Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8F2AE803B2E5ADDE0FBD5BDD9CF7A3B230FD08E468371BD9732FBA007E33759E/0/323830333a663731303a3a2f33322d3332203d3e20323732313131.roa
File:                     323830333a663731303a3a2f33322d3332203d3e20323732313131.roa (raw, json)
Hash identifier:          8wEcGhp8ayHWsg/SdZIHPkuRcR3nKrTNJS+KsgQWfCU=
Subject key identifier:   54:9B:01:82:17:93:E9:78:EC:33:6D:D4:83:A0:B2:60:F0:D3:AA:C9
Certificate issuer:       /CN=2F047A301A97B60EF7E1DECA548BF9056B229795
Certificate serial:       71626E09CC806B222ADE4906E6CB3BE7B0C2F2DA
Authority key identifier: 2F:04:7A:30:1A:97:B6:0E:F7:E1:DE:CA:54:8B:F9:05:6B:22:97:95
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2F047A301A97B60EF7E1DECA548BF9056B229795.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8F2AE803B2E5ADDE0FBD5BDD9CF7A3B230FD08E468371BD9732FBA007E33759E/0/323830333a663731303a3a2f33322d3332203d3e20323732313131.roa
Signing time:             Tue 04 Feb 2025 18:10:55 +0000
ROA not before:           Tue 04 Feb 2025 18:05:55 +0000
ROA not after:            Tue 03 Feb 2026 18:10:55 +0000
asID:                     272111
IP address blocks:        2803:f710::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8F2AE803B2E5ADDE0FBD5BDD9CF7A3B230FD08E468371BD9732FBA007E33759E/0/2F047A301A97B60EF7E1DECA548BF9056B229795.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8F2AE803B2E5ADDE0FBD5BDD9CF7A3B230FD08E468371BD9732FBA007E33759E/0/2F047A301A97B60EF7E1DECA548BF9056B229795.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2F047A301A97B60EF7E1DECA548BF9056B229795.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 21:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:62:6e:09:cc:80:6b:22:2a:de:49:06:e6:cb:3b:e7:b0:c2:f2:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F047A301A97B60EF7E1DECA548BF9056B229795
        Validity
            Not Before: Feb  4 18:05:55 2025 GMT
            Not After : Feb  3 18:10:55 2026 GMT
        Subject: CN=549B01821793E978EC336DD483A0B260F0D3AAC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:eb:5e:5f:79:ea:c8:62:f1:b0:3c:c6:0c:92:
                    3b:cb:4e:1e:1e:17:96:24:1d:ea:1d:05:cc:93:8f:
                    30:7b:15:b9:40:75:09:42:7a:69:16:e5:8e:d1:03:
                    75:76:27:b6:3c:df:cc:e3:43:8b:7d:c7:47:01:5f:
                    88:7f:bc:19:99:05:5b:02:26:fd:11:58:fb:7c:d8:
                    b0:82:a9:3e:43:90:43:3c:55:28:80:79:dd:d2:7d:
                    0e:46:ee:d9:e7:49:6d:99:0e:9b:4d:40:ad:c6:4a:
                    25:67:20:16:4f:f7:07:53:53:4c:52:67:70:b7:cd:
                    9c:f8:cb:fc:01:f4:db:37:15:6e:69:ce:7d:ff:95:
                    73:b3:ce:1d:19:cc:e2:7c:77:36:3f:c0:c9:b7:d8:
                    1a:18:59:8b:18:97:32:9f:a6:0a:eb:4d:ee:2a:4a:
                    68:40:7f:01:06:58:6f:94:d5:b8:f4:cb:fa:e5:60:
                    62:6a:f0:62:62:0f:ec:95:b7:a6:91:de:b5:f4:3d:
                    2e:40:1b:73:89:a0:a6:1d:b1:54:6f:b1:8c:ca:1d:
                    08:23:c8:78:8a:5c:7f:08:0d:d8:b2:92:0e:53:c5:
                    08:a3:8e:3e:1f:7d:04:d1:3c:5b:65:df:c5:88:5e:
                    95:44:1b:e5:b2:f6:75:8e:fb:71:64:1c:2b:53:b4:
                    8c:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:9B:01:82:17:93:E9:78:EC:33:6D:D4:83:A0:B2:60:F0:D3:AA:C9
            X509v3 Authority Key Identifier:
                keyid:2F:04:7A:30:1A:97:B6:0E:F7:E1:DE:CA:54:8B:F9:05:6B:22:97:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8F2AE803B2E5ADDE0FBD5BDD9CF7A3B230FD08E468371BD9732FBA007E33759E/0/2F047A301A97B60EF7E1DECA548BF9056B229795.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2F047A301A97B60EF7E1DECA548BF9056B229795.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8F2AE803B2E5ADDE0FBD5BDD9CF7A3B230FD08E468371BD9732FBA007E33759E/0/323830333a663731303a3a2f33322d3332203d3e20323732313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f710::/32

    Signature Algorithm: sha256WithRSAEncryption
         6d:b8:94:4a:09:d6:d4:0b:0e:26:93:82:22:d6:3c:89:72:3e:
         d3:e7:89:83:07:bf:10:9f:3c:17:72:7a:b2:91:04:ac:6b:37:
         12:4b:07:9a:9c:d3:f0:22:66:6a:86:0b:2d:39:22:92:b3:1f:
         cd:96:00:f0:64:a8:d9:2d:a3:28:1a:63:24:a5:f6:40:c9:ec:
         ed:db:8d:14:0e:2d:5e:63:ff:2a:90:28:90:a2:97:d5:fb:9e:
         2f:24:c1:cb:f8:b0:0f:d2:bf:b5:bb:5d:03:73:96:64:2d:8d:
         f2:85:2b:89:14:f9:7e:27:05:02:c8:24:4f:86:7e:64:9f:58:
         4f:c6:17:ab:36:1c:59:1e:81:c8:64:06:be:64:dd:71:77:6a:
         5a:0a:6d:c7:99:a7:7e:fb:c8:d1:26:d2:4f:af:45:30:26:74:
         3e:dd:5c:f4:3b:96:1f:60:49:b3:55:ef:4d:98:e8:36:68:44:
         1a:fb:80:5b:1a:60:1c:24:fe:f5:3d:6e:3e:fb:89:e4:9f:63:
         2e:e9:9c:fb:a9:5e:1c:cc:4e:fc:b8:36:4e:20:b1:96:b2:72:
         2e:26:66:19:9e:69:6c:ae:51:42:3c:ce:ce:e1:fd:3b:ac:7a:
         a3:7a:bc:e1:0b:ab:95:64:61:e4:15:63:15:ed:b5:9b:b2:8c:
         52:68:d9:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:02:34 2025 by rpki-client