Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D48C2AEADDB9F7232E1D4FF0F0A519C088AE52642061608296D4E5AFF56EB0CE/0/323830333a613839303a3a2f33322d3438203d3e20323732383032.roa
File:                     323830333a613839303a3a2f33322d3438203d3e20323732383032.roa (raw, json)
Hash identifier:          nVqxVJk8Y+Pk83ZG+4xUdtlfAvKlM0X8lSq5hv8+0rY=
Subject key identifier:   BA:C1:F2:EB:DD:4B:E6:D6:45:04:80:5F:24:A7:0A:9F:82:E6:BA:1C
Certificate issuer:       /CN=103F8501DCDA55A50240DF6EF39BA28A6B1F7ACB
Certificate serial:       197E3E6FF53129D0284FC8AE434BC24B7E953BB6
Authority key identifier: 10:3F:85:01:DC:DA:55:A5:02:40:DF:6E:F3:9B:A2:8A:6B:1F:7A:CB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/103F8501DCDA55A50240DF6EF39BA28A6B1F7ACB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D48C2AEADDB9F7232E1D4FF0F0A519C088AE52642061608296D4E5AFF56EB0CE/0/323830333a613839303a3a2f33322d3438203d3e20323732383032.roa
Signing time:             Fri 14 Feb 2025 12:15:00 +0000
ROA not before:           Fri 14 Feb 2025 12:10:00 +0000
ROA not after:            Fri 13 Feb 2026 12:15:00 +0000
asID:                     272802
IP address blocks:        2803:a890::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D48C2AEADDB9F7232E1D4FF0F0A519C088AE52642061608296D4E5AFF56EB0CE/0/103F8501DCDA55A50240DF6EF39BA28A6B1F7ACB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D48C2AEADDB9F7232E1D4FF0F0A519C088AE52642061608296D4E5AFF56EB0CE/0/103F8501DCDA55A50240DF6EF39BA28A6B1F7ACB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/103F8501DCDA55A50240DF6EF39BA28A6B1F7ACB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 20:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:7e:3e:6f:f5:31:29:d0:28:4f:c8:ae:43:4b:c2:4b:7e:95:3b:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=103F8501DCDA55A50240DF6EF39BA28A6B1F7ACB
        Validity
            Not Before: Feb 14 12:10:00 2025 GMT
            Not After : Feb 13 12:15:00 2026 GMT
        Subject: CN=BAC1F2EBDD4BE6D64504805F24A70A9F82E6BA1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:f3:7a:d5:ee:29:78:43:8f:23:5a:cf:15:9b:
                    c2:8e:54:5a:d1:ec:61:d0:2a:60:ed:f3:35:17:99:
                    63:a4:19:20:ef:58:16:8e:00:15:66:b0:54:f2:a4:
                    0a:1b:7a:f4:d5:10:17:57:ba:97:a9:a0:72:47:8c:
                    9e:84:a8:f3:42:45:c9:da:4d:15:73:80:77:d3:9e:
                    d9:08:91:11:86:d3:84:ee:f7:f1:de:6d:a8:ac:93:
                    87:9f:04:bc:f1:52:0f:04:84:d1:b2:e7:77:1e:a9:
                    2e:0e:b5:bb:00:bd:c0:0a:b2:8e:06:7c:ad:73:8e:
                    fb:79:60:88:a2:aa:a0:e9:e6:18:2a:20:25:6d:ed:
                    be:f1:76:02:06:71:0a:df:d8:69:35:c5:af:65:30:
                    e5:53:46:7b:f4:d7:f7:f4:e6:32:d6:91:2f:56:56:
                    35:20:56:27:65:1d:1a:4f:f5:ef:f9:a2:2a:31:52:
                    bd:0f:59:f1:e9:fa:af:2f:82:94:a4:7d:fd:ac:bf:
                    ec:85:ba:d3:9c:66:a8:23:5d:3a:ab:8e:2d:1d:a3:
                    56:fd:c5:da:d6:b8:3a:9c:56:fb:76:e1:a0:92:bb:
                    be:0f:88:1a:ec:71:cc:54:48:02:6f:fb:94:41:1f:
                    14:11:c6:8f:f2:b0:a0:e8:8a:2c:11:15:69:01:8a:
                    e6:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:C1:F2:EB:DD:4B:E6:D6:45:04:80:5F:24:A7:0A:9F:82:E6:BA:1C
            X509v3 Authority Key Identifier:
                keyid:10:3F:85:01:DC:DA:55:A5:02:40:DF:6E:F3:9B:A2:8A:6B:1F:7A:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D48C2AEADDB9F7232E1D4FF0F0A519C088AE52642061608296D4E5AFF56EB0CE/0/103F8501DCDA55A50240DF6EF39BA28A6B1F7ACB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/103F8501DCDA55A50240DF6EF39BA28A6B1F7ACB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D48C2AEADDB9F7232E1D4FF0F0A519C088AE52642061608296D4E5AFF56EB0CE/0/323830333a613839303a3a2f33322d3438203d3e20323732383032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:a890::/32

    Signature Algorithm: sha256WithRSAEncryption
         24:a1:2c:f4:01:79:a6:ac:44:11:37:82:fd:b5:fa:58:cb:78:
         4e:e9:d9:fc:85:54:0c:91:3d:d5:7c:86:ef:76:de:05:03:53:
         4a:d4:1a:ef:8f:c7:39:a3:49:9a:d0:0c:d1:da:2b:5b:33:f3:
         86:fd:67:cc:7c:75:e1:75:13:ac:24:3c:66:6c:f5:ea:d4:a6:
         94:6f:07:1d:8d:b5:dc:55:1a:f8:cd:35:00:81:c7:70:60:34:
         1f:cf:9e:21:09:54:8c:1d:a9:3a:41:81:68:72:b5:63:96:56:
         b6:90:95:a6:32:49:60:04:80:b4:2d:8e:3a:72:b7:1d:6e:be:
         6f:21:26:c5:be:c9:2f:ce:d4:c4:8b:d0:53:4a:8e:c1:19:a8:
         da:00:00:c5:26:e5:b8:43:3f:24:fd:3a:e8:89:ba:bb:9a:86:
         53:0b:34:88:eb:d8:54:90:cb:ee:d2:ba:74:7b:7d:92:b7:13:
         ad:1f:7e:35:67:e5:7b:6e:c1:d4:3b:9d:f4:7c:3a:90:dd:78:
         68:ad:c8:3e:71:f7:5a:28:f0:30:69:94:af:b7:42:37:26:09:
         08:b0:6d:20:77:fd:83:80:b9:33:eb:f1:8d:46:90:39:09:af:
         62:27:28:a5:81:47:3c:bd:7e:a5:f0:0e:46:7b:40:fe:2c:8c:
         6e:3a:c3:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 21:07:09 2025 by rpki-client