Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B3E50B11115C084D6BA8197C0580CAAFEFDFD546F917BF6C3FCE3125AD581653/0/323830333a346139303a333a3a2f34382d3438203d3e20323732383735.roa
File:                     323830333a346139303a333a3a2f34382d3438203d3e20323732383735.roa (raw, json)
Hash identifier:          ZO+OqqsAiDd15KH9+0nAmhLwUFW8gAcSbrB6auzLIQQ=
Subject key identifier:   56:CE:F0:FE:F9:A8:1D:24:91:D4:FD:DA:7B:86:38:64:02:50:DF:69
Certificate issuer:       /CN=3CCAFF3C26A38C5EE9BF02C49848A13D82DFE81F
Certificate serial:       54A8B7F97B09066E8FB928281E80D72EB127FD43
Authority key identifier: 3C:CA:FF:3C:26:A3:8C:5E:E9:BF:02:C4:98:48:A1:3D:82:DF:E8:1F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3CCAFF3C26A38C5EE9BF02C49848A13D82DFE81F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B3E50B11115C084D6BA8197C0580CAAFEFDFD546F917BF6C3FCE3125AD581653/0/323830333a346139303a333a3a2f34382d3438203d3e20323732383735.roa
Signing time:             Tue 04 Feb 2025 18:43:35 +0000
ROA not before:           Tue 04 Feb 2025 18:38:35 +0000
ROA not after:            Tue 03 Feb 2026 18:43:35 +0000
asID:                     272875
IP address blocks:        2803:4a90:3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B3E50B11115C084D6BA8197C0580CAAFEFDFD546F917BF6C3FCE3125AD581653/0/3CCAFF3C26A38C5EE9BF02C49848A13D82DFE81F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B3E50B11115C084D6BA8197C0580CAAFEFDFD546F917BF6C3FCE3125AD581653/0/3CCAFF3C26A38C5EE9BF02C49848A13D82DFE81F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3CCAFF3C26A38C5EE9BF02C49848A13D82DFE81F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:a8:b7:f9:7b:09:06:6e:8f:b9:28:28:1e:80:d7:2e:b1:27:fd:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3CCAFF3C26A38C5EE9BF02C49848A13D82DFE81F
        Validity
            Not Before: Feb  4 18:38:35 2025 GMT
            Not After : Feb  3 18:43:35 2026 GMT
        Subject: CN=56CEF0FEF9A81D2491D4FDDA7B8638640250DF69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:42:cf:d8:9e:a2:2c:81:8d:9b:09:98:9e:f2:
                    db:9b:e5:79:86:a4:c8:d8:a2:bb:d3:4a:ac:13:07:
                    3a:c5:22:6e:52:a5:8a:15:c5:73:a1:3a:2f:57:e0:
                    69:cb:80:2f:2a:4b:ed:dd:f9:13:f7:54:73:6c:38:
                    11:74:9d:5c:8b:5b:87:45:59:8b:4c:0b:75:22:4f:
                    d3:e7:27:11:d6:34:fb:44:39:4b:f4:0c:67:70:9a:
                    bc:ed:00:aa:32:92:fc:67:97:8b:c3:e0:22:7b:02:
                    89:93:41:fa:bf:3d:74:95:3a:46:0c:71:fe:9d:86:
                    2d:de:76:f1:04:54:1f:85:82:a1:9e:3c:47:7c:e1:
                    9c:a7:1c:4b:72:e8:81:e7:a4:60:aa:7a:dc:04:a1:
                    2e:12:ba:73:02:cb:aa:72:02:12:7c:a5:6f:e5:d8:
                    52:5b:25:1b:14:3a:a3:be:eb:8c:41:89:9f:50:60:
                    f2:a9:81:d9:13:c4:b9:cf:8d:82:54:7b:d6:91:92:
                    e7:2d:19:87:1f:ba:21:40:f8:b9:c1:42:7d:32:9c:
                    84:50:bd:3b:f9:db:d7:fa:96:2f:df:aa:65:b3:6e:
                    cb:97:70:94:b1:76:6b:20:be:32:f4:03:5c:21:01:
                    8f:06:cb:a2:20:64:59:ef:a7:fb:49:91:59:6a:da:
                    14:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:CE:F0:FE:F9:A8:1D:24:91:D4:FD:DA:7B:86:38:64:02:50:DF:69
            X509v3 Authority Key Identifier:
                keyid:3C:CA:FF:3C:26:A3:8C:5E:E9:BF:02:C4:98:48:A1:3D:82:DF:E8:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B3E50B11115C084D6BA8197C0580CAAFEFDFD546F917BF6C3FCE3125AD581653/0/3CCAFF3C26A38C5EE9BF02C49848A13D82DFE81F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3CCAFF3C26A38C5EE9BF02C49848A13D82DFE81F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B3E50B11115C084D6BA8197C0580CAAFEFDFD546F917BF6C3FCE3125AD581653/0/323830333a346139303a333a3a2f34382d3438203d3e20323732383735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4a90:3::/48

    Signature Algorithm: sha256WithRSAEncryption
         77:f1:52:be:42:da:61:6b:3c:f5:41:d5:d3:6f:75:d1:74:51:
         21:2b:36:9d:a9:66:e9:b9:a4:b3:77:f7:bb:4f:2f:7a:44:ba:
         80:b6:16:86:e5:5a:25:df:24:fd:05:74:ff:55:5b:c4:6d:2d:
         58:36:08:85:79:a4:28:a1:8f:01:d0:f0:3e:e6:3a:a7:3b:dc:
         40:50:bb:f0:7d:9a:99:bf:d7:1b:01:b6:a1:1d:3a:e5:fc:99:
         a6:b6:35:d2:c0:c2:d1:cc:eb:09:d6:39:16:a8:97:e5:8d:97:
         fe:5e:2a:59:2f:38:6f:f3:d0:13:3c:0d:46:ad:41:89:be:42:
         c5:dd:82:7b:f4:d9:b7:b8:b1:b5:be:f5:0a:e1:0b:24:75:32:
         f1:b2:09:39:5c:80:c8:85:f0:c4:dd:0c:03:59:7f:2c:f4:21:
         52:d4:5b:b3:e0:ea:fd:89:ac:9f:96:37:3d:ac:b3:cd:34:16:
         6e:3c:5e:67:d2:6a:fd:a6:9f:3e:fa:36:e6:35:fe:38:59:2b:
         98:b9:51:c8:00:87:e4:c9:03:bb:f7:8d:6e:05:f6:1e:d0:c9:
         3f:f9:c2:21:05:e3:24:b3:64:86:cc:8e:a6:6e:90:21:87:03:
         6d:ce:8f:37:90:ba:aa:12:9e:46:6c:f2:f1:b2:af:1f:5e:cc:
         c9:eb:e6:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:10:30 2025 by rpki-client