Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/542E757E31F446C1586E3282CD56FD78A4E72ADDDC1B7F948ACB12604420A539/0/323830333a393931303a383030303a3a2f33342d3438203d3e203634313335.roa
File:                     323830333a393931303a383030303a3a2f33342d3438203d3e203634313335.roa (raw, json)
Hash identifier:          jPM/hgnFpv+QfhT1eOafXy6y0/9bCM0BE+aea5gwjNg=
Subject key identifier:   E3:51:D1:4A:B7:71:F5:34:86:AA:FE:03:56:50:36:CA:53:3E:E9:5D
Certificate issuer:       /CN=08C48F0EB922B5862C93AA1420F66615674E8BA1
Certificate serial:       6686705CB01F71141DD1EB867885FB5C0751CEB7
Authority key identifier: 08:C4:8F:0E:B9:22:B5:86:2C:93:AA:14:20:F6:66:15:67:4E:8B:A1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08C48F0EB922B5862C93AA1420F66615674E8BA1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/542E757E31F446C1586E3282CD56FD78A4E72ADDDC1B7F948ACB12604420A539/0/323830333a393931303a383030303a3a2f33342d3438203d3e203634313335.roa
Signing time:             Tue 04 Feb 2025 18:24:13 +0000
ROA not before:           Tue 04 Feb 2025 18:19:13 +0000
ROA not after:            Tue 03 Feb 2026 18:24:13 +0000
asID:                     64135
IP address blocks:        2803:9910:8000::/34 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/542E757E31F446C1586E3282CD56FD78A4E72ADDDC1B7F948ACB12604420A539/0/08C48F0EB922B5862C93AA1420F66615674E8BA1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/542E757E31F446C1586E3282CD56FD78A4E72ADDDC1B7F948ACB12604420A539/0/08C48F0EB922B5862C93AA1420F66615674E8BA1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08C48F0EB922B5862C93AA1420F66615674E8BA1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 20:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:86:70:5c:b0:1f:71:14:1d:d1:eb:86:78:85:fb:5c:07:51:ce:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08C48F0EB922B5862C93AA1420F66615674E8BA1
        Validity
            Not Before: Feb  4 18:19:13 2025 GMT
            Not After : Feb  3 18:24:13 2026 GMT
        Subject: CN=E351D14AB771F53486AAFE03565036CA533EE95D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:0e:9a:bd:98:e1:ec:fd:3a:bf:a5:a9:27:13:
                    18:f4:ec:a2:34:e4:7d:7f:f1:7b:d1:8b:31:52:a9:
                    11:15:b3:88:37:90:7d:46:9e:4a:72:4a:54:a0:45:
                    85:64:76:4c:ec:6d:0d:0e:a6:8e:17:fb:f1:bc:13:
                    5b:78:aa:2b:cd:19:29:b3:59:97:1c:05:13:72:33:
                    34:5a:37:f0:8c:bb:41:26:ea:65:7c:9b:6e:e9:05:
                    2b:27:3b:81:59:42:06:71:e3:f5:b8:c6:46:e4:26:
                    d7:d8:2b:7b:66:d4:63:60:f3:91:aa:b4:a1:e3:ea:
                    ab:2f:a7:72:80:73:ca:bb:7d:2f:06:c4:6f:1e:71:
                    b6:dc:31:bf:73:04:16:44:aa:b0:5f:e4:ed:fd:e2:
                    be:45:10:1b:3e:25:57:d0:8e:a2:f8:a5:58:74:31:
                    7f:66:05:8c:dd:fb:27:c3:12:78:fe:9c:31:7a:6a:
                    07:5d:1e:62:af:0b:ea:67:18:79:df:f5:f3:b4:fb:
                    20:3d:cf:61:e9:d9:04:c8:4f:cf:65:f1:ce:a4:04:
                    af:ff:8e:27:39:ec:0f:f7:07:83:65:ab:0c:9e:63:
                    c0:06:65:ba:e7:78:30:03:e2:f0:2d:d3:23:a4:ed:
                    a1:dd:d9:fb:19:db:ed:c5:e6:0e:fd:e2:72:18:5f:
                    a9:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:51:D1:4A:B7:71:F5:34:86:AA:FE:03:56:50:36:CA:53:3E:E9:5D
            X509v3 Authority Key Identifier:
                keyid:08:C4:8F:0E:B9:22:B5:86:2C:93:AA:14:20:F6:66:15:67:4E:8B:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/542E757E31F446C1586E3282CD56FD78A4E72ADDDC1B7F948ACB12604420A539/0/08C48F0EB922B5862C93AA1420F66615674E8BA1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08C48F0EB922B5862C93AA1420F66615674E8BA1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/542E757E31F446C1586E3282CD56FD78A4E72ADDDC1B7F948ACB12604420A539/0/323830333a393931303a383030303a3a2f33342d3438203d3e203634313335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9910:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         45:b0:0f:85:89:48:5a:8d:9e:c9:58:58:15:49:27:92:98:29:
         71:5d:fb:86:bf:74:5f:42:54:b5:06:f9:6f:bb:29:d8:b0:ae:
         2b:23:4a:21:ed:7b:62:e4:61:81:76:04:e7:3b:91:2e:3c:13:
         02:50:fc:e8:2a:66:84:ee:ac:16:b7:8c:32:30:d0:da:05:fa:
         0c:aa:30:04:f6:d8:16:4d:3d:ac:a4:5f:ca:33:ef:14:85:14:
         46:10:09:f0:7b:4f:d7:94:76:28:67:59:68:7f:fa:9e:08:fa:
         40:6b:58:79:e8:bb:2a:6a:de:2a:76:42:bf:33:d4:6a:92:e4:
         63:f4:3e:74:b2:63:d8:61:20:68:45:b4:5f:81:ca:e3:ea:5e:
         9e:b2:d4:61:37:16:ea:4c:6a:ae:dc:07:03:16:5a:b3:af:df:
         5d:ff:e9:8d:b5:76:b1:6a:09:30:aa:dc:27:67:10:65:53:7f:
         f9:6f:21:e3:2c:bb:fe:bc:aa:fd:a0:56:ae:ba:05:b4:02:13:
         13:b1:04:ac:ba:f4:1b:f9:02:b2:aa:aa:4f:47:b3:c3:39:12:
         c3:62:8b:c6:9f:f0:4b:4d:40:f5:28:15:95:22:34:d8:28:74:
         f7:64:83:08:d1:83:87:e9:4e:bc:30:08:7b:3f:92:3d:5c:f5:
         a5:92:c3:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 01:05:54 2025 by rpki-client