Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/803FAC90E02D22FFFA03384519DA5D8F243A13A2DBC39697616D11157F1B8D11/0/323830333a663435303a3a2f33322d3438203d3e20323733313338.roa
File:                     323830333a663435303a3a2f33322d3438203d3e20323733313338.roa (raw, json)
Hash identifier:          0zCDSdSuTwbMbOBMpHpdf/iNTsdwXuTfGmxjCmF9M1E=
Subject key identifier:   D7:8F:16:0C:EE:7F:7E:C8:79:61:56:29:E5:D3:4E:91:60:1E:56:0E
Certificate issuer:       /CN=8A07FC2E711EE9102C3075B9D894FA6FEA2FAE41
Certificate serial:       29BD434BB9C53108BD1EC2E68B4BD444CE0495AC
Authority key identifier: 8A:07:FC:2E:71:1E:E9:10:2C:30:75:B9:D8:94:FA:6F:EA:2F:AE:41
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A07FC2E711EE9102C3075B9D894FA6FEA2FAE41.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/803FAC90E02D22FFFA03384519DA5D8F243A13A2DBC39697616D11157F1B8D11/0/323830333a663435303a3a2f33322d3438203d3e20323733313338.roa
Signing time:             Tue 04 Feb 2025 18:38:14 +0000
ROA not before:           Tue 04 Feb 2025 18:33:14 +0000
ROA not after:            Tue 03 Feb 2026 18:38:14 +0000
asID:                     273138
IP address blocks:        2803:f450::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/803FAC90E02D22FFFA03384519DA5D8F243A13A2DBC39697616D11157F1B8D11/0/8A07FC2E711EE9102C3075B9D894FA6FEA2FAE41.crl
                          rsync://repository.lacnic.net/rpki/lacnic/803FAC90E02D22FFFA03384519DA5D8F243A13A2DBC39697616D11157F1B8D11/0/8A07FC2E711EE9102C3075B9D894FA6FEA2FAE41.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A07FC2E711EE9102C3075B9D894FA6FEA2FAE41.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:bd:43:4b:b9:c5:31:08:bd:1e:c2:e6:8b:4b:d4:44:ce:04:95:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A07FC2E711EE9102C3075B9D894FA6FEA2FAE41
        Validity
            Not Before: Feb  4 18:33:14 2025 GMT
            Not After : Feb  3 18:38:14 2026 GMT
        Subject: CN=D78F160CEE7F7EC879615629E5D34E91601E560E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:98:9c:c9:43:81:66:55:a2:c8:62:32:c8:eb:
                    b3:5d:d5:c5:a0:dc:13:c1:d7:bd:11:f7:38:2b:69:
                    55:29:2b:44:c6:21:9c:4e:22:37:2a:96:17:6c:a1:
                    20:02:e0:aa:82:ca:34:ac:54:01:ac:0d:cf:b8:9a:
                    64:a1:dd:d1:e2:14:b3:d6:cc:9b:07:ec:a4:ae:9b:
                    bc:01:1d:5d:8b:14:9e:8a:74:9f:16:f3:e8:ff:37:
                    6f:a8:06:73:ce:1f:4c:fe:10:8b:d2:ec:48:97:5d:
                    57:db:ee:4b:9e:84:00:bf:fb:20:85:66:77:5a:bb:
                    06:da:4f:af:60:eb:8b:2a:f2:f8:76:24:df:87:c9:
                    19:ca:ff:99:81:e7:a5:46:a0:08:dd:7a:f0:8f:8d:
                    e7:dc:82:04:28:07:76:49:f4:09:4a:ef:cd:17:d8:
                    c2:0e:1a:f8:4f:ee:a6:f2:a8:6a:83:6e:6a:ba:d6:
                    85:6a:ed:0b:21:bb:f8:d4:2f:56:37:61:9e:fc:3b:
                    81:cc:64:e6:44:cf:40:ba:bd:9b:e0:ba:63:ce:aa:
                    53:0d:f5:aa:50:93:97:c4:77:4b:09:96:51:35:f8:
                    96:82:1e:ca:fd:9b:25:00:ed:8b:5d:88:89:7a:fa:
                    7e:d1:b7:6b:e3:08:01:65:e1:45:ba:c5:17:a5:95:
                    e9:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:8F:16:0C:EE:7F:7E:C8:79:61:56:29:E5:D3:4E:91:60:1E:56:0E
            X509v3 Authority Key Identifier:
                keyid:8A:07:FC:2E:71:1E:E9:10:2C:30:75:B9:D8:94:FA:6F:EA:2F:AE:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/803FAC90E02D22FFFA03384519DA5D8F243A13A2DBC39697616D11157F1B8D11/0/8A07FC2E711EE9102C3075B9D894FA6FEA2FAE41.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A07FC2E711EE9102C3075B9D894FA6FEA2FAE41.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/803FAC90E02D22FFFA03384519DA5D8F243A13A2DBC39697616D11157F1B8D11/0/323830333a663435303a3a2f33322d3438203d3e20323733313338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f450::/32

    Signature Algorithm: sha256WithRSAEncryption
         98:e5:03:2d:84:ac:fd:e8:6b:4b:7b:62:d4:f1:af:c8:39:af:
         e0:a2:9c:92:38:84:40:dd:fa:fb:7f:4e:7f:6a:7b:04:de:ad:
         76:33:f4:5d:d8:88:59:db:35:2d:82:49:a1:59:aa:91:04:de:
         2e:aa:a9:13:68:1d:ec:d0:53:f4:60:15:24:5b:1e:d8:94:6b:
         5f:3b:7f:63:94:6c:c7:a3:94:34:51:42:6d:79:8c:07:d7:f9:
         c8:b1:e9:27:44:22:52:1b:1b:42:6e:e6:79:17:4d:c8:7f:04:
         fc:23:58:7b:52:2f:53:87:2c:44:c2:44:be:3a:01:40:49:93:
         29:c9:b3:2b:4f:70:56:cd:fd:2e:28:80:7e:7a:6e:7f:51:b8:
         a4:28:b4:fa:83:89:b8:e1:6e:c5:67:ac:71:f9:58:c0:66:93:
         54:7e:c2:4e:80:a7:f0:5a:8c:80:19:d9:a5:27:1b:79:74:b8:
         d8:f2:0e:26:c1:b0:f2:3f:03:0e:e5:32:40:31:e1:e7:60:7d:
         cd:3a:ac:e9:30:23:e5:44:06:c8:a3:17:0c:3d:40:15:5b:07:
         67:44:96:15:ab:14:00:31:14:f2:7d:3d:17:34:9a:88:61:e7:
         3d:bc:03:b6:85:fe:d1:6c:c9:d4:90:06:f9:46:48:5d:ab:fc:
         c3:d0:48:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:03:26 2025 by rpki-client