Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8E7E39E7D390C8FC7CA81144BFE08B122B427B0A0513324D744447A43C76A3A9/0/323830333a363835303a363a3a2f34382d3438203d3e20323733313133.roa
File:                     323830333a363835303a363a3a2f34382d3438203d3e20323733313133.roa (raw, json)
Hash identifier:          FA19voFMa2DC4+KYl3IfzIniQ5X9/wEbY/KTpaSgQJw=
Subject key identifier:   88:11:DC:04:64:28:55:1C:23:60:04:B5:5A:1C:D7:0C:37:42:CE:37
Certificate issuer:       /CN=1642A8D6C14F94500E7FF6111DCC5D5107143798
Certificate serial:       1286245E8D390E19C871D99C3F0573AEE7CABEFB
Authority key identifier: 16:42:A8:D6:C1:4F:94:50:0E:7F:F6:11:1D:CC:5D:51:07:14:37:98
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1642A8D6C14F94500E7FF6111DCC5D5107143798.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8E7E39E7D390C8FC7CA81144BFE08B122B427B0A0513324D744447A43C76A3A9/0/323830333a363835303a363a3a2f34382d3438203d3e20323733313133.roa
Signing time:             Tue 04 Feb 2025 18:29:19 +0000
ROA not before:           Tue 04 Feb 2025 18:24:19 +0000
ROA not after:            Tue 03 Feb 2026 18:29:19 +0000
asID:                     273113
IP address blocks:        2803:6850:6::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8E7E39E7D390C8FC7CA81144BFE08B122B427B0A0513324D744447A43C76A3A9/0/1642A8D6C14F94500E7FF6111DCC5D5107143798.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8E7E39E7D390C8FC7CA81144BFE08B122B427B0A0513324D744447A43C76A3A9/0/1642A8D6C14F94500E7FF6111DCC5D5107143798.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1642A8D6C14F94500E7FF6111DCC5D5107143798.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:86:24:5e:8d:39:0e:19:c8:71:d9:9c:3f:05:73:ae:e7:ca:be:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1642A8D6C14F94500E7FF6111DCC5D5107143798
        Validity
            Not Before: Feb  4 18:24:19 2025 GMT
            Not After : Feb  3 18:29:19 2026 GMT
        Subject: CN=8811DC046428551C236004B55A1CD70C3742CE37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:52:cb:d5:5e:a0:ce:71:7a:b0:70:50:5e:80:
                    8e:13:e6:b6:e9:4d:91:ff:b3:2f:7c:f6:b5:c8:dd:
                    d7:ca:51:71:de:ad:6d:48:03:ab:fc:5c:11:d9:96:
                    c2:c4:c5:40:b4:41:46:53:56:e7:59:af:19:7b:2f:
                    b0:50:68:89:e9:65:25:e0:e1:4d:14:2b:f1:af:75:
                    89:35:cb:21:9b:08:0a:c6:f5:74:a5:72:34:1a:13:
                    e7:84:8b:42:01:db:99:90:3c:e9:db:02:6c:b8:0d:
                    af:73:f5:c6:12:e9:2e:21:5f:60:e7:f9:02:fc:3a:
                    58:db:06:d1:c8:cd:aa:c1:ea:11:0f:3c:cb:74:21:
                    5e:3e:4f:a4:4d:49:e9:4c:1f:04:ec:eb:83:e0:fe:
                    f7:16:e0:29:49:cc:4b:a4:b8:38:a5:39:c3:3d:47:
                    fe:1c:91:a9:3f:fb:21:06:e6:9d:30:7f:51:0e:17:
                    6a:f1:c9:78:7b:46:62:47:04:d3:3a:7d:a7:cf:ee:
                    36:f1:49:61:f3:3c:f9:70:e3:3f:df:a3:b3:22:7e:
                    61:da:81:fd:14:50:86:25:e9:33:17:69:7c:6c:4b:
                    14:24:ee:86:79:0f:c9:d4:99:72:3b:76:7b:e5:1b:
                    75:85:2c:0d:89:48:b9:b4:d4:99:4a:1d:6f:4a:3e:
                    d9:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:11:DC:04:64:28:55:1C:23:60:04:B5:5A:1C:D7:0C:37:42:CE:37
            X509v3 Authority Key Identifier:
                keyid:16:42:A8:D6:C1:4F:94:50:0E:7F:F6:11:1D:CC:5D:51:07:14:37:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8E7E39E7D390C8FC7CA81144BFE08B122B427B0A0513324D744447A43C76A3A9/0/1642A8D6C14F94500E7FF6111DCC5D5107143798.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1642A8D6C14F94500E7FF6111DCC5D5107143798.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8E7E39E7D390C8FC7CA81144BFE08B122B427B0A0513324D744447A43C76A3A9/0/323830333a363835303a363a3a2f34382d3438203d3e20323733313133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6850:6::/48

    Signature Algorithm: sha256WithRSAEncryption
         07:f9:da:c6:67:08:13:42:e7:de:d0:e5:76:9a:59:87:c1:2c:
         87:76:6c:15:7c:15:b5:20:08:55:e6:d3:3a:f9:fe:e1:ca:7c:
         ec:19:3a:2a:19:75:c5:c4:f0:c0:60:24:19:5c:88:46:47:4d:
         e6:d5:e5:db:5a:19:d5:1c:2c:d4:49:43:76:0d:cd:89:eb:ef:
         24:e4:44:4f:e6:ec:27:5f:63:17:65:70:99:ec:a2:9c:e8:bd:
         8e:59:8d:3e:5e:f5:8e:6f:bc:34:f2:ff:a1:d0:51:a0:ff:8e:
         f2:5a:8f:98:82:67:c9:e7:9d:fe:0a:07:7b:91:60:75:c7:c1:
         2e:0c:24:ae:db:28:1d:a1:78:18:f1:68:b5:13:b3:e2:24:9b:
         30:bc:08:21:e1:d5:de:8d:96:f6:e0:d4:74:7f:2d:3e:5d:91:
         4e:6b:94:0c:d5:5b:70:92:e5:b8:9c:ba:6b:39:88:a8:fd:ec:
         9f:80:50:1b:b1:35:8d:d7:d5:e9:4c:ce:1d:22:e4:7c:35:7c:
         c2:8f:fb:5c:6c:b2:d8:48:ec:b9:d3:e9:af:d0:9b:40:4d:95:
         bc:ca:cf:7c:f6:26:df:26:fd:5c:1d:6e:28:61:db:ad:02:e0:
         18:61:66:f9:8a:dd:0d:92:c3:bd:62:60:14:0f:13:c1:21:87:
         51:f2:c3:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:57:20 2025 by rpki-client