Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F126F7B24F058345981014FBD8FA8F21CC1044BE0D05370DA263D74AB89CBEE9/0/323830333a613165303a3a2f33322d3438203d3e203532333237.roa
File:                     323830333a613165303a3a2f33322d3438203d3e203532333237.roa (raw, json)
Hash identifier:          cuUyYmJ5bENDSGxciOtiDhyEzgfP10txRMqd4Az5eS4=
Subject key identifier:   3E:06:47:1B:A6:A4:63:4A:49:56:EB:26:64:99:51:09:47:6F:88:BF
Certificate issuer:       /CN=8490FC868F718F720126775187964F0F493B0CEB
Certificate serial:       2B813DED5BDCF5EA19174ACD9B7158AD2A0941EF
Authority key identifier: 84:90:FC:86:8F:71:8F:72:01:26:77:51:87:96:4F:0F:49:3B:0C:EB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8490FC868F718F720126775187964F0F493B0CEB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F126F7B24F058345981014FBD8FA8F21CC1044BE0D05370DA263D74AB89CBEE9/0/323830333a613165303a3a2f33322d3438203d3e203532333237.roa
Signing time:             Tue 04 Feb 2025 18:21:05 +0000
ROA not before:           Tue 04 Feb 2025 18:16:05 +0000
ROA not after:            Tue 03 Feb 2026 18:21:05 +0000
asID:                     52327
IP address blocks:        2803:a1e0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F126F7B24F058345981014FBD8FA8F21CC1044BE0D05370DA263D74AB89CBEE9/0/8490FC868F718F720126775187964F0F493B0CEB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F126F7B24F058345981014FBD8FA8F21CC1044BE0D05370DA263D74AB89CBEE9/0/8490FC868F718F720126775187964F0F493B0CEB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8490FC868F718F720126775187964F0F493B0CEB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 20 Feb 2025 08:50:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:81:3d:ed:5b:dc:f5:ea:19:17:4a:cd:9b:71:58:ad:2a:09:41:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8490FC868F718F720126775187964F0F493B0CEB
        Validity
            Not Before: Feb  4 18:16:05 2025 GMT
            Not After : Feb  3 18:21:05 2026 GMT
        Subject: CN=3E06471BA6A4634A4956EB2664995109476F88BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:1b:c1:18:33:d7:94:27:59:da:36:50:27:44:
                    fd:35:97:42:0c:b9:d4:d1:43:cb:26:2f:ca:38:91:
                    12:4a:1a:2a:2a:d3:5a:96:fd:49:d4:35:07:c4:ad:
                    b8:ab:a7:e3:47:24:bb:d6:17:b6:c0:03:5d:96:05:
                    50:ae:8d:44:07:12:f5:cf:6c:ec:80:71:25:f4:3f:
                    f9:c4:25:b6:f3:70:1b:6d:57:df:50:95:75:20:02:
                    04:ca:df:1d:a3:00:4b:8c:d5:79:bc:c9:ff:a7:1e:
                    a3:dc:2b:e3:31:a4:06:ef:36:1f:fb:72:43:b2:e0:
                    ce:75:d6:fe:5a:9c:0f:f4:96:81:5e:20:b6:c2:43:
                    f0:65:8f:08:02:be:f8:77:86:8b:c7:b4:ed:85:e5:
                    25:80:0f:21:aa:83:8f:70:2f:3d:f5:26:c3:97:60:
                    8f:c6:fb:80:82:42:5f:3d:dc:25:95:d7:bc:6e:76:
                    cb:13:3b:1d:c7:2f:bb:fd:56:58:b3:db:75:93:f9:
                    51:03:99:e2:bd:50:d6:9a:bb:90:e1:70:dd:d1:82:
                    8b:a1:15:56:16:37:e8:50:97:4d:98:bc:7a:28:78:
                    dd:11:31:8b:71:5c:c1:27:3d:ae:d3:18:39:fe:8d:
                    ff:db:05:ee:b8:1b:21:9c:88:45:34:94:fe:e4:82:
                    e6:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:06:47:1B:A6:A4:63:4A:49:56:EB:26:64:99:51:09:47:6F:88:BF
            X509v3 Authority Key Identifier:
                keyid:84:90:FC:86:8F:71:8F:72:01:26:77:51:87:96:4F:0F:49:3B:0C:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F126F7B24F058345981014FBD8FA8F21CC1044BE0D05370DA263D74AB89CBEE9/0/8490FC868F718F720126775187964F0F493B0CEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8490FC868F718F720126775187964F0F493B0CEB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F126F7B24F058345981014FBD8FA8F21CC1044BE0D05370DA263D74AB89CBEE9/0/323830333a613165303a3a2f33322d3438203d3e203532333237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:a1e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         22:1a:84:80:45:d6:d2:41:83:44:a6:fc:37:e3:ce:49:44:c2:
         21:89:72:dc:a4:5f:9e:97:30:6d:b3:2c:a7:ea:6f:d1:a1:0c:
         f8:f0:89:2f:af:74:a2:0f:2b:06:a3:57:97:e2:12:f9:24:b3:
         69:4c:9c:99:e0:79:48:78:28:c3:df:06:15:f8:70:a6:06:47:
         2a:73:fd:10:83:2f:08:46:d9:07:48:66:6e:eb:c8:50:48:03:
         33:03:ca:95:50:7b:0c:28:79:89:2c:85:e9:5b:98:9e:16:23:
         ea:b2:11:b4:85:87:8a:0f:61:da:3f:da:05:8e:06:40:32:03:
         e6:73:b3:36:1f:0f:0e:5c:05:b5:a2:f6:59:f3:97:0a:c8:7b:
         70:de:f0:f7:3a:30:37:dc:22:bd:35:32:38:ac:20:92:cb:de:
         c0:8d:65:ae:ac:7d:f7:2f:e3:32:b9:dd:d6:b1:b7:a5:77:7a:
         00:a4:23:b9:4d:5c:8f:bf:a1:9f:5f:46:b3:92:41:1c:fb:b5:
         ea:8d:62:73:57:00:fe:29:e0:00:56:50:5d:85:e9:0f:42:f6:
         63:fd:c3:3e:e8:ad:67:31:37:b5:7a:8b:f3:34:24:db:a7:cf:
         24:19:a2:a4:c6:d3:df:85:1c:94:d6:53:84:0e:97:92:ea:b9:
         d2:cf:ba:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:35:43 2025 by rpki-client