Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/84E9CFD0BCC44D1CF08FDA245B0A3088B0249CA1F629FA2EC30BEE800680995C/0/323830333a373365303a3a2f33322d3438203d3e20323730313036.roa
File:                     323830333a373365303a3a2f33322d3438203d3e20323730313036.roa (raw, json)
Hash identifier:          e3qw8hHVFC44q9OXvoDdWh+rYdK+/K0PaWOzKExTQLY=
Subject key identifier:   3F:F7:65:7E:20:3A:39:E4:D2:D8:10:73:0E:45:0D:53:7E:02:6B:56
Certificate issuer:       /CN=8F3AF6492C8FEF731CBFEDBFD08A6B918FDA4D83
Certificate serial:       595C5447CBF391A15A512C495D9697240FF48DEA
Authority key identifier: 8F:3A:F6:49:2C:8F:EF:73:1C:BF:ED:BF:D0:8A:6B:91:8F:DA:4D:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8F3AF6492C8FEF731CBFEDBFD08A6B918FDA4D83.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/84E9CFD0BCC44D1CF08FDA245B0A3088B0249CA1F629FA2EC30BEE800680995C/0/323830333a373365303a3a2f33322d3438203d3e20323730313036.roa
Signing time:             Thu 08 May 2025 17:35:00 +0000
ROA not before:           Thu 08 May 2025 17:30:00 +0000
ROA not after:            Thu 07 May 2026 17:35:00 +0000
asID:                     270106
IP address blocks:        2803:73e0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/84E9CFD0BCC44D1CF08FDA245B0A3088B0249CA1F629FA2EC30BEE800680995C/0/8F3AF6492C8FEF731CBFEDBFD08A6B918FDA4D83.crl
                          rsync://repository.lacnic.net/rpki/lacnic/84E9CFD0BCC44D1CF08FDA245B0A3088B0249CA1F629FA2EC30BEE800680995C/0/8F3AF6492C8FEF731CBFEDBFD08A6B918FDA4D83.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8F3AF6492C8FEF731CBFEDBFD08A6B918FDA4D83.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 18 May 2025 19:08:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:5c:54:47:cb:f3:91:a1:5a:51:2c:49:5d:96:97:24:0f:f4:8d:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F3AF6492C8FEF731CBFEDBFD08A6B918FDA4D83
        Validity
            Not Before: May  8 17:30:00 2025 GMT
            Not After : May  7 17:35:00 2026 GMT
        Subject: CN=3FF7657E203A39E4D2D810730E450D537E026B56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:4e:35:f4:f1:43:71:cb:1e:a1:90:b3:ca:02:
                    c1:31:42:55:7f:f3:92:45:03:66:e9:3c:01:20:47:
                    85:3e:42:79:55:9a:24:33:c3:a7:3c:41:a5:96:d0:
                    7a:e5:ef:3c:de:9e:28:80:0a:ea:57:8e:80:df:78:
                    75:1f:ec:52:fc:ae:5e:da:fb:c1:fe:79:66:b9:66:
                    fc:46:c6:f5:40:9a:10:fb:ca:18:31:0a:eb:40:88:
                    a6:e5:e7:d4:22:ee:74:2f:e5:db:bc:de:97:c1:5f:
                    bd:51:7d:af:be:b2:7e:d7:bc:b4:25:f2:28:98:74:
                    1c:5c:4d:54:85:bf:04:3e:84:b3:d4:5f:a9:98:87:
                    9e:db:1d:2c:01:d8:00:48:d6:f7:b1:89:23:42:c9:
                    7c:79:77:ef:1f:46:c9:57:1f:52:36:1c:d6:08:00:
                    bb:92:05:f9:f7:48:32:e9:3e:a7:ce:54:99:c8:74:
                    ab:2d:87:b2:07:f5:41:8f:8c:db:a9:1e:c9:a2:66:
                    d7:43:9d:8d:37:b6:c5:f9:07:da:36:3c:4c:82:de:
                    99:0e:4a:25:c0:81:34:b2:fc:d8:5d:59:1d:ee:af:
                    02:eb:2f:c7:51:df:3a:a4:98:ed:21:b4:a1:6f:9f:
                    94:36:26:e0:2a:28:ff:9d:08:18:aa:73:a7:7a:22:
                    9a:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:F7:65:7E:20:3A:39:E4:D2:D8:10:73:0E:45:0D:53:7E:02:6B:56
            X509v3 Authority Key Identifier:
                keyid:8F:3A:F6:49:2C:8F:EF:73:1C:BF:ED:BF:D0:8A:6B:91:8F:DA:4D:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/84E9CFD0BCC44D1CF08FDA245B0A3088B0249CA1F629FA2EC30BEE800680995C/0/8F3AF6492C8FEF731CBFEDBFD08A6B918FDA4D83.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8F3AF6492C8FEF731CBFEDBFD08A6B918FDA4D83.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/84E9CFD0BCC44D1CF08FDA245B0A3088B0249CA1F629FA2EC30BEE800680995C/0/323830333a373365303a3a2f33322d3438203d3e20323730313036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:73e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         3f:fc:fb:da:7f:64:97:1a:07:9e:6a:60:0d:87:92:9d:9d:c3:
         30:31:c3:2c:4f:ed:ed:e1:4c:27:09:05:3f:6b:c5:a9:f0:f6:
         16:7c:88:a5:dd:ac:a1:08:73:91:1f:5d:2d:67:94:7a:56:a5:
         e9:60:8c:98:a8:0d:dc:ff:69:fc:0d:85:0d:35:31:bb:b0:89:
         65:9b:83:d8:d6:55:ad:76:97:ab:78:20:ae:bf:2b:7e:79:cc:
         b5:64:c1:98:35:0e:a8:5f:3e:62:de:a1:3f:c8:e7:c1:8c:c8:
         8e:d7:1d:1f:49:3d:ab:1e:dc:5e:40:b3:9f:3d:88:c3:6e:e3:
         37:1e:f0:e5:ae:cc:cb:00:35:0d:2e:98:ce:6e:78:81:b5:3a:
         1b:9c:82:3e:3b:3e:de:95:e1:a6:22:54:41:7d:76:cd:b1:5f:
         c3:53:1a:5d:9e:39:a8:ed:c4:ae:2b:86:ec:fa:24:43:b6:05:
         0d:31:fe:07:87:52:2c:c5:1c:d6:d1:80:ad:76:98:90:bf:01:
         e9:c8:12:a5:c5:1e:51:ad:c5:7d:c8:5d:78:47:18:e5:89:6b:
         bb:55:ab:47:ae:47:d9:0c:a8:1b:f0:f6:a4:0c:8a:2c:71:05:
         42:17:7e:55:e6:93:9a:a8:8d:8e:df:03:1d:f4:f9:da:7f:52:
         64:80:e3:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 20:49:42 2025 by rpki-client