Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/596A89FD132EAD65D72620CA847240E50CFA9C071E093DFED5A5E042C466659C/0/323830333a316665303a3a2f33322d3332203d3e20323731373832.roa
File:                     323830333a316665303a3a2f33322d3332203d3e20323731373832.roa (raw, json)
Hash identifier:          LUo7GPQPAMTBLP/FXp5IUS+uFJDvGTxC8IvhNoJxULk=
Subject key identifier:   FD:82:49:EA:8E:99:8B:BD:D3:84:E3:20:0F:3E:1C:A5:3F:E3:65:11
Certificate issuer:       /CN=F02DCCDD304DCCE58FE027F11108F440B11FD910
Certificate serial:       4CB6F675B903D1CB8ED9EBBB173316CC66359AF0
Authority key identifier: F0:2D:CC:DD:30:4D:CC:E5:8F:E0:27:F1:11:08:F4:40:B1:1F:D9:10
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F02DCCDD304DCCE58FE027F11108F440B11FD910.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/596A89FD132EAD65D72620CA847240E50CFA9C071E093DFED5A5E042C466659C/0/323830333a316665303a3a2f33322d3332203d3e20323731373832.roa
Signing time:             Tue 04 Feb 2025 17:58:56 +0000
ROA not before:           Tue 04 Feb 2025 17:53:56 +0000
ROA not after:            Tue 03 Feb 2026 17:58:56 +0000
asID:                     271782
IP address blocks:        2803:1fe0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/596A89FD132EAD65D72620CA847240E50CFA9C071E093DFED5A5E042C466659C/0/F02DCCDD304DCCE58FE027F11108F440B11FD910.crl
                          rsync://repository.lacnic.net/rpki/lacnic/596A89FD132EAD65D72620CA847240E50CFA9C071E093DFED5A5E042C466659C/0/F02DCCDD304DCCE58FE027F11108F440B11FD910.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F02DCCDD304DCCE58FE027F11108F440B11FD910.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 04:36:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:b6:f6:75:b9:03:d1:cb:8e:d9:eb:bb:17:33:16:cc:66:35:9a:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F02DCCDD304DCCE58FE027F11108F440B11FD910
        Validity
            Not Before: Feb  4 17:53:56 2025 GMT
            Not After : Feb  3 17:58:56 2026 GMT
        Subject: CN=FD8249EA8E998BBDD384E3200F3E1CA53FE36511
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:df:c4:ea:8b:46:8c:12:6b:20:5c:da:8e:be:
                    ed:75:70:60:74:55:22:c6:2f:76:7d:39:d7:fe:b1:
                    f6:e5:d2:a4:35:d7:63:50:65:f0:0d:16:a8:bc:9e:
                    54:f1:54:6e:bc:b0:26:06:f7:57:f4:47:25:f0:5e:
                    9b:3e:12:6b:63:9f:0f:aa:1c:0b:16:22:c4:12:3d:
                    c8:64:7b:d1:b2:94:5a:b5:aa:73:ad:5f:ae:72:68:
                    18:bd:f5:fd:35:ca:de:23:f5:43:71:ec:de:41:6b:
                    59:5f:ed:83:56:1f:92:f2:28:65:c2:a2:d2:23:79:
                    3e:c0:31:e4:d9:e2:76:61:6c:a0:db:a5:9c:38:d0:
                    d0:b4:2b:3b:1d:e6:2b:09:6a:4d:b9:ad:10:36:c3:
                    6a:88:42:ad:f6:51:ff:39:c6:22:62:de:d0:7e:4e:
                    4e:a2:34:d4:4f:fa:d8:db:1c:e7:a9:2d:40:8a:ee:
                    f7:37:a2:75:2b:f8:af:32:d8:a2:ce:ad:9b:9c:55:
                    e9:82:93:2f:8f:56:78:0e:bc:19:0c:33:09:66:df:
                    8b:13:59:1d:cb:37:a3:f0:67:9f:e9:11:2b:8d:57:
                    35:91:6e:f6:0a:d0:85:64:a4:44:a1:79:b7:39:59:
                    98:35:da:9e:16:a7:cf:7a:a6:4f:54:0c:53:a5:4a:
                    21:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:82:49:EA:8E:99:8B:BD:D3:84:E3:20:0F:3E:1C:A5:3F:E3:65:11
            X509v3 Authority Key Identifier:
                keyid:F0:2D:CC:DD:30:4D:CC:E5:8F:E0:27:F1:11:08:F4:40:B1:1F:D9:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/596A89FD132EAD65D72620CA847240E50CFA9C071E093DFED5A5E042C466659C/0/F02DCCDD304DCCE58FE027F11108F440B11FD910.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F02DCCDD304DCCE58FE027F11108F440B11FD910.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/596A89FD132EAD65D72620CA847240E50CFA9C071E093DFED5A5E042C466659C/0/323830333a316665303a3a2f33322d3332203d3e20323731373832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1fe0::/32

    Signature Algorithm: sha256WithRSAEncryption
         4f:89:15:92:a0:cb:fe:f0:c4:4d:c5:9f:29:05:3d:3c:ba:87:
         c0:e6:f1:da:03:ff:de:01:6a:db:1b:a4:81:e3:9e:81:31:8d:
         a5:db:5f:6f:0f:be:55:d7:e0:84:2b:19:d9:24:81:68:83:a2:
         13:22:fd:40:5e:eb:4b:5a:26:6a:35:fc:77:41:22:02:3d:12:
         4d:9f:11:11:6f:94:ad:8c:78:5a:c4:de:35:5a:ef:3c:62:e5:
         cb:4b:0f:e7:ad:5e:73:3d:d5:17:4c:9c:9f:23:f9:06:c5:11:
         a1:42:52:03:bd:6d:ab:49:0b:f2:81:97:b1:b8:e9:d2:a7:20:
         6e:2b:92:71:3a:4b:90:a8:f8:a0:3c:75:c3:85:58:35:72:d7:
         23:bd:77:bc:13:bd:dc:4b:af:f8:cd:d2:69:f5:1c:06:c8:de:
         48:7f:20:a2:19:e4:bf:8b:bc:bb:50:6f:a1:99:bb:2c:d4:51:
         a0:73:42:a9:94:aa:4f:0c:16:84:6e:14:e8:83:35:d3:fa:24:
         0c:d2:93:f4:25:07:d9:5c:17:a3:3e:21:e2:0e:65:97:b0:04:
         0a:ef:11:b8:06:c1:35:67:42:a4:c0:89:74:30:43:51:73:cc:
         af:49:54:9e:84:70:34:80:26:cf:46:ee:96:57:93:f4:76:85:
         b2:b1:b7:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:42:33 2025 by rpki-client