Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0290CDB140916610D56880836A7CC21314B8D3DD087C7B357D7EAEB9E0C9A082/0/323830333a613465303a3a2f33322d3438203d3e20323639383837.roa
File:                     323830333a613465303a3a2f33322d3438203d3e20323639383837.roa (raw, json)
Hash identifier:          dKLUROvgTYNtqatSGw9C6IddNYwPS3P+dlJdpX5Sct8=
Subject key identifier:   6D:5F:39:95:83:16:00:54:32:01:B5:17:F0:84:7C:21:A3:BD:6B:68
Certificate issuer:       /CN=9F12506BED8DAFE7AD724FA19BA1A600CB9F1459
Certificate serial:       762B4C9B3BD0EBC5D3C860C4754108900D274B3F
Authority key identifier: 9F:12:50:6B:ED:8D:AF:E7:AD:72:4F:A1:9B:A1:A6:00:CB:9F:14:59
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F12506BED8DAFE7AD724FA19BA1A600CB9F1459.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0290CDB140916610D56880836A7CC21314B8D3DD087C7B357D7EAEB9E0C9A082/0/323830333a613465303a3a2f33322d3438203d3e20323639383837.roa
Signing time:             Tue 04 Feb 2025 20:04:04 +0000
ROA not before:           Tue 04 Feb 2025 19:59:04 +0000
ROA not after:            Tue 03 Feb 2026 20:04:04 +0000
asID:                     269887
IP address blocks:        2803:a4e0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0290CDB140916610D56880836A7CC21314B8D3DD087C7B357D7EAEB9E0C9A082/0/9F12506BED8DAFE7AD724FA19BA1A600CB9F1459.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0290CDB140916610D56880836A7CC21314B8D3DD087C7B357D7EAEB9E0C9A082/0/9F12506BED8DAFE7AD724FA19BA1A600CB9F1459.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F12506BED8DAFE7AD724FA19BA1A600CB9F1459.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:2b:4c:9b:3b:d0:eb:c5:d3:c8:60:c4:75:41:08:90:0d:27:4b:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F12506BED8DAFE7AD724FA19BA1A600CB9F1459
        Validity
            Not Before: Feb  4 19:59:04 2025 GMT
            Not After : Feb  3 20:04:04 2026 GMT
        Subject: CN=6D5F3995831600543201B517F0847C21A3BD6B68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:a7:f2:5f:87:1d:c9:eb:8f:54:6b:22:c2:42:
                    49:54:d6:e2:b5:c2:a8:e6:b8:9d:e2:6c:58:9e:d4:
                    05:15:d9:7b:18:b5:4f:d4:66:6a:f8:2d:ef:81:02:
                    68:de:a0:81:4c:96:b2:69:e8:79:33:31:09:19:c0:
                    fd:95:7a:58:2e:2f:6e:06:7e:67:77:14:c5:19:ac:
                    92:2f:f2:ae:58:7c:82:e5:e8:74:2d:9c:d6:20:bb:
                    70:72:91:ba:4d:12:29:ec:4c:41:01:20:79:a1:9b:
                    0e:c3:9a:a9:2b:91:5e:9b:16:8e:f4:4b:75:11:0c:
                    9a:42:c7:a1:da:b9:36:1a:72:88:e6:13:df:9f:85:
                    22:51:c6:3f:e6:89:3c:c5:64:a9:93:e3:be:e6:6c:
                    bd:db:49:72:93:90:01:0e:6a:c0:ae:37:8c:b3:3a:
                    13:9c:c9:89:22:54:97:54:fe:4d:1b:4c:83:9b:b1:
                    b6:46:05:55:20:06:d3:7b:79:59:51:ea:74:ae:c6:
                    6a:a7:0b:49:3e:6a:73:df:7b:f6:01:f4:9c:14:4e:
                    3d:4b:7e:86:30:57:c6:1f:c3:09:dd:05:77:3b:67:
                    4c:a6:4c:77:21:8f:01:18:2a:86:1b:4c:ee:0f:6e:
                    c9:fe:e8:4d:e7:a9:b7:8a:fc:42:36:c7:8d:4c:38:
                    89:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:5F:39:95:83:16:00:54:32:01:B5:17:F0:84:7C:21:A3:BD:6B:68
            X509v3 Authority Key Identifier:
                keyid:9F:12:50:6B:ED:8D:AF:E7:AD:72:4F:A1:9B:A1:A6:00:CB:9F:14:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0290CDB140916610D56880836A7CC21314B8D3DD087C7B357D7EAEB9E0C9A082/0/9F12506BED8DAFE7AD724FA19BA1A600CB9F1459.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F12506BED8DAFE7AD724FA19BA1A600CB9F1459.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0290CDB140916610D56880836A7CC21314B8D3DD087C7B357D7EAEB9E0C9A082/0/323830333a613465303a3a2f33322d3438203d3e20323639383837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:a4e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         20:f6:8a:d0:08:ca:23:bf:ec:15:2a:62:00:bc:b2:fd:5a:57:
         f6:39:ac:1f:cb:f1:73:58:21:25:38:57:41:ec:38:90:9f:8c:
         e6:2b:2c:80:26:e7:2c:c8:9b:c0:08:27:09:d4:ea:0f:7c:ed:
         52:64:40:e6:2e:83:2e:57:9c:83:25:09:7f:8d:3f:ef:12:89:
         c4:71:46:11:31:1a:d1:11:13:d2:5b:f2:2d:c7:56:16:d4:f8:
         f2:15:0b:57:5c:86:81:6c:52:7b:e7:78:99:20:f7:00:4a:38:
         a6:53:50:a8:4f:06:3e:03:0b:c2:08:84:88:09:80:b0:93:69:
         e1:7b:b1:c4:73:cc:4f:27:c2:74:a0:57:3d:f6:75:ae:85:be:
         f2:9e:56:87:de:97:76:62:4c:d1:a2:2f:a9:30:90:62:b0:03:
         13:5c:37:1b:19:f1:f0:39:6e:95:2f:75:7c:7d:31:e1:75:89:
         b0:0c:e0:5b:f8:76:3a:5f:43:4a:4b:63:69:78:2a:62:0b:8f:
         cf:04:cd:80:6e:a6:39:41:59:3e:7d:75:66:79:0a:61:e5:37:
         89:fa:36:1b:b2:03:32:1f:db:9e:a9:fc:99:9a:8f:43:65:0b:
         a8:88:69:a3:ea:96:27:b3:91:f4:67:21:24:b6:a1:90:fd:0c:
         67:a0:85:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:24:54 2025 by rpki-client