Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/23B7C697E988C14728015F75AD4BD621755BB39870EA2831B3CD053B988533F1/0/323830363a3363383a3a2f33322d3332203d3e20323730313439.roa
File:                     323830363a3363383a3a2f33322d3332203d3e20323730313439.roa (raw, json)
Hash identifier:          jvdrWAxMskBr8pBNGyYJ7lYwYZ2yNKoPIIZpz2RoJMQ=
Subject key identifier:   92:30:8F:64:EA:89:58:BE:BC:F0:00:B0:22:21:06:EC:E3:28:7B:91
Certificate issuer:       /CN=8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB
Certificate serial:       25D6F05915DCA86BAE861EA65919E148250F765F
Authority key identifier: 8A:12:67:DC:B4:DC:6F:FA:9F:CD:D7:FE:A9:D7:F9:F7:8C:37:91:DB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/23B7C697E988C14728015F75AD4BD621755BB39870EA2831B3CD053B988533F1/0/323830363a3363383a3a2f33322d3332203d3e20323730313439.roa
Signing time:             Tue 04 Feb 2025 18:08:42 +0000
ROA not before:           Tue 04 Feb 2025 18:03:42 +0000
ROA not after:            Tue 03 Feb 2026 18:08:42 +0000
asID:                     270149
IP address blocks:        2806:3c8::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/23B7C697E988C14728015F75AD4BD621755BB39870EA2831B3CD053B988533F1/0/8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/23B7C697E988C14728015F75AD4BD621755BB39870EA2831B3CD053B988533F1/0/8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:d6:f0:59:15:dc:a8:6b:ae:86:1e:a6:59:19:e1:48:25:0f:76:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB
        Validity
            Not Before: Feb  4 18:03:42 2025 GMT
            Not After : Feb  3 18:08:42 2026 GMT
        Subject: CN=92308F64EA8958BEBCF000B0222106ECE3287B91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:57:2b:ad:8c:82:c2:a0:52:0e:15:08:79:bb:
                    ea:ac:67:12:de:00:63:6e:40:a7:01:de:07:b4:15:
                    d8:32:db:06:f5:ef:dc:b0:be:ec:4a:6b:2b:c1:bc:
                    e4:cd:76:f1:0c:3f:1b:4e:99:3d:53:e6:35:d9:16:
                    90:9c:57:49:6c:b6:a1:d2:ca:16:87:2d:e8:6e:ac:
                    be:de:14:95:3c:d1:99:32:45:27:3f:49:f1:65:51:
                    3b:97:f9:84:b0:37:14:f4:1d:a2:c5:42:7c:47:7a:
                    20:30:12:41:a6:e0:6f:2c:e6:0c:e0:e2:07:83:1a:
                    69:85:52:3d:42:ff:09:37:32:84:34:cb:68:26:11:
                    60:e4:fa:a7:f2:7e:f8:86:6a:ff:a3:da:4b:e1:f9:
                    c8:a2:c9:0a:51:83:40:78:2b:41:91:44:e2:de:9d:
                    47:2f:df:48:11:75:c1:a2:d9:2d:73:7a:65:2c:a8:
                    52:3f:46:10:3a:f8:9e:b3:fd:4a:32:00:52:4b:82:
                    50:35:3b:86:67:b0:0a:4b:e0:98:d1:eb:81:91:b1:
                    98:fd:34:77:37:74:9d:d2:b2:1b:4c:0b:c2:9e:d9:
                    e7:26:9a:80:e4:df:4c:8c:a7:67:0b:32:5f:2c:e7:
                    0c:a9:ef:22:19:ec:ff:0f:47:ad:dd:4b:70:93:bc:
                    d6:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:30:8F:64:EA:89:58:BE:BC:F0:00:B0:22:21:06:EC:E3:28:7B:91
            X509v3 Authority Key Identifier:
                keyid:8A:12:67:DC:B4:DC:6F:FA:9F:CD:D7:FE:A9:D7:F9:F7:8C:37:91:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/23B7C697E988C14728015F75AD4BD621755BB39870EA2831B3CD053B988533F1/0/8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/23B7C697E988C14728015F75AD4BD621755BB39870EA2831B3CD053B988533F1/0/323830363a3363383a3a2f33322d3332203d3e20323730313439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:3c8::/32

    Signature Algorithm: sha256WithRSAEncryption
         84:ef:ea:ff:21:cd:0b:b1:03:fd:14:39:70:9d:3b:5d:12:d1:
         21:14:66:d0:24:6d:fe:fc:f1:94:4a:1a:ea:da:97:d1:38:93:
         8d:4b:54:1c:11:22:d0:a2:eb:82:fd:14:71:48:53:35:95:ba:
         83:a9:3a:25:9d:2f:1d:cb:3b:29:78:b5:70:10:ea:67:32:35:
         05:50:ac:2a:81:f7:bc:a9:49:ba:43:16:1a:19:30:7c:63:cc:
         f2:be:fe:c8:f2:28:f2:67:d8:8a:9c:f2:21:50:c0:66:41:45:
         4c:c8:9b:5a:51:66:81:45:52:d6:a0:2e:1a:41:e5:5f:2d:f7:
         02:7a:b1:a0:fc:00:48:c0:51:31:eb:12:f1:67:b6:d4:64:f0:
         79:d7:72:e5:36:bb:b0:ae:03:95:6f:8d:f7:88:e1:e2:0d:91:
         71:86:44:9b:82:d2:1b:11:9a:c8:1e:de:16:2f:2b:e4:bc:8a:
         bb:91:90:99:1d:bd:1a:87:e3:7f:39:24:3f:8f:5a:77:b2:34:
         f1:2b:2d:df:14:31:67:e4:64:41:ab:ec:ae:2e:51:9f:57:17:
         67:d1:4e:25:51:51:05:03:8f:9d:1a:02:be:f4:3a:5a:01:d4:
         f0:d3:c5:57:76:8b:aa:35:a3:bf:c9:5c:96:c6:26:ef:c9:52:
         6b:9a:80:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:36:40 2025 by rpki-client