Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CE792D4F8B8096D2C0849CE5A7D7E31EC61A2C875EEF5FADD6D45F7AF293CC3C/0/323830333a623032303a3a2f33322d3334203d3e20323635383030.roa
File:                     323830333a623032303a3a2f33322d3334203d3e20323635383030.roa (raw, json)
Hash identifier:          KpUw3dHeQofB+sySuc7Q5zA+eidfcl2xMHDgzYSRlEk=
Subject key identifier:   5F:6F:39:80:0F:1C:17:1E:78:B4:84:D6:1D:8B:D2:A4:69:CA:0F:75
Certificate issuer:       /CN=3ED6D01E2B3E06CE509C188241CB1406AE1CF081
Certificate serial:       0D77CF48EE6E28ED9EF3D123CAF570ECE07585B2
Authority key identifier: 3E:D6:D0:1E:2B:3E:06:CE:50:9C:18:82:41:CB:14:06:AE:1C:F0:81
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3ED6D01E2B3E06CE509C188241CB1406AE1CF081.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CE792D4F8B8096D2C0849CE5A7D7E31EC61A2C875EEF5FADD6D45F7AF293CC3C/0/323830333a623032303a3a2f33322d3334203d3e20323635383030.roa
Signing time:             Tue 04 Feb 2025 18:35:48 +0000
ROA not before:           Tue 04 Feb 2025 18:30:48 +0000
ROA not after:            Tue 03 Feb 2026 18:35:48 +0000
asID:                     265800
IP address blocks:        2803:b020::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CE792D4F8B8096D2C0849CE5A7D7E31EC61A2C875EEF5FADD6D45F7AF293CC3C/0/3ED6D01E2B3E06CE509C188241CB1406AE1CF081.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CE792D4F8B8096D2C0849CE5A7D7E31EC61A2C875EEF5FADD6D45F7AF293CC3C/0/3ED6D01E2B3E06CE509C188241CB1406AE1CF081.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3ED6D01E2B3E06CE509C188241CB1406AE1CF081.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 21 Feb 2025 03:13:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:77:cf:48:ee:6e:28:ed:9e:f3:d1:23:ca:f5:70:ec:e0:75:85:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ED6D01E2B3E06CE509C188241CB1406AE1CF081
        Validity
            Not Before: Feb  4 18:30:48 2025 GMT
            Not After : Feb  3 18:35:48 2026 GMT
        Subject: CN=5F6F39800F1C171E78B484D61D8BD2A469CA0F75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:57:d0:d9:83:91:61:2c:89:64:20:91:40:2e:
                    63:ca:3e:6f:aa:58:80:ce:15:de:d7:5b:53:ce:dc:
                    bf:69:07:3b:23:63:e4:3f:ff:9a:f8:46:e3:eb:5d:
                    4d:bf:d4:a8:35:21:df:a3:b1:59:4f:50:27:57:2a:
                    8e:84:07:ea:3b:fa:8b:58:c1:73:d8:19:82:dd:6e:
                    a7:e7:7d:90:81:3c:50:be:16:ca:ad:8d:75:81:6d:
                    95:14:3b:2c:9e:4b:12:b1:79:19:82:4f:9c:06:cf:
                    e6:a3:5a:2f:e9:c4:f1:c4:a4:6e:46:11:41:d6:8e:
                    47:14:21:f2:fe:e4:60:ea:9d:eb:9b:e7:08:42:2c:
                    f6:fb:12:58:eb:50:52:8e:17:68:6f:44:91:a9:76:
                    80:e3:42:d9:1e:c0:c0:4f:46:10:52:3b:b9:a9:65:
                    71:36:6e:b3:ed:5a:79:f6:2b:70:a1:d8:d6:2c:cd:
                    2f:be:36:9f:50:a3:90:bf:38:4a:18:e5:b0:98:3f:
                    4d:51:ae:eb:72:40:d8:5f:a1:8e:ae:af:9a:bd:be:
                    ad:cf:8d:40:42:0c:36:a3:04:ec:82:5d:3b:bd:a4:
                    a2:1d:bf:af:94:21:64:6b:05:72:b8:ce:54:d0:15:
                    53:2c:d2:7b:0f:8c:9d:b1:a7:c0:24:24:f6:bc:09:
                    fc:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:6F:39:80:0F:1C:17:1E:78:B4:84:D6:1D:8B:D2:A4:69:CA:0F:75
            X509v3 Authority Key Identifier:
                keyid:3E:D6:D0:1E:2B:3E:06:CE:50:9C:18:82:41:CB:14:06:AE:1C:F0:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CE792D4F8B8096D2C0849CE5A7D7E31EC61A2C875EEF5FADD6D45F7AF293CC3C/0/3ED6D01E2B3E06CE509C188241CB1406AE1CF081.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3ED6D01E2B3E06CE509C188241CB1406AE1CF081.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CE792D4F8B8096D2C0849CE5A7D7E31EC61A2C875EEF5FADD6D45F7AF293CC3C/0/323830333a623032303a3a2f33322d3334203d3e20323635383030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b020::/32

    Signature Algorithm: sha256WithRSAEncryption
         48:f8:fa:21:07:ac:5c:1e:72:4e:25:bc:30:5a:f2:8e:eb:1e:
         42:56:d5:58:0f:af:96:55:15:48:46:10:6c:c3:69:6c:7a:d1:
         ba:78:f7:71:8c:fd:d0:62:af:e0:45:c1:22:f5:96:b6:a6:70:
         b3:2e:cf:9a:01:b9:5d:02:b9:c4:d0:6e:d8:89:3e:17:1d:c6:
         91:aa:9d:3d:75:1c:b0:49:24:30:5f:72:c2:7f:f4:99:a8:23:
         c8:24:92:2f:72:f1:41:7b:02:02:9e:58:83:2d:6a:3c:d9:8d:
         4b:ea:db:f5:e7:14:70:c8:69:ef:98:1a:f4:b2:5f:67:e2:42:
         f3:c9:7b:93:42:31:09:a1:f0:29:b9:67:9b:c6:48:ca:36:63:
         c0:23:5d:c4:ff:12:b1:5f:d5:24:d2:e6:8e:88:f0:37:97:38:
         5a:07:83:f6:5e:83:10:dc:c3:d2:ba:0e:d1:ce:97:80:eb:49:
         61:e8:e9:13:2e:f9:16:35:83:9a:73:cb:c3:39:d2:aa:01:1f:
         a7:55:ae:56:4c:85:ad:f6:a7:6c:a8:31:e7:dc:63:42:c7:35:
         f7:90:58:48:62:81:df:59:42:7a:73:fe:3e:a0:e8:ed:b4:d2:
         51:a4:ed:d8:9c:01:86:2b:07:2e:da:ce:27:8d:41:d2:a2:9a:
         55:b6:52:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:20:03 2025 by rpki-client