Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E3A4BF7D183720DD957CA93C4E07F4DEFB10388FC59FE80E3EA8F15C4094461B/0/323830333a336630303a3a2f33322d3332203d3e203238303838.roa
File:                     323830333a336630303a3a2f33322d3332203d3e203238303838.roa (raw, json)
Hash identifier:          +mTNfdbizZQgvGTBkfKPdTpVqcgt0JuR0BI3NFQ8dhk=
Subject key identifier:   51:47:C1:4D:D4:F0:22:BB:3E:83:CE:7B:41:5A:7B:E2:57:3F:2C:C1
Certificate issuer:       /CN=2ED42DFF196F3F11B82464DE1FB7DDD1793DD227
Certificate serial:       48C43D0E6C500F4D42190B334DC32D3D57392D01
Authority key identifier: 2E:D4:2D:FF:19:6F:3F:11:B8:24:64:DE:1F:B7:DD:D1:79:3D:D2:27
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2ED42DFF196F3F11B82464DE1FB7DDD1793DD227.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E3A4BF7D183720DD957CA93C4E07F4DEFB10388FC59FE80E3EA8F15C4094461B/0/323830333a336630303a3a2f33322d3332203d3e203238303838.roa
Signing time:             Tue 04 Feb 2025 18:30:16 +0000
ROA not before:           Tue 04 Feb 2025 18:25:16 +0000
ROA not after:            Tue 03 Feb 2026 18:30:16 +0000
asID:                     28088
IP address blocks:        2803:3f00::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E3A4BF7D183720DD957CA93C4E07F4DEFB10388FC59FE80E3EA8F15C4094461B/0/2ED42DFF196F3F11B82464DE1FB7DDD1793DD227.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E3A4BF7D183720DD957CA93C4E07F4DEFB10388FC59FE80E3EA8F15C4094461B/0/2ED42DFF196F3F11B82464DE1FB7DDD1793DD227.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2ED42DFF196F3F11B82464DE1FB7DDD1793DD227.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 14:06:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:c4:3d:0e:6c:50:0f:4d:42:19:0b:33:4d:c3:2d:3d:57:39:2d:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ED42DFF196F3F11B82464DE1FB7DDD1793DD227
        Validity
            Not Before: Feb  4 18:25:16 2025 GMT
            Not After : Feb  3 18:30:16 2026 GMT
        Subject: CN=5147C14DD4F022BB3E83CE7B415A7BE2573F2CC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:b1:b7:aa:e2:3c:7b:e5:74:3b:1b:b3:e1:8d:
                    70:21:b3:dc:be:db:64:68:1c:02:6a:a3:15:4e:42:
                    33:d3:24:6b:5b:88:57:99:93:53:68:15:33:f4:95:
                    20:92:cb:42:e7:ed:16:3c:59:81:72:d7:c4:f7:2a:
                    e9:36:11:6f:cf:57:30:0b:2b:08:29:93:bd:30:3c:
                    42:a6:47:3c:7e:38:56:db:6a:ca:32:48:27:c0:12:
                    17:dc:6b:1c:bd:e4:7d:cb:e4:3a:25:48:0b:16:56:
                    a3:bf:a3:bb:dd:65:b3:f2:31:fc:3c:20:82:1b:4b:
                    88:81:58:e1:cc:f3:4d:d4:b4:7a:43:a6:a2:73:ed:
                    65:87:2c:f5:55:a5:f5:d1:98:51:03:5a:1c:e9:b4:
                    12:67:0c:a3:b2:9a:77:25:c3:1d:cc:89:65:b5:5f:
                    18:67:15:9d:43:f8:f4:01:c7:dc:c9:01:a5:7a:a3:
                    eb:75:e7:b0:e9:10:a6:35:96:77:ca:b3:2c:98:c7:
                    79:37:ca:64:0b:49:61:4a:f2:ff:d3:9a:b1:58:9f:
                    28:3e:1f:98:ed:3e:09:ea:d7:98:ea:66:c9:29:4f:
                    ed:1d:36:4c:ff:07:ad:87:72:d6:64:7d:d2:9e:e9:
                    94:6a:46:16:27:a3:2d:11:2b:7d:a8:65:93:df:f1:
                    a7:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:47:C1:4D:D4:F0:22:BB:3E:83:CE:7B:41:5A:7B:E2:57:3F:2C:C1
            X509v3 Authority Key Identifier:
                keyid:2E:D4:2D:FF:19:6F:3F:11:B8:24:64:DE:1F:B7:DD:D1:79:3D:D2:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E3A4BF7D183720DD957CA93C4E07F4DEFB10388FC59FE80E3EA8F15C4094461B/0/2ED42DFF196F3F11B82464DE1FB7DDD1793DD227.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2ED42DFF196F3F11B82464DE1FB7DDD1793DD227.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E3A4BF7D183720DD957CA93C4E07F4DEFB10388FC59FE80E3EA8F15C4094461B/0/323830333a336630303a3a2f33322d3332203d3e203238303838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3f00::/32

    Signature Algorithm: sha256WithRSAEncryption
         a3:6b:34:51:2f:62:2c:af:b1:08:0c:fd:e1:9d:d8:80:6b:a4:
         69:7d:10:ad:eb:65:a4:bf:b0:67:03:44:28:97:6f:c4:ca:3b:
         96:a2:6b:4f:70:65:16:6f:58:61:0c:9e:ae:7c:25:86:8b:30:
         37:ed:42:d2:90:4e:7e:a7:ab:8c:44:9e:29:6b:91:66:ac:78:
         ed:4a:31:dc:70:73:3e:ea:d8:5a:14:ab:42:32:ea:e1:cb:f5:
         48:4e:8a:99:55:00:01:e8:68:c2:f9:81:04:0f:a1:da:40:28:
         0c:4c:79:85:9e:46:5a:33:6a:f2:bd:d0:cb:cd:bd:8d:82:b5:
         50:e0:20:57:27:5a:4f:b1:da:b5:8e:b5:68:d9:71:47:4a:dd:
         24:80:35:22:82:85:cf:e3:2f:e5:63:e1:38:1d:37:ef:22:49:
         9c:32:76:64:66:cf:e9:df:6c:83:4d:62:fb:9f:65:4e:63:88:
         e3:60:4d:f9:10:56:1f:f6:27:b8:63:46:df:c0:a4:e4:c1:96:
         78:ae:07:1a:5e:43:25:d1:d6:68:c7:7a:38:79:65:39:1b:20:
         50:4d:a3:8f:51:21:75:e3:98:83:34:bd:08:10:f9:d5:ca:22:
         7b:66:61:fe:98:40:07:b9:8c:0a:e6:ad:d7:ae:d8:4e:21:c4:
         a3:a6:c1:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 09:44:36 2025 by rpki-client