Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B5C1CF48754559FD896A10EC802B797A2A863FEAA85FC179F410B59A33044CEC/0/323830333a363730303a333030303a3a2f34302d3438203d3e20323632323230.roa
File:                     323830333a363730303a333030303a3a2f34302d3438203d3e20323632323230.roa (raw, json)
Hash identifier:          JcrHDMRlLqnxby+w8xCywGjlgdDin6bh/Oi5QQW89Ck=
Subject key identifier:   DF:97:34:93:41:72:82:02:74:96:55:94:AE:A1:BC:72:A6:CD:77:45
Certificate issuer:       /CN=24283CA1133BF90D2EB2CC52CE1E0804803B0C85
Certificate serial:       536F24ACC12AEC34DC6323E3C6CC6196D7DB87FD
Authority key identifier: 24:28:3C:A1:13:3B:F9:0D:2E:B2:CC:52:CE:1E:08:04:80:3B:0C:85
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24283CA1133BF90D2EB2CC52CE1E0804803B0C85.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B5C1CF48754559FD896A10EC802B797A2A863FEAA85FC179F410B59A33044CEC/0/323830333a363730303a333030303a3a2f34302d3438203d3e20323632323230.roa
Signing time:             Tue 04 Feb 2025 18:11:01 +0000
ROA not before:           Tue 04 Feb 2025 18:06:01 +0000
ROA not after:            Tue 03 Feb 2026 18:11:01 +0000
asID:                     262220
IP address blocks:        2803:6700:3000::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B5C1CF48754559FD896A10EC802B797A2A863FEAA85FC179F410B59A33044CEC/0/24283CA1133BF90D2EB2CC52CE1E0804803B0C85.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B5C1CF48754559FD896A10EC802B797A2A863FEAA85FC179F410B59A33044CEC/0/24283CA1133BF90D2EB2CC52CE1E0804803B0C85.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24283CA1133BF90D2EB2CC52CE1E0804803B0C85.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 01 May 2025 04:18:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:6f:24:ac:c1:2a:ec:34:dc:63:23:e3:c6:cc:61:96:d7:db:87:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24283CA1133BF90D2EB2CC52CE1E0804803B0C85
        Validity
            Not Before: Feb  4 18:06:01 2025 GMT
            Not After : Feb  3 18:11:01 2026 GMT
        Subject: CN=DF9734934172820274965594AEA1BC72A6CD7745
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:84:67:93:b8:17:1d:d9:6f:57:3e:c7:33:03:
                    13:9b:58:07:2d:b5:15:03:22:8e:f0:ec:29:8f:5b:
                    37:8a:92:e6:91:98:ce:04:aa:f4:a9:1a:bd:e2:23:
                    8c:0d:79:eb:fc:2f:fb:0d:f3:8a:f2:54:80:4c:1a:
                    75:6f:1e:dd:fb:e7:58:93:de:21:95:1b:6d:a9:a4:
                    1e:a9:90:39:1c:7f:5d:1d:a7:91:30:3b:c6:f3:2b:
                    1e:b1:cd:7c:2b:96:60:5c:2f:ed:8a:68:65:42:a8:
                    b2:f5:98:1e:73:62:11:59:0c:02:f9:2d:93:83:67:
                    e2:59:72:ac:b1:72:ef:bd:83:f1:4a:02:f6:5e:ff:
                    f5:5d:16:10:20:c5:b4:26:a0:fe:b9:3c:96:39:5e:
                    3e:99:b6:7b:57:9e:34:45:41:df:77:5e:a4:eb:34:
                    24:47:b8:7b:ac:b1:b2:9d:e7:c8:eb:a1:3b:00:bb:
                    7d:8d:5d:26:46:87:eb:87:a2:52:3f:9a:b5:09:fb:
                    91:b1:cf:9b:0d:37:5e:de:ad:0f:80:85:7d:02:c0:
                    a4:98:6b:ba:af:c2:f8:a5:ff:06:90:89:5d:19:c8:
                    b3:1a:fe:45:3d:e5:2e:0a:2b:0c:64:d2:84:44:61:
                    68:bd:04:ca:be:22:df:5b:2a:ab:62:49:d8:60:b9:
                    c1:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:97:34:93:41:72:82:02:74:96:55:94:AE:A1:BC:72:A6:CD:77:45
            X509v3 Authority Key Identifier:
                keyid:24:28:3C:A1:13:3B:F9:0D:2E:B2:CC:52:CE:1E:08:04:80:3B:0C:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B5C1CF48754559FD896A10EC802B797A2A863FEAA85FC179F410B59A33044CEC/0/24283CA1133BF90D2EB2CC52CE1E0804803B0C85.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24283CA1133BF90D2EB2CC52CE1E0804803B0C85.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B5C1CF48754559FD896A10EC802B797A2A863FEAA85FC179F410B59A33044CEC/0/323830333a363730303a333030303a3a2f34302d3438203d3e20323632323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6700:3000::/40

    Signature Algorithm: sha256WithRSAEncryption
         42:17:f9:d3:81:d9:d7:30:bf:a6:3b:31:f3:d4:0f:2b:41:13:
         c4:18:ce:33:f7:f3:ac:30:5c:47:36:c7:f3:c1:7f:a7:f6:b4:
         0d:64:cd:8d:b9:30:da:1e:05:19:d7:d6:ec:3f:37:97:e2:36:
         1b:26:03:5f:d5:1d:7a:35:3f:08:3b:77:41:f1:92:cb:f2:64:
         1f:9e:79:cc:6d:f7:83:e9:e3:02:9c:56:a7:ec:1d:0c:e5:c3:
         0e:79:0c:d9:44:60:03:83:cc:e7:87:df:44:ff:f0:65:81:55:
         2c:cd:65:e4:50:1c:8c:2d:37:b7:f4:8e:ff:06:9e:11:b8:70:
         34:71:f6:5f:cd:63:6a:23:a1:07:f4:ac:91:4b:b8:41:48:a7:
         17:b3:f5:7c:24:c1:da:6f:bf:65:34:c6:82:6a:5d:69:8b:f6:
         67:2f:bd:e5:bc:db:14:74:22:fd:1f:3c:4d:8a:4c:3b:de:a6:
         df:1d:d1:e5:31:6f:c0:6d:a8:b0:30:31:15:14:49:69:cc:c9:
         18:86:f1:af:c0:0a:e3:70:76:65:fc:a9:f7:ab:c5:25:7e:87:
         1e:94:b0:b9:0b:14:a3:77:57:6c:d1:36:3e:44:5e:7e:dc:02:
         45:de:8c:2c:4a:9c:38:0b:bd:80:e7:aa:a0:2d:82:60:99:c2:
         d6:54:a0:59
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Apr 27 19:12:03 2025 by rpki-client on console.sobornost.net