Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FD574A6F238C0DC117A8A08D48C369062CCC0A8A913C98072EB717961E739809/0/323830333a663264303a62313a3a2f34382d3634203d3e20323734303633.roa
File:                     323830333a663264303a62313a3a2f34382d3634203d3e20323734303633.roa (raw, json)
Hash identifier:          OXPvoFVz/AeaaN5vHy+2jRfVinKIeoe38o+tPy6z+z4=
Subject key identifier:   46:21:3E:9B:B5:8E:82:F6:E9:49:20:E1:80:14:C3:60:04:AB:58:02
Certificate issuer:       /CN=0024F2646BA42106407316FE59A0CD2A76EF240C
Certificate serial:       1C2835F8BF20C2A5DAD4E94AD3215A298882B6C1
Authority key identifier: 00:24:F2:64:6B:A4:21:06:40:73:16:FE:59:A0:CD:2A:76:EF:24:0C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0024F2646BA42106407316FE59A0CD2A76EF240C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FD574A6F238C0DC117A8A08D48C369062CCC0A8A913C98072EB717961E739809/0/323830333a663264303a62313a3a2f34382d3634203d3e20323734303633.roa
Signing time:             Wed 16 Jul 2025 20:30:00 +0000
ROA not before:           Wed 16 Jul 2025 20:25:00 +0000
ROA not after:            Wed 15 Jul 2026 20:30:00 +0000
asID:                     274063
IP address blocks:        2803:f2d0:b1::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FD574A6F238C0DC117A8A08D48C369062CCC0A8A913C98072EB717961E739809/0/0024F2646BA42106407316FE59A0CD2A76EF240C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FD574A6F238C0DC117A8A08D48C369062CCC0A8A913C98072EB717961E739809/0/0024F2646BA42106407316FE59A0CD2A76EF240C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0024F2646BA42106407316FE59A0CD2A76EF240C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Jul 2025 19:30:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:28:35:f8:bf:20:c2:a5:da:d4:e9:4a:d3:21:5a:29:88:82:b6:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0024F2646BA42106407316FE59A0CD2A76EF240C
        Validity
            Not Before: Jul 16 20:25:00 2025 GMT
            Not After : Jul 15 20:30:00 2026 GMT
        Subject: CN=46213E9BB58E82F6E94920E18014C36004AB5802
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:16:8b:78:07:fe:ba:9e:3d:8a:76:14:8f:a0:
                    77:64:89:f5:18:13:d0:29:9e:12:45:87:02:a9:9a:
                    01:0b:8a:15:65:f5:a4:12:36:88:fe:57:bb:8d:24:
                    63:31:84:a6:86:fa:bc:ae:e2:db:e2:95:e4:d2:8e:
                    ef:78:f5:6e:72:cf:6c:aa:39:eb:a8:53:74:ec:33:
                    84:5d:c7:bd:10:a5:be:51:72:fb:d7:cf:ec:cb:40:
                    f5:16:f6:85:01:a8:0e:7d:4a:a7:60:c6:76:6b:b4:
                    b7:c8:e0:7e:c8:f6:95:47:a3:b5:82:b2:82:0e:19:
                    bd:bf:aa:fb:e3:fa:73:6d:a1:68:39:d9:61:18:c0:
                    5a:c3:58:05:44:13:bf:af:6c:d4:ad:fd:1d:98:d1:
                    fa:bb:d8:4f:e3:c4:f3:9d:34:06:cb:9d:06:bc:b4:
                    6c:af:77:71:c6:e6:99:51:55:41:7c:39:2d:4d:d1:
                    3f:c6:b7:41:94:80:99:1a:eb:85:ba:4c:a2:b0:dd:
                    d0:b8:20:34:41:17:43:88:6c:ad:bc:89:ff:c7:de:
                    7a:54:22:e9:9a:eb:13:d4:cf:5b:8c:9f:19:bd:6d:
                    d6:fa:62:3d:15:3a:85:a2:37:fc:68:5c:78:7e:d5:
                    d2:20:7e:dd:c3:0b:2f:10:63:85:b6:33:99:70:e7:
                    3d:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:21:3E:9B:B5:8E:82:F6:E9:49:20:E1:80:14:C3:60:04:AB:58:02
            X509v3 Authority Key Identifier:
                keyid:00:24:F2:64:6B:A4:21:06:40:73:16:FE:59:A0:CD:2A:76:EF:24:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FD574A6F238C0DC117A8A08D48C369062CCC0A8A913C98072EB717961E739809/0/0024F2646BA42106407316FE59A0CD2A76EF240C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0024F2646BA42106407316FE59A0CD2A76EF240C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FD574A6F238C0DC117A8A08D48C369062CCC0A8A913C98072EB717961E739809/0/323830333a663264303a62313a3a2f34382d3634203d3e20323734303633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f2d0:b1::/48

    Signature Algorithm: sha256WithRSAEncryption
         3a:1e:10:7c:2e:58:c6:3f:04:74:45:2f:88:a8:a3:4d:1b:39:
         41:8c:48:77:dd:a1:7e:f0:f9:23:00:76:a3:8c:82:82:9a:17:
         d2:7c:91:3d:75:78:40:58:be:8e:27:2a:c3:fc:e4:56:0d:43:
         33:d5:ab:a1:4a:46:52:43:d5:62:0c:76:32:b1:95:f7:8a:6d:
         76:df:60:ef:0e:74:9b:2b:a5:b4:c5:e2:9c:3d:74:43:16:15:
         a2:52:2c:54:06:f3:d1:9b:4f:1f:54:7e:96:02:06:f3:03:b0:
         70:ac:1e:4a:66:ed:16:36:dc:a2:3a:a7:75:87:bb:13:1c:7f:
         8a:40:51:f0:88:72:10:aa:be:e1:30:78:05:0f:61:ba:b8:0c:
         30:be:f6:ca:88:25:9c:51:87:4f:dd:6c:32:a8:97:19:c1:42:
         28:ed:04:d4:3c:e1:cd:b3:8d:82:16:e8:01:10:af:12:98:92:
         1f:54:ee:da:56:bf:6f:0f:4f:e3:4f:ad:c6:9e:fc:4a:c6:26:
         d7:40:87:a6:24:cc:09:4c:c5:7e:54:ca:52:c3:d1:5c:c2:ec:
         41:63:87:37:7b:8a:6f:bc:7c:ba:2b:1e:b0:e4:26:45:1c:c1:
         9d:f7:ae:77:62:af:33:f1:26:14:54:4b:ca:a3:18:84:61:ad:
         73:b2:98:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 18:59:13 2025 by rpki-client