Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F15A46CEEB9819E6B43190D27F17AAF0B7B5242F6268117DC0787CBC2C11ECE2/0/323830333a353161303a31323a3a2f34372d3438203d3e20323637363939.roa
File:                     323830333a353161303a31323a3a2f34372d3438203d3e20323637363939.roa (raw, json)
Hash identifier:          kvDaT33ST5WQxJCWiQT0gQU0fTTKrBEiGyBEcdDT7OU=
Subject key identifier:   80:DA:25:7E:D0:D0:3E:B8:8A:99:98:91:CA:61:A7:B7:EC:00:CB:4F
Certificate issuer:       /CN=02B881E65D6C311F6B248CD1A44B07782782D3C5
Certificate serial:       42522AFCC3DAA799C8B86C1F5593D59706E03FB4
Authority key identifier: 02:B8:81:E6:5D:6C:31:1F:6B:24:8C:D1:A4:4B:07:78:27:82:D3:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/02B881E65D6C311F6B248CD1A44B07782782D3C5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F15A46CEEB9819E6B43190D27F17AAF0B7B5242F6268117DC0787CBC2C11ECE2/0/323830333a353161303a31323a3a2f34372d3438203d3e20323637363939.roa
Signing time:             Tue 04 Feb 2025 18:04:51 +0000
ROA not before:           Tue 04 Feb 2025 17:59:51 +0000
ROA not after:            Tue 03 Feb 2026 18:04:51 +0000
asID:                     267699
IP address blocks:        2803:51a0:12::/47 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F15A46CEEB9819E6B43190D27F17AAF0B7B5242F6268117DC0787CBC2C11ECE2/0/02B881E65D6C311F6B248CD1A44B07782782D3C5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F15A46CEEB9819E6B43190D27F17AAF0B7B5242F6268117DC0787CBC2C11ECE2/0/02B881E65D6C311F6B248CD1A44B07782782D3C5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/02B881E65D6C311F6B248CD1A44B07782782D3C5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 20:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:52:2a:fc:c3:da:a7:99:c8:b8:6c:1f:55:93:d5:97:06:e0:3f:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02B881E65D6C311F6B248CD1A44B07782782D3C5
        Validity
            Not Before: Feb  4 17:59:51 2025 GMT
            Not After : Feb  3 18:04:51 2026 GMT
        Subject: CN=80DA257ED0D03EB88A999891CA61A7B7EC00CB4F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:15:50:de:a3:fe:e1:5b:95:74:62:f9:45:4d:
                    75:bb:5a:4b:c9:13:ed:e5:ff:78:2b:e4:7b:ff:0e:
                    47:40:8b:72:2b:4a:80:c0:20:ce:35:e2:f8:b9:ed:
                    e0:bb:27:84:92:6d:c7:24:c1:89:86:40:fc:7d:ab:
                    f9:64:dc:43:3d:b6:96:b5:b3:a1:29:74:fd:c8:5c:
                    7a:56:24:f0:64:a0:d7:d9:09:2e:92:91:9a:a7:e4:
                    c7:66:89:6c:1b:a9:8a:2c:23:23:16:26:a1:96:90:
                    fc:37:05:3c:52:09:a4:b2:e4:33:67:9e:5c:84:2a:
                    f5:bd:26:52:da:67:34:f7:c2:e6:04:1d:9a:04:51:
                    03:25:12:13:4a:b3:45:20:b7:20:6a:74:45:7c:79:
                    d8:a5:8c:26:d2:eb:ef:5a:de:c4:cc:1d:6f:0d:9a:
                    cc:2d:36:89:2d:74:cf:48:73:31:59:39:41:3e:a6:
                    94:94:ba:1d:18:5f:7e:2d:dd:b4:f3:3e:70:c3:08:
                    8b:05:2d:1e:d8:e7:e0:b2:1f:12:d9:e7:40:af:01:
                    35:91:73:02:88:09:e4:df:05:fc:a0:0a:b9:68:e8:
                    1b:95:0e:46:5b:c0:9a:b4:8b:c6:39:fd:e6:8d:1a:
                    b3:0e:30:61:02:80:6f:b2:bf:4f:91:6e:c0:c5:c7:
                    26:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:DA:25:7E:D0:D0:3E:B8:8A:99:98:91:CA:61:A7:B7:EC:00:CB:4F
            X509v3 Authority Key Identifier:
                keyid:02:B8:81:E6:5D:6C:31:1F:6B:24:8C:D1:A4:4B:07:78:27:82:D3:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F15A46CEEB9819E6B43190D27F17AAF0B7B5242F6268117DC0787CBC2C11ECE2/0/02B881E65D6C311F6B248CD1A44B07782782D3C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/02B881E65D6C311F6B248CD1A44B07782782D3C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F15A46CEEB9819E6B43190D27F17AAF0B7B5242F6268117DC0787CBC2C11ECE2/0/323830333a353161303a31323a3a2f34372d3438203d3e20323637363939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:51a0:12::/47

    Signature Algorithm: sha256WithRSAEncryption
         06:9e:ff:1a:62:c7:72:ce:a1:b6:ba:00:02:0f:4d:52:e9:72:
         d5:2e:c3:8a:37:9e:00:f0:d6:35:f7:dd:22:8f:5b:bf:fc:3f:
         c7:f0:a0:3c:70:4f:85:30:d5:3b:b8:cc:b0:dc:6f:71:eb:db:
         13:c6:50:10:7c:94:b4:0a:cd:fe:b7:40:cc:fb:02:1b:13:86:
         d6:49:a3:09:25:4c:8e:65:ac:9a:7e:ce:e4:81:df:55:28:f9:
         0c:65:99:f7:65:44:1c:a1:fe:72:33:81:d8:99:9f:16:da:66:
         75:43:46:f8:8f:f0:9c:86:c5:73:d1:95:e1:b0:e5:2d:30:56:
         ef:bb:cb:2d:17:ea:6c:a4:f0:2a:f8:7f:41:66:3f:e0:3d:b9:
         51:90:be:19:9f:1e:22:75:d9:be:50:1b:fc:33:fc:10:c6:59:
         0c:25:0f:ff:b9:e5:3a:3d:35:42:a7:81:19:57:f5:05:8d:6f:
         2e:cb:7c:71:28:54:be:e7:c0:8b:6f:ab:ec:c1:4e:05:e0:4c:
         6f:57:d8:c4:5a:06:43:a6:5f:2f:7a:71:32:39:4f:43:7e:7c:
         78:9a:40:bd:58:1f:94:ee:4c:7f:59:2c:86:2c:31:4c:a3:2e:
         a0:fe:64:9b:5f:59:d3:47:ba:9b:b1:39:09:2d:a2:05:cf:a5:
         9c:b6:c0:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 19:35:13 2025 by rpki-client