Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A0248B8B40C06DB6031A12D4C78E102F32790EB2FD0CCA4B5F36CFA9FAB1559C/0/323830333a386430303a3a2f33322d3438203d3e203237393838.roa
File:                     323830333a386430303a3a2f33322d3438203d3e203237393838.roa (raw, json)
Hash identifier:          8mEBGu7YwE1nijjiaYJ8TMNbtPY37kIEua6SBEMQtK0=
Subject key identifier:   99:AF:6E:E9:DA:D2:02:A7:91:9B:16:CE:12:08:D6:1C:B5:B7:BA:78
Certificate issuer:       /CN=DC7E31CF805B81CB499CF0807375C76F26BC2117
Certificate serial:       62EF24F9FFF8A3C5A1CB2EB5FE2E709B975508AB
Authority key identifier: DC:7E:31:CF:80:5B:81:CB:49:9C:F0:80:73:75:C7:6F:26:BC:21:17
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC7E31CF805B81CB499CF0807375C76F26BC2117.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A0248B8B40C06DB6031A12D4C78E102F32790EB2FD0CCA4B5F36CFA9FAB1559C/0/323830333a386430303a3a2f33322d3438203d3e203237393838.roa
Signing time:             Tue 04 Feb 2025 20:02:38 +0000
ROA not before:           Tue 04 Feb 2025 19:57:38 +0000
ROA not after:            Tue 03 Feb 2026 20:02:38 +0000
asID:                     27988
IP address blocks:        2803:8d00::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A0248B8B40C06DB6031A12D4C78E102F32790EB2FD0CCA4B5F36CFA9FAB1559C/0/DC7E31CF805B81CB499CF0807375C76F26BC2117.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A0248B8B40C06DB6031A12D4C78E102F32790EB2FD0CCA4B5F36CFA9FAB1559C/0/DC7E31CF805B81CB499CF0807375C76F26BC2117.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC7E31CF805B81CB499CF0807375C76F26BC2117.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:33:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:ef:24:f9:ff:f8:a3:c5:a1:cb:2e:b5:fe:2e:70:9b:97:55:08:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC7E31CF805B81CB499CF0807375C76F26BC2117
        Validity
            Not Before: Feb  4 19:57:38 2025 GMT
            Not After : Feb  3 20:02:38 2026 GMT
        Subject: CN=99AF6EE9DAD202A7919B16CE1208D61CB5B7BA78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:b7:01:86:b9:24:5d:94:cf:e4:71:87:59:d6:
                    e5:33:bf:cd:2c:36:04:30:cd:ca:d3:5e:36:05:d7:
                    3e:4c:a8:df:ac:e9:96:97:b6:61:42:f8:b2:d1:55:
                    e0:d6:e6:fc:33:2b:d2:3b:f8:b5:69:ca:c6:f1:c0:
                    9d:62:a3:15:96:00:fb:b4:c9:c9:3b:7f:a1:88:52:
                    d8:9a:ed:42:d0:0a:56:75:45:28:51:bb:c6:9f:51:
                    fe:67:bb:cf:53:d2:1b:c7:3f:72:69:d1:37:75:fd:
                    03:9b:eb:78:fe:00:ee:c6:80:b2:13:c6:11:05:43:
                    53:3b:71:14:91:82:6b:96:d9:b8:dc:c5:cc:9a:c5:
                    0d:ed:b8:51:71:fd:66:f4:4a:ae:40:10:b0:93:04:
                    dc:bf:91:dd:41:3d:41:0f:2f:0f:da:a7:fa:4c:1b:
                    de:b7:53:6a:72:3d:e7:12:45:33:18:83:c0:cc:4c:
                    ad:04:c9:36:d0:0b:b7:a3:01:82:4b:a2:5d:dd:45:
                    f0:ed:af:b9:12:fe:0c:ff:30:5a:4f:ee:73:f0:6c:
                    da:fd:3e:00:55:87:3c:69:67:cf:35:b4:7c:e9:31:
                    d6:d4:8b:d6:85:b5:25:fe:5f:fe:f4:a4:5d:09:73:
                    e7:86:47:97:52:7e:3f:ea:f9:90:8b:5c:e0:f9:c4:
                    8a:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:AF:6E:E9:DA:D2:02:A7:91:9B:16:CE:12:08:D6:1C:B5:B7:BA:78
            X509v3 Authority Key Identifier:
                keyid:DC:7E:31:CF:80:5B:81:CB:49:9C:F0:80:73:75:C7:6F:26:BC:21:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A0248B8B40C06DB6031A12D4C78E102F32790EB2FD0CCA4B5F36CFA9FAB1559C/0/DC7E31CF805B81CB499CF0807375C76F26BC2117.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC7E31CF805B81CB499CF0807375C76F26BC2117.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A0248B8B40C06DB6031A12D4C78E102F32790EB2FD0CCA4B5F36CFA9FAB1559C/0/323830333a386430303a3a2f33322d3438203d3e203237393838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8d00::/32

    Signature Algorithm: sha256WithRSAEncryption
         1a:c6:71:40:ed:bd:57:95:f9:3c:ff:b5:44:1c:20:b1:bb:d1:
         98:1c:f2:7e:cd:d4:9f:63:0a:39:84:0e:f3:97:3a:a2:39:7d:
         37:49:61:fa:3f:43:76:3b:6e:f5:cf:96:d9:dd:51:b0:df:c9:
         86:32:26:d7:26:ed:f7:41:dc:cc:26:eb:26:a6:67:36:ac:48:
         13:90:1b:eb:87:a2:47:fb:cc:f2:ca:21:bb:38:70:af:bf:ff:
         ef:15:29:29:74:55:86:2c:19:2a:5f:9a:b7:f7:11:94:d4:fb:
         e9:48:bc:e3:87:25:cf:f9:12:28:e7:66:52:19:dd:db:f6:b4:
         fc:65:09:c0:ec:98:00:ec:84:88:ae:8b:53:40:f5:c9:b1:3c:
         00:07:2c:79:0d:82:b2:e1:f4:da:d8:29:f4:17:de:6f:b5:bc:
         d8:de:a8:c3:ce:a3:9c:74:b7:3a:e0:f9:34:b8:b5:48:26:1c:
         ba:e6:ad:fd:0d:aa:9d:7a:32:df:9e:35:11:13:e8:20:00:bf:
         01:4d:9d:14:5f:90:5f:b2:77:c3:8f:09:fe:84:0d:01:e3:2e:
         8e:96:b7:b6:c1:2c:5a:ec:6a:a6:68:fb:bd:f7:44:6c:da:c1:
         e6:84:0d:e1:c4:ce:1b:28:ea:25:1f:ba:fb:9d:48:bd:4f:b0:
         87:ab:11:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:39:21 2025 by rpki-client