Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B2AD650D650357E8F73DE0796EE41A0EF32BB6457E6CFC1340EE5F0C46BAE363/0/323830333a353035303a3a2f33322d3438203d3e20323733303939.roa
File:                     323830333a353035303a3a2f33322d3438203d3e20323733303939.roa (raw, json)
Hash identifier:          9CwP5MybpgAh9uJJbGlI4MNkfXQGL4ZzD5np9oPFaCM=
Subject key identifier:   2C:F4:DD:44:38:F4:2B:B1:9D:85:55:40:E6:46:7B:A5:67:7F:60:FE
Certificate issuer:       /CN=16C7C8578107D6479F39A5ED67AD600E679CB254
Certificate serial:       2C1C0A0FB94BC1CE9F3B46B1E983A1FD1AA213F2
Authority key identifier: 16:C7:C8:57:81:07:D6:47:9F:39:A5:ED:67:AD:60:0E:67:9C:B2:54
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/16C7C8578107D6479F39A5ED67AD600E679CB254.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B2AD650D650357E8F73DE0796EE41A0EF32BB6457E6CFC1340EE5F0C46BAE363/0/323830333a353035303a3a2f33322d3438203d3e20323733303939.roa
Signing time:             Tue 04 Feb 2025 18:12:03 +0000
ROA not before:           Tue 04 Feb 2025 18:07:03 +0000
ROA not after:            Tue 03 Feb 2026 18:12:03 +0000
asID:                     273099
IP address blocks:        2803:5050::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B2AD650D650357E8F73DE0796EE41A0EF32BB6457E6CFC1340EE5F0C46BAE363/0/16C7C8578107D6479F39A5ED67AD600E679CB254.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B2AD650D650357E8F73DE0796EE41A0EF32BB6457E6CFC1340EE5F0C46BAE363/0/16C7C8578107D6479F39A5ED67AD600E679CB254.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/16C7C8578107D6479F39A5ED67AD600E679CB254.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 18:51:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:1c:0a:0f:b9:4b:c1:ce:9f:3b:46:b1:e9:83:a1:fd:1a:a2:13:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16C7C8578107D6479F39A5ED67AD600E679CB254
        Validity
            Not Before: Feb  4 18:07:03 2025 GMT
            Not After : Feb  3 18:12:03 2026 GMT
        Subject: CN=2CF4DD4438F42BB19D855540E6467BA5677F60FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:a0:e4:9e:3e:7a:d5:b3:38:bd:46:4f:b1:17:
                    a8:1e:eb:4c:0f:a9:28:5c:ba:fe:a7:be:e7:dc:58:
                    c5:7e:c7:dd:9c:db:53:bc:bf:f6:07:1b:9f:3b:03:
                    5d:1e:9d:ef:e3:42:74:1c:c1:28:9f:06:e1:36:b7:
                    90:7c:c2:91:03:66:b4:0e:d7:ac:b3:16:3e:e2:ff:
                    15:b9:67:4c:d5:d0:ba:6c:1b:3a:b7:7e:49:15:90:
                    1d:b8:73:78:24:08:cb:16:ed:12:28:74:32:2d:0c:
                    93:03:3f:7e:e0:c4:54:f0:b6:d8:1a:7a:ec:95:50:
                    1b:cc:87:2b:3a:26:40:14:ea:20:ae:9b:da:ba:f6:
                    ba:ec:91:06:20:ef:70:03:17:5e:15:36:f7:9d:1e:
                    8b:0b:07:51:45:b5:e6:78:02:17:eb:c8:55:20:c6:
                    d6:77:a8:e7:ca:83:8c:df:8d:34:4c:62:3f:27:bd:
                    49:9a:77:d4:83:50:05:41:e1:53:be:77:3a:a1:e2:
                    c7:85:6d:e9:a8:4e:69:06:29:7f:30:6f:34:be:75:
                    80:ad:53:e0:02:26:0b:52:02:99:f9:27:dd:de:69:
                    01:51:34:ab:f0:02:60:ab:5d:e5:b3:58:c5:d8:67:
                    8f:66:1d:f5:ca:97:07:f1:b5:9e:0d:6c:d8:8a:7d:
                    47:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:F4:DD:44:38:F4:2B:B1:9D:85:55:40:E6:46:7B:A5:67:7F:60:FE
            X509v3 Authority Key Identifier:
                keyid:16:C7:C8:57:81:07:D6:47:9F:39:A5:ED:67:AD:60:0E:67:9C:B2:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B2AD650D650357E8F73DE0796EE41A0EF32BB6457E6CFC1340EE5F0C46BAE363/0/16C7C8578107D6479F39A5ED67AD600E679CB254.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/16C7C8578107D6479F39A5ED67AD600E679CB254.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B2AD650D650357E8F73DE0796EE41A0EF32BB6457E6CFC1340EE5F0C46BAE363/0/323830333a353035303a3a2f33322d3438203d3e20323733303939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5050::/32

    Signature Algorithm: sha256WithRSAEncryption
         0b:f5:0b:54:e4:b1:d4:b7:63:de:73:db:64:3d:e1:5a:1d:e9:
         9e:ed:43:f8:d3:ab:46:49:6b:7b:c2:f1:a2:7c:d3:66:97:12:
         18:39:ff:84:9c:59:b6:2e:08:76:17:bb:4a:f8:c2:2c:4d:af:
         6b:05:35:1b:32:bc:dc:44:b9:cb:7e:2f:c7:17:36:70:75:63:
         52:47:04:e9:41:12:75:3e:dd:46:b5:e3:4e:1f:7f:32:ae:2f:
         1e:a4:38:23:cd:5b:40:94:a6:de:c3:f6:f0:f5:80:fb:b0:42:
         07:ce:12:04:4e:02:9a:ac:af:9e:b1:a9:b0:56:05:2c:bd:2b:
         4d:6a:61:c5:82:ae:ca:b1:1b:76:e5:66:f0:9b:20:0d:8f:ee:
         f2:2a:e7:97:ef:9e:a9:c0:ae:2d:eb:a5:7a:24:bf:15:b7:07:
         b2:ca:9d:89:7d:fc:46:9c:97:c9:8c:1e:0d:ba:4c:72:03:6c:
         47:6e:26:db:33:15:e9:b8:0a:64:07:ea:d3:c8:b7:a5:12:0e:
         5a:9c:35:dc:c2:15:77:6d:9a:3f:26:88:68:b9:bc:b0:ff:0d:
         64:94:77:5a:dd:98:cb:b8:06:82:e9:e2:ea:c7:79:93:dc:f5:
         92:39:9a:f5:3f:85:41:15:48:2f:a7:22:30:27:10:35:77:6c:
         7e:75:f7:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 21:36:06 2025 by rpki-client