Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B65A7CB4D40689A76255E9C07091CB6CDF05F307ADD0B21B11F21E6EFC27DCDA/0/323830333a643864303a3a2f33322d3438203d3e20323733393935.roa
File:                     323830333a643864303a3a2f33322d3438203d3e20323733393935.roa (raw, json)
Hash identifier:          uJ2PqDdc2S5P9lCMgkmkJwe8eO3OhNNFiFEA5kZcN9A=
Subject key identifier:   66:2F:07:1D:85:89:AE:83:B1:97:04:D9:2A:CE:8D:D8:0B:1B:BE:CC
Certificate issuer:       /CN=074AFFA3641D50770C47BF506125425107CF524A
Certificate serial:       3D62EEA83A6862BC467E6531CF741EF6E4F68424
Authority key identifier: 07:4A:FF:A3:64:1D:50:77:0C:47:BF:50:61:25:42:51:07:CF:52:4A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/074AFFA3641D50770C47BF506125425107CF524A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B65A7CB4D40689A76255E9C07091CB6CDF05F307ADD0B21B11F21E6EFC27DCDA/0/323830333a643864303a3a2f33322d3438203d3e20323733393935.roa
Signing time:             Thu 19 Dec 2024 00:00:00 +0000
ROA not before:           Wed 18 Dec 2024 23:55:00 +0000
ROA not after:            Thu 18 Dec 2025 00:00:00 +0000
asID:                     273995
IP address blocks:        2803:d8d0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B65A7CB4D40689A76255E9C07091CB6CDF05F307ADD0B21B11F21E6EFC27DCDA/0/074AFFA3641D50770C47BF506125425107CF524A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B65A7CB4D40689A76255E9C07091CB6CDF05F307ADD0B21B11F21E6EFC27DCDA/0/074AFFA3641D50770C47BF506125425107CF524A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/074AFFA3641D50770C47BF506125425107CF524A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:62:ee:a8:3a:68:62:bc:46:7e:65:31:cf:74:1e:f6:e4:f6:84:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=074AFFA3641D50770C47BF506125425107CF524A
        Validity
            Not Before: Dec 18 23:55:00 2024 GMT
            Not After : Dec 18 00:00:00 2025 GMT
        Subject: CN=662F071D8589AE83B19704D92ACE8DD80B1BBECC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:0d:2c:f0:ae:5b:f9:1b:aa:8b:c3:ad:86:82:
                    ef:7c:ef:f5:63:25:4f:b2:32:8f:fb:9b:7d:f9:2e:
                    0d:f6:e1:a3:ff:40:a3:7c:0a:3a:57:41:44:da:48:
                    c1:d9:3c:7f:77:e9:9a:56:2f:ee:1a:4d:4a:35:86:
                    ce:18:dd:c1:7c:76:e5:0b:e2:b1:e2:fe:87:b5:ec:
                    fb:f2:85:32:a6:f5:66:bf:94:bc:57:2e:60:83:24:
                    7a:96:f9:41:a6:51:06:ec:47:5f:c9:9e:41:50:f2:
                    78:75:c1:86:ff:e1:8e:3e:58:61:89:a0:ed:55:2e:
                    1b:1b:9a:ba:7d:6b:3e:79:e1:ad:a3:da:da:11:dc:
                    eb:24:c9:e3:a7:ce:90:b8:20:2c:04:72:a3:f2:d2:
                    db:4f:3d:ed:c1:cd:d6:4b:17:df:c3:1d:9d:1a:9f:
                    e7:8b:33:e2:a4:7a:9d:b4:35:4d:5e:68:af:f6:86:
                    a7:ed:90:06:7a:90:c5:14:fc:47:92:3e:9c:72:5a:
                    1c:82:f8:2b:94:a4:b6:2a:ef:25:3a:32:4c:76:6b:
                    6b:c1:f2:1a:f3:b0:e5:3c:70:89:f3:60:60:a0:7b:
                    06:ff:af:b6:0c:da:46:48:f9:f7:e7:22:69:95:b0:
                    2a:00:1f:dc:85:93:cd:b3:a9:44:c7:e5:f3:b1:80:
                    36:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:2F:07:1D:85:89:AE:83:B1:97:04:D9:2A:CE:8D:D8:0B:1B:BE:CC
            X509v3 Authority Key Identifier:
                keyid:07:4A:FF:A3:64:1D:50:77:0C:47:BF:50:61:25:42:51:07:CF:52:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B65A7CB4D40689A76255E9C07091CB6CDF05F307ADD0B21B11F21E6EFC27DCDA/0/074AFFA3641D50770C47BF506125425107CF524A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/074AFFA3641D50770C47BF506125425107CF524A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B65A7CB4D40689A76255E9C07091CB6CDF05F307ADD0B21B11F21E6EFC27DCDA/0/323830333a643864303a3a2f33322d3438203d3e20323733393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d8d0::/32

    Signature Algorithm: sha256WithRSAEncryption
         85:43:2e:63:b1:bf:7a:81:dc:b0:86:58:1d:25:cc:c1:93:af:
         cc:c2:23:35:d5:45:2e:95:89:f9:2c:13:34:37:13:7e:c2:4b:
         fb:f5:54:40:03:0f:a0:a9:ee:13:f6:81:17:80:b4:4c:d9:a2:
         b5:16:1b:73:c6:3b:ef:26:68:24:9e:ad:38:5c:41:6e:82:5c:
         f4:a7:18:fa:4e:02:fe:ef:34:cd:23:38:84:98:aa:86:60:db:
         fe:2d:6f:ac:d8:d3:8c:d3:0a:44:e6:d7:15:7d:f6:ab:0f:bd:
         5c:10:2e:a5:2d:b6:1b:c7:80:f0:62:ea:a7:b2:f4:db:bc:c5:
         cf:b1:bf:9f:87:56:c5:6d:a8:f6:65:49:cb:b4:06:83:95:c3:
         f3:09:38:97:8b:b1:15:d8:a5:f2:a9:5a:a1:0d:53:60:8b:c4:
         75:92:a4:19:52:64:9a:cf:9b:ff:dc:a1:31:69:a4:e5:21:2d:
         64:39:e0:31:3c:80:6e:1c:8e:d3:ee:72:ab:d7:8c:1d:8d:b8:
         67:83:60:02:c1:13:af:e5:d9:f2:c6:9d:9f:61:44:a7:ff:51:
         69:bc:55:49:39:59:64:32:9e:fd:88:e5:33:4b:10:2b:48:72:
         33:98:e9:8e:4c:0f:af:24:ac:23:c6:f2:cd:41:fd:13:18:48:
         68:a8:db:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:00:04 2025 by rpki-client