Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F7B95F1DDB9E3C4242EE36BE0E3B1CE3CCFEB00F89508C1D7E75596D3D112EDE/0/323830333a663836303a3a2f33322d3438203d3e20323732393935.roa
File:                     323830333a663836303a3a2f33322d3438203d3e20323732393935.roa (raw, json)
Hash identifier:          lua80lqZs3pnNPzwC8YM5I/4s8xiZPbTcpo2byV9anA=
Subject key identifier:   D7:07:74:4D:FC:5E:45:FF:65:4F:43:68:7D:F9:F7:5A:CF:61:B0:85
Certificate issuer:       /CN=420B44E3D543CA237CB6BC9020FEC4357D75D278
Certificate serial:       60A5202EBDCCB8699FB975F40B07C4407ABCC97A
Authority key identifier: 42:0B:44:E3:D5:43:CA:23:7C:B6:BC:90:20:FE:C4:35:7D:75:D2:78
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/420B44E3D543CA237CB6BC9020FEC4357D75D278.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F7B95F1DDB9E3C4242EE36BE0E3B1CE3CCFEB00F89508C1D7E75596D3D112EDE/0/323830333a663836303a3a2f33322d3438203d3e20323732393935.roa
Signing time:             Tue 01 Apr 2025 18:13:36 +0000
ROA not before:           Tue 01 Apr 2025 18:08:36 +0000
ROA not after:            Tue 31 Mar 2026 18:13:36 +0000
asID:                     272995
IP address blocks:        2803:f860::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F7B95F1DDB9E3C4242EE36BE0E3B1CE3CCFEB00F89508C1D7E75596D3D112EDE/0/420B44E3D543CA237CB6BC9020FEC4357D75D278.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F7B95F1DDB9E3C4242EE36BE0E3B1CE3CCFEB00F89508C1D7E75596D3D112EDE/0/420B44E3D543CA237CB6BC9020FEC4357D75D278.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/420B44E3D543CA237CB6BC9020FEC4357D75D278.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 21 May 2025 01:23:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:a5:20:2e:bd:cc:b8:69:9f:b9:75:f4:0b:07:c4:40:7a:bc:c9:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=420B44E3D543CA237CB6BC9020FEC4357D75D278
        Validity
            Not Before: Apr  1 18:08:36 2025 GMT
            Not After : Mar 31 18:13:36 2026 GMT
        Subject: CN=D707744DFC5E45FF654F43687DF9F75ACF61B085
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:d2:4e:7b:08:df:52:fa:fc:61:0f:21:fc:44:
                    bf:42:d7:6a:c8:b7:90:41:44:12:ec:68:38:7c:16:
                    a5:bc:30:9a:70:da:1c:a9:3a:3e:dd:92:51:c9:ed:
                    12:c5:9d:d4:8f:f7:f6:58:8f:fe:44:95:11:5d:9a:
                    e8:e3:c4:10:c3:e0:44:f0:a4:7b:a9:9c:87:42:cb:
                    3f:b2:2f:39:25:fc:af:db:18:eb:ba:7b:a1:be:b8:
                    20:86:8a:5b:53:e3:a2:0f:a5:39:73:7b:85:e4:af:
                    e2:36:79:89:9a:9c:17:db:10:ae:dd:a7:95:df:92:
                    56:cf:7c:68:04:f0:a9:17:0b:f4:15:75:44:82:d3:
                    43:19:b9:01:be:f7:48:f8:d6:51:9f:e1:26:99:0f:
                    32:57:b9:8c:e0:cb:47:dc:eb:ee:db:0b:81:ad:3b:
                    99:b9:9e:ad:74:fa:2d:d1:f7:05:20:8f:27:fe:ff:
                    e0:1e:96:f5:79:88:9a:3c:d7:d2:bb:1f:6e:1f:c5:
                    7d:e5:e2:ea:19:5e:75:87:80:da:54:97:c5:e9:cb:
                    d4:ac:7d:4f:50:f1:87:e4:20:80:cb:c8:b8:84:af:
                    d2:eb:5c:c3:b2:db:9c:a6:94:86:a5:f4:9e:14:e9:
                    1b:73:29:a9:f4:69:b8:d3:0d:b8:29:ca:20:8d:80:
                    82:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:07:74:4D:FC:5E:45:FF:65:4F:43:68:7D:F9:F7:5A:CF:61:B0:85
            X509v3 Authority Key Identifier:
                keyid:42:0B:44:E3:D5:43:CA:23:7C:B6:BC:90:20:FE:C4:35:7D:75:D2:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F7B95F1DDB9E3C4242EE36BE0E3B1CE3CCFEB00F89508C1D7E75596D3D112EDE/0/420B44E3D543CA237CB6BC9020FEC4357D75D278.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/420B44E3D543CA237CB6BC9020FEC4357D75D278.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F7B95F1DDB9E3C4242EE36BE0E3B1CE3CCFEB00F89508C1D7E75596D3D112EDE/0/323830333a663836303a3a2f33322d3438203d3e20323732393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f860::/32

    Signature Algorithm: sha256WithRSAEncryption
         b4:54:ce:a1:2d:72:01:65:32:03:fa:a7:ff:58:3e:d4:a6:f9:
         05:18:69:42:43:f5:cb:41:af:5b:06:ea:9c:05:b9:8c:e8:de:
         fa:30:03:19:22:b6:59:96:dc:c3:fd:2c:17:7f:e0:44:e8:74:
         45:ba:95:81:9e:e0:10:03:90:84:94:a4:36:bf:e5:f0:58:42:
         5c:83:27:01:72:6b:a8:4a:2a:22:2a:3d:6c:c5:40:cc:89:2f:
         b4:82:a4:19:cf:0f:4d:df:b5:7a:dd:56:90:34:f9:c0:3b:e9:
         dd:03:46:6a:1d:43:c0:23:fb:92:9f:03:4c:80:71:57:80:88:
         1e:62:5e:9f:11:df:87:29:36:98:43:cd:1d:ff:e8:df:38:8b:
         0d:db:31:82:41:3c:b6:e0:79:7b:a0:78:0a:56:24:ce:f1:b7:
         70:87:aa:b1:8a:45:a5:45:90:45:5c:00:e8:f5:df:8a:56:fa:
         41:88:a9:0d:f4:19:53:31:e2:2f:b1:4d:7b:d3:ac:c7:a9:c7:
         e0:b8:c1:e9:83:f2:07:e1:81:f0:90:ed:b9:ce:08:5b:c8:e6:
         ab:23:96:16:e1:53:7f:df:14:8b:27:2a:90:67:63:1b:92:31:
         da:ea:d1:71:e0:14:c8:a2:82:5a:03:a7:48:69:c8:49:a7:fc:
         45:52:f7:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 14:31:54 2025 by rpki-client