Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FD574A6F238C0DC117A8A08D48C369062CCC0A8A913C98072EB717961E739809/0/323830333a663264303a62353a3a2f34382d3634203d3e20323734303633.roa
File:                     323830333a663264303a62353a3a2f34382d3634203d3e20323734303633.roa (raw, json)
Hash identifier:          OEbe4ZDLkDR0kMq8aQPgGpOeVWyObwS+KAWUJoAkgcc=
Subject key identifier:   97:D1:E9:7A:20:D3:49:22:F4:35:B4:BA:DA:CE:C0:BA:48:27:73:B9
Certificate issuer:       /CN=0024F2646BA42106407316FE59A0CD2A76EF240C
Certificate serial:       346CAFA7E80FEA5E5A5AD5F81FE099FF216D65A2
Authority key identifier: 00:24:F2:64:6B:A4:21:06:40:73:16:FE:59:A0:CD:2A:76:EF:24:0C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0024F2646BA42106407316FE59A0CD2A76EF240C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FD574A6F238C0DC117A8A08D48C369062CCC0A8A913C98072EB717961E739809/0/323830333a663264303a62353a3a2f34382d3634203d3e20323734303633.roa
Signing time:             Sun 03 Aug 2025 15:10:00 +0000
ROA not before:           Sun 03 Aug 2025 15:05:00 +0000
ROA not after:            Sun 02 Aug 2026 15:10:00 +0000
asID:                     274063
IP address blocks:        2803:f2d0:b5::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FD574A6F238C0DC117A8A08D48C369062CCC0A8A913C98072EB717961E739809/0/0024F2646BA42106407316FE59A0CD2A76EF240C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FD574A6F238C0DC117A8A08D48C369062CCC0A8A913C98072EB717961E739809/0/0024F2646BA42106407316FE59A0CD2A76EF240C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0024F2646BA42106407316FE59A0CD2A76EF240C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Aug 2025 06:12:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:6c:af:a7:e8:0f:ea:5e:5a:5a:d5:f8:1f:e0:99:ff:21:6d:65:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0024F2646BA42106407316FE59A0CD2A76EF240C
        Validity
            Not Before: Aug  3 15:05:00 2025 GMT
            Not After : Aug  2 15:10:00 2026 GMT
        Subject: CN=97D1E97A20D34922F435B4BADACEC0BA482773B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e0:d8:41:f0:2d:f8:80:c4:b9:4c:55:86:02:
                    ba:77:8a:f4:67:ed:d3:6a:cf:4e:54:70:29:34:dd:
                    a5:68:0e:de:56:e0:6c:cf:47:7f:e0:ca:69:97:40:
                    28:ef:58:2d:ff:bc:c5:71:22:e6:7c:cd:46:b6:37:
                    95:0e:00:ee:3b:b8:07:d2:2f:95:ba:89:b4:3d:78:
                    a1:34:bb:04:51:16:a9:fc:ce:f1:00:9c:03:a2:ae:
                    3b:cd:75:50:9e:e3:55:fb:00:ee:46:3f:af:07:9d:
                    a6:14:a0:b0:01:8f:17:63:f7:cf:64:26:15:14:96:
                    9a:82:f6:00:6a:80:b5:1c:46:80:01:6d:df:d1:4f:
                    90:31:ac:85:df:a9:88:11:4d:b5:13:fc:0d:49:6e:
                    cb:c5:13:9b:88:3b:f1:94:fe:f9:ce:32:9d:80:0b:
                    f6:2e:41:4f:38:71:3e:35:9d:75:79:a9:ab:f7:7e:
                    7a:1b:46:f2:50:76:0a:14:98:de:d6:c1:3e:90:0f:
                    23:c6:ba:5d:5c:37:61:21:8a:08:b5:c7:31:56:cb:
                    78:b6:4d:ad:f9:b3:de:34:c6:ff:73:aa:47:c8:e2:
                    bf:34:9a:3e:23:0d:34:f1:73:30:c1:5b:24:0c:30:
                    1f:96:d7:44:43:5f:89:64:52:48:8c:aa:28:d4:3c:
                    ac:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:D1:E9:7A:20:D3:49:22:F4:35:B4:BA:DA:CE:C0:BA:48:27:73:B9
            X509v3 Authority Key Identifier:
                keyid:00:24:F2:64:6B:A4:21:06:40:73:16:FE:59:A0:CD:2A:76:EF:24:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FD574A6F238C0DC117A8A08D48C369062CCC0A8A913C98072EB717961E739809/0/0024F2646BA42106407316FE59A0CD2A76EF240C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0024F2646BA42106407316FE59A0CD2A76EF240C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FD574A6F238C0DC117A8A08D48C369062CCC0A8A913C98072EB717961E739809/0/323830333a663264303a62353a3a2f34382d3634203d3e20323734303633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f2d0:b5::/48

    Signature Algorithm: sha256WithRSAEncryption
         99:c3:3f:b4:4a:d6:d3:9b:ed:1c:ec:69:03:67:06:1a:53:ff:
         32:33:fb:3a:0f:a4:68:c6:1d:62:a2:4f:97:93:3c:3c:01:ad:
         f2:38:ca:dd:33:c6:da:85:bb:15:bd:c4:1c:6e:08:15:57:5b:
         8a:54:bc:f9:7e:7f:40:c0:e6:e7:5a:ec:bf:91:68:4c:72:74:
         07:de:fc:d4:ec:69:5d:17:02:ad:9e:5e:23:89:ea:40:f3:fe:
         a4:c5:c7:8d:e4:f7:c7:ce:6b:9b:15:7e:ec:10:b5:b3:e9:a6:
         8e:ee:56:df:a5:67:7c:d6:87:51:0e:b3:44:fb:12:0e:fa:26:
         e5:c2:a4:27:f8:f5:5d:4d:fa:67:4f:de:87:35:95:4e:66:91:
         34:33:d9:79:66:7b:fa:44:d2:54:7c:a0:4b:10:fb:fb:c2:a2:
         42:91:0a:1a:f9:00:e2:5d:01:f3:78:3f:c8:f4:0d:28:ba:2d:
         6d:7f:70:a7:04:12:1c:1b:7f:a3:a1:dd:7b:82:65:fa:9c:18:
         eb:0a:bc:5e:cd:03:08:8d:fe:3e:2c:76:bc:3d:75:ba:52:37:
         d1:2f:68:d1:90:65:7e:8a:db:9e:42:31:d3:ad:70:43:52:04:
         0d:39:dc:85:54:9e:c3:7c:54:7a:5d:27:ad:e5:f3:dd:09:2e:
         1e:45:45:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 04:27:34 2025 by rpki-client