Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D4A8C730B7E8A859E880BA4C198841CD8840D93915108B868FC5BFA7E6E3065D/0/323830333a313732303a3a2f33322d3332203d3e20323636383135.roa
File:                     323830333a313732303a3a2f33322d3332203d3e20323636383135.roa (raw, json)
Hash identifier:          lNhl+MvontsIb6gEGipzkf+RFbHy2EXyfn95OBlKghw=
Subject key identifier:   F0:98:EF:9C:38:B2:5D:93:20:96:D1:E4:6A:4E:F6:52:05:F0:4A:22
Certificate issuer:       /CN=3BE200CBC2748D500CCB2B319E104EF022ECFE5D
Certificate serial:       63EB978F326D6B06ADF5A4496E959F62C3126B69
Authority key identifier: 3B:E2:00:CB:C2:74:8D:50:0C:CB:2B:31:9E:10:4E:F0:22:EC:FE:5D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3BE200CBC2748D500CCB2B319E104EF022ECFE5D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D4A8C730B7E8A859E880BA4C198841CD8840D93915108B868FC5BFA7E6E3065D/0/323830333a313732303a3a2f33322d3332203d3e20323636383135.roa
Signing time:             Tue 04 Feb 2025 18:31:32 +0000
ROA not before:           Tue 04 Feb 2025 18:26:32 +0000
ROA not after:            Tue 03 Feb 2026 18:31:32 +0000
asID:                     266815
IP address blocks:        2803:1720::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D4A8C730B7E8A859E880BA4C198841CD8840D93915108B868FC5BFA7E6E3065D/0/3BE200CBC2748D500CCB2B319E104EF022ECFE5D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D4A8C730B7E8A859E880BA4C198841CD8840D93915108B868FC5BFA7E6E3065D/0/3BE200CBC2748D500CCB2B319E104EF022ECFE5D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3BE200CBC2748D500CCB2B319E104EF022ECFE5D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 14 Apr 2025 17:30:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:eb:97:8f:32:6d:6b:06:ad:f5:a4:49:6e:95:9f:62:c3:12:6b:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3BE200CBC2748D500CCB2B319E104EF022ECFE5D
        Validity
            Not Before: Feb  4 18:26:32 2025 GMT
            Not After : Feb  3 18:31:32 2026 GMT
        Subject: CN=F098EF9C38B25D932096D1E46A4EF65205F04A22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:4e:7f:fd:ef:7b:58:be:c2:cc:2c:cb:b4:8b:
                    e0:7e:1d:ae:c3:40:92:d9:6c:b4:84:51:6a:6f:f0:
                    d2:92:28:a1:1e:69:41:6b:87:01:af:58:d0:4e:25:
                    f6:0e:03:b5:5e:c4:9d:c4:3b:26:e1:00:9f:e0:3e:
                    33:92:ff:fe:cc:b3:e8:18:67:7e:6e:5a:79:7a:ba:
                    43:fd:66:5e:22:f6:e8:1d:46:7f:07:30:18:e1:53:
                    10:c5:05:16:dd:e6:e7:19:88:8d:b1:cd:e8:7c:a0:
                    8c:87:e6:08:5e:60:f9:4f:f3:ae:02:85:a8:02:61:
                    18:42:c2:51:b2:b5:87:ac:f3:77:63:30:e6:4e:0b:
                    bd:f8:2d:d1:15:9d:7d:69:66:9d:a3:96:85:8f:02:
                    6e:26:00:9a:28:32:61:26:2a:ca:aa:eb:b7:f4:e9:
                    14:3b:a0:24:46:d5:83:c8:53:4f:c5:2d:db:dd:2c:
                    e8:09:94:60:9d:ea:7d:02:52:9f:c3:9a:0f:50:d1:
                    aa:0f:ff:9d:10:00:3f:04:5d:7d:a8:90:59:55:44:
                    a1:ee:f4:5b:ef:d1:6a:0c:d3:44:5d:06:71:4a:61:
                    02:f5:44:17:7f:4b:7f:3d:d6:8c:1c:4c:91:ed:61:
                    41:54:ed:a2:fe:c2:a2:c9:0f:dd:20:70:f6:e0:73:
                    5f:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:98:EF:9C:38:B2:5D:93:20:96:D1:E4:6A:4E:F6:52:05:F0:4A:22
            X509v3 Authority Key Identifier:
                keyid:3B:E2:00:CB:C2:74:8D:50:0C:CB:2B:31:9E:10:4E:F0:22:EC:FE:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D4A8C730B7E8A859E880BA4C198841CD8840D93915108B868FC5BFA7E6E3065D/0/3BE200CBC2748D500CCB2B319E104EF022ECFE5D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3BE200CBC2748D500CCB2B319E104EF022ECFE5D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D4A8C730B7E8A859E880BA4C198841CD8840D93915108B868FC5BFA7E6E3065D/0/323830333a313732303a3a2f33322d3332203d3e20323636383135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1720::/32

    Signature Algorithm: sha256WithRSAEncryption
         cc:aa:af:6b:37:2c:10:41:8c:5a:7e:80:1e:5f:02:11:63:bd:
         c7:a7:f1:82:52:b0:f9:c4:6d:72:11:4e:dc:46:56:ab:80:96:
         77:ce:5a:69:ab:30:d8:09:89:18:9c:01:c5:63:d9:22:d2:90:
         7b:eb:3b:da:2f:e5:44:4c:8b:9e:9f:2b:7d:77:05:1f:bc:51:
         31:ed:b6:b1:c3:a7:c1:eb:cc:21:73:1c:45:c9:1c:35:64:f7:
         a6:21:51:38:70:57:04:9f:10:8c:af:04:8e:83:c7:cd:90:88:
         29:b4:87:ac:29:32:4a:fb:ec:89:e2:3e:c0:00:0c:d1:f3:ba:
         d3:c9:aa:1e:a8:17:3c:bf:51:28:6a:27:ee:d5:04:c8:f9:88:
         2e:df:01:0c:4d:1b:74:26:ca:6f:f0:d1:98:d7:d6:de:60:cd:
         77:20:fc:73:a3:0c:4e:0d:78:b5:b7:ce:a1:c9:1e:ac:c4:34:
         20:80:01:ea:69:3a:0a:b7:fb:70:b2:ea:4a:a1:e1:e7:7f:bd:
         93:16:be:ef:aa:4e:a4:76:b2:fa:0a:c6:38:50:68:bf:b0:ca:
         eb:64:78:2e:fc:83:db:36:67:9b:d3:ed:85:1b:f3:22:16:e1:
         77:39:ff:d7:c6:25:ea:40:df:42:88:47:d7:24:24:68:83:2e:
         a9:73:fa:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:09:09 2025 by rpki-client