Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FC8B1A3C4D93E589A9D67B1E49AAA7D546E32D7C3494C03ADB2EC444308EB747/0/323830333a613765303a3a2f33322d3438203d3e20323730313030.roa
File:                     323830333a613765303a3a2f33322d3438203d3e20323730313030.roa (raw, json)
Hash identifier:          FY+484MrnMGsYAa/dm2O9LiH45Uim557oQlgwnSXlJQ=
Subject key identifier:   90:A0:5C:9C:BF:A0:60:60:12:51:1D:9E:6E:9B:F1:EE:84:36:57:62
Certificate issuer:       /CN=BA340C77857657BA84C4ACA36039874FAF1238B7
Certificate serial:       079B10E19B117310D853B105648AA2BE39C58414
Authority key identifier: BA:34:0C:77:85:76:57:BA:84:C4:AC:A3:60:39:87:4F:AF:12:38:B7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BA340C77857657BA84C4ACA36039874FAF1238B7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FC8B1A3C4D93E589A9D67B1E49AAA7D546E32D7C3494C03ADB2EC444308EB747/0/323830333a613765303a3a2f33322d3438203d3e20323730313030.roa
Signing time:             Tue 04 Feb 2025 18:22:50 +0000
ROA not before:           Tue 04 Feb 2025 18:17:50 +0000
ROA not after:            Tue 03 Feb 2026 18:22:50 +0000
asID:                     270100
IP address blocks:        2803:a7e0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FC8B1A3C4D93E589A9D67B1E49AAA7D546E32D7C3494C03ADB2EC444308EB747/0/BA340C77857657BA84C4ACA36039874FAF1238B7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8B1A3C4D93E589A9D67B1E49AAA7D546E32D7C3494C03ADB2EC444308EB747/0/BA340C77857657BA84C4ACA36039874FAF1238B7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BA340C77857657BA84C4ACA36039874FAF1238B7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:9b:10:e1:9b:11:73:10:d8:53:b1:05:64:8a:a2:be:39:c5:84:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA340C77857657BA84C4ACA36039874FAF1238B7
        Validity
            Not Before: Feb  4 18:17:50 2025 GMT
            Not After : Feb  3 18:22:50 2026 GMT
        Subject: CN=90A05C9CBFA0606012511D9E6E9BF1EE84365762
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f6:db:97:93:d7:c2:9a:33:e5:33:f1:6b:fb:
                    fe:d6:e6:17:bf:0a:cc:83:2c:1b:1d:16:a5:ed:d4:
                    7e:c6:5e:d8:b6:c4:d9:12:c7:af:e5:6b:09:80:99:
                    2f:a7:b6:cd:03:50:4e:5b:d6:de:56:35:88:9b:18:
                    76:e9:d0:0f:7c:2f:23:ad:8e:a3:08:06:46:b0:79:
                    be:1d:8e:fa:8e:fc:c9:d2:43:cb:ea:09:c9:a6:03:
                    66:d4:50:3c:8e:7e:71:3d:f0:72:68:b5:d8:24:72:
                    d6:ea:88:0f:27:12:07:0a:e4:5b:56:26:f8:33:c7:
                    a5:4f:3a:14:fa:8a:99:6b:ed:9b:ba:9c:5d:9e:43:
                    95:ec:94:5f:81:5f:f6:3e:40:28:c9:c7:7a:22:8f:
                    76:ce:ae:3a:c7:76:1f:e6:21:f1:ce:83:08:27:a0:
                    1e:c3:1a:04:fa:07:da:8d:82:ce:f9:d9:c9:93:b9:
                    26:74:50:8c:db:c3:35:de:1f:a5:86:75:fe:11:30:
                    47:bf:c9:f7:a2:c4:13:a4:02:4f:15:5d:90:b9:a9:
                    46:d1:82:24:77:dd:c8:35:73:b6:8a:2e:a7:a2:90:
                    88:a5:37:69:48:97:ed:c8:05:23:a8:43:92:2b:5c:
                    47:3a:f0:f5:59:f4:b4:2a:33:23:9a:3d:08:4b:ae:
                    e3:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:A0:5C:9C:BF:A0:60:60:12:51:1D:9E:6E:9B:F1:EE:84:36:57:62
            X509v3 Authority Key Identifier:
                keyid:BA:34:0C:77:85:76:57:BA:84:C4:AC:A3:60:39:87:4F:AF:12:38:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FC8B1A3C4D93E589A9D67B1E49AAA7D546E32D7C3494C03ADB2EC444308EB747/0/BA340C77857657BA84C4ACA36039874FAF1238B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BA340C77857657BA84C4ACA36039874FAF1238B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FC8B1A3C4D93E589A9D67B1E49AAA7D546E32D7C3494C03ADB2EC444308EB747/0/323830333a613765303a3a2f33322d3438203d3e20323730313030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:a7e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         51:98:08:6b:41:87:97:65:af:3d:52:95:08:80:4a:7f:c0:ee:
         e4:70:58:cd:56:66:eb:10:09:72:fc:7d:b7:c5:cc:69:58:a3:
         f2:b2:49:e2:5c:15:d5:e8:b8:e7:75:4f:ab:8f:9d:3e:c0:61:
         16:44:a1:07:1a:b1:92:84:c9:5f:4d:6d:c7:ad:40:53:86:24:
         46:05:6c:93:07:3e:b1:81:68:af:d6:02:39:d3:ec:c2:f5:26:
         87:4d:6e:2e:7d:8f:7c:1e:e5:8c:27:99:38:67:d4:a7:e0:d2:
         61:ca:67:38:81:ba:4e:f0:a6:8a:2c:a8:5a:59:14:fe:2d:83:
         83:5b:36:af:0e:a1:d2:a2:85:39:ce:ac:14:89:2f:12:c6:fb:
         01:f5:a0:d3:33:ce:36:8e:a7:7e:df:2b:28:33:15:23:84:df:
         8a:fc:85:6d:c6:30:5c:80:7c:c3:ee:3f:b8:9c:f5:d1:1d:ad:
         20:d5:8e:f4:4d:f6:17:e6:1c:c9:70:10:5e:90:e5:f6:63:32:
         29:91:3a:01:b6:82:a3:df:f1:47:d8:41:a9:5c:92:6c:76:89:
         c2:7c:e7:03:a1:6f:28:bd:c2:d1:4e:c5:25:47:38:77:97:6e:
         c2:3c:b8:62:77:0b:11:87:b8:42:1a:0d:e1:5d:09:52:5f:86:
         02:35:ea:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:40:48 2025 by rpki-client