Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D233B807710758B592DE153A98CC3B3CE031BE2875C996CD8F7E46E3526AAF20/0/323830333a313138303a333a3a2f34382d3438203d3e20323633323432.roa
File:                     323830333a313138303a333a3a2f34382d3438203d3e20323633323432.roa (raw, json)
Hash identifier:          XDS6aPcLId48V/gw4S7rSLEE4d2pVLJOTm1z8A7mELs=
Subject key identifier:   E6:D5:8A:C9:4A:ED:B6:30:4F:57:23:DE:D2:EB:3C:EF:AD:BF:8E:41
Certificate issuer:       /CN=F84C64765934CC9A2CE97A1150E058489F19D535
Certificate serial:       7FC01E5979348D30020BC38EB002212714B5E706
Authority key identifier: F8:4C:64:76:59:34:CC:9A:2C:E9:7A:11:50:E0:58:48:9F:19:D5:35
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F84C64765934CC9A2CE97A1150E058489F19D535.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D233B807710758B592DE153A98CC3B3CE031BE2875C996CD8F7E46E3526AAF20/0/323830333a313138303a333a3a2f34382d3438203d3e20323633323432.roa
Signing time:             Fri 11 Apr 2025 16:14:35 +0000
ROA not before:           Fri 11 Apr 2025 16:09:35 +0000
ROA not after:            Fri 10 Apr 2026 16:14:35 +0000
asID:                     263242
IP address blocks:        2803:1180:3::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D233B807710758B592DE153A98CC3B3CE031BE2875C996CD8F7E46E3526AAF20/0/F84C64765934CC9A2CE97A1150E058489F19D535.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D233B807710758B592DE153A98CC3B3CE031BE2875C996CD8F7E46E3526AAF20/0/F84C64765934CC9A2CE97A1150E058489F19D535.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F84C64765934CC9A2CE97A1150E058489F19D535.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:c0:1e:59:79:34:8d:30:02:0b:c3:8e:b0:02:21:27:14:b5:e7:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F84C64765934CC9A2CE97A1150E058489F19D535
        Validity
            Not Before: Apr 11 16:09:35 2025 GMT
            Not After : Apr 10 16:14:35 2026 GMT
        Subject: CN=E6D58AC94AEDB6304F5723DED2EB3CEFADBF8E41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:7d:24:48:a8:28:95:3d:54:21:b5:4c:57:55:
                    7a:64:00:aa:cb:90:16:2c:b4:ef:2c:af:8d:7f:87:
                    52:84:9d:64:a8:59:c3:78:fd:09:c9:a2:f7:91:ba:
                    2f:d8:ac:52:39:3a:32:a5:29:4a:85:21:78:11:29:
                    e3:fa:0c:98:6b:3b:60:09:36:22:22:01:0d:0a:54:
                    f0:ad:4c:68:f3:c2:18:d1:19:30:44:95:3c:37:8e:
                    35:23:07:24:53:af:4a:39:24:5f:27:ff:81:37:3b:
                    75:90:dd:fa:31:4b:fd:76:e2:c4:43:fb:af:24:dd:
                    f2:cb:d4:cc:82:97:70:39:d4:f2:01:9d:c3:96:35:
                    5c:17:ae:26:b5:34:0e:a4:13:2b:7f:e4:4c:75:f1:
                    a8:3d:58:07:46:ea:3b:67:27:ce:69:cd:9b:ae:90:
                    67:d4:7f:22:7f:04:75:7a:8c:f1:98:6d:a8:30:01:
                    17:20:32:d8:20:d3:1c:aa:50:95:1b:7a:2a:f0:10:
                    c4:50:a7:2a:bc:0b:03:6a:74:ae:83:bd:c2:a0:cc:
                    76:13:88:70:a1:59:07:c0:24:0d:c5:11:d3:1a:b5:
                    61:8a:d7:d2:c1:b9:81:8e:e0:e1:8c:61:39:f4:81:
                    ba:70:a3:19:29:34:f2:6e:80:6e:f9:a8:fe:8f:a8:
                    44:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:D5:8A:C9:4A:ED:B6:30:4F:57:23:DE:D2:EB:3C:EF:AD:BF:8E:41
            X509v3 Authority Key Identifier:
                keyid:F8:4C:64:76:59:34:CC:9A:2C:E9:7A:11:50:E0:58:48:9F:19:D5:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D233B807710758B592DE153A98CC3B3CE031BE2875C996CD8F7E46E3526AAF20/0/F84C64765934CC9A2CE97A1150E058489F19D535.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F84C64765934CC9A2CE97A1150E058489F19D535.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D233B807710758B592DE153A98CC3B3CE031BE2875C996CD8F7E46E3526AAF20/0/323830333a313138303a333a3a2f34382d3438203d3e20323633323432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1180:3::/48

    Signature Algorithm: sha256WithRSAEncryption
         2a:bb:eb:54:3e:c2:4d:ab:2c:cd:26:77:09:8c:1e:a4:6d:25:
         bd:6b:4b:f0:12:62:3c:46:04:f2:e3:1d:9a:1c:e7:f6:4e:a3:
         f7:f1:b4:31:d3:7c:cc:1d:19:02:28:43:be:aa:6d:79:73:02:
         04:17:67:45:8e:3f:e1:57:1b:de:46:f6:b4:df:3b:ba:f0:2b:
         a1:01:04:26:e4:45:1d:10:77:5f:25:7e:88:1b:28:a7:46:c6:
         0a:25:2c:31:ec:2c:65:42:09:49:4d:a4:12:ec:d3:9c:36:c1:
         a2:7c:ac:90:48:34:66:7d:22:59:18:d1:12:5f:be:ee:ab:1f:
         cc:07:c2:31:4f:c0:4e:7c:93:00:d5:a7:80:08:af:cc:ca:93:
         37:3c:14:40:b4:3b:fb:9a:81:4a:47:a5:d1:e7:db:7b:ee:07:
         ca:af:83:2c:37:ac:df:ee:c6:32:1d:b0:38:5a:47:36:fe:2c:
         76:5f:27:6b:af:13:79:f1:d1:f2:c0:3f:e7:5b:7c:8e:63:38:
         b5:63:42:80:33:e9:c5:82:42:ad:37:69:d9:e6:80:b1:ff:8d:
         8b:9f:85:43:20:92:16:0b:a9:cf:b4:2b:f4:ae:7e:bf:33:13:
         8e:cd:95:7a:34:4d:29:9a:ab:21:d1:b1:99:3f:7c:e4:45:6d:
         b1:6f:d6:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 05:59:19 2025 by rpki-client on console.sobornost.net