Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/323830303a3534303a3a2f33322d3434203d3e203237393935.roa
File:                     323830303a3534303a3a2f33322d3434203d3e203237393935.roa (raw, json)
Hash identifier:          R67UniXtHlz5m+v4gbnRppxWCpbfvjulPvg1hUfdntU=
Subject key identifier:   69:E2:9C:B0:3E:C2:67:17:F0:29:5F:93:67:4A:93:3B:1E:AA:7F:B2
Certificate issuer:       /CN=516A0BAEF13F646C61E3AB03846DBFAD78DD7E99
Certificate serial:       2046E7DA16DBDFC4B31D17734C419ABA217639DE
Authority key identifier: 51:6A:0B:AE:F1:3F:64:6C:61:E3:AB:03:84:6D:BF:AD:78:DD:7E:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/323830303a3534303a3a2f33322d3434203d3e203237393935.roa
Signing time:             Wed 19 Mar 2025 06:00:00 +0000
ROA not before:           Wed 19 Mar 2025 05:55:00 +0000
ROA not after:            Wed 18 Mar 2026 06:00:00 +0000
asID:                     27995
IP address blocks:        2800:540::/32 maxlen: 44
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.crl
                          rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 12 Apr 2025 00:47:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:46:e7:da:16:db:df:c4:b3:1d:17:73:4c:41:9a:ba:21:76:39:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=516A0BAEF13F646C61E3AB03846DBFAD78DD7E99
        Validity
            Not Before: Mar 19 05:55:00 2025 GMT
            Not After : Mar 18 06:00:00 2026 GMT
        Subject: CN=69E29CB03EC26717F0295F93674A933B1EAA7FB2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:1e:67:f2:da:cd:55:25:fd:5f:62:73:67:35:
                    21:7c:4e:14:e3:7f:8f:20:1a:1e:c6:d6:21:ac:1b:
                    f2:58:1d:51:35:38:8d:a8:03:04:6f:36:fa:b7:3b:
                    64:72:67:82:70:8a:29:f3:aa:5f:8b:ab:a1:53:66:
                    e4:43:39:33:25:2c:d3:f4:46:cd:20:1a:78:50:69:
                    97:62:6b:91:ba:e8:59:bf:b3:58:54:aa:69:b5:67:
                    4b:9f:10:34:1c:69:25:34:90:d4:99:55:d4:e2:4b:
                    9a:23:e4:dd:cf:c1:b4:34:17:93:ff:e4:a3:48:a9:
                    ec:69:18:52:f3:58:d6:a9:98:de:1a:bc:91:c7:e7:
                    ee:83:53:ff:f1:0a:25:65:44:86:c7:00:de:c1:d2:
                    b0:50:13:52:09:1a:cd:cf:0b:84:d5:d3:d7:a9:79:
                    eb:66:87:95:b2:51:69:db:50:62:11:ba:a8:9e:10:
                    c6:a2:9c:b7:e7:e7:19:ba:30:28:38:5c:cf:ad:2e:
                    6c:71:cb:9a:13:81:8b:39:52:84:f4:35:72:35:c1:
                    a8:3e:05:bb:4e:d2:ca:1d:a6:ce:b0:24:01:bc:3b:
                    d3:5b:66:a2:b8:5b:8d:c7:4a:39:6b:8c:57:ce:0b:
                    cd:e7:8e:a9:4a:0d:de:2b:ff:f0:b2:53:62:86:c4:
                    13:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:E2:9C:B0:3E:C2:67:17:F0:29:5F:93:67:4A:93:3B:1E:AA:7F:B2
            X509v3 Authority Key Identifier:
                keyid:51:6A:0B:AE:F1:3F:64:6C:61:E3:AB:03:84:6D:BF:AD:78:DD:7E:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/323830303a3534303a3a2f33322d3434203d3e203237393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:540::/32

    Signature Algorithm: sha256WithRSAEncryption
         36:35:d3:6c:d9:ef:de:f4:9b:7a:b4:12:a1:fa:f5:d0:b4:4a:
         5f:3a:88:7c:e8:08:62:99:16:7f:9a:81:25:2c:34:d2:fb:4d:
         81:2a:27:f0:f0:9d:94:dd:30:36:25:dc:84:49:51:4c:9b:4d:
         b6:18:0b:6c:82:e6:a9:61:f1:a4:90:a5:f3:8a:d5:15:7f:aa:
         ed:d5:4a:7d:c2:1f:c5:7a:50:af:72:a7:31:08:86:e5:40:e1:
         7f:c1:e0:84:b4:1f:93:84:32:f9:85:bb:53:e6:2d:44:83:e7:
         8e:c8:8d:f9:e1:9a:37:c3:c2:7a:c1:4e:db:fb:db:69:37:8a:
         55:6a:89:2c:a9:ad:95:24:4a:72:ca:c3:79:03:8d:aa:62:3f:
         1a:ad:1d:f5:27:12:5e:17:48:2f:ad:71:fc:41:af:f5:96:49:
         8b:d0:32:1e:d9:09:9c:b2:c3:49:d4:ad:1b:26:1b:ab:03:8c:
         cc:ed:49:3c:96:15:bc:85:fe:70:40:81:1a:9e:ad:7e:50:b1:
         44:13:31:96:f3:1e:a7:9e:05:3e:f4:00:3c:df:8a:75:f3:cc:
         5e:e9:b8:44:bd:af:be:de:ed:28:e4:3a:20:a4:17:a2:6e:44:
         b7:bb:4a:43:83:ac:f7:24:c7:50:12:1f:9f:1e:8a:34:64:bb:
         ff:9c:33:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 19:38:28 2025 by rpki-client