Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1A4BED27D4740E14E97C241B5C9D89C0448B69347B4568A603DFFD5B5F72A677/0/323830333a376232303a3a2f33322d3634203d3e20323636373533.roa
File:                     323830333a376232303a3a2f33322d3634203d3e20323636373533.roa (raw, json)
Hash identifier:          fIhZthSeXfNTXsDCQE/laHD8KBLvWEsEx+9bwwivXJg=
Subject key identifier:   DA:43:71:20:CB:45:75:71:47:07:B9:31:A3:6B:40:35:C4:15:12:E7
Certificate issuer:       /CN=30B89C5AE85A486E451A9A04540DBDA45D52A5D5
Certificate serial:       2947ECADEDB6EA20DD70A03960CECF276ADF0D95
Authority key identifier: 30:B8:9C:5A:E8:5A:48:6E:45:1A:9A:04:54:0D:BD:A4:5D:52:A5:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B89C5AE85A486E451A9A04540DBDA45D52A5D5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1A4BED27D4740E14E97C241B5C9D89C0448B69347B4568A603DFFD5B5F72A677/0/323830333a376232303a3a2f33322d3634203d3e20323636373533.roa
Signing time:             Tue 11 Feb 2025 20:09:34 +0000
ROA not before:           Tue 11 Feb 2025 20:04:34 +0000
ROA not after:            Tue 10 Feb 2026 20:09:34 +0000
asID:                     266753
IP address blocks:        2803:7b20::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1A4BED27D4740E14E97C241B5C9D89C0448B69347B4568A603DFFD5B5F72A677/0/30B89C5AE85A486E451A9A04540DBDA45D52A5D5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1A4BED27D4740E14E97C241B5C9D89C0448B69347B4568A603DFFD5B5F72A677/0/30B89C5AE85A486E451A9A04540DBDA45D52A5D5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B89C5AE85A486E451A9A04540DBDA45D52A5D5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 02:39:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:47:ec:ad:ed:b6:ea:20:dd:70:a0:39:60:ce:cf:27:6a:df:0d:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30B89C5AE85A486E451A9A04540DBDA45D52A5D5
        Validity
            Not Before: Feb 11 20:04:34 2025 GMT
            Not After : Feb 10 20:09:34 2026 GMT
        Subject: CN=DA437120CB4575714707B931A36B4035C41512E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:9d:4c:e3:e4:b5:c2:0a:a0:a3:eb:0f:23:86:
                    5a:a5:92:f1:82:88:a4:72:2b:5a:fe:c7:30:4f:38:
                    20:db:30:3a:b3:ae:16:dc:ef:76:21:f4:7d:ed:e8:
                    a6:98:28:53:25:42:20:34:e0:57:7d:1e:6a:49:c2:
                    bf:4e:6b:01:29:c4:1d:32:ad:4f:79:99:75:15:7c:
                    ec:3d:47:f9:01:25:76:28:2e:36:b4:0c:62:69:95:
                    c1:15:32:27:08:ec:e5:d7:3d:a8:2e:af:6a:06:c3:
                    44:f2:d1:d6:26:d1:58:ed:57:4b:cf:bc:a0:dc:37:
                    3f:ae:cb:a1:84:f8:6a:2c:43:06:22:e5:54:91:d8:
                    0f:36:05:fc:6a:dc:c0:b6:d4:e6:ea:28:87:2e:66:
                    20:8e:0d:c1:60:cd:23:b5:cd:2f:eb:27:b4:d7:13:
                    7a:de:fb:5e:30:8f:5d:82:c9:03:41:a8:4a:b7:9b:
                    14:44:ed:9d:ac:49:66:cc:9b:88:aa:3b:15:c5:06:
                    ba:34:58:19:61:21:a4:45:7a:c7:4a:74:a0:dd:4f:
                    e4:bf:05:1d:41:22:46:96:2c:93:9f:21:fc:2c:49:
                    10:a2:25:36:d3:a0:a2:aa:dd:e6:7e:15:0e:f9:bb:
                    2e:3b:00:c2:d8:b2:f0:45:4d:83:de:b4:f4:66:5d:
                    1c:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:43:71:20:CB:45:75:71:47:07:B9:31:A3:6B:40:35:C4:15:12:E7
            X509v3 Authority Key Identifier:
                keyid:30:B8:9C:5A:E8:5A:48:6E:45:1A:9A:04:54:0D:BD:A4:5D:52:A5:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1A4BED27D4740E14E97C241B5C9D89C0448B69347B4568A603DFFD5B5F72A677/0/30B89C5AE85A486E451A9A04540DBDA45D52A5D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B89C5AE85A486E451A9A04540DBDA45D52A5D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1A4BED27D4740E14E97C241B5C9D89C0448B69347B4568A603DFFD5B5F72A677/0/323830333a376232303a3a2f33322d3634203d3e20323636373533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7b20::/32

    Signature Algorithm: sha256WithRSAEncryption
         61:22:d9:87:e7:c5:83:33:6b:70:6a:c2:bc:b0:97:90:d2:41:
         c5:ea:fd:38:be:ca:32:4c:4c:36:87:2e:0c:0c:d0:52:27:35:
         cc:4c:b9:40:49:01:49:b6:ec:7e:9e:8e:38:a7:f1:13:9e:72:
         e3:8d:08:5e:02:56:37:56:80:9d:6c:1f:60:71:8d:7b:a2:fa:
         38:d9:cd:e9:48:1b:39:84:3e:de:01:cf:9b:17:20:08:88:88:
         df:70:bb:5e:8e:8f:8c:6c:24:bb:7b:28:02:93:22:21:0e:47:
         5f:4a:b9:a8:88:15:10:1c:f0:01:7c:34:3b:12:18:38:95:a2:
         4a:6a:b9:64:0a:93:48:ee:68:59:ce:28:c2:96:39:2d:4c:f1:
         7e:db:e8:78:a7:44:8d:93:22:d5:c0:63:81:01:cd:92:24:42:
         f7:6c:8b:68:7d:c3:c3:be:49:d5:c1:74:f7:1d:27:4e:b1:31:
         a6:56:fa:4a:b2:81:b9:98:71:f0:68:6b:12:07:1e:1c:c0:d2:
         a1:0b:0e:31:23:24:d5:b9:15:60:cc:e0:6c:fc:8d:6b:d6:2f:
         d3:ca:30:d3:26:6f:6e:7c:6d:6f:a4:e8:eb:d0:90:90:16:dd:
         24:08:2d:a8:c0:ad:f3:ae:0c:ae:0d:ef:07:76:e2:95:b8:c9:
         00:11:43:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:59:50 2025 by rpki-client