Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2DDB77BDFECD10C318201A65CED5B8BCE02C4D68E5CC5484F58784D44A4E0861/0/323830363a3330653a3a2f33322d3332203d3e203238343233.roa
File:                     323830363a3330653a3a2f33322d3332203d3e203238343233.roa (raw, json)
Hash identifier:          WvKkT8cR2eWlS1KhbQVSwgRnba84Z7wXczAMoBKXWyI=
Subject key identifier:   09:B6:1D:D6:3F:CE:28:C5:9A:0A:DE:0D:28:A7:1D:AF:0F:72:5A:2F
Certificate issuer:       /CN=2E53C3E1222D746A5EEABB43EDFC93BA4037CACD
Certificate serial:       08259DADAF907B343464692857C9D17181D70780
Authority key identifier: 2E:53:C3:E1:22:2D:74:6A:5E:EA:BB:43:ED:FC:93:BA:40:37:CA:CD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E53C3E1222D746A5EEABB43EDFC93BA4037CACD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2DDB77BDFECD10C318201A65CED5B8BCE02C4D68E5CC5484F58784D44A4E0861/0/323830363a3330653a3a2f33322d3332203d3e203238343233.roa
Signing time:             Tue 04 Feb 2025 18:31:51 +0000
ROA not before:           Tue 04 Feb 2025 18:26:51 +0000
ROA not after:            Tue 03 Feb 2026 18:31:51 +0000
asID:                     28423
IP address blocks:        2806:30e::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2DDB77BDFECD10C318201A65CED5B8BCE02C4D68E5CC5484F58784D44A4E0861/0/2E53C3E1222D746A5EEABB43EDFC93BA4037CACD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2DDB77BDFECD10C318201A65CED5B8BCE02C4D68E5CC5484F58784D44A4E0861/0/2E53C3E1222D746A5EEABB43EDFC93BA4037CACD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E53C3E1222D746A5EEABB43EDFC93BA4037CACD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:25:9d:ad:af:90:7b:34:34:64:69:28:57:c9:d1:71:81:d7:07:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E53C3E1222D746A5EEABB43EDFC93BA4037CACD
        Validity
            Not Before: Feb  4 18:26:51 2025 GMT
            Not After : Feb  3 18:31:51 2026 GMT
        Subject: CN=09B61DD63FCE28C59A0ADE0D28A71DAF0F725A2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:f2:cf:91:0d:92:d7:64:b7:b8:89:9c:ce:33:
                    bc:a7:8f:a6:3e:da:c3:14:04:50:1e:2b:ac:c9:02:
                    72:7e:bf:ab:3e:4c:04:4d:4d:35:8d:14:f0:da:72:
                    d0:db:ec:a8:ad:20:ec:d6:fc:cd:c2:f4:50:46:c8:
                    61:b6:c2:ea:16:f5:aa:3f:b9:6c:2b:b8:7b:cd:71:
                    ba:b5:06:b3:1c:5f:17:61:b2:9a:62:a8:5b:d0:2c:
                    a6:21:92:56:27:2e:c8:69:7a:4d:89:9f:f1:9f:23:
                    a9:23:0a:30:9c:a5:28:74:cd:e1:bd:7a:6f:06:c2:
                    3a:c8:9e:a9:ed:be:61:63:7e:2c:bb:05:c1:0f:2d:
                    7f:54:0e:1b:38:11:7c:0a:70:c3:99:72:72:e2:a1:
                    c2:c9:1c:9d:58:18:9c:e5:3e:16:12:c0:7b:53:d7:
                    36:fb:47:41:10:cf:b9:1b:1a:39:02:8c:06:ca:ff:
                    82:1b:7f:5e:45:f3:df:16:72:50:cb:50:ca:78:be:
                    d9:16:b1:75:29:e0:48:47:c5:5b:70:a8:b4:f1:af:
                    0c:f7:71:81:eb:78:f4:f4:bf:0e:4e:d9:65:1a:b7:
                    c2:ec:c6:17:7d:01:c9:5d:94:a8:2a:df:3f:84:d9:
                    e5:2a:08:fc:11:89:a7:da:f6:9c:9d:63:59:4c:11:
                    84:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:B6:1D:D6:3F:CE:28:C5:9A:0A:DE:0D:28:A7:1D:AF:0F:72:5A:2F
            X509v3 Authority Key Identifier:
                keyid:2E:53:C3:E1:22:2D:74:6A:5E:EA:BB:43:ED:FC:93:BA:40:37:CA:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2DDB77BDFECD10C318201A65CED5B8BCE02C4D68E5CC5484F58784D44A4E0861/0/2E53C3E1222D746A5EEABB43EDFC93BA4037CACD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E53C3E1222D746A5EEABB43EDFC93BA4037CACD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2DDB77BDFECD10C318201A65CED5B8BCE02C4D68E5CC5484F58784D44A4E0861/0/323830363a3330653a3a2f33322d3332203d3e203238343233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:30e::/32

    Signature Algorithm: sha256WithRSAEncryption
         51:58:31:76:80:b4:10:d3:ac:85:35:a6:3d:33:e0:b0:8d:f5:
         27:34:c1:40:08:06:61:c4:ac:5d:9c:be:5c:36:8b:d1:07:c7:
         50:9f:1d:3b:c0:bb:fe:95:b1:55:d4:bf:78:87:a8:f7:9c:a9:
         49:35:bc:e0:17:95:01:25:08:a8:70:e6:55:41:b7:9d:ae:3e:
         45:51:c0:e7:e9:58:77:ad:be:7c:84:35:f3:0e:24:b0:d6:86:
         4f:48:fb:69:3b:11:c5:64:73:a9:ab:b4:a2:df:62:a0:87:1a:
         fc:8d:6c:9e:45:47:aa:05:97:6f:cf:5c:f7:6e:9b:0c:76:3e:
         00:f9:13:b0:b7:c9:7d:26:91:cb:51:b7:12:43:8c:f0:f0:c4:
         4a:16:84:2a:71:e5:70:b3:55:84:fa:be:48:5f:c2:9a:f6:22:
         2f:dc:50:54:58:c5:bf:50:b4:2b:73:a1:c3:aa:3b:1b:3b:3f:
         bc:2c:7b:9d:50:0d:37:4a:47:42:5f:3a:e3:7f:56:c7:89:b4:
         18:90:63:10:5d:ef:6d:1e:39:52:42:c7:c3:1f:0f:93:94:26:
         63:b4:0e:7f:eb:ee:0d:87:eb:4f:2a:0d:38:69:b1:62:e0:f4:
         24:6a:5a:4e:f2:e3:a6:c8:00:c6:bd:57:17:6b:b8:ab:08:11:
         95:4e:2c:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:37:09 2025 by rpki-client