Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/738FA7C15AC7C0787ECF79BB826D23C4F9ADE9BD7D58886DB1E6925FD3D46B12/0/323830333a396134303a3a2f33322d3438203d3e20323633383234.roa
File:                     323830333a396134303a3a2f33322d3438203d3e20323633383234.roa (raw, json)
Hash identifier:          vTiixehM9iEJv40khKOX7JiVuLVpnHbW2LOV3g2jVtk=
Subject key identifier:   3D:B7:E1:92:83:AC:9B:0C:1F:20:2E:FA:13:1F:29:9E:5E:84:19:04
Certificate issuer:       /CN=E2930E0E37A0FC0020E88ADC7667FBA37A6DB802
Certificate serial:       7CE5F81EF02383158D787671F2064A45B77F1227
Authority key identifier: E2:93:0E:0E:37:A0:FC:00:20:E8:8A:DC:76:67:FB:A3:7A:6D:B8:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E2930E0E37A0FC0020E88ADC7667FBA37A6DB802.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/738FA7C15AC7C0787ECF79BB826D23C4F9ADE9BD7D58886DB1E6925FD3D46B12/0/323830333a396134303a3a2f33322d3438203d3e20323633383234.roa
Signing time:             Tue 04 Feb 2025 18:02:38 +0000
ROA not before:           Tue 04 Feb 2025 17:57:38 +0000
ROA not after:            Tue 03 Feb 2026 18:02:38 +0000
asID:                     263824
IP address blocks:        2803:9a40::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/738FA7C15AC7C0787ECF79BB826D23C4F9ADE9BD7D58886DB1E6925FD3D46B12/0/E2930E0E37A0FC0020E88ADC7667FBA37A6DB802.crl
                          rsync://repository.lacnic.net/rpki/lacnic/738FA7C15AC7C0787ECF79BB826D23C4F9ADE9BD7D58886DB1E6925FD3D46B12/0/E2930E0E37A0FC0020E88ADC7667FBA37A6DB802.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E2930E0E37A0FC0020E88ADC7667FBA37A6DB802.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 08:56:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:e5:f8:1e:f0:23:83:15:8d:78:76:71:f2:06:4a:45:b7:7f:12:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E2930E0E37A0FC0020E88ADC7667FBA37A6DB802
        Validity
            Not Before: Feb  4 17:57:38 2025 GMT
            Not After : Feb  3 18:02:38 2026 GMT
        Subject: CN=3DB7E19283AC9B0C1F202EFA131F299E5E841904
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:01:4c:5a:03:61:55:ca:e2:1b:5a:ca:96:21:
                    cc:5d:90:f2:1c:0f:63:5d:a9:3f:3c:d3:2c:20:89:
                    03:ee:05:22:b8:c6:bf:72:79:88:40:e1:e8:f9:05:
                    82:d7:dc:5e:4e:ae:53:4e:f1:9a:99:36:bc:5e:59:
                    d7:2e:54:02:18:f4:ad:5b:44:eb:8a:73:e4:ed:47:
                    f9:82:cb:8b:a9:03:51:48:0b:b4:9b:f3:40:8f:75:
                    d1:33:ec:6c:ac:2e:33:99:ac:be:72:75:5c:15:9e:
                    01:a8:86:1a:f9:a3:ea:36:2e:cc:40:50:cb:3a:5a:
                    3c:5d:ac:cf:5a:97:ce:b0:d0:37:08:23:ee:e2:c8:
                    0b:4d:14:8d:8f:d4:41:22:bd:2c:7f:23:9b:ab:39:
                    cc:da:b7:09:db:96:4f:18:60:01:11:31:f6:99:aa:
                    6f:10:00:42:60:37:ff:d3:a2:3f:88:7a:ee:11:db:
                    06:6e:01:a6:17:ed:00:c8:40:7d:29:e9:f5:c2:a1:
                    2d:89:33:52:f7:70:6b:31:86:ed:9f:b0:96:ab:21:
                    2e:68:18:fd:3b:95:bc:eb:e5:6e:8e:05:fd:d1:8b:
                    77:70:7b:c4:10:15:1b:cc:b6:b4:ed:bf:be:da:c8:
                    f6:05:29:ee:94:ea:40:64:0d:d3:39:2c:72:f9:eb:
                    b6:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:B7:E1:92:83:AC:9B:0C:1F:20:2E:FA:13:1F:29:9E:5E:84:19:04
            X509v3 Authority Key Identifier:
                keyid:E2:93:0E:0E:37:A0:FC:00:20:E8:8A:DC:76:67:FB:A3:7A:6D:B8:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/738FA7C15AC7C0787ECF79BB826D23C4F9ADE9BD7D58886DB1E6925FD3D46B12/0/E2930E0E37A0FC0020E88ADC7667FBA37A6DB802.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E2930E0E37A0FC0020E88ADC7667FBA37A6DB802.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/738FA7C15AC7C0787ECF79BB826D23C4F9ADE9BD7D58886DB1E6925FD3D46B12/0/323830333a396134303a3a2f33322d3438203d3e20323633383234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9a40::/32

    Signature Algorithm: sha256WithRSAEncryption
         16:d7:85:6a:2e:e9:d0:1c:b0:fa:f3:a7:a4:fb:cc:b8:ed:b2:
         b4:1b:ad:86:1a:a9:7b:f8:36:a8:b7:34:8d:12:19:be:af:9c:
         8a:e9:28:5d:1a:59:8a:6b:34:a2:2a:6d:e1:ee:6b:a5:5a:cf:
         d9:67:fe:8f:7b:4b:44:cd:b1:8e:45:1d:14:ed:50:c0:45:82:
         2f:11:8a:23:94:60:3d:4c:9a:98:f8:7f:c2:64:d0:0c:6d:cf:
         dc:42:6f:25:65:e3:34:92:63:29:a1:b2:6a:b2:7d:d2:b5:41:
         cf:a8:1b:3c:fb:bd:28:50:a5:d3:49:cf:24:9a:1f:e2:f2:16:
         04:8d:49:f5:a7:dc:0b:66:fb:a2:c8:50:de:5d:5c:72:70:42:
         96:e1:6a:ca:1e:fb:65:39:4b:96:ab:36:67:08:96:5e:05:1e:
         5e:2f:0f:3a:0a:e6:5c:6d:4b:51:74:19:86:dd:3f:22:6e:a2:
         98:b6:1e:92:48:30:d0:b0:d0:34:4d:59:d5:15:29:06:06:75:
         82:d9:3b:56:95:b1:b1:7c:cc:a1:18:f3:a8:7a:b5:3a:33:66:
         6b:ba:c2:6d:86:10:a3:e2:ce:14:d4:31:89:4a:1f:1b:09:17:
         0e:c5:3a:18:ab:72:c9:3b:71:c7:4e:fe:ae:fc:e2:71:c9:7a:
         8e:80:96:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 21:07:47 2025 by rpki-client