Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FD574A6F238C0DC117A8A08D48C369062CCC0A8A913C98072EB717961E739809/0/323830333a663264303a3132633a3a2f34382d3438203d3e20323734303633.roa
File:                     323830333a663264303a3132633a3a2f34382d3438203d3e20323734303633.roa (raw, json)
Hash identifier:          bcZWmCjdkzftgfksLlkB+/esmXnDyATdCcQVtbag3x0=
Subject key identifier:   C7:F8:F2:03:8C:86:A2:39:F5:51:2B:BF:25:F0:85:1C:00:57:9D:FD
Certificate issuer:       /CN=0024F2646BA42106407316FE59A0CD2A76EF240C
Certificate serial:       4D27A31F617EBC42BC35C25A9BE51926B18A5D15
Authority key identifier: 00:24:F2:64:6B:A4:21:06:40:73:16:FE:59:A0:CD:2A:76:EF:24:0C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0024F2646BA42106407316FE59A0CD2A76EF240C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FD574A6F238C0DC117A8A08D48C369062CCC0A8A913C98072EB717961E739809/0/323830333a663264303a3132633a3a2f34382d3438203d3e20323734303633.roa
Signing time:             Thu 20 Mar 2025 13:15:00 +0000
ROA not before:           Thu 20 Mar 2025 13:10:00 +0000
ROA not after:            Thu 19 Mar 2026 13:15:00 +0000
asID:                     274063
IP address blocks:        2803:f2d0:12c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FD574A6F238C0DC117A8A08D48C369062CCC0A8A913C98072EB717961E739809/0/0024F2646BA42106407316FE59A0CD2A76EF240C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FD574A6F238C0DC117A8A08D48C369062CCC0A8A913C98072EB717961E739809/0/0024F2646BA42106407316FE59A0CD2A76EF240C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0024F2646BA42106407316FE59A0CD2A76EF240C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 17:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:27:a3:1f:61:7e:bc:42:bc:35:c2:5a:9b:e5:19:26:b1:8a:5d:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0024F2646BA42106407316FE59A0CD2A76EF240C
        Validity
            Not Before: Mar 20 13:10:00 2025 GMT
            Not After : Mar 19 13:15:00 2026 GMT
        Subject: CN=C7F8F2038C86A239F5512BBF25F0851C00579DFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:50:56:db:51:6f:7e:93:07:0b:9d:8e:78:69:
                    c3:7f:71:ae:bd:f4:84:7a:56:8e:76:a0:f1:40:77:
                    81:1c:fa:3a:3b:a0:d7:9f:f3:51:56:2c:52:58:b8:
                    1e:0b:06:ad:3f:b9:8b:94:03:0e:a1:54:55:24:18:
                    8a:ed:4b:ed:49:ba:1c:27:5a:e1:31:3b:2b:79:b6:
                    fe:82:11:ef:ff:3e:c0:4b:62:98:33:7a:3a:f1:df:
                    10:71:11:00:32:cf:98:16:45:90:06:2e:73:86:64:
                    e5:0b:64:7b:98:d9:a9:76:eb:79:18:d8:2d:ec:b0:
                    c1:5e:b7:d3:5b:79:d2:50:b7:bd:20:31:a9:c4:55:
                    7b:10:4a:eb:e4:93:25:1a:06:73:3a:40:10:6d:c7:
                    67:db:ab:cf:a8:58:da:8b:5f:98:c0:fb:ce:f3:4e:
                    53:df:91:2c:f4:63:18:57:80:7e:cb:d8:b7:0a:7c:
                    1b:4d:6c:5a:3e:f2:cc:75:86:22:d3:29:03:00:67:
                    03:53:14:d3:7c:5c:0a:f7:95:17:6a:72:01:63:e6:
                    ec:d5:5e:d9:fe:d3:09:4f:12:57:42:d2:58:6c:ca:
                    43:7f:1d:45:c6:af:46:36:28:d2:10:20:98:09:e8:
                    1a:97:e1:1b:bf:5b:62:38:90:69:03:75:58:44:36:
                    58:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:F8:F2:03:8C:86:A2:39:F5:51:2B:BF:25:F0:85:1C:00:57:9D:FD
            X509v3 Authority Key Identifier:
                keyid:00:24:F2:64:6B:A4:21:06:40:73:16:FE:59:A0:CD:2A:76:EF:24:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FD574A6F238C0DC117A8A08D48C369062CCC0A8A913C98072EB717961E739809/0/0024F2646BA42106407316FE59A0CD2A76EF240C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0024F2646BA42106407316FE59A0CD2A76EF240C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FD574A6F238C0DC117A8A08D48C369062CCC0A8A913C98072EB717961E739809/0/323830333a663264303a3132633a3a2f34382d3438203d3e20323734303633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f2d0:12c::/48

    Signature Algorithm: sha256WithRSAEncryption
         02:ce:23:61:b7:d5:2d:4d:05:4d:11:be:46:a2:6b:48:09:8c:
         4e:ac:0d:ba:86:f6:67:7c:92:73:26:9c:42:fc:d6:4b:ca:4d:
         9e:17:e0:41:49:e0:2e:21:0d:f3:6e:2e:c4:38:0f:c8:65:9a:
         57:33:05:06:8b:e8:a9:00:06:4e:8f:60:00:37:9d:29:94:f1:
         00:93:64:d2:f4:75:be:03:2a:91:cf:c8:ff:e2:94:73:1e:4d:
         21:75:55:ff:43:b2:ee:fa:d0:15:18:8e:5c:e4:db:f7:6a:55:
         72:04:61:26:ad:2f:c5:9d:bb:09:bd:64:9b:49:a0:df:55:09:
         e7:fb:47:1e:7a:1a:dd:d0:4e:aa:de:98:fa:77:a1:b2:8b:42:
         ec:44:5f:6b:46:54:07:49:84:c0:07:a3:64:89:d6:cd:f0:22:
         dc:3e:b7:cc:ef:a8:5b:cb:62:17:4d:a7:63:b5:72:1d:27:77:
         a7:a2:5b:2c:dd:16:4e:37:71:86:7f:f6:c9:b9:f5:62:ee:55:
         4a:42:9e:fc:9a:92:43:bf:45:d0:4b:80:78:e0:36:2a:28:42:
         bb:fb:cb:c3:e8:1e:62:75:59:37:65:b0:d3:21:44:86:ab:2f:
         9f:87:74:64:5b:05:b4:96:8e:6e:df:19:98:1b:f3:68:61:7d:
         63:d1:fa:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 13:18:12 2025 by rpki-client