Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/90539462A4A1B3951607066D516B6BDF2F465E83FC3D92F209D6B0804F266E92/0/323830333a393634303a3a2f33322d3438203d3e20323634363035.roa
File:                     323830333a393634303a3a2f33322d3438203d3e20323634363035.roa (raw, json)
Hash identifier:          l2LGDe7KWy3dA0Lg0aVrdGf+tXhJd5aE8DvAtP9j8J4=
Subject key identifier:   E8:E6:15:92:44:BB:D6:52:C7:1B:52:98:EC:EF:99:CC:6E:52:91:79
Certificate issuer:       /CN=7F98F25356605E50F1B1C800B6E7128E7B3123E6
Certificate serial:       2DFCE2D3BA1234611E120A650B9A3A614E7EAEC8
Authority key identifier: 7F:98:F2:53:56:60:5E:50:F1:B1:C8:00:B6:E7:12:8E:7B:31:23:E6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F98F25356605E50F1B1C800B6E7128E7B3123E6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/90539462A4A1B3951607066D516B6BDF2F465E83FC3D92F209D6B0804F266E92/0/323830333a393634303a3a2f33322d3438203d3e20323634363035.roa
Signing time:             Tue 04 Feb 2025 18:48:39 +0000
ROA not before:           Tue 04 Feb 2025 18:43:39 +0000
ROA not after:            Tue 03 Feb 2026 18:48:39 +0000
asID:                     264605
IP address blocks:        2803:9640::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/90539462A4A1B3951607066D516B6BDF2F465E83FC3D92F209D6B0804F266E92/0/7F98F25356605E50F1B1C800B6E7128E7B3123E6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/90539462A4A1B3951607066D516B6BDF2F465E83FC3D92F209D6B0804F266E92/0/7F98F25356605E50F1B1C800B6E7128E7B3123E6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F98F25356605E50F1B1C800B6E7128E7B3123E6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 22:16:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:fc:e2:d3:ba:12:34:61:1e:12:0a:65:0b:9a:3a:61:4e:7e:ae:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F98F25356605E50F1B1C800B6E7128E7B3123E6
        Validity
            Not Before: Feb  4 18:43:39 2025 GMT
            Not After : Feb  3 18:48:39 2026 GMT
        Subject: CN=E8E6159244BBD652C71B5298ECEF99CC6E529179
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:02:be:3d:c1:66:df:5e:21:a6:22:ca:9a:d2:
                    61:da:e4:a1:10:1c:fd:cb:1a:51:52:a0:93:42:90:
                    9b:ba:7c:36:1b:ab:27:5a:f9:a1:bf:95:72:3a:50:
                    1c:2b:91:3a:de:7a:df:43:69:03:61:cc:3b:65:e0:
                    d3:5e:4c:50:83:22:f4:02:1e:fd:e5:4a:51:eb:d9:
                    a5:52:e1:80:ed:31:b6:70:40:83:f0:9d:49:3c:21:
                    41:82:13:6b:f8:24:8a:ee:21:ac:9a:d3:bd:1f:72:
                    80:e1:4f:e1:89:56:15:c7:ca:df:62:04:81:78:5c:
                    2d:1e:da:52:e3:df:bc:11:73:7e:d5:f5:d8:48:5b:
                    7f:cc:5e:b6:a2:63:3f:c8:d1:b5:b1:1c:b6:cf:97:
                    01:53:55:0a:5c:31:af:54:8b:34:a8:bc:a2:dd:db:
                    cf:49:25:f0:f2:47:1f:c0:de:04:65:1a:c9:37:04:
                    55:19:03:e6:8c:44:de:50:fc:a7:23:c3:15:a6:10:
                    38:8f:c7:8d:71:14:83:4b:ea:6a:06:58:74:eb:8e:
                    ca:d2:7c:9d:28:9e:2e:b6:7b:cd:b3:02:b3:84:e7:
                    17:3d:8e:22:af:c5:24:00:de:e6:1e:38:74:9a:05:
                    dd:51:58:ce:9f:07:f6:43:81:8c:a5:e3:89:19:79:
                    50:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:E6:15:92:44:BB:D6:52:C7:1B:52:98:EC:EF:99:CC:6E:52:91:79
            X509v3 Authority Key Identifier:
                keyid:7F:98:F2:53:56:60:5E:50:F1:B1:C8:00:B6:E7:12:8E:7B:31:23:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/90539462A4A1B3951607066D516B6BDF2F465E83FC3D92F209D6B0804F266E92/0/7F98F25356605E50F1B1C800B6E7128E7B3123E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F98F25356605E50F1B1C800B6E7128E7B3123E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/90539462A4A1B3951607066D516B6BDF2F465E83FC3D92F209D6B0804F266E92/0/323830333a393634303a3a2f33322d3438203d3e20323634363035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9640::/32

    Signature Algorithm: sha256WithRSAEncryption
         79:df:37:27:0a:fa:94:4c:e0:d2:33:f5:b1:1e:68:59:51:0c:
         7a:aa:d4:26:25:aa:e8:bb:66:01:90:66:3e:63:18:32:18:4a:
         33:fc:8b:c1:b5:a9:00:f9:9f:91:d5:88:66:09:a8:69:d6:69:
         6e:d2:9e:30:ab:8d:ae:e6:99:3e:29:a3:1b:f4:f6:82:79:46:
         01:c5:96:f4:62:c8:d6:a7:20:40:b2:5e:a9:7a:8f:ca:9b:3e:
         d6:74:d2:1e:3a:48:0c:22:92:26:bd:a2:1e:0f:85:22:4c:cc:
         0f:fc:e0:c2:38:cd:78:8c:c2:e9:60:17:04:7b:e8:50:86:81:
         30:54:a6:b3:ed:99:9a:eb:2e:c2:cc:8f:f3:f9:e4:fe:2a:78:
         c6:05:83:ef:9f:76:ad:d5:ad:9c:13:24:3b:e5:77:54:ce:c7:
         21:d8:d5:4a:fb:9c:8d:ee:7f:f0:46:9f:cb:5f:92:8f:b4:05:
         18:cc:e6:b1:69:03:0f:06:84:29:63:62:5e:ac:78:cb:87:92:
         98:b8:c2:3e:bc:5b:e7:17:c3:b2:20:71:48:25:0d:ff:69:6e:
         13:be:ef:07:4d:ba:3d:cb:6d:18:c2:7e:f1:75:9f:4e:9f:91:
         cb:36:dc:6e:3f:9f:70:1f:6e:be:21:7f:86:ac:94:8a:5c:df:
         61:3e:96:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:54:06 2025 by rpki-client