Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5EA45D25A1E7B7B074CDEDB7C7BCCDB78B40512BE55A76B18A910914B39EF621/0/323830333a623261303a3a2f34382d3438203d3e20323636383630.roa
File:                     323830333a623261303a3a2f34382d3438203d3e20323636383630.roa (raw, json)
Hash identifier:          Wo4jYBCqWO5B4pRZiiGPSrFQg8lfGxGBY6iPM4DCSuM=
Subject key identifier:   04:4C:F4:BF:CB:75:B1:03:9D:DC:3A:B9:10:9A:98:F3:B8:5C:8D:FF
Certificate issuer:       /CN=C0DCCAD4E9857D5C6E645DF26D2C59614B1B8409
Certificate serial:       508E20C756CC43DED24AFC5742A4B152FE3CAAF1
Authority key identifier: C0:DC:CA:D4:E9:85:7D:5C:6E:64:5D:F2:6D:2C:59:61:4B:1B:84:09
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C0DCCAD4E9857D5C6E645DF26D2C59614B1B8409.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5EA45D25A1E7B7B074CDEDB7C7BCCDB78B40512BE55A76B18A910914B39EF621/0/323830333a623261303a3a2f34382d3438203d3e20323636383630.roa
Signing time:             Fri 14 Mar 2025 16:55:00 +0000
ROA not before:           Fri 14 Mar 2025 16:50:00 +0000
ROA not after:            Fri 13 Mar 2026 16:55:00 +0000
asID:                     266860
IP address blocks:        2803:b2a0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5EA45D25A1E7B7B074CDEDB7C7BCCDB78B40512BE55A76B18A910914B39EF621/0/C0DCCAD4E9857D5C6E645DF26D2C59614B1B8409.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5EA45D25A1E7B7B074CDEDB7C7BCCDB78B40512BE55A76B18A910914B39EF621/0/C0DCCAD4E9857D5C6E645DF26D2C59614B1B8409.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C0DCCAD4E9857D5C6E645DF26D2C59614B1B8409.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 17 Apr 2025 07:28:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:8e:20:c7:56:cc:43:de:d2:4a:fc:57:42:a4:b1:52:fe:3c:aa:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C0DCCAD4E9857D5C6E645DF26D2C59614B1B8409
        Validity
            Not Before: Mar 14 16:50:00 2025 GMT
            Not After : Mar 13 16:55:00 2026 GMT
        Subject: CN=044CF4BFCB75B1039DDC3AB9109A98F3B85C8DFF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:aa:ab:ef:90:ac:ba:83:84:cc:0b:fa:e8:ff:
                    db:f0:08:54:68:8e:70:80:95:89:42:e7:6d:42:69:
                    77:a7:e4:f5:bb:2c:42:2f:74:bb:98:10:dc:b7:2d:
                    bc:94:29:99:d4:60:ea:04:a6:88:6b:4e:5b:80:97:
                    f3:74:e6:de:b5:81:3d:9f:bd:ea:1f:ca:69:35:92:
                    3c:3b:44:ac:cf:89:aa:21:08:c8:33:d4:1e:4b:f1:
                    70:d1:b3:ab:78:b8:d0:95:bb:d7:db:6e:29:59:b1:
                    b0:82:76:24:e8:ff:4c:d2:97:34:4a:a2:53:68:31:
                    ee:60:ac:7a:2d:2c:b3:b9:d4:cf:13:5e:37:d8:eb:
                    4a:4a:95:98:da:e2:38:f8:00:b4:a6:57:56:37:0d:
                    35:09:1a:22:f2:a1:77:5a:5d:9d:4d:ba:99:dc:09:
                    bd:f9:60:92:0e:5b:9b:fb:e5:08:fa:b8:0f:c5:be:
                    c2:bb:15:29:d4:9e:75:d5:a1:96:b5:83:47:a0:64:
                    da:08:bb:6f:89:f2:a7:c3:85:ef:cc:77:27:a3:21:
                    c3:7a:55:0e:d5:41:c5:8d:2a:c6:41:96:40:f9:3b:
                    c5:cd:a1:79:33:13:c3:d8:1b:43:e6:51:d1:ed:e9:
                    18:3f:a3:1c:55:cc:c3:0a:23:f7:c1:17:64:9a:fe:
                    30:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:4C:F4:BF:CB:75:B1:03:9D:DC:3A:B9:10:9A:98:F3:B8:5C:8D:FF
            X509v3 Authority Key Identifier:
                keyid:C0:DC:CA:D4:E9:85:7D:5C:6E:64:5D:F2:6D:2C:59:61:4B:1B:84:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5EA45D25A1E7B7B074CDEDB7C7BCCDB78B40512BE55A76B18A910914B39EF621/0/C0DCCAD4E9857D5C6E645DF26D2C59614B1B8409.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C0DCCAD4E9857D5C6E645DF26D2C59614B1B8409.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5EA45D25A1E7B7B074CDEDB7C7BCCDB78B40512BE55A76B18A910914B39EF621/0/323830333a623261303a3a2f34382d3438203d3e20323636383630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b2a0::/48

    Signature Algorithm: sha256WithRSAEncryption
         9b:01:48:1b:e3:1e:ba:79:9d:ae:ef:f3:c8:91:b5:55:16:27:
         d2:fc:61:ee:0a:4f:f0:ee:25:de:fb:0e:75:50:86:cc:2f:f2:
         0b:0a:c8:99:83:78:a7:b9:cf:53:9b:89:7d:d9:94:4c:62:a6:
         46:3e:b7:ef:75:b6:19:db:c9:55:0e:1d:35:92:84:5e:1c:5f:
         10:8b:42:32:ce:86:e5:38:51:8d:66:9b:32:26:d7:3b:13:89:
         72:5b:81:98:0d:3c:4e:4e:2a:f0:e2:9d:f6:0a:aa:e8:c4:70:
         d2:7d:4e:26:20:fe:7d:1f:ce:66:08:0d:20:5d:08:9a:1b:70:
         2a:6a:5e:dc:fe:38:da:ce:63:99:50:29:94:94:b3:79:d6:04:
         a1:d6:ca:2b:a0:7f:4b:5c:97:ea:a8:7f:01:dc:28:28:c1:df:
         06:25:3b:87:17:6a:25:03:9d:be:b9:09:de:21:ad:54:06:0e:
         4f:a7:95:af:97:0e:38:64:97:35:76:34:8f:9c:84:a8:0d:11:
         f9:10:26:1b:f9:95:b5:7e:0b:7c:c4:04:0b:91:4f:80:e2:2f:
         03:a6:8e:8f:b6:8f:96:8d:d0:75:1c:8b:7b:11:47:75:d3:af:
         8d:ba:b2:8c:44:1c:41:05:2b:0d:49:55:0b:c5:1b:1b:df:3a:
         8a:44:0f:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 05:53:18 2025 by rpki-client