Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C6B7941B8B869D45335608E8A9F6E95847B80D91A2FD65CA275C831CF4983298/0/323830333a653732303a3a2f33322d3634203d3e20323732383033.roa
File:                     323830333a653732303a3a2f33322d3634203d3e20323732383033.roa (raw, json)
Hash identifier:          V5euu55vA6ThEhaVyQlAsoFYMl+/LSb1u1r9NnoA6yM=
Subject key identifier:   FA:B9:41:F0:F0:55:50:1F:54:20:99:8C:0D:E8:86:85:95:70:FD:85
Certificate issuer:       /CN=F3EBCEE3E497417787B358CE65ADA6D9F5C0116D
Certificate serial:       2837AB95F5118ED1556FCEED788A7173F5C5B0EE
Authority key identifier: F3:EB:CE:E3:E4:97:41:77:87:B3:58:CE:65:AD:A6:D9:F5:C0:11:6D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F3EBCEE3E497417787B358CE65ADA6D9F5C0116D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C6B7941B8B869D45335608E8A9F6E95847B80D91A2FD65CA275C831CF4983298/0/323830333a653732303a3a2f33322d3634203d3e20323732383033.roa
Signing time:             Tue 04 Feb 2025 18:49:51 +0000
ROA not before:           Tue 04 Feb 2025 18:44:51 +0000
ROA not after:            Tue 03 Feb 2026 18:49:51 +0000
asID:                     272803
IP address blocks:        2803:e720::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C6B7941B8B869D45335608E8A9F6E95847B80D91A2FD65CA275C831CF4983298/0/F3EBCEE3E497417787B358CE65ADA6D9F5C0116D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C6B7941B8B869D45335608E8A9F6E95847B80D91A2FD65CA275C831CF4983298/0/F3EBCEE3E497417787B358CE65ADA6D9F5C0116D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F3EBCEE3E497417787B358CE65ADA6D9F5C0116D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 13:57:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:37:ab:95:f5:11:8e:d1:55:6f:ce:ed:78:8a:71:73:f5:c5:b0:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3EBCEE3E497417787B358CE65ADA6D9F5C0116D
        Validity
            Not Before: Feb  4 18:44:51 2025 GMT
            Not After : Feb  3 18:49:51 2026 GMT
        Subject: CN=FAB941F0F055501F5420998C0DE886859570FD85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:ca:65:82:c5:08:7f:be:43:cb:7b:cf:e9:f9:
                    5b:7c:25:c5:92:0e:79:06:14:7f:e3:80:16:97:f3:
                    ad:ba:52:93:5d:94:2e:a5:34:e6:23:0b:6d:b4:1f:
                    2d:d2:8d:ab:e0:f9:82:92:1a:ca:cb:c8:00:e6:e6:
                    e2:a6:a2:f2:62:88:25:6e:59:f0:a9:71:e6:7d:eb:
                    2e:a2:4f:71:43:93:5e:c5:25:26:0e:1f:90:a0:f3:
                    6b:21:07:89:3a:22:e8:50:bf:68:64:92:02:25:e7:
                    c8:1c:b0:8b:00:ab:c4:76:a0:84:10:81:45:df:62:
                    6f:55:c3:fc:26:f6:d1:9c:11:40:6d:59:ee:c9:ee:
                    19:c2:5e:bb:8e:c8:1e:89:3a:41:1e:e0:5d:0c:1d:
                    87:32:a1:6e:7f:34:88:0d:91:96:2c:63:15:0c:58:
                    31:6f:52:85:c2:c0:0e:07:de:be:a7:62:cc:71:ce:
                    2d:84:2a:c1:3d:0b:68:68:6d:3c:80:39:25:d1:9d:
                    45:cd:d7:cc:54:e6:ec:05:e5:e6:c9:02:af:18:2d:
                    2f:5b:37:38:d1:0c:c2:01:fc:cc:81:69:fd:25:47:
                    d0:06:a8:54:43:4d:2b:b5:b4:30:a1:6d:f7:51:0e:
                    10:c2:64:d4:60:44:de:b8:74:b2:2f:70:04:1f:d0:
                    e4:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:B9:41:F0:F0:55:50:1F:54:20:99:8C:0D:E8:86:85:95:70:FD:85
            X509v3 Authority Key Identifier:
                keyid:F3:EB:CE:E3:E4:97:41:77:87:B3:58:CE:65:AD:A6:D9:F5:C0:11:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C6B7941B8B869D45335608E8A9F6E95847B80D91A2FD65CA275C831CF4983298/0/F3EBCEE3E497417787B358CE65ADA6D9F5C0116D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F3EBCEE3E497417787B358CE65ADA6D9F5C0116D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C6B7941B8B869D45335608E8A9F6E95847B80D91A2FD65CA275C831CF4983298/0/323830333a653732303a3a2f33322d3634203d3e20323732383033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e720::/32

    Signature Algorithm: sha256WithRSAEncryption
         35:a5:3b:57:8b:35:38:72:04:24:18:0b:18:70:11:75:b4:36:
         2a:c8:5d:12:a4:07:e6:86:5a:ed:5a:22:bd:aa:38:80:40:f3:
         ce:55:b6:11:b0:45:aa:5f:a7:af:7a:04:bd:38:e4:82:cb:72:
         5e:de:ec:fb:20:ca:5d:6b:e5:cf:62:37:3b:c6:87:1b:51:84:
         fc:3d:65:e4:62:15:00:6e:0b:fc:c5:44:40:05:da:34:d0:dc:
         f6:36:50:84:d5:06:52:54:4b:6d:8e:92:88:e8:9f:6e:26:6e:
         d3:de:f0:71:40:2d:21:a5:d9:6a:bc:c0:24:a8:7e:05:25:47:
         d4:ab:e8:b7:60:f7:e1:8c:67:7c:46:9d:12:57:1f:95:d2:a9:
         30:33:73:be:b2:c2:d0:04:05:68:f8:84:3f:37:c6:f8:df:a6:
         7b:51:e4:c6:78:2a:96:5a:3d:25:8f:59:19:9e:b6:10:58:48:
         2e:d1:1f:09:50:7e:c7:49:ef:08:21:43:14:1c:83:8b:25:61:
         85:68:35:f7:f0:9f:4c:3c:ac:3f:3c:84:5c:82:b8:44:3d:a3:
         9d:27:e0:a9:41:ba:15:a2:d5:4e:39:dc:73:69:d5:11:c7:ce:
         ee:09:46:19:2b:39:b2:76:dd:97:53:b2:46:fd:a1:97:f1:9f:
         53:40:8c:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:31:31 2025 by rpki-client