Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/323030313a313333303a3a2f32392d3634203d3e2033333536.roa
File:                     323030313a313333303a3a2f32392d3634203d3e2033333536.roa (raw, json)
Hash identifier:          YomXAJxK0src/Heec7ZdnvgP/sMryqXj0NjY9irEl3I=
Subject key identifier:   FE:7B:E1:8D:48:50:9E:FE:EE:B4:C1:82:8F:05:F9:4A:E7:E1:98:16
Certificate issuer:       /CN=DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2
Certificate serial:       663E1892933A45E2EC76FBE4DD157D18D343568F
Authority key identifier: DE:D9:DD:B6:E0:5D:26:D9:3F:76:D4:43:4C:06:0C:7E:1D:26:E6:C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/323030313a313333303a3a2f32392d3634203d3e2033333536.roa
Signing time:             Tue 04 Feb 2025 18:36:34 +0000
ROA not before:           Tue 04 Feb 2025 18:31:34 +0000
ROA not after:            Tue 03 Feb 2026 18:36:34 +0000
asID:                     3356
IP address blocks:        2001:1330::/29 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:3e:18:92:93:3a:45:e2:ec:76:fb:e4:dd:15:7d:18:d3:43:56:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2
        Validity
            Not Before: Feb  4 18:31:34 2025 GMT
            Not After : Feb  3 18:36:34 2026 GMT
        Subject: CN=FE7BE18D48509EFEEEB4C1828F05F94AE7E19816
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:ef:0f:ae:cf:81:3c:10:53:5b:8b:6f:6d:8e:
                    1f:de:25:82:1e:bc:5c:ff:0e:d2:62:8b:0b:a2:da:
                    97:ff:d9:94:a4:88:f1:75:3b:eb:04:78:4a:ea:72:
                    46:75:d7:1f:4e:c4:a0:94:26:d6:a6:98:69:92:83:
                    a9:a1:36:5e:07:b0:32:cf:29:8b:7f:6c:be:a5:73:
                    8f:18:be:b5:ce:3c:e0:7f:86:ed:47:b5:e7:cc:b2:
                    20:84:cd:d4:9e:74:b4:94:de:5d:ec:11:d4:4a:88:
                    cc:6c:51:39:80:d4:37:d5:92:89:2d:f2:ae:f8:9f:
                    46:53:30:1a:40:87:ed:44:1c:54:46:f6:15:2f:b5:
                    99:c5:2d:37:16:2a:2b:0d:0b:c4:97:81:70:03:e1:
                    0b:10:b8:50:8f:f3:bd:5a:e9:88:52:51:4f:28:b5:
                    ff:9d:80:2f:2b:24:b6:c5:bd:54:7f:f5:fd:90:73:
                    5d:64:ee:90:bb:0f:fc:e8:7c:97:ce:da:4b:a0:85:
                    f6:1e:fa:e2:58:a1:ee:2f:45:65:7e:75:40:ef:64:
                    44:44:e6:26:3a:cb:1a:9e:9d:bc:2c:19:c1:b0:f9:
                    e0:c3:ed:e2:38:41:75:58:16:23:46:5e:36:22:37:
                    6f:a2:e2:03:1c:41:69:f1:c4:ee:62:1e:67:20:1d:
                    c5:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:7B:E1:8D:48:50:9E:FE:EE:B4:C1:82:8F:05:F9:4A:E7:E1:98:16
            X509v3 Authority Key Identifier:
                keyid:DE:D9:DD:B6:E0:5D:26:D9:3F:76:D4:43:4C:06:0C:7E:1D:26:E6:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/323030313a313333303a3a2f32392d3634203d3e2033333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1330::/29

    Signature Algorithm: sha256WithRSAEncryption
         9c:c0:a5:63:b0:80:64:b4:cc:3b:75:18:3c:f1:d0:bf:aa:7a:
         50:89:db:e9:57:90:f6:9f:41:9d:82:23:48:6e:b4:8e:36:3f:
         ea:6a:54:1f:e0:ba:bd:a2:a9:63:0a:1d:e9:55:8f:14:08:25:
         39:b0:27:ae:4d:73:c4:05:97:cc:9a:97:f0:73:4d:b1:71:35:
         d3:7c:8d:2a:42:73:a7:ee:74:fd:e9:db:79:f9:21:2e:4a:6c:
         cc:90:7b:df:71:87:7d:29:30:32:ad:80:77:8a:61:d6:25:f9:
         90:cd:fd:dc:78:7c:74:5a:b1:a4:22:b0:f2:b9:11:91:7c:c5:
         09:6e:02:19:a3:ba:36:f2:40:a3:ee:43:09:62:a6:37:7a:81:
         ba:79:3f:ac:c1:6d:f8:75:2a:6e:b9:75:d9:ed:8a:6e:97:40:
         bf:46:cc:81:1d:d0:0d:1f:db:70:7d:01:38:55:a8:3a:06:17:
         6b:34:51:de:ac:30:43:9e:c3:56:c3:dc:a3:f6:53:52:2a:c7:
         10:aa:07:a5:24:9c:af:0b:7b:df:65:67:de:a9:d3:63:81:6d:
         ed:cd:fd:77:bb:79:5c:c1:40:79:8f:cc:5d:eb:2d:92:fc:81:
         0b:ed:9c:66:60:1e:1e:d0:5f:21:6a:0d:8e:a1:b7:9d:3d:b6:
         e2:e6:c9:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:00:04 2025 by rpki-client