Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EAAE3C8F9674D1E449EE35345779D6ED23723DFEB8B9A5A87E3647EEC934334E/0/323830333a363565303a3a2f33322d3438203d3e20323730303334.roa
File:                     323830333a363565303a3a2f33322d3438203d3e20323730303334.roa (raw, json)
Hash identifier:          E4srJHyXvfBNHviAFTZKoXCQaPI6GRfgHyrWtQEy24I=
Subject key identifier:   13:C7:09:41:EE:B3:55:BD:9A:B3:22:E7:B2:B8:5A:DD:B7:30:8B:4C
Certificate issuer:       /CN=93128618954CB85AF71A59CE184CDF9CADA7ED6D
Certificate serial:       5FD1DE70B1A23FB18C2737174D95564F9126C623
Authority key identifier: 93:12:86:18:95:4C:B8:5A:F7:1A:59:CE:18:4C:DF:9C:AD:A7:ED:6D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/93128618954CB85AF71A59CE184CDF9CADA7ED6D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EAAE3C8F9674D1E449EE35345779D6ED23723DFEB8B9A5A87E3647EEC934334E/0/323830333a363565303a3a2f33322d3438203d3e20323730303334.roa
Signing time:             Tue 04 Feb 2025 18:01:54 +0000
ROA not before:           Tue 04 Feb 2025 17:56:54 +0000
ROA not after:            Tue 03 Feb 2026 18:01:54 +0000
asID:                     270034
IP address blocks:        2803:65e0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EAAE3C8F9674D1E449EE35345779D6ED23723DFEB8B9A5A87E3647EEC934334E/0/93128618954CB85AF71A59CE184CDF9CADA7ED6D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EAAE3C8F9674D1E449EE35345779D6ED23723DFEB8B9A5A87E3647EEC934334E/0/93128618954CB85AF71A59CE184CDF9CADA7ED6D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/93128618954CB85AF71A59CE184CDF9CADA7ED6D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 13:57:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:d1:de:70:b1:a2:3f:b1:8c:27:37:17:4d:95:56:4f:91:26:c6:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93128618954CB85AF71A59CE184CDF9CADA7ED6D
        Validity
            Not Before: Feb  4 17:56:54 2025 GMT
            Not After : Feb  3 18:01:54 2026 GMT
        Subject: CN=13C70941EEB355BD9AB322E7B2B85ADDB7308B4C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e2:d7:0a:f3:33:f9:b8:97:36:2c:e1:7f:ed:
                    7e:be:ef:3c:eb:fd:ee:f4:6b:c4:db:a7:48:8e:25:
                    e9:13:97:6f:5f:fe:a0:dd:e3:98:d0:81:41:76:27:
                    e8:1f:92:c9:c0:3f:0e:0c:e1:0a:a7:a7:53:be:60:
                    c6:95:0c:a3:d9:7f:6a:c0:57:2f:e8:ce:e4:d7:ee:
                    13:dd:9e:c1:0e:01:b0:d0:2b:be:cb:0c:8d:e2:2c:
                    05:b1:c3:6e:93:c3:6f:91:85:60:94:12:82:6b:b0:
                    be:d7:d2:b2:ee:d9:35:ea:8f:33:34:3e:73:be:95:
                    50:66:c0:63:53:a0:56:e2:06:da:8a:18:5e:79:5c:
                    be:0a:61:af:14:f5:59:b8:19:6f:24:8a:79:7c:b0:
                    a3:a4:28:09:23:5e:aa:3a:e8:b1:64:39:51:fc:20:
                    df:b8:50:35:9d:8a:e3:b2:4a:9a:b1:82:40:af:32:
                    35:30:b2:41:7e:33:49:81:cc:48:65:f8:65:a7:0d:
                    02:f2:ff:3b:2f:9e:5a:02:86:87:40:45:95:1b:de:
                    ae:84:2d:91:a9:d8:42:ee:01:d9:4c:37:cd:90:3d:
                    56:38:c3:0c:a5:02:08:77:d3:08:fa:c4:7b:82:6e:
                    53:08:d6:1f:95:b1:ec:55:a5:00:45:d0:77:0b:21:
                    1c:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:C7:09:41:EE:B3:55:BD:9A:B3:22:E7:B2:B8:5A:DD:B7:30:8B:4C
            X509v3 Authority Key Identifier:
                keyid:93:12:86:18:95:4C:B8:5A:F7:1A:59:CE:18:4C:DF:9C:AD:A7:ED:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EAAE3C8F9674D1E449EE35345779D6ED23723DFEB8B9A5A87E3647EEC934334E/0/93128618954CB85AF71A59CE184CDF9CADA7ED6D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/93128618954CB85AF71A59CE184CDF9CADA7ED6D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EAAE3C8F9674D1E449EE35345779D6ED23723DFEB8B9A5A87E3647EEC934334E/0/323830333a363565303a3a2f33322d3438203d3e20323730303334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:65e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         1e:48:b3:3e:d1:f0:d3:75:17:fc:56:9e:7a:69:42:c3:d6:6e:
         7c:90:0b:46:ce:95:37:c2:9b:1c:5d:7b:3c:97:da:04:bf:2b:
         70:ce:79:c9:45:4f:e2:e5:b1:0b:9b:5b:fc:af:fb:67:47:ae:
         45:8f:0d:9e:6d:56:7b:6e:75:a7:9b:32:a9:64:c7:1b:a7:65:
         33:fd:c6:aa:b2:c0:9b:53:0e:90:73:47:da:a9:c6:9e:07:f4:
         5c:fa:45:c2:56:ac:e6:94:3e:3e:a7:7b:1f:d1:c2:61:db:1c:
         3a:e1:cf:33:af:16:26:6e:73:41:1e:4f:1d:bf:24:67:81:26:
         56:ce:11:77:cf:ae:59:02:8e:82:ee:79:83:36:45:ce:99:98:
         f2:57:46:29:83:3a:11:3a:5d:ac:fd:da:23:87:d5:b2:3c:a5:
         cf:6a:9a:15:b2:0f:41:c5:b2:a4:9a:d8:00:17:8b:a2:90:6b:
         18:a0:a8:f3:e2:8e:f0:0e:2b:75:a3:82:ad:52:5d:2d:8b:bb:
         32:64:f5:96:39:a1:bc:6d:96:d5:02:c6:74:35:4a:26:d6:34:
         97:10:61:a6:df:91:01:5c:c3:e0:76:84:a8:36:6b:0e:f1:af:
         c4:d1:81:5e:a0:b2:e4:72:e0:c8:97:22:df:0f:ac:24:a6:bd:
         c5:10:8c:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:24:55 2025 by rpki-client