Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2DD3B0AA7D6DB59528108085A18B9FF969B5B062D180A63241CA04F5B56E163C/0/323830333a316165303a3a2f33322d3332203d3e20313336393037.roa
File:                     323830333a316165303a3a2f33322d3332203d3e20313336393037.roa (raw, json)
Hash identifier:          f9B1upwKSq0NamG9bFh9131dgByjuKhU5GSkK3H1dMQ=
Subject key identifier:   95:05:E3:B5:E1:21:03:23:C2:F2:09:BA:F8:FD:3D:92:F3:0D:3E:E0
Certificate issuer:       /CN=36A232DEC8FF17295E0671B40126922251AAE733
Certificate serial:       29EDC45E0F128A5BA8CE9440339A527AED4BD02A
Authority key identifier: 36:A2:32:DE:C8:FF:17:29:5E:06:71:B4:01:26:92:22:51:AA:E7:33
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/36A232DEC8FF17295E0671B40126922251AAE733.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2DD3B0AA7D6DB59528108085A18B9FF969B5B062D180A63241CA04F5B56E163C/0/323830333a316165303a3a2f33322d3332203d3e20313336393037.roa
Signing time:             Tue 04 Feb 2025 19:56:36 +0000
ROA not before:           Tue 04 Feb 2025 19:51:36 +0000
ROA not after:            Tue 03 Feb 2026 19:56:36 +0000
asID:                     136907
IP address blocks:        2803:1ae0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2DD3B0AA7D6DB59528108085A18B9FF969B5B062D180A63241CA04F5B56E163C/0/36A232DEC8FF17295E0671B40126922251AAE733.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2DD3B0AA7D6DB59528108085A18B9FF969B5B062D180A63241CA04F5B56E163C/0/36A232DEC8FF17295E0671B40126922251AAE733.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/36A232DEC8FF17295E0671B40126922251AAE733.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 21:11:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:ed:c4:5e:0f:12:8a:5b:a8:ce:94:40:33:9a:52:7a:ed:4b:d0:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36A232DEC8FF17295E0671B40126922251AAE733
        Validity
            Not Before: Feb  4 19:51:36 2025 GMT
            Not After : Feb  3 19:56:36 2026 GMT
        Subject: CN=9505E3B5E1210323C2F209BAF8FD3D92F30D3EE0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:92:6e:90:77:f6:28:39:6c:06:3b:10:7d:24:
                    9a:3b:04:b4:86:08:ec:e4:58:a0:b0:0c:ac:4a:75:
                    d3:eb:6a:87:bb:a3:d3:81:de:2a:e4:af:64:26:6f:
                    33:c5:12:21:af:39:b1:aa:b0:4a:46:43:eb:54:92:
                    8b:97:e8:3d:97:22:be:a7:53:b9:c5:13:78:ef:39:
                    b0:81:01:88:39:8a:b6:87:75:17:fc:5c:d5:3d:69:
                    1f:20:e1:00:b7:a7:82:e4:ff:d7:3d:19:ae:c5:fc:
                    a5:85:a3:2a:b1:cc:10:8a:bf:ad:f3:ae:a9:d0:98:
                    f0:d3:32:0a:89:ec:31:ab:0b:e6:b0:33:85:8b:99:
                    72:3d:1a:2a:ab:07:92:45:40:b4:72:89:81:6e:10:
                    ab:cd:48:17:03:da:8f:83:bb:75:ff:7e:5c:19:60:
                    60:15:45:6d:7d:e9:91:83:58:ef:e8:02:8f:d9:04:
                    b7:2f:5f:1b:b9:cd:37:60:31:dc:82:ee:a4:f6:48:
                    ae:9d:ed:69:4c:5f:c4:9c:34:ef:14:2d:4f:5c:a1:
                    ad:4d:18:d0:3b:c1:7c:5f:c1:56:ae:58:16:2b:35:
                    e5:1e:ad:e8:fa:54:5e:0b:3a:c6:7d:36:38:37:17:
                    81:89:ef:9d:96:33:ac:0b:fb:97:59:09:0d:e6:32:
                    88:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:05:E3:B5:E1:21:03:23:C2:F2:09:BA:F8:FD:3D:92:F3:0D:3E:E0
            X509v3 Authority Key Identifier:
                keyid:36:A2:32:DE:C8:FF:17:29:5E:06:71:B4:01:26:92:22:51:AA:E7:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2DD3B0AA7D6DB59528108085A18B9FF969B5B062D180A63241CA04F5B56E163C/0/36A232DEC8FF17295E0671B40126922251AAE733.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/36A232DEC8FF17295E0671B40126922251AAE733.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2DD3B0AA7D6DB59528108085A18B9FF969B5B062D180A63241CA04F5B56E163C/0/323830333a316165303a3a2f33322d3332203d3e20313336393037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1ae0::/32

    Signature Algorithm: sha256WithRSAEncryption
         21:4a:44:d1:e9:a2:ad:b7:46:70:78:c5:e3:2a:69:83:21:cb:
         06:60:b7:b3:d0:48:58:e3:2f:d4:ab:05:54:c4:c3:6a:59:b0:
         e8:13:84:38:8d:09:4d:6c:cf:b3:b0:d6:ec:79:50:e0:12:2f:
         a9:0e:1b:b2:8c:ff:63:65:16:aa:79:7a:78:d3:c9:e7:23:e7:
         04:6c:54:73:99:ad:c8:a3:25:ae:ff:68:38:8d:1c:e9:d2:07:
         22:c3:d8:27:77:49:05:e6:fe:0c:d4:9d:c7:05:ad:4e:6f:39:
         c7:24:03:45:99:cc:32:60:ac:3f:74:bf:d4:f4:d0:56:42:2c:
         fc:d1:68:94:f5:b6:5c:d2:c3:18:28:1f:b0:50:24:e6:c3:e8:
         76:99:8a:ad:a7:40:df:f5:6d:a2:7c:23:72:d0:4f:74:1e:c2:
         2e:3b:eb:16:a3:4c:80:c8:a4:d9:25:9d:51:08:96:07:86:69:
         55:99:98:36:5d:a0:48:29:d7:92:9c:45:2b:59:50:8c:ed:4d:
         2c:91:1f:17:cc:71:90:43:17:c7:db:4b:50:40:ba:ff:d4:0f:
         d3:67:d6:c8:f5:f8:b0:63:63:48:9d:23:87:40:3b:5e:c8:23:
         38:73:60:b0:ea:52:4d:d9:53:ba:8b:98:b5:13:b6:0e:73:29:
         28:d9:03:37
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUKe3EXg8SiluozpRAM5pSeu1L0CowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzZBMjMyREVDOEZGMTcyOTVFMDY3MUI0MDEyNjkyMjI1
MUFBRTczMzAeFw0yNTAyMDQxOTUxMzZaFw0yNjAyMDMxOTU2MzZaMDMxMTAvBgNV
BAMTKDk1MDVFM0I1RTEyMTAzMjNDMkYyMDlCQUY4RkQzRDkyRjMwRDNFRTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCkm6Qd/YoOWwGOxB9JJo7BLSG
COzkWKCwDKxKddPraoe7o9OB3irkr2QmbzPFEiGvObGqsEpGQ+tUkouX6D2XIr6n
U7nFE3jvObCBAYg5iraHdRf8XNU9aR8g4QC3p4Lk/9c9Ga7F/KWFoyqxzBCKv63z
rqnQmPDTMgqJ7DGrC+awM4WLmXI9GiqrB5JFQLRyiYFuEKvNSBcD2o+Du3X/flwZ
YGAVRW196ZGDWO/oAo/ZBLcvXxu5zTdgMdyC7qT2SK6d7WlMX8ScNO8ULU9coa1N
GNA7wXxfwVauWBYrNeUerej6VF4LOsZ9Njg3F4GJ752WM6wL+5dZCQ3mMogfAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUlQXjteEhAyPC8gm6+P09kvMNPuAwHwYDVR0j
BBgwFoAUNqIy3sj/FyleBnG0ASaSIlGq5zMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yREQzQjBBQTdENkRCNTk1MjgxMDgwODVBMThCOUZGOTY5
QjVCMDYyRDE4MEE2MzI0MUNBMDRGNUI1NkUxNjNDLzAvMzZBMjMyREVDOEZGMTcy
OTVFMDY3MUI0MDEyNjkyMjI1MUFBRTczMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zNkEyMzJERUM4RkYxNzI5NUUw
NjcxQjQwMTI2OTIyMjUxQUFFNzMzLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMkREM0IwQUE3RDZEQjU5NTI4MTA4MDg1QTE4QjlGRjk2OUI1QjA2MkQx
ODBBNjMyNDFDQTA0RjVCNTZFMTYzQy8wLzMyMzgzMDMzM2EzMTYxNjUzMDNhM2Ey
ZjMzMzIyZDMzMzIyMDNkM2UyMDMxMzMzNjM5MzAzNy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDGuAw
DQYJKoZIhvcNAQELBQADggEBACFKRNHpoq23RnB4xeMqaYMhywZgt7PQSFjjL9Sr
BVTEw2pZsOgThDiNCU1sz7Ow1ux5UOASL6kOG7KM/2NlFqp5enjTyecj5wRsVHOZ
rcijJa7/aDiNHOnSByLD2Cd3SQXm/gzUnccFrU5vOcckA0WZzDJgrD90v9T00FZC
LPzRaJT1tlzSwxgoH7BQJObD6HaZiq2nQN/1baJ8I3LQT3Qewi476xajTIDIpNkl
nVEIlgeGaVWZmDZdoEgp15KcRStZUIztTSyRHxfMcZBDF8fbS1BAuv/UD9Nn1sj1
+LBjY0idI4dAO17IIzhzYLDqUk3ZU7qLmLUTtg5zKSjZAzc=
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:33:21 2025 by rpki-client