Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8CE48E13328675773DB0D93CA1D27FD6A257CBDF87E5B248571C8DAFF601E374/0/323830333a383936303a3130313a3a2f34382d3438203d3e20323639373336.roa
File:                     323830333a383936303a3130313a3a2f34382d3438203d3e20323639373336.roa (raw, json)
Hash identifier:          cogmKc6T2ht5c969jgEj1Qk01efHeRd9+K0wVvRZm1g=
Subject key identifier:   17:6A:0C:E0:29:83:2D:1C:53:DE:BD:FE:23:1C:B3:01:40:BE:AA:5B
Certificate issuer:       /CN=FCB083EE5CFFAFB10962A859AA22652832710154
Certificate serial:       5C15912F4858872A37E4A8A1F6DC00F30F8264C5
Authority key identifier: FC:B0:83:EE:5C:FF:AF:B1:09:62:A8:59:AA:22:65:28:32:71:01:54
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FCB083EE5CFFAFB10962A859AA22652832710154.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8CE48E13328675773DB0D93CA1D27FD6A257CBDF87E5B248571C8DAFF601E374/0/323830333a383936303a3130313a3a2f34382d3438203d3e20323639373336.roa
Signing time:             Tue 04 Feb 2025 19:58:52 +0000
ROA not before:           Tue 04 Feb 2025 19:53:52 +0000
ROA not after:            Tue 03 Feb 2026 19:58:52 +0000
asID:                     269736
IP address blocks:        2803:8960:101::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8CE48E13328675773DB0D93CA1D27FD6A257CBDF87E5B248571C8DAFF601E374/0/FCB083EE5CFFAFB10962A859AA22652832710154.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8CE48E13328675773DB0D93CA1D27FD6A257CBDF87E5B248571C8DAFF601E374/0/FCB083EE5CFFAFB10962A859AA22652832710154.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FCB083EE5CFFAFB10962A859AA22652832710154.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 19 Feb 2025 16:38:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:15:91:2f:48:58:87:2a:37:e4:a8:a1:f6:dc:00:f3:0f:82:64:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FCB083EE5CFFAFB10962A859AA22652832710154
        Validity
            Not Before: Feb  4 19:53:52 2025 GMT
            Not After : Feb  3 19:58:52 2026 GMT
        Subject: CN=176A0CE029832D1C53DEBDFE231CB30140BEAA5B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:44:8e:98:ac:61:b1:8b:08:18:de:5e:99:39:
                    6c:7d:d0:79:7e:8c:bb:b8:2a:35:36:4f:4c:78:47:
                    bb:d8:49:e9:a0:fd:90:95:21:4e:bf:cb:b0:35:bd:
                    00:aa:d5:03:da:ed:b0:6f:f5:7e:dd:5e:94:99:3c:
                    2c:d9:17:a8:b3:2a:f6:68:01:bd:11:80:28:b1:21:
                    0d:dc:f3:10:82:f8:22:dc:04:4b:d0:8b:eb:45:9e:
                    95:a9:50:9a:39:4d:ef:8d:87:e4:d0:9f:55:73:6f:
                    fd:bb:9f:bd:8c:8f:de:16:b9:33:91:92:98:b4:bf:
                    0f:d6:34:5b:68:8a:03:91:d5:4a:8f:1c:36:46:86:
                    13:a7:4c:16:0f:21:04:18:1f:f2:b5:74:c2:b6:d1:
                    93:55:87:c6:ad:55:c8:58:45:c1:f7:7c:d1:72:e0:
                    32:da:ff:25:8d:f5:b3:b5:90:80:21:94:ba:ad:0e:
                    10:79:12:a4:0f:01:a0:ca:b4:71:af:33:ac:d6:75:
                    33:06:e8:f7:21:b1:32:ae:5f:35:18:b6:dc:a5:be:
                    7a:19:10:66:6f:67:8e:00:bf:70:a3:1c:ad:3c:ae:
                    0b:1e:96:b7:1c:da:06:aa:fd:45:42:26:f7:07:d3:
                    98:83:7a:57:ea:56:77:d6:ef:a9:43:28:8b:c8:83:
                    0b:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:6A:0C:E0:29:83:2D:1C:53:DE:BD:FE:23:1C:B3:01:40:BE:AA:5B
            X509v3 Authority Key Identifier:
                keyid:FC:B0:83:EE:5C:FF:AF:B1:09:62:A8:59:AA:22:65:28:32:71:01:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8CE48E13328675773DB0D93CA1D27FD6A257CBDF87E5B248571C8DAFF601E374/0/FCB083EE5CFFAFB10962A859AA22652832710154.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FCB083EE5CFFAFB10962A859AA22652832710154.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8CE48E13328675773DB0D93CA1D27FD6A257CBDF87E5B248571C8DAFF601E374/0/323830333a383936303a3130313a3a2f34382d3438203d3e20323639373336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8960:101::/48

    Signature Algorithm: sha256WithRSAEncryption
         58:44:98:7f:3c:ec:68:c8:16:d8:ea:71:b1:47:ba:72:b2:a0:
         99:8b:87:23:2c:86:a7:d6:6d:0a:5f:69:44:a5:48:37:96:31:
         c5:46:eb:d3:05:cb:8d:16:ae:3d:09:95:c5:35:ee:01:c9:d0:
         23:4b:34:ff:af:f0:0d:92:41:30:9d:8c:d4:5f:50:ca:af:3d:
         d7:e7:5f:df:d8:01:6e:93:07:66:4a:e6:f7:c8:19:74:bb:8a:
         d9:09:2f:f9:55:b8:d0:cc:62:34:f9:4d:cd:97:1f:9f:1f:ce:
         cc:c6:43:3a:93:12:4c:f4:c4:26:03:7b:4f:ca:12:fc:e3:0f:
         27:3a:0b:34:a1:a8:e1:4f:a7:e4:d1:b1:b4:69:9e:b5:ff:a6:
         84:10:e8:62:fb:36:d4:cc:1f:81:cf:f4:c9:c9:1e:e9:93:8f:
         3b:ac:68:5a:73:0f:a9:09:58:67:7a:85:80:ca:e2:91:a0:b4:
         8e:fd:7d:64:c0:69:92:13:cc:c1:57:a4:f8:4c:91:f2:f7:ba:
         1e:f6:7b:84:f0:20:ee:81:48:67:ef:67:81:26:d6:a5:42:09:
         cd:ef:16:7d:cb:67:73:9e:77:c2:2c:a2:bc:a0:22:c3:bb:a1:
         bd:1c:71:18:d2:68:97:d2:90:41:43:ab:a9:38:ba:79:c7:a0:
         db:d4:6e:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:10:49 2025 by rpki-client