Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E3BCD570957353FBE338DF0B293CE538800C1E3BE86B71E08640DD7C617EC6E6/0/323830333a363865303a3a2f33322d3332203d3e20323639383734.roa
File:                     323830333a363865303a3a2f33322d3332203d3e20323639383734.roa (raw, json)
Hash identifier:          H+JDGKxaDmYjIHItXVdLo5Ct2WOtyUMorkqcC4KA1x8=
Subject key identifier:   FB:E1:57:A0:18:32:57:66:AB:F4:3E:52:4E:AF:A2:A8:83:A6:54:1C
Certificate issuer:       /CN=A7ED823CB6F767E5A4BC7203F538E97EF6F59F3A
Certificate serial:       44CCDDFB80BEBE3D27E6D59475E6152FE9264096
Authority key identifier: A7:ED:82:3C:B6:F7:67:E5:A4:BC:72:03:F5:38:E9:7E:F6:F5:9F:3A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A7ED823CB6F767E5A4BC7203F538E97EF6F59F3A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E3BCD570957353FBE338DF0B293CE538800C1E3BE86B71E08640DD7C617EC6E6/0/323830333a363865303a3a2f33322d3332203d3e20323639383734.roa
Signing time:             Tue 04 Feb 2025 18:04:42 +0000
ROA not before:           Tue 04 Feb 2025 17:59:42 +0000
ROA not after:            Tue 03 Feb 2026 18:04:42 +0000
asID:                     269874
IP address blocks:        2803:68e0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E3BCD570957353FBE338DF0B293CE538800C1E3BE86B71E08640DD7C617EC6E6/0/A7ED823CB6F767E5A4BC7203F538E97EF6F59F3A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E3BCD570957353FBE338DF0B293CE538800C1E3BE86B71E08640DD7C617EC6E6/0/A7ED823CB6F767E5A4BC7203F538E97EF6F59F3A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A7ED823CB6F767E5A4BC7203F538E97EF6F59F3A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:cc:dd:fb:80:be:be:3d:27:e6:d5:94:75:e6:15:2f:e9:26:40:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A7ED823CB6F767E5A4BC7203F538E97EF6F59F3A
        Validity
            Not Before: Feb  4 17:59:42 2025 GMT
            Not After : Feb  3 18:04:42 2026 GMT
        Subject: CN=FBE157A018325766ABF43E524EAFA2A883A6541C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:9c:61:e1:ff:f7:64:f8:41:08:e2:ed:26:da:
                    13:a1:ee:3c:98:f2:87:1f:8c:31:95:e5:bb:f9:88:
                    9d:e0:86:cd:74:24:2c:ee:a4:b5:aa:3b:97:15:a3:
                    8d:05:41:48:68:57:89:f8:7c:eb:22:85:0b:4c:b9:
                    18:09:0b:af:eb:ce:1a:3d:82:bf:39:6c:1b:5c:cb:
                    56:db:5e:f3:1a:d7:d0:53:3c:7b:d7:88:de:8d:97:
                    3e:0d:e7:72:9c:9a:16:73:12:16:11:85:5f:e9:1c:
                    2b:84:0d:29:b6:30:7a:2d:1a:d9:3f:81:20:b9:98:
                    19:4d:cb:55:bb:a4:e9:d9:91:10:6d:37:f1:47:f8:
                    de:d8:ee:33:42:17:3b:96:90:3a:f5:96:30:30:e1:
                    82:8c:8c:d5:31:fb:92:18:a2:28:ac:75:a4:11:77:
                    41:eb:3e:2a:81:e9:ef:36:2f:f6:ce:2d:6e:61:92:
                    09:ca:ce:07:c4:f4:33:02:b8:c0:aa:e3:98:28:8d:
                    d9:0c:7d:0c:e9:da:7b:88:b3:78:15:f4:3e:90:67:
                    9f:b3:e7:46:07:56:6a:ab:ee:20:e4:24:a0:03:7e:
                    77:f0:5c:04:e1:88:ad:37:f9:e7:25:e5:fe:a2:79:
                    ac:92:78:2c:14:7e:f2:1d:da:81:b7:a3:12:a5:b3:
                    04:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:E1:57:A0:18:32:57:66:AB:F4:3E:52:4E:AF:A2:A8:83:A6:54:1C
            X509v3 Authority Key Identifier:
                keyid:A7:ED:82:3C:B6:F7:67:E5:A4:BC:72:03:F5:38:E9:7E:F6:F5:9F:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E3BCD570957353FBE338DF0B293CE538800C1E3BE86B71E08640DD7C617EC6E6/0/A7ED823CB6F767E5A4BC7203F538E97EF6F59F3A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A7ED823CB6F767E5A4BC7203F538E97EF6F59F3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E3BCD570957353FBE338DF0B293CE538800C1E3BE86B71E08640DD7C617EC6E6/0/323830333a363865303a3a2f33322d3332203d3e20323639383734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:68e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         3f:76:4f:63:28:5e:68:6b:b4:42:9e:aa:09:2b:b7:52:1b:1f:
         b8:36:6b:1d:95:44:47:eb:51:61:e9:5e:13:10:95:db:65:3a:
         d1:68:e1:84:1d:e2:81:11:27:fe:36:83:dc:40:58:21:24:fa:
         e3:11:23:63:3a:39:d3:2b:dc:01:64:9f:c1:89:40:4c:70:18:
         0b:63:29:40:48:5c:61:02:02:2c:25:21:5c:94:25:e1:b8:c9:
         aa:6b:83:fd:cd:23:ea:df:53:21:de:0b:dc:e1:78:9e:49:ca:
         1e:5b:1f:41:0c:8b:a1:bf:f4:01:24:4f:fb:7e:1e:d1:a9:26:
         1a:df:08:da:c6:84:b6:77:d6:b5:65:9f:22:cb:89:98:d1:50:
         79:7f:88:db:ce:8a:8d:37:41:da:d8:17:3f:6a:3f:f6:24:76:
         34:87:c4:f8:85:00:c8:9e:a6:c8:2d:92:47:d9:84:88:af:1b:
         ba:71:5d:bd:25:ff:db:bc:21:23:a8:c8:b8:11:a8:e3:1d:99:
         73:43:5c:c3:37:17:71:fa:92:92:0e:8b:29:fd:71:f5:cd:a3:
         ec:2f:44:23:24:42:df:41:de:81:7c:c9:f3:bc:dc:b8:ba:7b:
         4b:ac:5b:0e:a1:7a:80:b9:22:26:02:2a:d2:06:78:ee:b9:e9:
         a1:81:f4:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:27:17 2025 by rpki-client