Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F15A46CEEB9819E6B43190D27F17AAF0B7B5242F6268117DC0787CBC2C11ECE2/0/323830333a353161303a35663a3a2f34382d3438203d3e20323637363939.roa
File:                     323830333a353161303a35663a3a2f34382d3438203d3e20323637363939.roa (raw, json)
Hash identifier:          1+yZh0A56zUKtZl4/uv0IchBQjMFaFA6DgEJ+HddyrU=
Subject key identifier:   A6:94:14:02:58:F7:EF:19:D8:67:BB:83:A7:50:E2:19:9B:26:A6:04
Certificate issuer:       /CN=02B881E65D6C311F6B248CD1A44B07782782D3C5
Certificate serial:       35D79F20FCC35BA6F52F16E59EC502DF09D6C22F
Authority key identifier: 02:B8:81:E6:5D:6C:31:1F:6B:24:8C:D1:A4:4B:07:78:27:82:D3:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/02B881E65D6C311F6B248CD1A44B07782782D3C5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F15A46CEEB9819E6B43190D27F17AAF0B7B5242F6268117DC0787CBC2C11ECE2/0/323830333a353161303a35663a3a2f34382d3438203d3e20323637363939.roa
Signing time:             Tue 04 Feb 2025 18:04:53 +0000
ROA not before:           Tue 04 Feb 2025 17:59:53 +0000
ROA not after:            Tue 03 Feb 2026 18:04:53 +0000
asID:                     267699
IP address blocks:        2803:51a0:5f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F15A46CEEB9819E6B43190D27F17AAF0B7B5242F6268117DC0787CBC2C11ECE2/0/02B881E65D6C311F6B248CD1A44B07782782D3C5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F15A46CEEB9819E6B43190D27F17AAF0B7B5242F6268117DC0787CBC2C11ECE2/0/02B881E65D6C311F6B248CD1A44B07782782D3C5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/02B881E65D6C311F6B248CD1A44B07782782D3C5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 20:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:d7:9f:20:fc:c3:5b:a6:f5:2f:16:e5:9e:c5:02:df:09:d6:c2:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02B881E65D6C311F6B248CD1A44B07782782D3C5
        Validity
            Not Before: Feb  4 17:59:53 2025 GMT
            Not After : Feb  3 18:04:53 2026 GMT
        Subject: CN=A694140258F7EF19D867BB83A750E2199B26A604
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:e4:92:33:ff:01:b1:52:bc:d3:8d:7b:ec:42:
                    b1:74:ad:dc:48:06:c2:b7:c1:47:5e:73:a9:8e:5e:
                    21:6a:d5:a2:00:e7:39:63:3d:58:72:17:49:1d:34:
                    88:c0:c1:6e:f6:a3:c8:8a:35:31:d5:78:8e:f6:50:
                    ba:da:bc:64:f2:86:7a:73:56:51:ac:e7:46:ef:85:
                    96:c0:94:41:c8:7a:d3:87:f1:8b:b5:c3:46:62:11:
                    ae:2f:8b:0f:4b:d8:c6:a6:c7:e4:72:cb:8f:ee:84:
                    e7:de:e8:af:a9:9d:47:b4:56:68:b6:cd:b9:f5:10:
                    8b:c3:85:fc:90:89:0b:bd:4a:d4:1f:0c:3f:82:49:
                    3b:05:b8:b5:c4:f3:48:ed:c0:4b:0b:7c:01:12:a5:
                    4b:30:ec:df:44:8f:25:13:0d:22:cd:c2:6c:2a:ae:
                    9a:d0:ba:57:88:ec:48:24:b5:76:3b:7e:7c:63:d1:
                    8c:25:3b:5b:b8:2e:a5:73:b8:6a:58:2e:69:85:db:
                    1c:88:5d:fc:b8:77:87:d1:e7:76:29:cb:4e:95:94:
                    60:55:56:13:e8:a5:a9:19:0c:90:97:57:e3:c0:cb:
                    c6:c0:5a:bb:dd:c2:14:80:d6:85:7e:1d:ee:07:d0:
                    df:5f:38:ef:fd:af:f7:aa:bc:77:ee:20:b1:91:c8:
                    2a:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:94:14:02:58:F7:EF:19:D8:67:BB:83:A7:50:E2:19:9B:26:A6:04
            X509v3 Authority Key Identifier:
                keyid:02:B8:81:E6:5D:6C:31:1F:6B:24:8C:D1:A4:4B:07:78:27:82:D3:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F15A46CEEB9819E6B43190D27F17AAF0B7B5242F6268117DC0787CBC2C11ECE2/0/02B881E65D6C311F6B248CD1A44B07782782D3C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/02B881E65D6C311F6B248CD1A44B07782782D3C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F15A46CEEB9819E6B43190D27F17AAF0B7B5242F6268117DC0787CBC2C11ECE2/0/323830333a353161303a35663a3a2f34382d3438203d3e20323637363939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:51a0:5f::/48

    Signature Algorithm: sha256WithRSAEncryption
         7c:a6:4d:cb:28:a0:1c:69:72:fb:9b:1e:fb:75:78:28:a6:b2:
         61:d2:59:f6:84:6a:2c:70:6c:b9:0a:15:b3:87:3e:9a:21:d1:
         05:cd:44:6a:af:2e:55:4d:5c:e3:7f:8d:36:ce:85:cf:10:d1:
         9b:4a:6e:f1:38:a9:20:d3:a2:97:ca:ad:77:5b:e5:da:2b:b9:
         36:6a:0a:ba:a4:ee:be:4d:cb:71:52:4a:f0:8e:b1:5f:bc:a5:
         23:f6:a8:f6:0e:26:07:a6:f9:08:0c:78:9b:fd:64:31:47:b1:
         aa:a0:81:11:b1:f7:32:a5:22:cd:fb:2f:ef:49:c2:e4:07:7f:
         d0:54:96:c1:9d:82:3d:c7:ff:9b:fe:50:8d:b1:e1:dd:77:78:
         3f:e8:cc:f2:2a:de:84:a2:5f:c9:b4:d9:94:0a:4a:16:93:2c:
         cc:41:ae:27:af:45:17:a7:0e:91:84:46:36:2c:b3:99:55:8c:
         28:07:77:a7:9a:1a:79:6e:fb:07:7c:a1:88:35:79:bb:58:cf:
         fe:5a:44:3e:49:78:93:90:e6:e2:47:13:f8:59:72:34:10:aa:
         08:c6:30:53:e4:59:1b:81:00:8a:32:d4:82:10:38:26:8c:9b:
         49:dd:cd:10:60:a2:de:89:59:78:12:50:de:52:2f:bd:e7:b9:
         0b:f8:f5:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 19:39:17 2025 by rpki-client