Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B3E50B11115C084D6BA8197C0580CAAFEFDFD546F917BF6C3FCE3125AD581653/0/323830333a346139303a383330323a3a2f34382d3438203d3e20323732383735.roa
File:                     323830333a346139303a383330323a3a2f34382d3438203d3e20323732383735.roa (raw, json)
Hash identifier:          upgtxwL9RZzZ4/OJTd+pkaHYFonKpKtDrt2TaZ6fHlA=
Subject key identifier:   A6:18:4F:2B:39:C1:AD:27:A0:E8:E2:44:05:35:90:44:21:7C:17:BA
Certificate issuer:       /CN=3CCAFF3C26A38C5EE9BF02C49848A13D82DFE81F
Certificate serial:       0E90E98600136447282B9EDBFDBA04093A8CBBC9
Authority key identifier: 3C:CA:FF:3C:26:A3:8C:5E:E9:BF:02:C4:98:48:A1:3D:82:DF:E8:1F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3CCAFF3C26A38C5EE9BF02C49848A13D82DFE81F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B3E50B11115C084D6BA8197C0580CAAFEFDFD546F917BF6C3FCE3125AD581653/0/323830333a346139303a383330323a3a2f34382d3438203d3e20323732383735.roa
Signing time:             Fri 25 Apr 2025 21:50:00 +0000
ROA not before:           Fri 25 Apr 2025 21:45:00 +0000
ROA not after:            Fri 24 Apr 2026 21:50:00 +0000
asID:                     272875
IP address blocks:        2803:4a90:8302::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B3E50B11115C084D6BA8197C0580CAAFEFDFD546F917BF6C3FCE3125AD581653/0/3CCAFF3C26A38C5EE9BF02C49848A13D82DFE81F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B3E50B11115C084D6BA8197C0580CAAFEFDFD546F917BF6C3FCE3125AD581653/0/3CCAFF3C26A38C5EE9BF02C49848A13D82DFE81F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3CCAFF3C26A38C5EE9BF02C49848A13D82DFE81F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 20 May 2025 10:38:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:90:e9:86:00:13:64:47:28:2b:9e:db:fd:ba:04:09:3a:8c:bb:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3CCAFF3C26A38C5EE9BF02C49848A13D82DFE81F
        Validity
            Not Before: Apr 25 21:45:00 2025 GMT
            Not After : Apr 24 21:50:00 2026 GMT
        Subject: CN=A6184F2B39C1AD27A0E8E24405359044217C17BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:f2:c0:04:8a:2c:7d:0a:0a:00:84:67:ba:21:
                    f8:3a:c2:06:ef:f4:47:2d:e9:65:5d:48:ff:1d:f8:
                    ed:11:07:9a:00:a3:66:b1:8f:4c:6d:9d:e8:ec:3f:
                    0d:e5:fc:9f:0d:a7:6f:60:dd:69:77:ec:fb:de:5e:
                    22:5e:63:60:41:77:f2:93:58:3e:39:32:91:9a:9c:
                    45:a5:59:e3:22:7e:f0:4f:b6:34:ac:8c:df:ef:1b:
                    9b:d5:f3:9a:7c:a0:e1:bf:a2:aa:21:ae:4a:d6:33:
                    10:cd:cc:20:ff:d0:49:d4:47:12:a9:1b:8b:fc:2c:
                    5a:f4:e3:67:46:a2:fe:75:d0:94:0c:ac:9e:6f:b7:
                    3f:ef:14:b4:56:d8:00:e0:96:12:59:a8:a8:3a:73:
                    cc:6e:19:17:e3:4f:3d:7a:43:5a:94:99:dc:1f:8f:
                    9f:57:c3:e6:e0:ea:54:ae:a8:ec:65:98:d9:a4:6e:
                    31:9e:43:b9:b7:57:fa:3c:b5:ce:11:19:0a:e6:2b:
                    e5:d9:dd:d5:65:1a:24:6a:c6:30:e8:16:c8:9f:fe:
                    5d:11:7f:81:27:9c:12:c5:b5:f8:26:1b:7f:03:7b:
                    32:bd:ae:d0:93:0d:1d:85:db:5d:24:2a:54:7f:2f:
                    1b:e4:11:fd:97:61:8c:46:f2:df:f2:b6:66:da:9b:
                    19:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:18:4F:2B:39:C1:AD:27:A0:E8:E2:44:05:35:90:44:21:7C:17:BA
            X509v3 Authority Key Identifier:
                keyid:3C:CA:FF:3C:26:A3:8C:5E:E9:BF:02:C4:98:48:A1:3D:82:DF:E8:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B3E50B11115C084D6BA8197C0580CAAFEFDFD546F917BF6C3FCE3125AD581653/0/3CCAFF3C26A38C5EE9BF02C49848A13D82DFE81F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3CCAFF3C26A38C5EE9BF02C49848A13D82DFE81F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B3E50B11115C084D6BA8197C0580CAAFEFDFD546F917BF6C3FCE3125AD581653/0/323830333a346139303a383330323a3a2f34382d3438203d3e20323732383735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4a90:8302::/48

    Signature Algorithm: sha256WithRSAEncryption
         88:06:c9:e2:2b:34:ec:17:82:0f:35:43:63:01:51:09:97:8e:
         62:ce:44:e4:c5:93:72:d4:e8:85:ac:24:5b:22:91:2a:41:a8:
         a1:b4:e3:39:81:19:67:26:f9:83:80:e8:f6:45:48:c0:45:55:
         46:26:82:6f:53:49:79:59:a0:79:74:0c:f9:b1:a6:ab:ec:e9:
         d7:5c:03:6f:2e:68:ae:a9:e3:f1:a3:86:44:b8:3b:19:57:dc:
         e6:e9:45:53:89:44:b3:0d:bc:e2:b7:e3:be:a1:78:5b:55:2b:
         12:ad:4e:59:85:56:8d:f6:af:60:47:d6:7c:cf:79:5a:04:24:
         6b:ef:4c:a0:f1:83:77:f1:d4:07:75:ef:6e:c7:49:62:45:87:
         c2:71:3c:2a:9b:c0:92:ec:a4:46:44:48:19:89:af:d8:7f:1a:
         9f:92:dc:50:58:c5:e3:11:2f:36:ef:8d:ee:1a:19:01:04:01:
         13:81:af:75:ca:e9:da:71:03:14:a0:20:43:71:97:e3:38:f5:
         3b:4a:ae:29:f4:67:d3:7a:31:4f:d3:4a:ca:66:2c:8d:4b:ca:
         bf:c3:6e:0a:9c:72:1b:fc:84:57:1d:3c:0a:91:46:40:e9:03:
         89:5f:92:15:9e:9d:8e:35:17:fa:00:ef:f5:d0:9e:58:0c:f2:
         e0:92:44:1a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat May 17 07:00:41 2025 by rpki-client