Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/323830333a396232303a3a2f33322d3634203d3e2033333536.roa
File:                     323830333a396232303a3a2f33322d3634203d3e2033333536.roa (raw, json)
Hash identifier:          JrgoBzScjh1e4ip/vNH0kvfaLmTrE+5sSeBOmUWfXqk=
Subject key identifier:   C0:CC:8D:9B:B9:BD:E7:19:F7:FC:47:C4:32:A0:32:40:94:5E:68:A6
Certificate issuer:       /CN=DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2
Certificate serial:       42F61F31C5B6EBB2174C1C9302EB409BBDDA1119
Authority key identifier: DE:D9:DD:B6:E0:5D:26:D9:3F:76:D4:43:4C:06:0C:7E:1D:26:E6:C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/323830333a396232303a3a2f33322d3634203d3e2033333536.roa
Signing time:             Tue 04 Feb 2025 18:36:40 +0000
ROA not before:           Tue 04 Feb 2025 18:31:40 +0000
ROA not after:            Tue 03 Feb 2026 18:36:40 +0000
asID:                     3356
IP address blocks:        2803:9b20::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 20 Feb 2025 17:49:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:f6:1f:31:c5:b6:eb:b2:17:4c:1c:93:02:eb:40:9b:bd:da:11:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2
        Validity
            Not Before: Feb  4 18:31:40 2025 GMT
            Not After : Feb  3 18:36:40 2026 GMT
        Subject: CN=C0CC8D9BB9BDE719F7FC47C432A03240945E68A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:53:05:47:47:25:5b:fe:62:89:a8:67:88:1f:
                    f4:51:71:71:58:48:3a:43:b8:2f:78:40:75:d2:59:
                    10:f6:24:10:40:36:5f:c2:15:70:a7:f1:15:ac:85:
                    07:df:55:6f:ca:51:1c:e4:34:ce:64:15:1c:5d:00:
                    8c:29:f7:c1:30:cf:7b:30:20:91:d2:b7:69:74:87:
                    7c:15:40:a0:d9:a5:cb:3c:39:50:c5:94:b6:d3:58:
                    7e:8e:ff:a3:3a:15:56:ba:d9:13:46:4d:ac:ae:f5:
                    aa:ae:df:9d:8f:f0:67:46:0a:17:05:ad:2b:c7:f1:
                    4e:99:01:0f:8a:e6:8a:15:59:04:65:a7:0f:20:e2:
                    35:57:39:e4:de:b7:f0:61:34:46:c7:de:ba:78:4c:
                    10:3c:40:8d:99:ff:3a:6c:e8:09:d9:6a:58:22:d8:
                    82:59:a0:1f:d6:8d:4b:53:63:e0:8e:5e:b2:29:a5:
                    71:14:84:69:1b:f8:f8:c5:cf:27:bc:4e:2b:60:6e:
                    10:4e:20:de:c0:7a:9e:57:b0:47:6b:4d:f0:5e:17:
                    67:d6:a9:d7:a8:0a:1f:2e:12:84:e8:c6:7e:91:f5:
                    7a:0a:91:9f:d6:0c:98:c8:3f:a6:18:6f:6f:e9:ee:
                    87:25:93:5c:8d:4a:9f:8d:6a:49:d4:e7:f3:2f:6e:
                    6e:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:CC:8D:9B:B9:BD:E7:19:F7:FC:47:C4:32:A0:32:40:94:5E:68:A6
            X509v3 Authority Key Identifier:
                keyid:DE:D9:DD:B6:E0:5D:26:D9:3F:76:D4:43:4C:06:0C:7E:1D:26:E6:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/323830333a396232303a3a2f33322d3634203d3e2033333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9b20::/32

    Signature Algorithm: sha256WithRSAEncryption
         22:ce:6f:b3:38:4a:12:14:fd:61:a7:b1:eb:25:f1:43:cc:07:
         97:96:62:cf:4a:f6:a2:70:67:62:e8:d5:a6:58:3c:60:2d:15:
         e7:f3:8b:50:fc:1f:98:b9:12:e8:ce:62:6f:96:80:72:40:e9:
         be:73:ca:c2:f6:e6:39:33:78:c1:37:a5:0e:bb:c5:4f:a5:52:
         81:26:3c:41:d4:87:4b:57:ec:61:ff:9c:03:c0:f6:1e:d8:0d:
         31:57:15:ab:94:6e:f8:e3:1b:45:46:92:0b:35:9e:cf:b9:20:
         c9:92:5d:80:5e:8a:ac:f2:d8:2c:eb:e1:0e:51:d2:33:52:1f:
         43:83:47:46:46:0c:45:d1:45:84:2c:c4:38:47:08:c9:b3:4b:
         ac:82:af:5a:a5:8c:3c:4b:61:0d:2a:d2:80:e2:98:0b:b1:ef:
         d9:71:22:2a:91:15:ca:88:0d:bd:07:71:90:20:b0:23:fc:b9:
         f6:01:62:ac:6c:eb:b0:29:25:c5:53:8c:02:f9:01:f0:da:cd:
         d5:95:b7:c1:1f:e9:de:88:15:05:85:8d:d7:d9:4e:7a:61:85:
         05:f4:7c:50:9b:0a:d1:24:eb:3a:fd:0f:7d:41:87:cd:45:0c:
         70:ef:e0:4e:6f:da:d5:9f:3a:8f:4d:f3:7a:8b:0e:2c:03:d2:
         6c:23:6e:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:29:12 2025 by rpki-client