Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/284B66622BDCBA6E3B5FB75DAF7F98292605C8E779008004B56D501770CA87D9/0/323830333a6130303a3a2f33322d3332203d3e203532333831.roa
File:                     323830333a6130303a3a2f33322d3332203d3e203532333831.roa (raw, json)
Hash identifier:          pbcNWbX88qduJF5eypn24slAQ7ffNCOiy2lfXkyJM7I=
Subject key identifier:   F6:A4:46:7B:C7:6B:A7:97:B4:05:3B:08:4E:2B:73:34:4A:16:38:31
Certificate issuer:       /CN=183FC381B3E5650B5E0CC9F0A8017BBC9C2CFB13
Certificate serial:       426BFC60190B76D48D3673654BA6B14E04B209BC
Authority key identifier: 18:3F:C3:81:B3:E5:65:0B:5E:0C:C9:F0:A8:01:7B:BC:9C:2C:FB:13
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/183FC381B3E5650B5E0CC9F0A8017BBC9C2CFB13.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/284B66622BDCBA6E3B5FB75DAF7F98292605C8E779008004B56D501770CA87D9/0/323830333a6130303a3a2f33322d3332203d3e203532333831.roa
Signing time:             Thu 27 Mar 2025 13:13:01 +0000
ROA not before:           Thu 27 Mar 2025 13:08:01 +0000
ROA not after:            Thu 26 Mar 2026 13:13:01 +0000
asID:                     52381
IP address blocks:        2803:a00::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/284B66622BDCBA6E3B5FB75DAF7F98292605C8E779008004B56D501770CA87D9/0/183FC381B3E5650B5E0CC9F0A8017BBC9C2CFB13.crl
                          rsync://repository.lacnic.net/rpki/lacnic/284B66622BDCBA6E3B5FB75DAF7F98292605C8E779008004B56D501770CA87D9/0/183FC381B3E5650B5E0CC9F0A8017BBC9C2CFB13.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/183FC381B3E5650B5E0CC9F0A8017BBC9C2CFB13.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 19:53:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:6b:fc:60:19:0b:76:d4:8d:36:73:65:4b:a6:b1:4e:04:b2:09:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=183FC381B3E5650B5E0CC9F0A8017BBC9C2CFB13
        Validity
            Not Before: Mar 27 13:08:01 2025 GMT
            Not After : Mar 26 13:13:01 2026 GMT
        Subject: CN=F6A4467BC76BA797B4053B084E2B73344A163831
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:91:e8:a8:44:97:e8:7a:55:08:6b:a4:04:84:
                    c1:15:5d:8c:a2:48:b0:f6:34:61:f3:f8:0f:68:9f:
                    d9:61:d9:1b:d3:3a:28:b5:2b:97:2d:2e:32:fa:66:
                    5c:81:0d:28:3e:27:e6:61:12:66:1e:d0:01:a5:e7:
                    5c:f9:72:54:a9:b0:42:79:af:fa:92:0b:ca:44:8f:
                    3a:d8:e6:24:d0:aa:1d:97:5c:30:5f:60:9a:78:4d:
                    4f:0d:21:fe:d6:c5:9e:cb:9a:65:5a:9d:91:6a:e9:
                    d1:3b:21:ca:8d:38:31:b8:37:40:4b:44:da:c8:45:
                    61:e9:70:1f:84:2f:c0:8e:4c:27:54:13:f9:43:2f:
                    28:66:e0:58:ab:50:a2:b4:ea:69:24:2a:db:fc:6e:
                    27:b0:88:93:f4:d0:3f:3c:fe:86:4d:1a:20:31:17:
                    59:49:31:cc:3f:82:c6:0d:d6:e4:67:4d:13:ab:3b:
                    50:ea:cb:31:b9:ad:b9:fe:01:7e:49:01:47:01:36:
                    11:15:e4:82:4f:a3:8e:b3:28:74:a9:88:6f:e0:03:
                    78:12:a1:1e:be:0d:6c:c6:8c:fc:ed:1f:25:03:9d:
                    80:08:a6:80:32:99:ad:42:00:9b:8b:18:d8:cf:a0:
                    d3:70:a0:04:d3:57:95:d9:07:6a:7d:6a:db:aa:9c:
                    d7:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:A4:46:7B:C7:6B:A7:97:B4:05:3B:08:4E:2B:73:34:4A:16:38:31
            X509v3 Authority Key Identifier:
                keyid:18:3F:C3:81:B3:E5:65:0B:5E:0C:C9:F0:A8:01:7B:BC:9C:2C:FB:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/284B66622BDCBA6E3B5FB75DAF7F98292605C8E779008004B56D501770CA87D9/0/183FC381B3E5650B5E0CC9F0A8017BBC9C2CFB13.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/183FC381B3E5650B5E0CC9F0A8017BBC9C2CFB13.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/284B66622BDCBA6E3B5FB75DAF7F98292605C8E779008004B56D501770CA87D9/0/323830333a6130303a3a2f33322d3332203d3e203532333831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:a00::/32

    Signature Algorithm: sha256WithRSAEncryption
         62:91:18:48:7e:18:f8:b5:9d:7c:c4:28:3a:f6:27:7c:d0:22:
         32:c8:a1:ab:1c:93:71:55:b1:a3:f1:52:ec:9b:0e:48:16:b9:
         28:3c:ba:dc:0f:d9:1f:ab:91:8a:52:aa:85:af:47:7e:7b:92:
         2f:8c:5a:e0:9d:7e:15:f8:49:3a:31:bc:0e:83:7b:50:87:af:
         55:c2:83:86:80:2c:95:07:3b:38:f2:f0:2c:1d:ab:f6:47:16:
         22:68:25:e3:6a:d5:f2:0d:09:b0:2d:4f:9b:42:7f:07:71:bf:
         71:41:bd:5e:64:49:a3:56:1f:95:3f:46:78:5e:32:70:f6:3e:
         d1:f4:2e:19:a7:3c:7c:eb:cc:9b:11:b8:56:88:a3:79:fa:f8:
         ef:9a:81:64:2f:20:47:95:09:8e:ba:5a:a6:8c:f6:03:79:5c:
         b1:42:5a:5b:b4:ff:48:59:72:12:ca:82:fd:8e:4a:46:10:9a:
         b5:8b:55:50:d8:ab:38:b7:c8:a6:87:97:8e:67:b9:59:0e:26:
         27:f8:19:14:c2:0c:cd:fb:0d:8d:6d:c0:cd:b0:e1:cf:37:32:
         ff:92:ab:6b:16:c3:41:40:27:4f:50:d5:07:66:99:16:7c:30:
         78:a4:4c:32:c6:53:1c:a8:db:dd:e6:41:9e:ad:2d:0d:77:c3:
         98:f1:c0:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:47:54 2025 by rpki-client