Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/59CC5B82FBD0E8E09EC4427C0A888F610B3CB381F7A102B01C25D49E663E56EA/0/323830333a363230303a3a2f33322d3332203d3e20323632323337.roa
File:                     323830333a363230303a3a2f33322d3332203d3e20323632323337.roa (raw, json)
Hash identifier:          e5KpuAUWmrEB87KEJ9+N1WXp0aPWFO7OGvFWFaMK73w=
Subject key identifier:   8D:45:50:F5:45:33:5C:81:45:33:DA:2F:79:53:BA:1F:F3:CF:C0:99
Certificate issuer:       /CN=47A0716C687813D0F1094BC55674B26A68AF90DF
Certificate serial:       31270348E51DE895838601B14FD3B7DC61654E4A
Authority key identifier: 47:A0:71:6C:68:78:13:D0:F1:09:4B:C5:56:74:B2:6A:68:AF:90:DF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/47A0716C687813D0F1094BC55674B26A68AF90DF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/59CC5B82FBD0E8E09EC4427C0A888F610B3CB381F7A102B01C25D49E663E56EA/0/323830333a363230303a3a2f33322d3332203d3e20323632323337.roa
Signing time:             Tue 04 Feb 2025 18:10:47 +0000
ROA not before:           Tue 04 Feb 2025 18:05:47 +0000
ROA not after:            Tue 03 Feb 2026 18:10:47 +0000
asID:                     262237
IP address blocks:        2803:6200::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/59CC5B82FBD0E8E09EC4427C0A888F610B3CB381F7A102B01C25D49E663E56EA/0/47A0716C687813D0F1094BC55674B26A68AF90DF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/59CC5B82FBD0E8E09EC4427C0A888F610B3CB381F7A102B01C25D49E663E56EA/0/47A0716C687813D0F1094BC55674B26A68AF90DF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/47A0716C687813D0F1094BC55674B26A68AF90DF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 23:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:27:03:48:e5:1d:e8:95:83:86:01:b1:4f:d3:b7:dc:61:65:4e:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47A0716C687813D0F1094BC55674B26A68AF90DF
        Validity
            Not Before: Feb  4 18:05:47 2025 GMT
            Not After : Feb  3 18:10:47 2026 GMT
        Subject: CN=8D4550F545335C814533DA2F7953BA1FF3CFC099
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ad:08:f3:82:21:77:9c:26:fb:e6:be:cf:68:
                    50:d0:d9:aa:0b:d5:e7:cc:d0:c7:50:d4:25:34:02:
                    48:62:e2:57:11:4e:2d:f9:bc:16:d9:26:e4:f9:32:
                    e9:60:35:42:94:e3:e4:4f:fb:4d:c3:b6:f9:59:cc:
                    bf:4d:df:e2:f5:18:eb:45:7b:37:e1:7f:ed:00:e2:
                    43:c9:b3:2d:3b:57:9c:34:c7:62:56:4d:16:19:a3:
                    cc:85:00:7f:22:8e:01:76:b5:d7:72:fa:0d:3a:5b:
                    84:33:6f:b8:43:ab:55:60:eb:3c:a7:59:51:5d:fe:
                    3c:ee:ca:fc:4f:9a:6c:3c:e1:9a:4c:71:d7:2c:82:
                    3b:58:f9:1e:c2:c1:af:c6:9e:76:1b:dd:a0:cc:c4:
                    b9:79:e1:78:8f:56:53:82:f7:ef:1c:8b:0e:c8:77:
                    65:4e:e1:b0:73:a2:ca:20:ce:4a:7c:f7:54:c9:45:
                    77:6b:97:b4:15:22:ac:46:5f:f1:52:c4:c6:f8:6d:
                    e2:e1:59:c5:25:5f:6f:80:39:2c:c5:0b:7e:3d:3a:
                    12:8f:1e:f6:96:7a:c7:89:7a:70:87:f2:c9:e3:1f:
                    94:3d:ad:dc:a6:7e:25:04:02:ef:b8:3c:e3:90:f7:
                    c7:ba:ab:d4:b9:08:61:9a:d1:32:79:09:56:34:ec:
                    91:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:45:50:F5:45:33:5C:81:45:33:DA:2F:79:53:BA:1F:F3:CF:C0:99
            X509v3 Authority Key Identifier:
                keyid:47:A0:71:6C:68:78:13:D0:F1:09:4B:C5:56:74:B2:6A:68:AF:90:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/59CC5B82FBD0E8E09EC4427C0A888F610B3CB381F7A102B01C25D49E663E56EA/0/47A0716C687813D0F1094BC55674B26A68AF90DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/47A0716C687813D0F1094BC55674B26A68AF90DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/59CC5B82FBD0E8E09EC4427C0A888F610B3CB381F7A102B01C25D49E663E56EA/0/323830333a363230303a3a2f33322d3332203d3e20323632323337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6200::/32

    Signature Algorithm: sha256WithRSAEncryption
         01:5c:15:05:20:8a:2d:dc:74:70:e7:0d:d0:70:26:52:65:5f:
         7a:d3:5f:8a:5e:57:2a:6c:e9:27:cd:46:e8:8d:d4:61:35:e4:
         47:4f:3c:f3:a2:e7:11:40:c9:b2:ef:0b:9c:fe:b8:f9:14:7f:
         00:50:ef:3b:ce:f4:ae:8c:72:81:78:92:47:ff:f8:8e:6b:96:
         cc:c3:c9:46:f7:63:5d:3d:ca:f2:ff:13:61:e6:76:6b:15:f2:
         6f:b6:93:dc:c4:96:1c:7f:da:1c:be:37:3d:db:49:d3:2b:7d:
         eb:23:73:17:7b:d2:77:46:02:ff:cd:cd:96:68:2b:79:f6:3f:
         4a:cd:9f:a6:c9:9a:1b:65:bd:ee:d8:9a:e2:58:9c:43:0e:35:
         3c:2f:8d:ff:22:78:6d:95:82:8c:de:e5:21:d7:64:fd:c1:20:
         b0:1e:d9:f9:91:b5:57:ca:38:c6:14:4d:98:85:d9:59:98:4c:
         fa:bd:e4:1e:c6:3e:00:77:b7:9c:9a:f4:34:2c:07:4e:56:5f:
         5d:eb:b4:3d:d4:2b:f0:56:04:91:23:d7:c3:d8:1b:ef:b7:0c:
         c0:73:f0:f6:5a:0c:38:f3:b6:88:21:6f:e3:7e:83:73:39:11:
         33:16:1c:c5:ed:1e:bf:42:7d:dd:ab:47:d3:7c:a0:41:90:b9:
         58:86:2e:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 12:27:53 2025 by rpki-client