Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C3B3C59E236C329AC389A06069BAAA611D89A6B9773ADB9FCB58348A73F9F8B3/0/323830333a336361303a3a2f34382d3438203d3e20323636383435.roa
File:                     323830333a336361303a3a2f34382d3438203d3e20323636383435.roa (raw, json)
Hash identifier:          NU/QER/kIO96DAi4rG++0QxrC8vl3EAVrFjxiyGagH8=
Subject key identifier:   DE:8D:F1:4D:0D:D2:2B:F4:1D:D6:7B:21:AA:93:2B:AF:7E:7E:E7:11
Certificate issuer:       /CN=9C47A2CE71365140A7ACBE7252BB0916C054BE16
Certificate serial:       07FCBD3D867917E0D76D6D6356EEA88DC893FA01
Authority key identifier: 9C:47:A2:CE:71:36:51:40:A7:AC:BE:72:52:BB:09:16:C0:54:BE:16
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9C47A2CE71365140A7ACBE7252BB0916C054BE16.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C3B3C59E236C329AC389A06069BAAA611D89A6B9773ADB9FCB58348A73F9F8B3/0/323830333a336361303a3a2f34382d3438203d3e20323636383435.roa
Signing time:             Tue 04 Feb 2025 18:18:26 +0000
ROA not before:           Tue 04 Feb 2025 18:13:26 +0000
ROA not after:            Tue 03 Feb 2026 18:18:26 +0000
asID:                     266845
IP address blocks:        2803:3ca0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C3B3C59E236C329AC389A06069BAAA611D89A6B9773ADB9FCB58348A73F9F8B3/0/9C47A2CE71365140A7ACBE7252BB0916C054BE16.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C3B3C59E236C329AC389A06069BAAA611D89A6B9773ADB9FCB58348A73F9F8B3/0/9C47A2CE71365140A7ACBE7252BB0916C054BE16.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9C47A2CE71365140A7ACBE7252BB0916C054BE16.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:fc:bd:3d:86:79:17:e0:d7:6d:6d:63:56:ee:a8:8d:c8:93:fa:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C47A2CE71365140A7ACBE7252BB0916C054BE16
        Validity
            Not Before: Feb  4 18:13:26 2025 GMT
            Not After : Feb  3 18:18:26 2026 GMT
        Subject: CN=DE8DF14D0DD22BF41DD67B21AA932BAF7E7EE711
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:80:0d:64:dc:5f:60:98:cf:c9:84:ca:5d:21:
                    7d:3b:c8:a1:9a:c6:d0:c0:6c:d9:da:f9:ea:2a:0a:
                    57:31:9d:ad:c5:b1:27:f8:f1:23:78:67:80:0d:01:
                    18:f2:de:a7:76:d4:fe:72:be:b9:4e:27:8d:5a:ac:
                    22:1a:5a:ed:4a:96:b3:89:5f:6d:33:f7:8f:5e:8b:
                    11:9e:37:3a:64:b4:bc:fc:8e:f0:5a:48:4f:8a:6a:
                    1a:fa:69:ae:8c:28:97:f3:6b:e8:79:c1:e6:ca:d0:
                    27:c2:c0:49:df:95:80:4b:e6:d7:0e:be:cd:e2:bd:
                    2c:a1:f1:ea:1b:db:17:86:58:b0:50:7d:82:dc:f2:
                    cd:b3:f0:81:3f:a2:9b:74:a3:f9:dc:6d:30:b7:36:
                    32:ba:ad:c3:05:47:16:34:49:46:ec:80:c4:10:c5:
                    9b:6a:7f:d8:f6:ad:c7:18:d9:52:89:a8:b2:a1:8f:
                    73:2b:da:04:6b:93:21:c2:13:97:e2:19:2d:18:4a:
                    a2:24:e0:14:86:52:4f:d5:97:7a:35:a0:7f:bb:ac:
                    46:34:d5:54:72:66:c1:86:fe:06:af:51:6e:07:3e:
                    d2:9a:29:46:63:42:f7:21:1c:01:05:b6:1d:36:d1:
                    9a:78:81:9a:61:4c:90:41:85:19:a1:c0:b0:15:fb:
                    33:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:8D:F1:4D:0D:D2:2B:F4:1D:D6:7B:21:AA:93:2B:AF:7E:7E:E7:11
            X509v3 Authority Key Identifier:
                keyid:9C:47:A2:CE:71:36:51:40:A7:AC:BE:72:52:BB:09:16:C0:54:BE:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C3B3C59E236C329AC389A06069BAAA611D89A6B9773ADB9FCB58348A73F9F8B3/0/9C47A2CE71365140A7ACBE7252BB0916C054BE16.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9C47A2CE71365140A7ACBE7252BB0916C054BE16.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C3B3C59E236C329AC389A06069BAAA611D89A6B9773ADB9FCB58348A73F9F8B3/0/323830333a336361303a3a2f34382d3438203d3e20323636383435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3ca0::/48

    Signature Algorithm: sha256WithRSAEncryption
         4a:ae:ac:7f:45:f6:25:0a:a0:07:25:ec:b4:09:66:70:3a:c5:
         2a:fa:a9:e5:c0:6a:3c:fc:b3:c7:7d:84:ca:6e:aa:56:ab:b5:
         7d:cc:42:b7:7b:0f:6e:e0:a3:a6:5d:85:60:c1:f8:1f:86:37:
         fa:d3:3b:69:58:60:1a:a1:2a:53:d8:74:16:ea:70:79:f4:6a:
         2d:96:77:ba:cb:b0:53:dc:84:c6:29:3f:39:db:66:13:59:76:
         f8:bf:2b:aa:95:4c:03:4d:ed:e5:9d:9b:ec:fc:53:5b:44:a4:
         94:ac:7a:69:97:e4:8a:20:88:bc:70:15:8d:c5:15:fa:3a:f6:
         5a:1e:aa:b1:46:63:cb:af:1d:5f:44:95:2e:7b:b7:03:f6:e4:
         6e:fd:7e:2f:5d:4a:2c:1a:a9:fc:77:3c:d7:53:ff:6c:c5:db:
         f0:65:d1:1d:70:6f:4d:32:54:c7:1f:ad:68:31:7e:54:d7:8e:
         e9:25:53:24:f4:49:51:8e:d6:f2:d3:68:70:20:cd:9e:b5:fd:
         47:83:50:48:0b:71:23:e1:5a:1d:80:9e:ee:22:fc:c2:92:21:
         3f:e7:a2:5c:fa:91:ad:6b:e2:2b:f9:52:20:e6:e1:34:e9:28:
         63:34:55:1e:1f:2f:7b:a9:7d:57:c0:75:be:a3:43:c2:9b:b1:
         9d:58:33:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:54:05 2025 by rpki-client