Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C1857FDC335544C25D01819DE32D3341D5856A570FAA32C7AB308CC9186FC65F/0/323830333a646161303a3a2f33322d3332203d3e20323636383735.roa
File:                     323830333a646161303a3a2f33322d3332203d3e20323636383735.roa (raw, json)
Hash identifier:          a/wG0AfxgA9IbdPjoc79vqH7/uEhlmm+rysNENvXORc=
Subject key identifier:   F0:AE:DF:D4:9B:9B:19:4C:64:93:93:3B:57:A3:BE:63:23:A4:B9:5C
Certificate issuer:       /CN=51464CFCFA715ED195EF7F2B99539BB0E4CEEE36
Certificate serial:       36F833AB7712402850253524B780B9F6BE1CB490
Authority key identifier: 51:46:4C:FC:FA:71:5E:D1:95:EF:7F:2B:99:53:9B:B0:E4:CE:EE:36
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/51464CFCFA715ED195EF7F2B99539BB0E4CEEE36.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C1857FDC335544C25D01819DE32D3341D5856A570FAA32C7AB308CC9186FC65F/0/323830333a646161303a3a2f33322d3332203d3e20323636383735.roa
Signing time:             Tue 04 Feb 2025 19:58:57 +0000
ROA not before:           Tue 04 Feb 2025 19:53:57 +0000
ROA not after:            Tue 03 Feb 2026 19:58:57 +0000
asID:                     266875
IP address blocks:        2803:daa0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C1857FDC335544C25D01819DE32D3341D5856A570FAA32C7AB308CC9186FC65F/0/51464CFCFA715ED195EF7F2B99539BB0E4CEEE36.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C1857FDC335544C25D01819DE32D3341D5856A570FAA32C7AB308CC9186FC65F/0/51464CFCFA715ED195EF7F2B99539BB0E4CEEE36.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/51464CFCFA715ED195EF7F2B99539BB0E4CEEE36.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 20:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:f8:33:ab:77:12:40:28:50:25:35:24:b7:80:b9:f6:be:1c:b4:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51464CFCFA715ED195EF7F2B99539BB0E4CEEE36
        Validity
            Not Before: Feb  4 19:53:57 2025 GMT
            Not After : Feb  3 19:58:57 2026 GMT
        Subject: CN=F0AEDFD49B9B194C6493933B57A3BE6323A4B95C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:e8:86:e8:37:40:51:db:05:52:2e:4b:df:15:
                    e9:a9:13:8f:22:ff:31:8e:12:87:0d:de:db:a8:d7:
                    b1:b8:f8:60:ca:61:8b:4d:0e:ee:5f:37:9c:c9:32:
                    a8:c5:86:1a:13:0d:af:aa:24:b0:94:aa:80:48:4c:
                    58:6d:b6:94:1f:69:1f:88:c2:49:ce:2a:0d:4d:69:
                    13:6d:88:4e:bb:97:87:a8:0c:38:00:e5:01:4d:eb:
                    7b:f9:b7:96:7e:b4:38:8e:d3:cf:ff:40:4f:27:33:
                    7a:60:0e:1f:f8:4e:6d:7e:42:fb:ae:2b:1b:ab:4b:
                    ef:5f:ea:61:51:35:47:22:9f:6f:11:33:ff:32:27:
                    36:71:4a:47:14:80:35:3b:15:20:71:8a:b4:fe:57:
                    8f:5b:1c:fc:37:b6:ab:5d:9e:f5:ed:d7:33:f4:f0:
                    af:e9:0b:6f:d6:64:e7:72:d4:0a:75:a7:4c:f6:35:
                    ed:c5:e4:bd:2c:ea:55:f3:17:ba:c7:33:29:1f:dc:
                    67:2c:29:69:95:28:e8:94:37:53:86:d2:4d:96:78:
                    ee:21:89:7f:48:33:2c:c1:fa:2d:19:91:19:72:93:
                    15:5c:82:d4:61:3f:6e:b9:43:b9:12:6d:b9:bf:94:
                    f4:ca:e2:93:2e:bb:2b:24:3c:dd:58:09:3f:28:e7:
                    07:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:AE:DF:D4:9B:9B:19:4C:64:93:93:3B:57:A3:BE:63:23:A4:B9:5C
            X509v3 Authority Key Identifier:
                keyid:51:46:4C:FC:FA:71:5E:D1:95:EF:7F:2B:99:53:9B:B0:E4:CE:EE:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C1857FDC335544C25D01819DE32D3341D5856A570FAA32C7AB308CC9186FC65F/0/51464CFCFA715ED195EF7F2B99539BB0E4CEEE36.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/51464CFCFA715ED195EF7F2B99539BB0E4CEEE36.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C1857FDC335544C25D01819DE32D3341D5856A570FAA32C7AB308CC9186FC65F/0/323830333a646161303a3a2f33322d3332203d3e20323636383735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:daa0::/32

    Signature Algorithm: sha256WithRSAEncryption
         09:5c:39:01:30:10:a0:80:f1:75:f1:9e:70:90:a6:26:b9:03:
         ad:7c:17:ed:c9:71:83:94:35:1b:07:d1:be:63:c0:e4:e4:6c:
         c2:eb:1c:a4:3d:53:f4:76:b9:ab:f8:4e:de:4d:00:d7:6e:26:
         91:2f:dc:73:3f:2d:8b:c0:2a:3a:b0:f3:59:ae:37:4f:f6:d6:
         1e:96:d7:04:a5:12:1f:57:f9:81:97:5d:39:3c:bc:18:15:9d:
         dc:30:08:04:42:8f:74:f1:b3:af:f8:11:36:1f:bc:bd:95:d7:
         aa:42:46:df:01:64:0f:ce:4d:ad:60:73:20:6b:71:73:5b:01:
         d6:a3:6f:87:22:05:64:19:8c:6f:27:63:d2:c5:68:ed:e5:3d:
         6b:40:d0:d5:74:4a:29:25:72:01:cc:b7:e9:29:79:81:ac:50:
         8b:c2:30:1b:e5:93:ab:6d:84:11:73:30:38:d9:83:38:51:0c:
         c6:37:16:e6:89:2d:43:51:5c:51:36:49:53:ab:30:b6:96:6d:
         7f:46:30:92:cb:fd:55:08:e0:c2:f6:f4:1a:b8:b3:77:e2:26:
         d0:26:8a:a4:5f:2d:69:9e:72:36:40:74:c9:ca:ea:2b:3f:0e:
         a1:92:5c:5a:9f:47:df:60:63:e2:69:04:8f:91:0c:9d:36:e1:
         04:15:bb:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 21:20:20 2025 by rpki-client