Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/116DB0F82AF8D867A78EC5C0DE029B971BBB247E27E547C2F37EF532827B2B51/0/323830303a613030383a3a2f33322d3332203d3e203233303037.roa
File:                     323830303a613030383a3a2f33322d3332203d3e203233303037.roa (raw, json)
Hash identifier:          SxPUyq4QgS8A9ws7o07MnfEF2lK16rb3k1lVgd8bLzs=
Subject key identifier:   9A:A2:10:5A:2E:FE:EF:C1:D3:08:04:67:8E:20:4B:34:77:98:4A:34
Certificate issuer:       /CN=FBF606BE5CE9E76D394A0AFAC9A4DC3EDE5675A5
Certificate serial:       6F0541DE699B691C7AC8B686336B0780D3A2060A
Authority key identifier: FB:F6:06:BE:5C:E9:E7:6D:39:4A:0A:FA:C9:A4:DC:3E:DE:56:75:A5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FBF606BE5CE9E76D394A0AFAC9A4DC3EDE5675A5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/116DB0F82AF8D867A78EC5C0DE029B971BBB247E27E547C2F37EF532827B2B51/0/323830303a613030383a3a2f33322d3332203d3e203233303037.roa
Signing time:             Tue 04 Feb 2025 18:09:23 +0000
ROA not before:           Tue 04 Feb 2025 18:04:23 +0000
ROA not after:            Tue 03 Feb 2026 18:09:23 +0000
asID:                     23007
IP address blocks:        2800:a008::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/116DB0F82AF8D867A78EC5C0DE029B971BBB247E27E547C2F37EF532827B2B51/0/FBF606BE5CE9E76D394A0AFAC9A4DC3EDE5675A5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/116DB0F82AF8D867A78EC5C0DE029B971BBB247E27E547C2F37EF532827B2B51/0/FBF606BE5CE9E76D394A0AFAC9A4DC3EDE5675A5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FBF606BE5CE9E76D394A0AFAC9A4DC3EDE5675A5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 17:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:05:41:de:69:9b:69:1c:7a:c8:b6:86:33:6b:07:80:d3:a2:06:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBF606BE5CE9E76D394A0AFAC9A4DC3EDE5675A5
        Validity
            Not Before: Feb  4 18:04:23 2025 GMT
            Not After : Feb  3 18:09:23 2026 GMT
        Subject: CN=9AA2105A2EFEEFC1D30804678E204B3477984A34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b1:22:b6:62:68:ff:37:0f:a4:10:4a:54:61:
                    bd:1d:6c:99:91:11:fa:23:c1:fc:78:c0:8f:e4:c9:
                    83:19:92:0a:72:fd:65:c6:0c:a0:ba:5d:a8:9f:8b:
                    9d:cc:65:e3:d7:c9:c2:59:3a:57:fd:2c:5c:01:a3:
                    80:cd:0d:69:a1:50:1f:f9:90:22:be:72:e9:71:f4:
                    88:f3:2f:76:e1:6b:f8:6a:75:35:31:4d:a5:35:2b:
                    b4:fb:fb:e3:32:bf:c8:02:65:77:fe:7a:f5:81:e2:
                    b2:7d:be:ce:5f:81:b2:8b:ef:52:76:19:f0:c3:88:
                    fd:3c:e0:f0:95:02:d9:19:fa:2e:1a:73:57:6f:d4:
                    3f:29:27:3b:e7:f6:a9:e3:7f:90:f2:17:08:2b:cd:
                    1e:96:0b:ee:84:d7:30:14:ec:ea:3b:60:47:6d:cf:
                    72:19:da:26:17:fa:0b:b8:c3:3b:64:d7:c0:44:04:
                    c6:9b:5a:4d:f1:5d:07:5c:58:94:85:ff:c2:10:10:
                    4d:6d:e2:0c:78:0b:c8:51:ea:ef:b3:7f:c2:70:78:
                    43:61:98:c7:c0:67:2d:97:67:3a:5c:04:52:62:14:
                    cf:f4:b7:f0:07:3b:2a:5d:b9:6c:8d:9c:e2:77:0e:
                    86:24:ac:20:b9:5b:9f:81:3f:ad:c4:2f:c6:48:3b:
                    bd:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:A2:10:5A:2E:FE:EF:C1:D3:08:04:67:8E:20:4B:34:77:98:4A:34
            X509v3 Authority Key Identifier:
                keyid:FB:F6:06:BE:5C:E9:E7:6D:39:4A:0A:FA:C9:A4:DC:3E:DE:56:75:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/116DB0F82AF8D867A78EC5C0DE029B971BBB247E27E547C2F37EF532827B2B51/0/FBF606BE5CE9E76D394A0AFAC9A4DC3EDE5675A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FBF606BE5CE9E76D394A0AFAC9A4DC3EDE5675A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/116DB0F82AF8D867A78EC5C0DE029B971BBB247E27E547C2F37EF532827B2B51/0/323830303a613030383a3a2f33322d3332203d3e203233303037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:a008::/32

    Signature Algorithm: sha256WithRSAEncryption
         08:f0:fe:b2:ae:45:18:36:24:0e:cc:17:46:29:67:15:d4:51:
         fa:d2:7e:a5:42:22:11:43:96:7f:05:c5:e6:42:96:ec:ea:6f:
         60:d6:4b:44:c0:de:9d:84:e0:f3:e3:99:23:15:7d:68:a7:f7:
         e5:a2:12:0a:3b:22:7c:fd:8d:9f:d6:5e:09:a9:2f:60:85:e3:
         52:9e:bb:e7:d5:82:72:06:82:85:4d:3f:ae:d0:0a:8f:ce:72:
         e0:d3:dd:fd:35:a9:39:9c:96:ef:4b:35:7e:39:8c:ae:19:1d:
         2e:80:94:19:58:33:3a:32:03:62:a7:ba:23:39:60:18:66:43:
         5b:a2:20:b4:21:0b:62:f6:42:d2:79:c9:45:aa:cb:64:31:da:
         cb:e3:29:78:bc:12:a0:75:76:40:2f:3d:f5:35:62:05:cb:51:
         f7:70:07:6b:7a:37:73:16:2b:fa:25:50:8d:e1:0a:05:a8:a7:
         25:5c:29:04:b1:e0:2c:f1:85:af:5d:75:fb:64:86:66:bd:f8:
         4b:61:eb:5b:11:66:13:d9:d8:bc:24:40:6e:82:63:34:70:dd:
         88:9d:76:aa:c4:37:fd:dc:57:e4:17:ff:56:d4:06:fa:6a:30:
         3f:2d:ab:75:f6:da:67:93:37:aa:a9:48:2f:34:4b:a0:bc:28:
         33:f5:62:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 12:27:37 2025 by rpki-client