Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B8995BF863751A5C60951770258DFE4F82DB7390E62C1B7625A5E1F4190120A9/0/323830333a656131303a333a3a2f34382d3438203d3e20323731393237.roa
File:                     323830333a656131303a333a3a2f34382d3438203d3e20323731393237.roa (raw, json)
Hash identifier:          Z+eyp1qOSp4lI7339ioQY7SJ6Z+7qMeULu0oej7PBrs=
Subject key identifier:   41:79:40:C9:DB:AD:99:FF:C3:3C:54:54:C8:2A:5F:1B:6E:98:61:0C
Certificate issuer:       /CN=5AC74DB2E733289AD330B5CC47EFF7E610D2236E
Certificate serial:       690975C6766385B02CAE6F9C478125001DAD578E
Authority key identifier: 5A:C7:4D:B2:E7:33:28:9A:D3:30:B5:CC:47:EF:F7:E6:10:D2:23:6E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5AC74DB2E733289AD330B5CC47EFF7E610D2236E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B8995BF863751A5C60951770258DFE4F82DB7390E62C1B7625A5E1F4190120A9/0/323830333a656131303a333a3a2f34382d3438203d3e20323731393237.roa
Signing time:             Tue 04 Feb 2025 18:46:53 +0000
ROA not before:           Tue 04 Feb 2025 18:41:53 +0000
ROA not after:            Tue 03 Feb 2026 18:46:53 +0000
asID:                     271927
IP address blocks:        2803:ea10:3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B8995BF863751A5C60951770258DFE4F82DB7390E62C1B7625A5E1F4190120A9/0/5AC74DB2E733289AD330B5CC47EFF7E610D2236E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B8995BF863751A5C60951770258DFE4F82DB7390E62C1B7625A5E1F4190120A9/0/5AC74DB2E733289AD330B5CC47EFF7E610D2236E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5AC74DB2E733289AD330B5CC47EFF7E610D2236E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:09:75:c6:76:63:85:b0:2c:ae:6f:9c:47:81:25:00:1d:ad:57:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5AC74DB2E733289AD330B5CC47EFF7E610D2236E
        Validity
            Not Before: Feb  4 18:41:53 2025 GMT
            Not After : Feb  3 18:46:53 2026 GMT
        Subject: CN=417940C9DBAD99FFC33C5454C82A5F1B6E98610C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:2c:53:88:1e:fe:1f:44:81:c8:72:13:5c:5e:
                    bd:e9:c1:8c:68:cc:1b:16:54:1e:06:42:24:42:84:
                    a1:20:fe:d9:50:79:1b:6e:16:37:3d:d7:f8:c4:b6:
                    dc:69:f8:0b:b7:d6:68:17:28:cc:6a:c4:49:d6:20:
                    1c:8c:a1:3c:5b:52:d5:2b:43:1f:47:71:ed:d5:62:
                    87:1f:d2:c3:7f:ab:c4:30:a6:04:c9:71:f9:ee:d4:
                    e9:a8:3a:4e:f2:cc:69:0c:d6:73:0b:d8:49:9c:23:
                    ad:8d:5b:0b:87:76:bd:01:43:58:f8:88:78:0e:50:
                    1b:41:d9:65:0d:e1:ec:8d:ce:96:16:0f:75:ed:e9:
                    57:58:4c:82:fb:f9:ed:5f:52:50:70:f7:a5:34:25:
                    84:56:82:a5:94:f5:c0:34:a6:f9:a9:95:85:0e:36:
                    03:bd:53:04:d9:70:52:78:a8:1a:6d:00:64:6a:1d:
                    ee:d4:99:39:41:d2:97:bc:86:14:2b:ff:c8:b5:3d:
                    a0:a8:33:6d:86:85:96:4b:5f:c9:ac:6f:c1:20:ce:
                    1d:22:96:b8:c8:76:67:45:b8:a4:a7:5f:1b:b6:b1:
                    15:ac:a6:75:bc:35:7c:b6:b3:92:89:4c:d5:51:73:
                    d0:05:be:59:39:27:14:b7:04:2d:b4:4e:43:0e:f2:
                    b2:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:79:40:C9:DB:AD:99:FF:C3:3C:54:54:C8:2A:5F:1B:6E:98:61:0C
            X509v3 Authority Key Identifier:
                keyid:5A:C7:4D:B2:E7:33:28:9A:D3:30:B5:CC:47:EF:F7:E6:10:D2:23:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B8995BF863751A5C60951770258DFE4F82DB7390E62C1B7625A5E1F4190120A9/0/5AC74DB2E733289AD330B5CC47EFF7E610D2236E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5AC74DB2E733289AD330B5CC47EFF7E610D2236E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B8995BF863751A5C60951770258DFE4F82DB7390E62C1B7625A5E1F4190120A9/0/323830333a656131303a333a3a2f34382d3438203d3e20323731393237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ea10:3::/48

    Signature Algorithm: sha256WithRSAEncryption
         1d:48:1d:7b:91:41:54:a8:43:4a:f6:bd:34:b4:d7:8c:6a:7b:
         1f:88:60:68:cd:69:0c:35:ec:70:31:cd:93:e4:5a:8b:33:0a:
         0e:aa:ab:45:10:f2:04:c6:05:cb:06:ac:50:29:eb:9d:71:70:
         2f:2e:8a:40:0f:3a:60:96:4a:42:5c:cd:b0:18:e6:8d:1d:bb:
         98:52:43:72:52:e7:7d:9e:df:fc:64:52:e4:7d:17:6f:5f:03:
         b1:74:6f:52:21:f0:13:e4:ce:70:91:f7:6f:e1:fa:f5:4b:81:
         27:43:37:90:aa:5c:9e:3c:01:ed:3a:aa:86:35:fb:ae:32:7b:
         ed:01:d1:16:39:db:bd:57:fe:a8:c2:64:8b:00:20:1d:54:fb:
         5d:b2:b9:3b:c3:0b:4e:33:54:04:51:0c:e4:85:44:18:25:f1:
         b6:7e:3b:fb:ef:e6:ac:df:83:e9:20:1e:67:2b:3b:d9:b7:0e:
         46:f7:8c:aa:95:ec:3d:35:de:c7:2f:f0:f9:b8:15:93:47:fb:
         f2:45:18:4b:28:03:8c:d1:fc:40:28:ea:90:9c:f3:6e:97:cc:
         69:e1:ea:75:72:37:8f:66:0b:c1:ad:85:f5:4b:6e:45:b9:62:
         4e:8c:f4:48:fb:62:7f:ea:a8:d7:73:f9:af:dc:10:91:b9:3d:
         fd:9c:2f:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:17:43 2025 by rpki-client