Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ED7CFDCBF0ECDE1A949034BFC02F817A7B6316CCD969D2465B5ADD5EEC836D29/0/323830333a386238303a3a2f33322d3438203d3e20323732393932.roa
File:                     323830333a386238303a3a2f33322d3438203d3e20323732393932.roa (raw, json)
Hash identifier:          rHhOEqLI4pcRVz750tuIgLo7s8Vo/OF8em7eKMBu0Wg=
Subject key identifier:   7A:F2:FD:B0:82:C9:DC:9F:79:B4:15:56:B6:05:B0:DF:ED:B0:7A:54
Certificate issuer:       /CN=8995F63E387603C84272761C6F4D5C08A0EC0161
Certificate serial:       4A82B77612FEFB8E6EFA25C1873BD5FCF6021E4F
Authority key identifier: 89:95:F6:3E:38:76:03:C8:42:72:76:1C:6F:4D:5C:08:A0:EC:01:61
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8995F63E387603C84272761C6F4D5C08A0EC0161.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ED7CFDCBF0ECDE1A949034BFC02F817A7B6316CCD969D2465B5ADD5EEC836D29/0/323830333a386238303a3a2f33322d3438203d3e20323732393932.roa
Signing time:             Tue 04 Feb 2025 18:50:12 +0000
ROA not before:           Tue 04 Feb 2025 18:45:12 +0000
ROA not after:            Tue 03 Feb 2026 18:50:12 +0000
asID:                     272992
IP address blocks:        2803:8b80::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/ED7CFDCBF0ECDE1A949034BFC02F817A7B6316CCD969D2465B5ADD5EEC836D29/0/8995F63E387603C84272761C6F4D5C08A0EC0161.crl
                          rsync://repository.lacnic.net/rpki/lacnic/ED7CFDCBF0ECDE1A949034BFC02F817A7B6316CCD969D2465B5ADD5EEC836D29/0/8995F63E387603C84272761C6F4D5C08A0EC0161.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8995F63E387603C84272761C6F4D5C08A0EC0161.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:82:b7:76:12:fe:fb:8e:6e:fa:25:c1:87:3b:d5:fc:f6:02:1e:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8995F63E387603C84272761C6F4D5C08A0EC0161
        Validity
            Not Before: Feb  4 18:45:12 2025 GMT
            Not After : Feb  3 18:50:12 2026 GMT
        Subject: CN=7AF2FDB082C9DC9F79B41556B605B0DFEDB07A54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:e0:91:6a:33:70:e2:0f:f3:db:d7:48:fa:14:
                    39:d7:72:d0:f1:6e:be:85:c8:ad:59:e0:e3:5c:23:
                    cf:96:72:9e:2a:f5:f6:2b:62:27:f7:e8:4a:9a:22:
                    a2:e7:33:dd:6e:bf:fa:fa:92:75:37:be:ec:e3:8c:
                    d4:c0:a9:74:72:ec:28:54:b7:51:9e:95:a5:72:29:
                    7b:e0:e8:65:cd:f2:53:af:67:9c:73:16:f0:50:f0:
                    e4:9a:38:0f:6d:ae:ec:64:66:4d:ce:04:96:4e:66:
                    76:31:26:0b:3b:36:5b:e6:2f:c3:2f:6e:1e:e2:20:
                    3f:e3:6a:41:d4:02:e6:e2:a4:10:68:4b:7d:9a:54:
                    22:89:47:2c:23:03:a5:f1:1d:79:d4:a3:d9:79:f9:
                    a6:98:91:d5:1a:46:3d:83:9e:84:a8:af:3c:da:f8:
                    7f:fa:1e:b4:f2:1f:02:b1:77:af:b1:6d:e8:ad:c8:
                    07:76:1a:06:4b:be:3f:ab:ea:21:7e:20:62:53:c8:
                    39:06:fd:1e:6b:84:9d:a0:45:72:30:a2:a3:52:4d:
                    88:c5:a1:5b:f4:c9:6f:73:10:74:46:a0:27:1c:4e:
                    3b:a5:f0:61:73:25:d4:ed:56:c2:f5:7d:3e:76:b6:
                    88:10:5b:2a:79:fe:0a:70:db:2f:80:4e:3f:1b:40:
                    5a:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:F2:FD:B0:82:C9:DC:9F:79:B4:15:56:B6:05:B0:DF:ED:B0:7A:54
            X509v3 Authority Key Identifier:
                keyid:89:95:F6:3E:38:76:03:C8:42:72:76:1C:6F:4D:5C:08:A0:EC:01:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ED7CFDCBF0ECDE1A949034BFC02F817A7B6316CCD969D2465B5ADD5EEC836D29/0/8995F63E387603C84272761C6F4D5C08A0EC0161.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8995F63E387603C84272761C6F4D5C08A0EC0161.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ED7CFDCBF0ECDE1A949034BFC02F817A7B6316CCD969D2465B5ADD5EEC836D29/0/323830333a386238303a3a2f33322d3438203d3e20323732393932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8b80::/32

    Signature Algorithm: sha256WithRSAEncryption
         72:b1:1c:2c:68:c0:da:5c:c6:f2:fd:8d:28:59:fe:4a:a1:0c:
         61:b3:29:a3:16:56:d7:07:74:7f:79:36:61:b4:c1:20:26:9c:
         fa:f0:19:5f:b3:21:7a:12:11:d0:07:bd:a2:b9:fb:5a:1e:4b:
         32:a8:50:2d:7c:55:11:4a:15:0b:29:68:ac:2d:40:cf:36:3e:
         73:8f:26:57:d7:36:91:9a:c8:19:c9:f2:3d:81:8b:00:68:2f:
         50:d4:56:15:b2:76:1a:26:23:38:b3:14:bd:8d:51:e1:59:64:
         7a:c8:0e:8b:3d:0b:3a:20:94:e1:48:b4:90:33:85:03:e7:c1:
         fc:84:1c:a8:e7:8d:93:61:2b:68:f2:d4:51:2d:c8:06:a7:58:
         f1:fd:26:a1:2d:0b:81:9f:e4:07:e2:1c:de:d6:0d:92:21:78:
         05:ff:45:1f:17:03:63:e4:7b:bc:72:24:96:6f:e7:34:5d:51:
         17:a0:2d:1a:25:51:27:3d:8e:9d:f8:9c:e4:1d:bd:9a:cd:0e:
         47:c7:0c:49:12:80:d1:be:49:8b:70:1d:f1:a9:f2:27:ee:cf:
         9f:f4:a5:eb:29:ac:52:fd:ff:39:b9:90:50:54:af:24:21:68:
         0b:f1:44:a1:30:74:e1:cd:b6:b1:a1:87:42:a3:ac:51:00:cc:
         92:86:07:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:07:38 2025 by rpki-client