Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/950D2C46E7AC6641E2A1A46250A1C852BEFFC3CCB40C5464E0ECA6FF3D79F1BF/0/323830333a663738303a3a2f33322d3438203d3e20323731383034.roa
File:                     323830333a663738303a3a2f33322d3438203d3e20323731383034.roa (raw, json)
Hash identifier:          L2BB+dG4HKoWK33gMc6SHp+/oNvXEiB+B1YHHjLa8mA=
Subject key identifier:   F0:FB:63:C1:87:2A:A6:59:5B:62:9F:22:01:5D:9A:89:D8:8E:DD:CC
Certificate issuer:       /CN=F2AE7C052E238AB3E9EBF19E56710078113440CB
Certificate serial:       24742518EA66531D1DC0DD8AB6BFD7B115BBD846
Authority key identifier: F2:AE:7C:05:2E:23:8A:B3:E9:EB:F1:9E:56:71:00:78:11:34:40:CB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F2AE7C052E238AB3E9EBF19E56710078113440CB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/950D2C46E7AC6641E2A1A46250A1C852BEFFC3CCB40C5464E0ECA6FF3D79F1BF/0/323830333a663738303a3a2f33322d3438203d3e20323731383034.roa
Signing time:             Tue 04 Feb 2025 18:08:38 +0000
ROA not before:           Tue 04 Feb 2025 18:03:38 +0000
ROA not after:            Tue 03 Feb 2026 18:08:38 +0000
asID:                     271804
IP address blocks:        2803:f780::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/950D2C46E7AC6641E2A1A46250A1C852BEFFC3CCB40C5464E0ECA6FF3D79F1BF/0/F2AE7C052E238AB3E9EBF19E56710078113440CB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/950D2C46E7AC6641E2A1A46250A1C852BEFFC3CCB40C5464E0ECA6FF3D79F1BF/0/F2AE7C052E238AB3E9EBF19E56710078113440CB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F2AE7C052E238AB3E9EBF19E56710078113440CB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:74:25:18:ea:66:53:1d:1d:c0:dd:8a:b6:bf:d7:b1:15:bb:d8:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2AE7C052E238AB3E9EBF19E56710078113440CB
        Validity
            Not Before: Feb  4 18:03:38 2025 GMT
            Not After : Feb  3 18:08:38 2026 GMT
        Subject: CN=F0FB63C1872AA6595B629F22015D9A89D88EDDCC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:92:1f:55:4f:1d:29:70:1d:6e:b8:a9:ab:85:
                    1f:4d:0b:7f:d5:e4:d7:8c:d6:da:7e:9b:f0:31:86:
                    15:03:f9:b0:d9:fc:1c:e6:2d:68:e2:e6:7f:b4:d6:
                    90:d8:44:4f:ce:9e:2b:14:40:2c:27:70:9c:34:6e:
                    26:4d:fe:cd:ee:11:86:5e:5a:2e:54:05:97:b7:37:
                    dd:00:6e:0a:28:41:28:51:9d:fd:bb:f5:6b:66:7a:
                    38:18:86:72:9f:21:d6:10:55:2c:08:a8:3e:14:12:
                    95:57:3c:9f:7d:87:d5:de:ee:9d:b4:f1:e1:8a:77:
                    78:33:2b:87:e0:f7:d7:93:fe:7c:e2:02:ad:71:ee:
                    ac:ba:0c:6c:93:3e:ec:53:c8:0a:01:65:1c:6c:a4:
                    c6:73:c6:e1:bb:99:49:97:b2:16:10:d7:f5:ca:db:
                    bb:cf:2a:3a:68:b1:cc:3e:95:9e:15:b1:a0:d3:38:
                    bc:6b:c0:d9:36:76:9c:97:35:20:e9:80:49:b0:38:
                    8c:db:e2:31:44:1e:88:e7:e1:d1:76:32:f2:cf:d0:
                    05:87:49:5f:23:10:c6:70:34:63:2a:59:49:39:30:
                    92:ea:c5:82:14:d1:ae:5b:aa:f5:bf:0f:6c:bb:ea:
                    7c:17:94:98:85:22:f7:c0:a1:a1:bb:06:a2:87:67:
                    c3:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:FB:63:C1:87:2A:A6:59:5B:62:9F:22:01:5D:9A:89:D8:8E:DD:CC
            X509v3 Authority Key Identifier:
                keyid:F2:AE:7C:05:2E:23:8A:B3:E9:EB:F1:9E:56:71:00:78:11:34:40:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/950D2C46E7AC6641E2A1A46250A1C852BEFFC3CCB40C5464E0ECA6FF3D79F1BF/0/F2AE7C052E238AB3E9EBF19E56710078113440CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F2AE7C052E238AB3E9EBF19E56710078113440CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/950D2C46E7AC6641E2A1A46250A1C852BEFFC3CCB40C5464E0ECA6FF3D79F1BF/0/323830333a663738303a3a2f33322d3438203d3e20323731383034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f780::/32

    Signature Algorithm: sha256WithRSAEncryption
         12:b2:d7:60:bd:62:61:5d:42:e9:82:f1:5b:56:13:ac:2d:ae:
         42:2d:00:91:ec:2e:ac:b5:53:9a:7d:b8:80:99:4c:29:95:1d:
         01:fc:5d:63:69:eb:14:fb:53:98:25:57:2c:f2:1d:5c:7e:72:
         c6:95:33:be:f7:1a:ff:66:9c:7e:b6:19:d8:3b:26:fb:5d:ac:
         bb:82:10:d0:12:20:fe:94:50:4c:c6:8d:7d:2d:0e:ea:94:3f:
         63:35:a8:fb:7b:53:94:fe:bd:e0:a0:77:66:07:8f:37:53:66:
         c4:4f:a9:13:06:d3:ee:fb:98:5c:ad:23:db:fb:f5:fb:4e:3e:
         df:91:08:4d:80:ae:4b:e5:74:0c:3a:a0:0b:be:30:1f:47:07:
         74:49:c6:35:41:dd:48:0c:31:7c:62:a7:f2:85:db:d6:d5:6a:
         c4:e9:27:e1:3d:21:15:e0:be:bc:51:8f:6d:d1:61:ea:fa:e1:
         a8:b9:37:ea:af:49:90:35:e0:ff:b2:e1:5c:3e:94:b4:95:61:
         d0:a2:3e:05:73:ae:be:51:d6:b6:18:c0:1b:32:22:ff:d9:a9:
         e6:a0:8b:3e:92:cf:ce:55:7b:db:c5:3f:0a:a0:51:e2:a6:5d:
         9c:9d:c8:a9:99:3e:d1:ab:59:c6:5b:42:80:af:8d:12:3f:ad:
         da:85:7a:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 14:58:50 2025 by rpki-client