Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B3E50B11115C084D6BA8197C0580CAAFEFDFD546F917BF6C3FCE3125AD581653/0/323830333a346139303a383330333a3a2f34382d3438203d3e20323732383735.roa
File:                     323830333a346139303a383330333a3a2f34382d3438203d3e20323732383735.roa (raw, json)
Hash identifier:          IBn4Ffgwk/vPOtOsIn5x101vHMTOLwjDgKTAcPmbMKo=
Subject key identifier:   83:DA:A6:51:8A:3A:FF:01:21:CA:D2:93:9F:2E:EC:7A:2A:F1:04:1C
Certificate issuer:       /CN=3CCAFF3C26A38C5EE9BF02C49848A13D82DFE81F
Certificate serial:       6F4578ED10690BA05A1C2D28D7F63B5CA00C8920
Authority key identifier: 3C:CA:FF:3C:26:A3:8C:5E:E9:BF:02:C4:98:48:A1:3D:82:DF:E8:1F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3CCAFF3C26A38C5EE9BF02C49848A13D82DFE81F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B3E50B11115C084D6BA8197C0580CAAFEFDFD546F917BF6C3FCE3125AD581653/0/323830333a346139303a383330333a3a2f34382d3438203d3e20323732383735.roa
Signing time:             Fri 25 Apr 2025 21:50:01 +0000
ROA not before:           Fri 25 Apr 2025 21:45:01 +0000
ROA not after:            Fri 24 Apr 2026 21:50:01 +0000
asID:                     272875
IP address blocks:        2803:4a90:8303::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B3E50B11115C084D6BA8197C0580CAAFEFDFD546F917BF6C3FCE3125AD581653/0/3CCAFF3C26A38C5EE9BF02C49848A13D82DFE81F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B3E50B11115C084D6BA8197C0580CAAFEFDFD546F917BF6C3FCE3125AD581653/0/3CCAFF3C26A38C5EE9BF02C49848A13D82DFE81F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3CCAFF3C26A38C5EE9BF02C49848A13D82DFE81F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:45:78:ed:10:69:0b:a0:5a:1c:2d:28:d7:f6:3b:5c:a0:0c:89:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3CCAFF3C26A38C5EE9BF02C49848A13D82DFE81F
        Validity
            Not Before: Apr 25 21:45:01 2025 GMT
            Not After : Apr 24 21:50:01 2026 GMT
        Subject: CN=83DAA6518A3AFF0121CAD2939F2EEC7A2AF1041C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:6b:2b:8b:b8:b7:d8:bb:28:e1:43:6c:7a:21:
                    a8:27:49:14:a0:81:1b:88:0f:30:42:61:74:bd:e8:
                    9e:1d:00:4a:40:92:2c:c4:12:c4:58:71:d9:e7:9a:
                    28:6a:b0:61:47:c7:19:53:ad:cb:00:47:c2:e6:24:
                    cd:b1:78:1c:6e:c1:3a:b6:8d:d7:36:2c:40:d9:e2:
                    ec:5a:c3:03:33:cc:3c:72:a4:28:1e:7f:51:08:f4:
                    43:fd:ad:0a:6c:b9:4a:c3:25:3d:1f:33:b6:41:b5:
                    29:0f:04:62:c3:98:09:25:fe:24:5b:b5:08:92:ae:
                    6b:49:ac:d4:43:e9:95:13:13:62:56:b2:c6:1f:fb:
                    17:ee:10:d1:e2:24:8c:b0:74:fc:9b:c7:14:7d:cc:
                    b7:32:0c:68:d5:2c:43:60:aa:bc:fe:d5:db:0d:a6:
                    a6:4c:2a:ce:fb:15:59:36:35:51:bb:25:c4:a4:e7:
                    53:b2:93:a7:78:73:38:df:49:57:c3:71:6b:48:b1:
                    89:30:5e:01:4e:61:20:28:f9:03:cf:df:82:8f:1d:
                    aa:63:2c:4f:72:c6:28:f2:43:b5:e7:10:4e:f7:8e:
                    ed:24:1f:65:96:6c:25:39:fa:2d:78:8b:f4:65:c4:
                    a5:a2:44:6d:df:63:25:48:0c:57:53:37:4b:32:ee:
                    4a:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:DA:A6:51:8A:3A:FF:01:21:CA:D2:93:9F:2E:EC:7A:2A:F1:04:1C
            X509v3 Authority Key Identifier:
                keyid:3C:CA:FF:3C:26:A3:8C:5E:E9:BF:02:C4:98:48:A1:3D:82:DF:E8:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B3E50B11115C084D6BA8197C0580CAAFEFDFD546F917BF6C3FCE3125AD581653/0/3CCAFF3C26A38C5EE9BF02C49848A13D82DFE81F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3CCAFF3C26A38C5EE9BF02C49848A13D82DFE81F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B3E50B11115C084D6BA8197C0580CAAFEFDFD546F917BF6C3FCE3125AD581653/0/323830333a346139303a383330333a3a2f34382d3438203d3e20323732383735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4a90:8303::/48

    Signature Algorithm: sha256WithRSAEncryption
         21:f3:ed:9f:d7:d3:f7:db:fa:35:d0:2b:26:d4:53:f5:ae:a6:
         81:35:2f:eb:a6:a4:7f:91:a9:c7:83:79:a7:ea:b9:32:f2:c3:
         58:40:94:50:46:db:a7:52:a8:a4:5c:10:c3:1d:be:cb:63:2b:
         6d:22:db:f1:a7:5d:3d:56:f6:0e:ca:a0:6e:7f:7a:ba:16:c0:
         05:54:33:e3:69:1b:26:7b:fe:22:b3:f1:1e:dc:c0:b6:5d:dc:
         5f:13:38:12:c7:53:b9:1c:90:b3:ff:92:b3:6c:c6:03:5a:91:
         95:74:43:69:56:91:c4:21:57:77:2b:ed:13:b1:74:cf:bf:49:
         28:a7:03:4a:3e:e1:32:f2:e0:aa:6b:d1:62:b2:4d:ff:60:87:
         2a:e2:2f:61:a5:2c:c0:3b:bb:a4:5c:10:48:02:ed:7d:b0:08:
         c6:9e:bf:45:6c:25:a4:8d:fb:99:e4:9d:2b:48:9f:43:d0:c6:
         43:9b:ef:e4:01:94:b4:b6:c2:d2:2f:ec:08:4e:7f:cb:10:5c:
         8d:43:c2:f1:ad:2f:74:00:42:e7:59:93:b8:9c:18:45:50:30:
         af:87:d3:71:eb:4b:94:64:c3:dd:cd:8d:f8:3f:4e:e5:c9:11:
         06:0e:fe:cf:b5:3a:30:58:3e:02:d6:2b:fa:6e:21:ce:eb:cb:
         69:92:b4:4b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Apr 28 22:47:39 2025 by rpki-client on console.sobornost.net