb:8c:4d:f6:5c:2a:b2:26:36:18:12:7a:
         5e:b7:d3:b2:69:41:b9:62:d6:c4:45:aa:77:61:6f:78:08:c7:
         6a:5f:23:c4:b1:27:84:84:45:9b:c5:41:9c:75:41:63:e5:6d:
         24:32:de:67:ee:28:62:12:a8:da:91:f2:e3:9c:28:90:1c:25:
         ba:5a:05:17:4f:a4:14:22:7f:01:c2:7e:13:fc:4f:e5:22:02:
         6a:e9:b1:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:57:41 2025 by rpki-client