Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/117E0F28D7B109643382134A928ADB7D8C131972702EA42A048C2764C80DC7C1/0/323830333a623263303a3a2f33322d3438203d3e203237393437.roa
File:                     323830333a623263303a3a2f33322d3438203d3e203237393437.roa (raw, json)
Hash identifier:          cik4ui3C6oU7kz9yeHeRALjMQIPm4DDux8BHlrZqVeE=
Subject key identifier:   A7:2A:00:2E:E0:F1:0F:44:CE:95:FD:28:9E:39:31:57:89:A1:F5:EE
Certificate issuer:       /CN=CBE72B8D815E9A3D3D87C10B39ED4169A84AB68F
Certificate serial:       427C546E7605F5A137CB6BAF347137B149F0C4D7
Authority key identifier: CB:E7:2B:8D:81:5E:9A:3D:3D:87:C1:0B:39:ED:41:69:A8:4A:B6:8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBE72B8D815E9A3D3D87C10B39ED4169A84AB68F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/117E0F28D7B109643382134A928ADB7D8C131972702EA42A048C2764C80DC7C1/0/323830333a623263303a3a2f33322d3438203d3e203237393437.roa
Signing time:             Tue 04 Feb 2025 18:16:45 +0000
ROA not before:           Tue 04 Feb 2025 18:11:45 +0000
ROA not after:            Tue 03 Feb 2026 18:16:45 +0000
asID:                     27947
IP address blocks:        2803:b2c0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/117E0F28D7B109643382134A928ADB7D8C131972702EA42A048C2764C80DC7C1/0/CBE72B8D815E9A3D3D87C10B39ED4169A84AB68F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/117E0F28D7B109643382134A928ADB7D8C131972702EA42A048C2764C80DC7C1/0/CBE72B8D815E9A3D3D87C10B39ED4169A84AB68F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBE72B8D815E9A3D3D87C10B39ED4169A84AB68F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:7c:54:6e:76:05:f5:a1:37:cb:6b:af:34:71:37:b1:49:f0:c4:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBE72B8D815E9A3D3D87C10B39ED4169A84AB68F
        Validity
            Not Before: Feb  4 18:11:45 2025 GMT
            Not After : Feb  3 18:16:45 2026 GMT
        Subject: CN=A72A002EE0F10F44CE95FD289E39315789A1F5EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:3c:3b:36:12:57:86:b8:d2:d7:40:cd:db:a8:
                    2a:4c:99:55:cb:bb:05:d4:35:cb:63:bb:44:ff:0a:
                    bc:0d:80:a6:0b:a4:7a:ec:9e:36:20:6e:58:06:78:
                    59:1e:2a:55:66:e7:6d:23:37:7c:64:fd:aa:4a:2c:
                    bb:85:d2:41:33:f1:43:71:0b:9a:da:07:06:33:99:
                    f0:29:06:c4:1c:65:af:60:49:3a:4c:98:fc:c1:dc:
                    79:dc:1f:03:47:f0:45:a2:36:1d:6f:22:a2:7c:94:
                    00:f6:82:04:88:ac:32:85:95:97:f2:b2:c8:50:1b:
                    16:7c:5f:b9:13:64:ee:86:33:56:ce:2f:39:35:58:
                    de:bf:b9:d3:3a:1a:1e:a8:c8:dd:34:1f:37:66:4c:
                    14:8e:77:ae:21:e2:cd:d4:5d:70:de:4e:8f:cc:b8:
                    f1:9c:73:63:f7:28:f7:5e:05:d8:62:d0:bd:a7:18:
                    c4:4e:bb:ea:ca:92:03:53:6e:a4:58:d2:dc:a4:84:
                    64:4b:d5:df:fd:f0:84:27:49:4b:4c:78:bc:6c:8d:
                    bc:df:24:96:67:f5:2c:04:f9:64:bf:86:5f:b5:4b:
                    91:31:e2:9a:ba:fa:98:06:34:58:dc:ce:a5:8f:49:
                    b5:d7:95:e4:a7:da:31:b6:a6:a6:f4:6f:2a:f0:82:
                    87:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:2A:00:2E:E0:F1:0F:44:CE:95:FD:28:9E:39:31:57:89:A1:F5:EE
            X509v3 Authority Key Identifier:
                keyid:CB:E7:2B:8D:81:5E:9A:3D:3D:87:C1:0B:39:ED:41:69:A8:4A:B6:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/117E0F28D7B109643382134A928ADB7D8C131972702EA42A048C2764C80DC7C1/0/CBE72B8D815E9A3D3D87C10B39ED4169A84AB68F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBE72B8D815E9A3D3D87C10B39ED4169A84AB68F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/117E0F28D7B109643382134A928ADB7D8C131972702EA42A048C2764C80DC7C1/0/323830333a623263303a3a2f33322d3438203d3e203237393437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b2c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         54:62:f9:bf:d0:ff:2c:61:b3:f0:9f:c5:ba:2f:40:37:6b:77:
         05:74:b6:12:1b:bf:44:db:8a:db:7a:84:b7:e8:74:a2:24:7a:
         2c:03:67:41:5c:78:5c:98:43:a5:24:3b:05:1f:1d:85:37:44:
         04:97:02:5a:5c:40:54:18:8b:71:7e:58:54:58:bc:c0:79:39:
         21:3c:87:83:12:c8:d5:82:37:11:2a:b1:42:27:ea:97:a4:fb:
         bd:b1:76:ac:d1:28:ac:09:35:07:4c:db:0e:71:be:93:04:27:
         f2:fc:97:53:ce:a6:7e:5c:8f:4a:cd:03:ce:34:45:9a:25:78:
         0a:f8:fc:c2:d9:ba:84:ba:66:f8:3c:1b:15:24:49:a9:81:39:
         40:a6:64:7f:a9:0a:9a:c6:06:b4:b0:41:dd:9b:60:c7:fb:91:
         2a:73:f8:49:ce:a6:9f:75:56:8f:6f:ca:57:87:3a:40:fb:97:
         59:96:79:97:36:c0:59:91:1b:8a:4c:df:4f:49:93:e0:dc:b0:
         91:71:74:4e:9a:dd:66:90:05:32:ac:bd:77:f4:c0:3d:08:6a:
         ed:6c:bf:dd:17:11:5d:d6:d5:b7:fb:53:2c:03:38:45:af:ba:
         50:15:3d:c8:c0:3f:eb:97:67:65:53:4d:64:01:26:12:7c:95:
         60:36:39:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:08:51 2025 by rpki-client