Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/86E3F1C6B5FC81497326D15442ACD0B66E694769B46A16932F47BD74C34D0F99/0/323830333a643238303a3a2f34382d3438203d3e20323634373333.roa
File:                     323830333a643238303a3a2f34382d3438203d3e20323634373333.roa (raw, json)
Hash identifier:          2YAvCaAc9otjLDibeGqmR02OfYFmH3Zhy62Z2AOXpz4=
Subject key identifier:   0C:C8:B3:5C:FC:4C:94:68:9E:41:0F:FA:BF:DB:18:07:4E:C5:4B:1C
Certificate issuer:       /CN=476D55F0317E204145D2CA23E85349FDFE0F923E
Certificate serial:       7F2BC504392302C2C7C637CD18BA0EF4A734CEE0
Authority key identifier: 47:6D:55:F0:31:7E:20:41:45:D2:CA:23:E8:53:49:FD:FE:0F:92:3E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/476D55F0317E204145D2CA23E85349FDFE0F923E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/86E3F1C6B5FC81497326D15442ACD0B66E694769B46A16932F47BD74C34D0F99/0/323830333a643238303a3a2f34382d3438203d3e20323634373333.roa
Signing time:             Fri 28 Feb 2025 12:20:00 +0000
ROA not before:           Fri 28 Feb 2025 12:15:00 +0000
ROA not after:            Fri 27 Feb 2026 12:20:00 +0000
asID:                     264733
IP address blocks:        2803:d280::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/86E3F1C6B5FC81497326D15442ACD0B66E694769B46A16932F47BD74C34D0F99/0/476D55F0317E204145D2CA23E85349FDFE0F923E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/86E3F1C6B5FC81497326D15442ACD0B66E694769B46A16932F47BD74C34D0F99/0/476D55F0317E204145D2CA23E85349FDFE0F923E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/476D55F0317E204145D2CA23E85349FDFE0F923E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 01:16:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:2b:c5:04:39:23:02:c2:c7:c6:37:cd:18:ba:0e:f4:a7:34:ce:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=476D55F0317E204145D2CA23E85349FDFE0F923E
        Validity
            Not Before: Feb 28 12:15:00 2025 GMT
            Not After : Feb 27 12:20:00 2026 GMT
        Subject: CN=0CC8B35CFC4C94689E410FFABFDB18074EC54B1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:72:1b:5f:90:ad:53:17:01:89:46:d4:56:46:
                    14:2e:e4:dd:ef:de:10:a8:64:cc:10:c9:6f:7c:64:
                    4e:61:8a:3a:49:ed:4c:fc:b0:c2:46:ce:5a:cf:cf:
                    0e:9e:85:e2:93:eb:5c:c7:ca:98:6e:d7:09:bb:ba:
                    cd:13:10:8d:88:f8:fd:f5:9e:c2:9a:e2:bc:f1:6f:
                    95:a4:77:60:13:b4:de:f0:49:36:9a:32:5c:f2:2d:
                    be:71:c9:fb:1d:b8:8f:cf:2e:f9:14:e5:63:45:e3:
                    38:91:d1:9f:ad:c8:df:e1:39:78:57:1a:b2:1c:6f:
                    02:2c:a4:d2:50:0d:48:26:54:ad:28:5b:e4:46:b9:
                    9c:9a:f1:bc:db:5f:e1:2b:44:4d:23:ed:ca:40:26:
                    d2:be:d4:2d:a1:34:f8:30:46:6e:c8:11:90:9f:fc:
                    1f:d4:e5:da:7b:73:70:5d:b4:53:9f:08:bd:0a:63:
                    e2:7c:22:58:9c:59:26:c8:83:60:4b:91:e5:af:eb:
                    4b:1e:09:1a:d6:3e:93:20:88:9a:e0:87:46:93:c6:
                    1a:32:17:9e:60:71:4a:0b:f3:4b:a5:2b:d7:48:39:
                    20:1c:e9:a2:e0:32:20:60:ec:d7:63:cc:2c:fe:a7:
                    f6:fe:40:17:a4:f6:25:d3:b1:c1:53:61:f3:60:02:
                    84:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:C8:B3:5C:FC:4C:94:68:9E:41:0F:FA:BF:DB:18:07:4E:C5:4B:1C
            X509v3 Authority Key Identifier:
                keyid:47:6D:55:F0:31:7E:20:41:45:D2:CA:23:E8:53:49:FD:FE:0F:92:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/86E3F1C6B5FC81497326D15442ACD0B66E694769B46A16932F47BD74C34D0F99/0/476D55F0317E204145D2CA23E85349FDFE0F923E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/476D55F0317E204145D2CA23E85349FDFE0F923E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/86E3F1C6B5FC81497326D15442ACD0B66E694769B46A16932F47BD74C34D0F99/0/323830333a643238303a3a2f34382d3438203d3e20323634373333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d280::/48

    Signature Algorithm: sha256WithRSAEncryption
         62:54:57:f1:5b:fc:6c:3f:67:b7:8b:bb:e5:9b:2a:d8:8d:8c:
         3e:c5:76:8b:bc:83:23:a6:80:f0:d8:cd:d6:c6:bb:4a:73:ce:
         bf:5f:e3:dc:bd:a8:c6:87:49:d7:27:b7:a9:fd:61:fc:db:5e:
         c7:40:68:56:ff:56:73:b2:c4:7e:38:89:f6:53:1a:56:b9:eb:
         b0:ed:da:8e:5b:36:f5:7f:09:3b:fc:b7:16:9d:cb:8e:5c:64:
         d1:b7:95:e4:c5:64:3b:c2:61:46:0f:06:25:05:88:ef:ef:95:
         95:38:06:a0:bb:46:d7:95:01:a2:bc:97:23:46:5d:e2:7b:f5:
         e9:73:f2:2f:6f:11:63:05:d0:04:5b:b1:c3:e8:81:25:ba:89:
         86:ee:ba:5a:f7:19:49:7f:bd:2b:94:7c:8e:a4:17:4b:93:e3:
         cf:2a:f3:81:c1:b1:c8:f5:f8:8b:93:15:bf:9e:d5:21:cf:84:
         6e:ad:6c:e6:de:43:64:d7:de:5f:55:a8:e1:53:4d:85:29:a6:
         03:78:04:4c:b1:8f:b9:fd:e3:8d:53:2e:9f:77:ae:df:b3:2c:
         93:bd:b6:00:19:a0:20:21:93:f2:43:61:d6:48:27:f1:be:b0:
         76:64:6c:d8:45:b5:57:54:ce:ee:2a:51:03:07:7b:bb:b3:b3:
         f3:0d:8e:bf
-----BEGIN CERTIFICATE-----
MIIFwTCCBKmgAwIBAgIUfyvFBDkjAsLHxjfNGLoO9Kc0zuAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDc2RDU1RjAzMTdFMjA0MTQ1RDJDQTIzRTg1MzQ5RkRG
RTBGOTIzRTAeFw0yNTAyMjgxMjE1MDBaFw0yNjAyMjcxMjIwMDBaMDMxMTAvBgNV
BAMTKDBDQzhCMzVDRkM0Qzk0Njg5RTQxMEZGQUJGREIxODA3NEVDNTRCMUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCechtfkK1TFwGJRtRWRhQu5N3v
3hCoZMwQyW98ZE5hijpJ7Uz8sMJGzlrPzw6eheKT61zHyphu1wm7us0TEI2I+P31
nsKa4rzxb5Wkd2ATtN7wSTaaMlzyLb5xyfsduI/PLvkU5WNF4ziR0Z+tyN/hOXhX
GrIcbwIspNJQDUgmVK0oW+RGuZya8bzbX+ErRE0j7cpAJtK+1C2hNPgwRm7IEZCf
/B/U5dp7c3BdtFOfCL0KY+J8IlicWSbIg2BLkeWv60seCRrWPpMgiJrgh0aTxhoy
F55gcUoL80ulK9dIOSAc6aLgMiBg7NdjzCz+p/b+QBek9iXTscFTYfNgAoSRAgMB
AAGjggLLMIICxzAdBgNVHQ4EFgQUDMizXPxMlGieQQ/6v9sYB07FSxwwHwYDVR0j
BBgwFoAUR21V8DF+IEFF0soj6FNJ/f4Pkj4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84NkUzRjFDNkI1RkM4MTQ5NzMyNkQxNTQ0MkFDRDBCNjZF
Njk0NzY5QjQ2QTE2OTMyRjQ3QkQ3NEMzNEQwRjk5LzAvNDc2RDU1RjAzMTdFMjA0
MTQ1RDJDQTIzRTg1MzQ5RkRGRTBGOTIzRS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80NzZENTVGMDMxN0UyMDQxNDVE
MkNBMjNFODUzNDlGREZFMEY5MjNFLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvODZFM0YxQzZCNUZDODE0OTczMjZEMTU0NDJBQ0QwQjY2RTY5NDc2OUI0
NkExNjkzMkY0N0JENzRDMzREMEY5OS8wLzMyMzgzMDMzM2E2NDMyMzgzMDNhM2Ey
ZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzYzNDM3MzMzMy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACgD0oAA
ADANBgkqhkiG9w0BAQsFAAOCAQEAYlRX8Vv8bD9nt4u75Zsq2I2MPsV2i7yDI6aA
8NjN1sa7SnPOv1/j3L2oxodJ1ye3qf1h/Ntex0BoVv9Wc7LEfjiJ9lMaVrnrsO3a
jls29X8JO/y3Fp3Ljlxk0beV5MVkO8JhRg8GJQWI7++VlTgGoLtG15UBoryXI0Zd
4nv16XPyL28RYwXQBFuxw+iBJbqJhu66WvcZSX+9K5R8jqQXS5PjzyrzgcGxyPX4
i5MVv57VIc+Ebq1s5t5DZNfeX1Wo4VNNhSmmA3gETLGPuf3jjVMun3eu37Msk722
ABmgICGT8kNh1kgn8b6wdmRs2EW1V1TO7ipRAwd7u7Oz8w2Ovw==
-----END CERTIFICATE-----
Generated at Fri Apr 18 22:43:35 2025 by rpki-client