Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/77DC0D408A1222C03BF62FE7EB13F2DD959AC2BD351FFAAF1269CB76CE1F8BFB/0/323830333a376334303a3a2f33322d3536203d3e20323633383031.roa
File:                     323830333a376334303a3a2f33322d3536203d3e20323633383031.roa (raw, json)
Hash identifier:          jMmr6ewVFbti0rs9zDMvk1kG6oJP7xX6fcv9rL/7+Qw=
Subject key identifier:   BF:7C:81:7C:83:D3:2C:8F:74:7C:99:4D:FE:4B:7B:66:AE:0B:01:BF
Certificate issuer:       /CN=E450DBD4224F12B91D8B103471C79E21494AAABE
Certificate serial:       62766029EBFABFBF7DC23C224DC3FB6500D25F9C
Authority key identifier: E4:50:DB:D4:22:4F:12:B9:1D:8B:10:34:71:C7:9E:21:49:4A:AA:BE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E450DBD4224F12B91D8B103471C79E21494AAABE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/77DC0D408A1222C03BF62FE7EB13F2DD959AC2BD351FFAAF1269CB76CE1F8BFB/0/323830333a376334303a3a2f33322d3536203d3e20323633383031.roa
Signing time:             Tue 04 Feb 2025 18:08:00 +0000
ROA not before:           Tue 04 Feb 2025 18:03:00 +0000
ROA not after:            Tue 03 Feb 2026 18:08:00 +0000
asID:                     263801
IP address blocks:        2803:7c40::/32 maxlen: 56
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/77DC0D408A1222C03BF62FE7EB13F2DD959AC2BD351FFAAF1269CB76CE1F8BFB/0/E450DBD4224F12B91D8B103471C79E21494AAABE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/77DC0D408A1222C03BF62FE7EB13F2DD959AC2BD351FFAAF1269CB76CE1F8BFB/0/E450DBD4224F12B91D8B103471C79E21494AAABE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E450DBD4224F12B91D8B103471C79E21494AAABE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 21:48:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:76:60:29:eb:fa:bf:bf:7d:c2:3c:22:4d:c3:fb:65:00:d2:5f:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E450DBD4224F12B91D8B103471C79E21494AAABE
        Validity
            Not Before: Feb  4 18:03:00 2025 GMT
            Not After : Feb  3 18:08:00 2026 GMT
        Subject: CN=BF7C817C83D32C8F747C994DFE4B7B66AE0B01BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:5b:cb:35:8b:00:af:2e:c3:3a:9c:31:4b:15:
                    40:e8:09:06:41:c1:33:9b:07:cc:78:8e:5a:78:4e:
                    76:bb:0f:c9:f9:2a:44:02:56:28:61:04:e5:b9:1f:
                    66:e0:d9:e1:b3:48:5e:2e:f7:ff:72:ab:99:5c:54:
                    02:3a:78:20:6d:63:74:fa:be:00:c8:00:73:07:06:
                    9a:b4:83:c8:b1:0e:d2:14:1a:cd:81:92:12:15:c8:
                    cb:05:67:91:d9:ef:2b:5c:e4:5b:30:5e:cc:03:cc:
                    13:ad:23:d7:09:ae:a6:12:7d:90:f4:2c:c3:6c:41:
                    91:0e:c6:ec:65:0c:d9:61:c5:27:51:e6:6a:1d:12:
                    d5:4f:b0:dc:8a:f2:be:9c:8c:0b:50:ec:61:a8:e0:
                    ae:18:2a:d7:09:a2:0f:09:8a:48:a0:14:a6:f2:47:
                    ac:ce:35:ee:9c:e7:39:fe:29:1a:81:dc:04:0a:f1:
                    d9:8e:3e:19:16:63:9f:ed:3a:b4:06:d8:47:ea:80:
                    ca:26:b7:41:9c:a2:55:1d:ac:42:cf:2c:63:53:9b:
                    5a:5d:d1:bb:3d:b8:1d:9d:f9:77:62:e0:c2:79:18:
                    1f:18:91:04:ce:e4:00:e1:05:22:28:ae:e0:e8:a5:
                    46:59:3a:91:68:1a:6d:e6:cd:59:49:8a:e9:f2:df:
                    2d:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:7C:81:7C:83:D3:2C:8F:74:7C:99:4D:FE:4B:7B:66:AE:0B:01:BF
            X509v3 Authority Key Identifier:
                keyid:E4:50:DB:D4:22:4F:12:B9:1D:8B:10:34:71:C7:9E:21:49:4A:AA:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/77DC0D408A1222C03BF62FE7EB13F2DD959AC2BD351FFAAF1269CB76CE1F8BFB/0/E450DBD4224F12B91D8B103471C79E21494AAABE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E450DBD4224F12B91D8B103471C79E21494AAABE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/77DC0D408A1222C03BF62FE7EB13F2DD959AC2BD351FFAAF1269CB76CE1F8BFB/0/323830333a376334303a3a2f33322d3536203d3e20323633383031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7c40::/32

    Signature Algorithm: sha256WithRSAEncryption
         51:bb:1b:ab:06:68:ab:01:4c:ea:f9:05:9c:d3:a5:f9:3e:e8:
         d0:1f:87:e1:ef:a7:89:da:63:b2:65:de:1a:af:40:ad:a8:c4:
         2b:86:0e:f2:38:73:fd:e1:9a:e3:a1:c3:b0:88:82:4e:32:63:
         c9:6a:8a:82:68:95:e1:ac:33:7f:19:f4:ab:ab:be:72:27:85:
         8f:b8:4d:bc:a2:5d:6d:f4:15:ae:90:33:b1:76:2d:de:4c:27:
         d8:69:3f:1b:6e:db:0b:d0:f2:f5:01:a2:94:ff:e5:df:12:67:
         e4:c1:37:19:6e:be:62:1d:3f:04:01:ac:6b:ac:f5:79:f5:d7:
         bc:4a:e2:2a:76:4e:41:d3:3c:63:09:f1:45:4c:8c:97:f2:1a:
         a7:68:fb:4f:5e:1d:bd:6e:5c:3a:b3:a9:49:38:49:43:26:ca:
         ae:94:1e:ce:54:b5:60:57:7b:49:35:18:f1:70:09:ba:8e:a2:
         a6:fe:14:16:eb:37:0f:5e:e5:04:6d:18:ef:65:69:94:f6:39:
         26:07:5b:20:56:95:a2:a6:e0:48:3d:8e:d4:72:b0:4e:34:c5:
         8c:0b:4a:bc:aa:7e:2f:99:37:23:45:df:a3:89:4b:f1:ae:10:
         fb:41:9a:c3:80:be:ba:84:7c:54:55:f2:b3:49:ee:c7:36:04:
         c4:32:91:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:10:24 2025 by rpki-client