Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FCAADAC9C144720537925B33BD29A28C0BDD9C6CDBEEB43D4B40CF739349B8DC/0/323830333a663861303a3a2f33322d3438203d3e20323636383138.roa
File:                     323830333a663861303a3a2f33322d3438203d3e20323636383138.roa (raw, json)
Hash identifier:          7fs6lbTpTAuUA5uyGdsGCmaT4oh5tzkdIeN+ORC7dDc=
Subject key identifier:   BF:E5:8F:D0:D6:29:56:F4:DD:11:11:A5:E0:46:94:48:E1:AD:72:05
Certificate issuer:       /CN=E93D8307A737FA98B8ABD43C7DC9B0441CAA92F6
Certificate serial:       4ADA17EDDE5B2C955346376D5E82CD497AB87AF9
Authority key identifier: E9:3D:83:07:A7:37:FA:98:B8:AB:D4:3C:7D:C9:B0:44:1C:AA:92:F6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E93D8307A737FA98B8ABD43C7DC9B0441CAA92F6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FCAADAC9C144720537925B33BD29A28C0BDD9C6CDBEEB43D4B40CF739349B8DC/0/323830333a663861303a3a2f33322d3438203d3e20323636383138.roa
Signing time:             Tue 04 Feb 2025 18:42:07 +0000
ROA not before:           Tue 04 Feb 2025 18:37:07 +0000
ROA not after:            Tue 03 Feb 2026 18:42:07 +0000
asID:                     266818
IP address blocks:        2803:f8a0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FCAADAC9C144720537925B33BD29A28C0BDD9C6CDBEEB43D4B40CF739349B8DC/0/E93D8307A737FA98B8ABD43C7DC9B0441CAA92F6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FCAADAC9C144720537925B33BD29A28C0BDD9C6CDBEEB43D4B40CF739349B8DC/0/E93D8307A737FA98B8ABD43C7DC9B0441CAA92F6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E93D8307A737FA98B8ABD43C7DC9B0441CAA92F6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 03:15:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:da:17:ed:de:5b:2c:95:53:46:37:6d:5e:82:cd:49:7a:b8:7a:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E93D8307A737FA98B8ABD43C7DC9B0441CAA92F6
        Validity
            Not Before: Feb  4 18:37:07 2025 GMT
            Not After : Feb  3 18:42:07 2026 GMT
        Subject: CN=BFE58FD0D62956F4DD1111A5E0469448E1AD7205
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:df:c5:b5:09:3d:40:58:03:b5:73:ee:41:b5:
                    ca:c6:9a:00:e4:24:70:c9:e4:7f:63:46:37:d9:d5:
                    45:4d:74:7a:0d:49:4d:ef:d8:0a:4f:68:ff:84:0c:
                    82:ac:7d:75:9b:4d:01:f2:83:d9:e3:d1:4c:90:7f:
                    89:08:b7:8d:f7:3d:80:eb:ee:f9:db:06:52:82:01:
                    47:78:e5:79:5b:0b:dc:b8:c6:4a:b8:22:3e:45:4d:
                    00:f2:df:f3:6e:e9:44:24:11:b0:c9:b8:a4:06:81:
                    47:4d:00:e3:e1:e5:6c:1e:9d:85:a0:34:cb:9d:25:
                    98:91:17:da:f6:50:af:96:8d:41:ff:40:8a:7f:dc:
                    52:b4:ff:69:56:30:aa:30:ee:5c:16:ec:fd:0f:6d:
                    0f:6f:a6:85:4b:01:e1:7d:46:b8:f4:b4:6b:32:a2:
                    61:a1:8b:fd:da:83:e9:fc:bf:fb:72:a2:01:eb:77:
                    07:6e:89:f3:36:92:52:26:55:4d:d3:00:c9:b3:8a:
                    06:98:a6:47:4e:18:25:ad:4e:17:52:d8:7c:fd:a6:
                    7e:ac:8b:30:eb:3a:ef:c2:b3:f6:33:34:9b:8e:f2:
                    72:ec:d5:21:af:26:f9:16:41:a5:2f:a6:07:a7:62:
                    33:0f:ee:0a:79:01:3d:11:34:35:c2:d6:38:3b:65:
                    5d:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:E5:8F:D0:D6:29:56:F4:DD:11:11:A5:E0:46:94:48:E1:AD:72:05
            X509v3 Authority Key Identifier:
                keyid:E9:3D:83:07:A7:37:FA:98:B8:AB:D4:3C:7D:C9:B0:44:1C:AA:92:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FCAADAC9C144720537925B33BD29A28C0BDD9C6CDBEEB43D4B40CF739349B8DC/0/E93D8307A737FA98B8ABD43C7DC9B0441CAA92F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E93D8307A737FA98B8ABD43C7DC9B0441CAA92F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FCAADAC9C144720537925B33BD29A28C0BDD9C6CDBEEB43D4B40CF739349B8DC/0/323830333a663861303a3a2f33322d3438203d3e20323636383138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f8a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         88:d7:61:e2:c6:02:ab:28:88:e5:5a:4e:0a:6b:5f:cd:02:6a:
         4c:87:ad:38:2c:39:e5:15:67:09:d5:8b:b0:a1:06:00:e6:02:
         03:56:68:27:d6:e0:97:f9:b4:02:41:c7:6a:34:94:72:7a:ba:
         9a:00:20:f9:44:92:10:1d:60:ab:bd:2f:0d:2a:78:bf:be:38:
         78:d5:83:ea:b9:9b:99:21:58:15:18:cf:40:1d:5f:7c:c0:25:
         a7:51:df:76:09:0f:e5:c2:1c:5d:27:01:66:38:29:18:73:e3:
         c4:1b:f3:aa:72:c0:2e:ce:05:6a:57:e7:d8:0a:fa:75:6f:fe:
         c4:ba:b2:d2:fa:2e:ff:14:e4:3f:fd:0e:20:da:4c:8d:00:15:
         3c:6d:df:f8:60:b7:71:d2:4a:4d:2f:09:f9:88:31:c6:5e:a1:
         79:22:70:7e:c9:6b:0f:73:f9:e6:10:5f:36:7d:08:34:01:bf:
         f0:df:83:65:02:7a:96:d8:20:b1:25:68:ef:17:81:e9:a1:71:
         d4:ce:85:64:64:f6:7e:f8:aa:da:6b:75:58:28:36:ee:c7:8b:
         a9:45:33:27:b5:e3:c7:ed:fa:6e:9c:54:87:b8:d8:2e:ae:d1:
         1b:76:8a:9e:00:43:47:e9:9f:6a:1b:ac:3e:fc:35:3b:27:a7:
         0c:26:b7:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:00:22 2025 by rpki-client