Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B3E50B11115C084D6BA8197C0580CAAFEFDFD546F917BF6C3FCE3125AD581653/0/323830333a346139303a353a3a2f34382d3438203d3e20323732383735.roa
File:                     323830333a346139303a353a3a2f34382d3438203d3e20323732383735.roa (raw, json)
Hash identifier:          Nxdevl7t5semVZgvEX/Q7n5o8MasWbKeuPUdDziQyAs=
Subject key identifier:   9A:1F:60:E4:EE:A8:85:29:51:AE:B3:00:99:BD:6D:99:03:DB:CC:7E
Certificate issuer:       /CN=3CCAFF3C26A38C5EE9BF02C49848A13D82DFE81F
Certificate serial:       39610B4D814712CFC74F4AB7B6A9E441DD9BE8F7
Authority key identifier: 3C:CA:FF:3C:26:A3:8C:5E:E9:BF:02:C4:98:48:A1:3D:82:DF:E8:1F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3CCAFF3C26A38C5EE9BF02C49848A13D82DFE81F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B3E50B11115C084D6BA8197C0580CAAFEFDFD546F917BF6C3FCE3125AD581653/0/323830333a346139303a353a3a2f34382d3438203d3e20323732383735.roa
Signing time:             Tue 04 Feb 2025 18:43:34 +0000
ROA not before:           Tue 04 Feb 2025 18:38:34 +0000
ROA not after:            Tue 03 Feb 2026 18:43:34 +0000
asID:                     272875
IP address blocks:        2803:4a90:5::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B3E50B11115C084D6BA8197C0580CAAFEFDFD546F917BF6C3FCE3125AD581653/0/3CCAFF3C26A38C5EE9BF02C49848A13D82DFE81F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B3E50B11115C084D6BA8197C0580CAAFEFDFD546F917BF6C3FCE3125AD581653/0/3CCAFF3C26A38C5EE9BF02C49848A13D82DFE81F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3CCAFF3C26A38C5EE9BF02C49848A13D82DFE81F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:61:0b:4d:81:47:12:cf:c7:4f:4a:b7:b6:a9:e4:41:dd:9b:e8:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3CCAFF3C26A38C5EE9BF02C49848A13D82DFE81F
        Validity
            Not Before: Feb  4 18:38:34 2025 GMT
            Not After : Feb  3 18:43:34 2026 GMT
        Subject: CN=9A1F60E4EEA8852951AEB30099BD6D9903DBCC7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:5f:79:7e:aa:3c:14:7e:b3:8e:7d:9a:48:fe:
                    db:49:d7:30:55:87:1d:44:c2:19:05:01:dc:dc:ab:
                    61:c8:02:4d:01:76:6a:48:79:f9:81:28:ba:f5:b7:
                    b7:12:e6:f8:3b:80:c6:6f:ec:68:32:90:51:ec:d9:
                    69:3b:a7:f7:15:c2:4f:ec:04:a6:06:23:83:8b:c2:
                    80:29:5f:90:c4:e1:8f:bc:27:a2:6e:9f:9c:a6:bb:
                    11:85:93:96:ab:d2:d0:62:f2:b6:dc:65:ea:01:66:
                    d2:b6:90:56:be:a1:4d:f8:db:c3:1a:1d:56:71:d9:
                    db:bd:4f:7d:31:35:d1:14:a2:03:97:17:fc:61:70:
                    7f:f5:ee:66:82:bf:81:02:ef:0e:51:18:ba:1b:f6:
                    0f:f2:57:64:2d:1b:58:e9:14:ac:d8:1f:77:5f:6a:
                    c7:b0:c8:ee:d4:42:22:ac:41:44:20:33:65:3c:c3:
                    d3:73:58:87:63:f3:77:d4:77:82:36:8c:a5:6a:96:
                    12:bc:bc:fc:d2:ad:61:11:0b:76:43:d1:57:dd:ad:
                    cc:40:f5:e7:06:9e:8c:54:b3:fd:5f:d5:17:0b:dc:
                    e3:f0:7c:6e:ab:e2:02:40:e8:5a:fa:ea:41:87:1a:
                    2d:7a:a4:85:fc:ea:7c:5d:c2:74:7a:c1:3f:39:60:
                    4f:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:1F:60:E4:EE:A8:85:29:51:AE:B3:00:99:BD:6D:99:03:DB:CC:7E
            X509v3 Authority Key Identifier:
                keyid:3C:CA:FF:3C:26:A3:8C:5E:E9:BF:02:C4:98:48:A1:3D:82:DF:E8:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B3E50B11115C084D6BA8197C0580CAAFEFDFD546F917BF6C3FCE3125AD581653/0/3CCAFF3C26A38C5EE9BF02C49848A13D82DFE81F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3CCAFF3C26A38C5EE9BF02C49848A13D82DFE81F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B3E50B11115C084D6BA8197C0580CAAFEFDFD546F917BF6C3FCE3125AD581653/0/323830333a346139303a353a3a2f34382d3438203d3e20323732383735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4a90:5::/48

    Signature Algorithm: sha256WithRSAEncryption
         34:b4:fd:86:de:02:bf:9c:9f:79:16:26:ec:f5:67:81:dd:88:
         94:0c:05:39:11:25:26:1e:ab:fe:f3:f7:9e:00:9c:ff:c9:79:
         79:e7:3e:ea:e5:ca:5b:5a:4f:b5:f0:6e:f7:01:20:19:7f:d9:
         00:5c:fd:91:1e:cd:59:c2:f0:d7:7a:4d:9f:35:15:a0:5b:15:
         ce:23:cf:8e:60:6f:47:b6:f7:b9:22:da:e8:b1:f2:61:5b:c3:
         22:c1:ce:61:c3:9c:25:9d:99:16:59:06:44:27:1a:76:a0:b5:
         ad:a0:47:f1:35:ba:cf:c7:c3:1e:5e:de:26:5d:c1:f3:e2:c0:
         05:58:05:0b:90:f2:e6:7a:00:21:7d:54:e7:cc:98:2d:ba:6f:
         d1:eb:4d:de:17:42:f4:9e:b8:d9:a6:ff:7b:8f:5a:26:cf:f1:
         c2:e2:17:9f:4b:0c:fd:dd:78:c2:29:87:76:25:f4:8b:28:75:
         4a:ae:58:ab:db:5b:0c:db:bf:28:c5:97:3c:cf:4b:10:2f:1d:
         9f:29:a3:cf:0a:9d:90:d7:8d:08:fe:5e:57:39:58:34:44:6e:
         93:59:f0:cc:a7:c7:cd:b3:99:86:ca:31:e9:e6:01:eb:6b:5b:
         06:c4:19:8e:9f:17:79:fb:ae:c6:76:3d:c7:98:3d:15:8c:97:
         6b:33:49:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:10:15 2025 by rpki-client