Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A0BB0400453B5D17FC5377D1C17C38E3AA580246F00738022369D48007162DD2/0/323830333a326130303a3a2f33312d3438203d3e203237383935.roa
File:                     323830333a326130303a3a2f33312d3438203d3e203237383935.roa (raw, json)
Hash identifier:          lEkUwcc6F1gZQKPmqOjkRz8flKVe4QZ+htYRpVxFnEQ=
Subject key identifier:   27:15:E1:5A:21:FA:79:F7:14:12:59:AD:3A:6F:9F:89:BC:09:50:36
Certificate issuer:       /CN=2FCBAA080E219C73F9BBF552D81B65C05063D427
Certificate serial:       59495A6EB31B336AFFD4434B86B07D84EE190F5D
Authority key identifier: 2F:CB:AA:08:0E:21:9C:73:F9:BB:F5:52:D8:1B:65:C0:50:63:D4:27
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FCBAA080E219C73F9BBF552D81B65C05063D427.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A0BB0400453B5D17FC5377D1C17C38E3AA580246F00738022369D48007162DD2/0/323830333a326130303a3a2f33312d3438203d3e203237383935.roa
Signing time:             Tue 04 Feb 2025 18:26:23 +0000
ROA not before:           Tue 04 Feb 2025 18:21:23 +0000
ROA not after:            Tue 03 Feb 2026 18:26:23 +0000
asID:                     27895
IP address blocks:        2803:2a00::/31 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A0BB0400453B5D17FC5377D1C17C38E3AA580246F00738022369D48007162DD2/0/2FCBAA080E219C73F9BBF552D81B65C05063D427.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A0BB0400453B5D17FC5377D1C17C38E3AA580246F00738022369D48007162DD2/0/2FCBAA080E219C73F9BBF552D81B65C05063D427.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FCBAA080E219C73F9BBF552D81B65C05063D427.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 20:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:49:5a:6e:b3:1b:33:6a:ff:d4:43:4b:86:b0:7d:84:ee:19:0f:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FCBAA080E219C73F9BBF552D81B65C05063D427
        Validity
            Not Before: Feb  4 18:21:23 2025 GMT
            Not After : Feb  3 18:26:23 2026 GMT
        Subject: CN=2715E15A21FA79F7141259AD3A6F9F89BC095036
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:8e:9b:7f:ec:e6:c4:2b:e8:3f:a4:cf:fa:77:
                    26:f4:d1:1b:f8:72:6d:1e:c4:88:09:d7:f9:ff:7f:
                    64:89:a9:54:fb:49:2a:e7:d4:44:1a:28:f7:fd:a4:
                    46:d7:39:b4:87:ce:7f:74:47:e3:06:51:ba:a2:83:
                    02:42:e5:0b:0a:0d:18:c6:a6:db:06:ca:41:24:5b:
                    e2:f8:44:79:71:6c:6e:90:eb:28:78:2d:75:fe:19:
                    e2:30:f8:18:41:98:f4:ca:1b:04:14:e0:72:92:27:
                    61:19:cb:75:ca:9a:95:08:1c:e4:fa:b5:84:12:fd:
                    53:d5:d8:ca:54:5e:76:af:b4:35:e9:1f:92:e3:ed:
                    08:33:79:51:6c:13:03:f1:06:b5:cd:10:51:d7:cc:
                    a0:30:a4:72:d0:2b:4f:01:c9:c2:f4:ac:95:54:53:
                    74:fb:6a:3a:7f:08:05:0e:bb:ed:fe:f5:23:7c:a3:
                    6e:0f:31:16:f4:38:59:7b:4c:2b:03:5c:a6:11:c0:
                    4d:f3:2a:4e:4b:ed:ed:b6:96:34:ec:b2:18:da:29:
                    81:48:38:45:be:93:7a:5b:e7:18:9b:e7:20:7f:e2:
                    d5:e5:ba:b3:7a:f3:69:ab:38:74:ab:2d:08:80:2e:
                    32:41:d2:ed:4f:25:b0:56:db:01:62:2b:c4:dd:ca:
                    a6:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:15:E1:5A:21:FA:79:F7:14:12:59:AD:3A:6F:9F:89:BC:09:50:36
            X509v3 Authority Key Identifier:
                keyid:2F:CB:AA:08:0E:21:9C:73:F9:BB:F5:52:D8:1B:65:C0:50:63:D4:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A0BB0400453B5D17FC5377D1C17C38E3AA580246F00738022369D48007162DD2/0/2FCBAA080E219C73F9BBF552D81B65C05063D427.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FCBAA080E219C73F9BBF552D81B65C05063D427.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A0BB0400453B5D17FC5377D1C17C38E3AA580246F00738022369D48007162DD2/0/323830333a326130303a3a2f33312d3438203d3e203237383935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2a00::/31

    Signature Algorithm: sha256WithRSAEncryption
         46:2f:8b:46:85:af:35:99:4f:b0:f8:21:9b:70:05:d2:5f:4a:
         6b:fd:86:53:fe:7b:6c:e1:d6:29:79:c5:6b:7c:0c:ac:82:bd:
         72:d7:57:11:5b:73:2f:dd:f3:30:d3:4d:f8:29:8e:c3:1f:87:
         27:91:ea:c6:1a:66:8e:b4:69:69:ea:fd:98:8e:3f:f5:0a:d0:
         5b:5c:8c:b5:16:34:3c:2a:1b:ea:bf:cb:33:4b:de:07:0c:a7:
         15:21:bf:99:08:69:99:9c:dc:6d:2b:f1:dd:cd:ef:92:d8:eb:
         b8:38:ec:51:35:53:c9:40:ca:f4:0b:bb:f6:f5:cc:7f:02:02:
         54:16:bf:9a:01:f9:67:98:86:70:b4:e5:85:2f:77:af:df:84:
         93:bd:d2:09:02:1d:87:20:d2:1b:a7:c4:42:41:3a:20:be:37:
         9b:73:f1:3e:cc:85:31:4f:13:42:33:a4:6d:ef:79:5d:73:28:
         bd:08:c9:91:ef:f5:cd:2d:16:1e:55:6b:23:0a:fe:27:e5:2d:
         c6:97:70:59:dd:f9:09:5d:2f:7f:80:de:73:5c:e0:f1:aa:3d:
         42:07:72:71:ec:35:d6:3d:b4:90:a7:5d:9c:3f:5e:a6:57:37:
         10:f7:b5:9e:cd:73:a1:c0:b2:1c:3a:da:50:87:8e:fe:56:54:
         db:e2:e1:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 21:45:31 2025 by rpki-client