Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AAA80D3A3F50DCDCB7E38D57F5857012B339C85D0F3EBECEA37E07C499BD4412/0/323830333a633563303a3a2f33322d3438203d3e20323635373131.roa
File:                     323830333a633563303a3a2f33322d3438203d3e20323635373131.roa (raw, json)
Hash identifier:          n60dmZ0DDkd1ARZNwb1Rnhc/EDlCzzm0+XZnh7Jwqfs=
Subject key identifier:   D9:65:56:D2:54:D1:4A:8E:CC:C4:FB:AF:4D:92:DB:7E:74:44:E9:67
Certificate issuer:       /CN=12A120543D4989758BFB0561CAF5C57A23A55B08
Certificate serial:       744FC3981A53A279CE9E8402A92700565E777EB2
Authority key identifier: 12:A1:20:54:3D:49:89:75:8B:FB:05:61:CA:F5:C5:7A:23:A5:5B:08
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/12A120543D4989758BFB0561CAF5C57A23A55B08.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AAA80D3A3F50DCDCB7E38D57F5857012B339C85D0F3EBECEA37E07C499BD4412/0/323830333a633563303a3a2f33322d3438203d3e20323635373131.roa
Signing time:             Tue 04 Feb 2025 18:53:08 +0000
ROA not before:           Tue 04 Feb 2025 18:48:08 +0000
ROA not after:            Tue 03 Feb 2026 18:53:08 +0000
asID:                     265711
IP address blocks:        2803:c5c0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AAA80D3A3F50DCDCB7E38D57F5857012B339C85D0F3EBECEA37E07C499BD4412/0/12A120543D4989758BFB0561CAF5C57A23A55B08.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AAA80D3A3F50DCDCB7E38D57F5857012B339C85D0F3EBECEA37E07C499BD4412/0/12A120543D4989758BFB0561CAF5C57A23A55B08.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/12A120543D4989758BFB0561CAF5C57A23A55B08.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 14:07:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:4f:c3:98:1a:53:a2:79:ce:9e:84:02:a9:27:00:56:5e:77:7e:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12A120543D4989758BFB0561CAF5C57A23A55B08
        Validity
            Not Before: Feb  4 18:48:08 2025 GMT
            Not After : Feb  3 18:53:08 2026 GMT
        Subject: CN=D96556D254D14A8ECCC4FBAF4D92DB7E7444E967
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:05:09:12:a9:98:8f:2d:13:f3:78:f8:5b:53:
                    33:ad:a2:7d:28:70:d4:cc:f0:df:31:e2:2b:a4:16:
                    47:b6:3e:50:a8:c5:9a:47:a5:73:10:2e:08:a6:8c:
                    5f:f1:7d:d6:8f:bf:65:36:0a:86:d8:e3:00:6b:bc:
                    ee:03:e0:3e:1d:10:0d:a3:c0:68:62:97:c6:d7:03:
                    bc:65:e9:19:17:96:d0:75:42:06:72:83:1c:16:90:
                    b5:6d:d8:c6:3a:01:3f:a2:77:58:5e:2e:20:20:ec:
                    ae:fb:e3:dc:34:c5:f1:82:9c:32:de:e3:63:ac:08:
                    cf:25:e2:6d:e6:c9:f7:b1:9b:b9:bc:10:f2:af:16:
                    db:36:27:cd:77:87:86:1a:bb:51:37:89:d3:2d:c5:
                    ca:6c:e7:07:95:59:e1:93:0a:f1:e9:bd:03:ce:e8:
                    df:94:37:71:06:63:d3:bb:0d:d4:3e:21:b2:43:1c:
                    91:b0:19:30:02:49:07:41:21:ed:2d:dc:74:32:f3:
                    86:d0:06:67:d7:56:e7:27:73:dd:26:de:cf:28:81:
                    32:c0:70:90:7a:54:d6:f4:32:73:e7:26:51:b9:87:
                    d8:bd:c3:97:6e:c5:c2:1d:02:58:d9:0f:2b:31:80:
                    61:ca:3a:fa:c6:e4:6b:34:e0:13:94:2e:d8:74:38:
                    fa:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:65:56:D2:54:D1:4A:8E:CC:C4:FB:AF:4D:92:DB:7E:74:44:E9:67
            X509v3 Authority Key Identifier:
                keyid:12:A1:20:54:3D:49:89:75:8B:FB:05:61:CA:F5:C5:7A:23:A5:5B:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AAA80D3A3F50DCDCB7E38D57F5857012B339C85D0F3EBECEA37E07C499BD4412/0/12A120543D4989758BFB0561CAF5C57A23A55B08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/12A120543D4989758BFB0561CAF5C57A23A55B08.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AAA80D3A3F50DCDCB7E38D57F5857012B339C85D0F3EBECEA37E07C499BD4412/0/323830333a633563303a3a2f33322d3438203d3e20323635373131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c5c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         8d:ce:b7:d1:3d:d4:a7:1d:78:39:5a:0e:f6:4c:8f:c1:5b:72:
         91:f3:1f:5d:c7:2a:2e:d9:4b:41:a7:40:c7:d7:62:16:9c:bd:
         fd:64:38:dc:d5:9d:8f:1b:2f:2f:74:7c:5e:0d:05:bf:ee:f7:
         36:a6:37:f7:18:15:b7:78:0f:55:7f:f8:d1:12:c0:ac:52:d7:
         2d:e9:83:c0:fb:b7:28:b3:1c:0c:97:fa:c2:3a:41:02:e7:65:
         11:8a:26:59:4a:f6:bc:9e:cd:5f:2c:51:43:6b:f8:5b:29:c9:
         bc:c6:4e:3f:78:9c:ed:1e:dc:59:f9:96:91:d8:f9:a7:a9:9a:
         db:ef:df:ab:75:ca:cc:77:1e:6c:90:6d:d2:e0:be:87:6d:b0:
         7c:95:63:16:15:8a:1e:f3:92:a3:48:34:46:8c:83:3e:16:03:
         6a:07:9a:39:e8:2a:80:a7:f3:cd:98:aa:30:4b:39:a1:40:4b:
         f6:49:92:6e:c2:83:65:9c:ec:d3:c7:dc:dd:53:0c:83:3b:e7:
         22:fd:fc:86:45:3a:5b:ba:0d:71:0e:54:c7:da:2b:e5:80:89:
         a5:2e:87:02:72:ef:03:9d:ff:09:ab:74:39:87:75:80:2a:c5:
         2e:71:ee:f2:3c:d0:58:ea:ab:26:82:e8:f6:e9:c0:43:f9:82:
         f0:24:34:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:59:53 2025 by rpki-client