Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/44B3E9C72B5775BB66C8C167C44595DC9E6EE9ADDA24E6B9E8E9855A26A2C59F/0/323830333a373634303a34303a3a2f34332d3434203d3e20323635363933.roa
File:                     323830333a373634303a34303a3a2f34332d3434203d3e20323635363933.roa (raw, json)
Hash identifier:          ighy5HJCbj+DQQAnk/ojsDTF1GjCGquLBDJq+x/MKOk=
Subject key identifier:   23:C8:79:F0:8B:35:3F:03:9A:81:0D:BD:9D:96:41:25:37:AE:35:C8
Certificate issuer:       /CN=BC8F94CCF6EFDE440433A6CA0A4F425A3C74A1A4
Certificate serial:       1CABD1EB120B8DE15A47893E86E6283D5ACF813F
Authority key identifier: BC:8F:94:CC:F6:EF:DE:44:04:33:A6:CA:0A:4F:42:5A:3C:74:A1:A4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BC8F94CCF6EFDE440433A6CA0A4F425A3C74A1A4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/44B3E9C72B5775BB66C8C167C44595DC9E6EE9ADDA24E6B9E8E9855A26A2C59F/0/323830333a373634303a34303a3a2f34332d3434203d3e20323635363933.roa
Signing time:             Tue 04 Feb 2025 18:50:35 +0000
ROA not before:           Tue 04 Feb 2025 18:45:35 +0000
ROA not after:            Tue 03 Feb 2026 18:50:35 +0000
asID:                     265693
IP address blocks:        2803:7640:40::/43 maxlen: 44
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/44B3E9C72B5775BB66C8C167C44595DC9E6EE9ADDA24E6B9E8E9855A26A2C59F/0/BC8F94CCF6EFDE440433A6CA0A4F425A3C74A1A4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/44B3E9C72B5775BB66C8C167C44595DC9E6EE9ADDA24E6B9E8E9855A26A2C59F/0/BC8F94CCF6EFDE440433A6CA0A4F425A3C74A1A4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BC8F94CCF6EFDE440433A6CA0A4F425A3C74A1A4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 20:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:ab:d1:eb:12:0b:8d:e1:5a:47:89:3e:86:e6:28:3d:5a:cf:81:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BC8F94CCF6EFDE440433A6CA0A4F425A3C74A1A4
        Validity
            Not Before: Feb  4 18:45:35 2025 GMT
            Not After : Feb  3 18:50:35 2026 GMT
        Subject: CN=23C879F08B353F039A810DBD9D96412537AE35C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:40:c2:12:b8:61:c1:af:e2:49:46:37:26:d0:
                    47:09:7d:c3:99:7f:93:3f:eb:72:fd:59:d2:37:48:
                    c7:a5:80:0c:16:d8:e9:8e:26:1e:50:b0:4b:26:67:
                    ab:00:57:6d:11:c6:a4:ba:26:95:9f:c7:d9:61:46:
                    81:fb:db:7b:28:c7:a8:41:3b:9b:3a:69:a9:bb:7b:
                    c1:ee:34:69:2b:66:ee:75:6f:d6:77:8a:5f:a2:30:
                    80:c1:cc:1e:fe:e4:18:d1:89:84:48:b4:aa:3b:fb:
                    92:aa:c0:e2:03:8e:5c:9a:57:f3:1a:3d:00:3b:94:
                    7a:b3:1a:b3:e8:05:93:9b:a1:16:d7:3f:8f:2f:10:
                    15:e5:b3:4f:54:73:9e:88:cb:bf:ee:43:f3:1c:3a:
                    99:af:c3:0e:d7:f3:9b:42:48:f7:84:0d:af:78:c9:
                    80:0b:7d:2b:21:a6:26:98:7f:cf:a3:7b:9c:2f:fe:
                    69:bc:c6:e2:50:f4:48:29:02:97:a9:3e:0c:b0:f3:
                    fb:3b:4d:01:58:6f:e3:4a:4e:8c:c1:a1:7d:a2:ed:
                    d6:8a:e6:88:48:cb:0a:fb:4d:5d:5e:02:ef:e8:db:
                    5d:1e:d2:c4:2f:6f:86:69:b7:cc:a9:8a:73:ee:8e:
                    f0:d6:00:86:3e:e8:52:0e:0b:3a:1f:c5:74:61:54:
                    e0:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:C8:79:F0:8B:35:3F:03:9A:81:0D:BD:9D:96:41:25:37:AE:35:C8
            X509v3 Authority Key Identifier:
                keyid:BC:8F:94:CC:F6:EF:DE:44:04:33:A6:CA:0A:4F:42:5A:3C:74:A1:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/44B3E9C72B5775BB66C8C167C44595DC9E6EE9ADDA24E6B9E8E9855A26A2C59F/0/BC8F94CCF6EFDE440433A6CA0A4F425A3C74A1A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BC8F94CCF6EFDE440433A6CA0A4F425A3C74A1A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/44B3E9C72B5775BB66C8C167C44595DC9E6EE9ADDA24E6B9E8E9855A26A2C59F/0/323830333a373634303a34303a3a2f34332d3434203d3e20323635363933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7640:40::/43

    Signature Algorithm: sha256WithRSAEncryption
         23:45:f2:aa:04:3f:ec:17:89:db:6f:01:b6:53:cc:c0:37:a4:
         8a:62:ec:a6:d5:b8:da:a4:33:68:3c:22:6d:3a:04:45:b5:45:
         a4:c5:69:4f:94:8e:dc:59:1a:2d:9d:bc:13:e9:78:0a:5c:21:
         97:b1:6a:f3:5e:a2:ca:52:40:18:30:9f:ec:27:13:ce:de:c7:
         17:e7:4e:d9:76:6e:4d:f5:9e:8a:44:f0:52:65:19:fb:3a:42:
         3d:11:09:f4:6b:14:07:06:58:0e:3f:49:11:e0:79:f6:50:c7:
         83:31:ac:61:89:48:97:b1:c4:8f:7b:47:45:33:5b:8c:dc:c5:
         a9:1c:80:b8:43:62:ac:04:6b:4a:b9:79:88:bf:6b:4f:23:a4:
         54:35:d6:eb:9f:e1:ba:50:e5:bd:9b:f6:3a:a5:1b:ed:86:e0:
         49:f7:ea:ae:50:01:5b:5d:34:2f:c4:e5:21:de:35:08:f8:1b:
         86:24:c1:14:4f:57:2a:36:92:15:cc:47:ab:22:67:d6:1a:91:
         35:6f:6e:e5:17:b6:eb:33:6a:fb:77:b7:13:9b:95:b5:be:78:
         35:e8:a8:35:88:10:f2:a6:e3:d2:5e:aa:65:3a:5a:b7:f3:76:
         63:d8:4b:75:5b:65:d8:ce:3e:08:7d:d6:d8:77:a6:89:b7:5d:
         09:8d:f5:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 21:31:15 2025 by rpki-client