Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/221BC9A45A30D015AB28757C460799FAF7F6A39E81FA566F6704E576144ED50E/0/323830333a316239303a3a2f33322d3438203d3e20323733303434.roa
File:                     323830333a316239303a3a2f33322d3438203d3e20323733303434.roa (raw, json)
Hash identifier:          lFF+DjACeCDUFHfZ+y6xFpQFjs8slqARJDIP/QmLICM=
Subject key identifier:   E8:0F:28:52:68:FB:95:D4:CC:2F:19:A3:82:44:A6:14:50:37:B8:D3
Certificate issuer:       /CN=280C606B42E3E29D27F6E5ADC0ED5E13093C25E8
Certificate serial:       16909C42EF13B68D43B10E1CB50DF0C079078D3A
Authority key identifier: 28:0C:60:6B:42:E3:E2:9D:27:F6:E5:AD:C0:ED:5E:13:09:3C:25:E8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/280C606B42E3E29D27F6E5ADC0ED5E13093C25E8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/221BC9A45A30D015AB28757C460799FAF7F6A39E81FA566F6704E576144ED50E/0/323830333a316239303a3a2f33322d3438203d3e20323733303434.roa
Signing time:             Tue 04 Feb 2025 18:55:58 +0000
ROA not before:           Tue 04 Feb 2025 18:50:58 +0000
ROA not after:            Tue 03 Feb 2026 18:55:58 +0000
asID:                     273044
IP address blocks:        2803:1b90::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/221BC9A45A30D015AB28757C460799FAF7F6A39E81FA566F6704E576144ED50E/0/280C606B42E3E29D27F6E5ADC0ED5E13093C25E8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/221BC9A45A30D015AB28757C460799FAF7F6A39E81FA566F6704E576144ED50E/0/280C606B42E3E29D27F6E5ADC0ED5E13093C25E8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/280C606B42E3E29D27F6E5ADC0ED5E13093C25E8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:90:9c:42:ef:13:b6:8d:43:b1:0e:1c:b5:0d:f0:c0:79:07:8d:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=280C606B42E3E29D27F6E5ADC0ED5E13093C25E8
        Validity
            Not Before: Feb  4 18:50:58 2025 GMT
            Not After : Feb  3 18:55:58 2026 GMT
        Subject: CN=E80F285268FB95D4CC2F19A38244A6145037B8D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:f8:7a:c4:e7:20:85:e1:bd:45:fa:5d:e2:6c:
                    0b:87:68:ef:73:5e:93:10:0b:2f:4c:03:6b:09:77:
                    10:5e:01:e9:62:ff:8f:67:0d:b5:9f:5a:7a:77:e1:
                    e3:9a:8b:ad:31:44:94:de:da:c1:04:c5:d5:64:ab:
                    e2:b3:96:30:2e:4f:b1:08:f4:b3:f5:d9:48:37:8d:
                    26:f2:b6:db:ec:11:9e:e3:58:65:bb:6c:3f:dc:9d:
                    af:19:e4:8b:43:4d:73:e9:93:ee:45:0e:88:75:d2:
                    07:19:9b:bb:23:a7:9b:62:af:dc:4a:44:d7:c8:9b:
                    ed:2d:2e:c3:9a:7d:91:29:3e:99:f9:6e:3d:1d:30:
                    0f:80:19:fb:bf:70:09:24:7a:0c:d7:eb:8d:36:36:
                    6e:fa:aa:c6:a3:45:4d:63:37:e4:07:3c:bf:1e:f2:
                    25:81:3f:c3:7f:21:a9:ad:42:87:0d:b0:d9:df:83:
                    88:5d:16:a8:9c:dd:16:83:d3:54:f9:a4:0c:a9:f4:
                    d9:21:b0:30:5c:79:77:fe:a8:c3:cc:07:2e:91:00:
                    36:e2:a1:9f:6a:14:c5:5e:25:9a:c8:aa:ff:0c:c9:
                    a2:d0:3b:e6:e9:67:9e:b3:a3:51:5a:a0:ea:cf:ea:
                    9c:c2:0f:b3:45:f3:7a:d3:84:09:f5:ab:57:40:d1:
                    39:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:0F:28:52:68:FB:95:D4:CC:2F:19:A3:82:44:A6:14:50:37:B8:D3
            X509v3 Authority Key Identifier:
                keyid:28:0C:60:6B:42:E3:E2:9D:27:F6:E5:AD:C0:ED:5E:13:09:3C:25:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/221BC9A45A30D015AB28757C460799FAF7F6A39E81FA566F6704E576144ED50E/0/280C606B42E3E29D27F6E5ADC0ED5E13093C25E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/280C606B42E3E29D27F6E5ADC0ED5E13093C25E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/221BC9A45A30D015AB28757C460799FAF7F6A39E81FA566F6704E576144ED50E/0/323830333a316239303a3a2f33322d3438203d3e20323733303434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1b90::/32

    Signature Algorithm: sha256WithRSAEncryption
         33:d9:1e:28:81:9a:76:4c:23:68:09:6c:3c:a9:df:ae:21:af:
         96:c3:e2:cc:01:fc:c7:77:6c:01:99:ce:37:59:b5:ad:3e:b8:
         84:e2:aa:e7:e0:f2:7b:f3:53:da:b1:03:89:8a:d8:a5:67:e6:
         b8:54:bc:0b:b9:63:b1:e9:e5:c8:43:71:4e:a0:61:49:be:f3:
         ba:d6:02:24:50:32:9c:74:65:7a:a5:87:c4:ec:44:d0:6c:42:
         cd:13:10:43:d6:c5:37:d3:bb:1c:ae:d4:13:b1:a7:60:31:86:
         44:9d:b0:b1:f9:dd:8f:77:2c:90:74:49:d2:8d:f9:d5:95:d4:
         cd:2f:5f:b5:f8:cd:75:a4:6d:3f:2b:3b:f7:c6:9b:47:51:f3:
         67:3c:ee:5f:ef:33:2f:f5:53:cd:e5:c0:6b:e2:6d:78:7b:af:
         17:71:f3:15:71:cf:b1:fe:64:01:eb:a5:80:36:17:bc:8d:8a:
         17:a0:a7:a7:53:44:5e:ab:e9:60:a2:3b:fc:48:84:d0:bc:f7:
         1a:e7:d7:ba:12:af:e4:a2:61:d1:69:1e:71:44:5e:fb:37:6a:
         dc:39:c9:60:87:bf:e5:d4:6e:c1:08:cd:e7:d3:c1:89:d4:1b:
         ad:d5:ea:fa:04:bd:90:d2:bb:fa:a0:69:0a:14:ed:e0:f8:ae:
         ee:b2:0c:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:06:27 2025 by rpki-client