Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AFA7DB9156A4719B46F9F32350C6E3C59B0083F3FC2053D58DE99ECF34006417/0/323830333a646635303a3a2f33322d3438203d3e20323733393533.roa
File:                     323830333a646635303a3a2f33322d3438203d3e20323733393533.roa (raw, json)
Hash identifier:          rXJHooALxtqUoqtc5ejw7QdDd9EkWLD+ss3DQG66d3o=
Subject key identifier:   C7:07:BB:53:A7:1A:5C:88:98:4E:8F:0B:A7:72:1F:C3:96:CA:01:30
Certificate issuer:       /CN=E8A8EC365BA470C9FD9313633FD89AA1C7DD16E2
Certificate serial:       2020839E2C28B79D0C5F86DBCACED413946D1BF0
Authority key identifier: E8:A8:EC:36:5B:A4:70:C9:FD:93:13:63:3F:D8:9A:A1:C7:DD:16:E2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E8A8EC365BA470C9FD9313633FD89AA1C7DD16E2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AFA7DB9156A4719B46F9F32350C6E3C59B0083F3FC2053D58DE99ECF34006417/0/323830333a646635303a3a2f33322d3438203d3e20323733393533.roa
Signing time:             Tue 22 Apr 2025 21:50:00 +0000
ROA not before:           Tue 22 Apr 2025 21:45:00 +0000
ROA not after:            Tue 21 Apr 2026 21:50:00 +0000
asID:                     273953
IP address blocks:        2803:df50::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AFA7DB9156A4719B46F9F32350C6E3C59B0083F3FC2053D58DE99ECF34006417/0/E8A8EC365BA470C9FD9313633FD89AA1C7DD16E2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AFA7DB9156A4719B46F9F32350C6E3C59B0083F3FC2053D58DE99ECF34006417/0/E8A8EC365BA470C9FD9313633FD89AA1C7DD16E2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E8A8EC365BA470C9FD9313633FD89AA1C7DD16E2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 21 May 2025 01:23:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:20:83:9e:2c:28:b7:9d:0c:5f:86:db:ca:ce:d4:13:94:6d:1b:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E8A8EC365BA470C9FD9313633FD89AA1C7DD16E2
        Validity
            Not Before: Apr 22 21:45:00 2025 GMT
            Not After : Apr 21 21:50:00 2026 GMT
        Subject: CN=C707BB53A71A5C88984E8F0BA7721FC396CA0130
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:b5:09:17:e6:21:be:01:9d:dc:8b:35:71:e3:
                    3d:5c:9e:7d:15:15:f6:f5:d9:b5:e3:40:00:97:81:
                    44:31:26:4d:a1:c4:46:64:15:d1:8b:21:16:2b:dd:
                    34:bd:ba:bc:b5:fb:b0:5f:14:80:62:4b:e3:02:96:
                    58:7b:7f:2d:c6:2e:4f:1a:25:9a:b2:e2:f1:e5:dd:
                    dc:66:26:be:18:db:ec:c3:57:b9:fe:b8:c9:46:37:
                    24:ae:20:51:08:10:d2:28:3e:25:4b:5a:a3:3e:0a:
                    2c:d7:2c:15:79:28:27:7d:4a:97:20:31:21:b8:02:
                    16:e9:ee:0e:a1:e8:11:79:d8:3d:13:74:59:1a:87:
                    0e:96:16:54:59:8f:f2:26:4e:19:0d:d8:18:e9:05:
                    7f:0f:e2:8f:df:7a:f2:f4:40:22:3d:b0:d2:48:c4:
                    13:c4:44:55:fb:5e:ca:c4:54:d5:57:61:97:7f:8c:
                    43:fe:af:78:0b:e4:82:63:ba:ac:1c:0f:a3:e4:fd:
                    5e:61:d7:d3:0b:bb:f5:a1:9a:9e:51:0d:0c:e7:30:
                    3c:5f:32:ac:68:d5:05:54:61:29:d9:a4:da:ae:03:
                    49:68:21:d1:e0:3b:7e:fd:9a:e4:cd:94:50:10:94:
                    d2:57:8c:ba:f5:b0:81:e7:4e:93:ef:72:ae:bc:84:
                    c9:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:07:BB:53:A7:1A:5C:88:98:4E:8F:0B:A7:72:1F:C3:96:CA:01:30
            X509v3 Authority Key Identifier:
                keyid:E8:A8:EC:36:5B:A4:70:C9:FD:93:13:63:3F:D8:9A:A1:C7:DD:16:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AFA7DB9156A4719B46F9F32350C6E3C59B0083F3FC2053D58DE99ECF34006417/0/E8A8EC365BA470C9FD9313633FD89AA1C7DD16E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E8A8EC365BA470C9FD9313633FD89AA1C7DD16E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AFA7DB9156A4719B46F9F32350C6E3C59B0083F3FC2053D58DE99ECF34006417/0/323830333a646635303a3a2f33322d3438203d3e20323733393533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:df50::/32

    Signature Algorithm: sha256WithRSAEncryption
         20:81:83:6f:f8:b9:29:60:0b:5c:40:f7:86:47:2f:92:e9:e2:
         67:89:d2:50:de:a1:03:25:9a:72:1b:5f:d5:45:1e:2d:3f:16:
         9f:4d:a5:b4:ae:3e:16:35:28:99:d5:29:23:72:da:02:d4:8f:
         c9:55:61:53:c4:a6:cf:e2:f4:b8:31:26:d8:5e:e7:c1:42:d4:
         33:05:5c:84:54:8c:45:f1:cd:af:d0:8e:d4:32:4e:ac:73:d3:
         10:08:1b:7a:09:ef:59:ee:40:44:c6:f3:e0:24:13:93:2a:7c:
         2b:e9:0c:6a:d8:c5:73:e9:79:5b:70:d2:7f:43:8a:17:fe:37:
         01:74:df:3a:85:58:f7:82:00:c0:83:cf:67:01:59:0e:c1:8c:
         f7:17:ee:ae:73:14:36:58:e7:f8:e3:f1:2f:7b:4a:55:63:6a:
         ce:f9:e4:94:7b:45:8d:75:ec:87:7e:c6:67:48:a5:f2:de:7e:
         e5:3a:b9:21:1d:93:f8:09:19:80:5d:08:0d:92:bf:c8:82:19:
         17:f0:9d:6e:89:c0:dd:83:66:e3:69:a4:0c:94:04:bf:88:e0:
         ba:a8:07:7e:4a:6d:c6:63:2e:82:4d:0a:45:65:dc:fa:6c:e0:
         ee:78:6e:90:d5:81:5b:bd:bc:f5:55:cf:17:7c:66:94:71:bf:
         01:0b:76:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 01:59:30 2025 by rpki-client