Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/462FFF33C31C789B381060D18764EFC1B39F677FA89503C899A260903BF52AE5/0/323830333a393738303a3a2f33322d3438203d3e203130363137.roa
File:                     323830333a393738303a3a2f33322d3438203d3e203130363137.roa (raw, json)
Hash identifier:          su9GtQXbBXrz37TvNSJHGLO5vBj8F9pU0VVKdSmDqgY=
Subject key identifier:   1F:69:C2:9C:68:7B:9D:20:B2:7E:16:B4:19:90:85:8A:59:45:69:BE
Certificate issuer:       /CN=991C3EDCC03E2270A8EAAF822EC17BEC741B1AA3
Certificate serial:       5E2FDC4BA67DAC6CFE63FB902C91EC517E007226
Authority key identifier: 99:1C:3E:DC:C0:3E:22:70:A8:EA:AF:82:2E:C1:7B:EC:74:1B:1A:A3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/991C3EDCC03E2270A8EAAF822EC17BEC741B1AA3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/462FFF33C31C789B381060D18764EFC1B39F677FA89503C899A260903BF52AE5/0/323830333a393738303a3a2f33322d3438203d3e203130363137.roa
Signing time:             Tue 04 Feb 2025 18:03:36 +0000
ROA not before:           Tue 04 Feb 2025 17:58:36 +0000
ROA not after:            Tue 03 Feb 2026 18:03:36 +0000
asID:                     10617
IP address blocks:        2803:9780::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/462FFF33C31C789B381060D18764EFC1B39F677FA89503C899A260903BF52AE5/0/991C3EDCC03E2270A8EAAF822EC17BEC741B1AA3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/462FFF33C31C789B381060D18764EFC1B39F677FA89503C899A260903BF52AE5/0/991C3EDCC03E2270A8EAAF822EC17BEC741B1AA3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/991C3EDCC03E2270A8EAAF822EC17BEC741B1AA3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:2f:dc:4b:a6:7d:ac:6c:fe:63:fb:90:2c:91:ec:51:7e:00:72:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=991C3EDCC03E2270A8EAAF822EC17BEC741B1AA3
        Validity
            Not Before: Feb  4 17:58:36 2025 GMT
            Not After : Feb  3 18:03:36 2026 GMT
        Subject: CN=1F69C29C687B9D20B27E16B41990858A594569BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:8c:77:d1:6c:df:49:ec:64:a2:bc:0b:4a:c8:
                    d6:1c:77:17:5a:a5:06:17:7d:9d:08:c0:92:91:02:
                    cc:52:2c:84:d5:3f:42:b2:58:e0:15:c1:bc:4a:7b:
                    c7:ee:c5:14:42:09:3e:7a:07:4b:e3:0d:76:3e:11:
                    58:ae:53:1a:f6:c3:6b:f7:63:e4:1f:43:bd:35:5a:
                    f4:32:07:aa:14:38:20:56:20:52:c6:49:c4:28:c0:
                    a3:57:37:76:43:6d:b6:ff:c9:de:43:bd:f0:4f:2f:
                    0b:5f:e7:4a:c2:11:b1:7d:38:26:ec:b4:40:64:11:
                    fc:54:75:5f:cc:6d:8e:1d:b7:69:d0:fb:c5:9c:3d:
                    36:67:2e:1e:52:eb:15:7e:aa:25:7a:ec:e6:67:c1:
                    2e:82:28:3b:48:65:8c:08:1e:71:c4:1f:91:c7:ee:
                    0a:4e:f3:13:a6:98:c8:26:95:ae:fb:63:ff:d1:16:
                    0a:a2:c9:6f:19:73:5f:13:15:0c:12:0c:5b:80:21:
                    18:80:d4:62:96:6f:8a:6e:68:6c:92:ce:4c:e2:37:
                    f8:1a:33:bd:d1:c0:d4:42:29:87:15:ef:e0:ae:d0:
                    b7:02:2d:b6:77:e2:67:c1:d6:b5:c7:bc:a2:ad:e6:
                    7e:86:fd:fa:26:39:1a:08:ac:e6:1a:21:81:5e:5f:
                    c5:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:69:C2:9C:68:7B:9D:20:B2:7E:16:B4:19:90:85:8A:59:45:69:BE
            X509v3 Authority Key Identifier:
                keyid:99:1C:3E:DC:C0:3E:22:70:A8:EA:AF:82:2E:C1:7B:EC:74:1B:1A:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/462FFF33C31C789B381060D18764EFC1B39F677FA89503C899A260903BF52AE5/0/991C3EDCC03E2270A8EAAF822EC17BEC741B1AA3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/991C3EDCC03E2270A8EAAF822EC17BEC741B1AA3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/462FFF33C31C789B381060D18764EFC1B39F677FA89503C899A260903BF52AE5/0/323830333a393738303a3a2f33322d3438203d3e203130363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9780::/32

    Signature Algorithm: sha256WithRSAEncryption
         98:b5:12:f1:a1:b1:d6:1a:82:58:56:5e:fb:33:da:4e:74:2c:
         26:db:f7:8d:25:d4:29:01:e7:9a:82:7e:ff:e7:76:80:38:ea:
         86:8c:39:cd:a7:98:37:d7:e2:22:da:75:af:ec:dd:96:b4:ca:
         fc:64:74:d5:95:26:ab:d3:da:7d:5e:71:0f:c2:df:ef:e2:4d:
         98:15:22:86:a5:5e:70:60:21:52:18:2f:d3:18:02:e3:8c:6f:
         b3:5c:0c:35:1c:fe:ad:71:a9:b4:6f:4a:01:6d:19:cb:ab:01:
         c2:77:e1:dc:4f:fd:9d:a8:45:7e:e3:fe:c9:c6:4b:24:7b:9a:
         b0:5a:e0:f9:6f:12:48:bb:45:fb:19:3f:3a:5e:e5:db:67:e9:
         7e:f5:20:e0:fc:24:4f:3b:cb:94:c4:66:ae:e3:4a:9f:ab:35:
         a1:2f:c4:71:6d:1b:a4:b4:80:7d:d6:7f:dc:f0:bc:82:20:8e:
         64:b2:4d:f8:5b:e2:6c:b8:20:24:db:20:e2:87:2d:df:76:19:
         ff:58:a5:a6:68:21:04:50:65:0d:6e:33:72:6d:d2:f2:af:35:
         97:a2:04:ef:b1:8c:dd:13:a4:a4:1e:12:b0:cb:4f:3a:33:bb:
         e6:ca:17:71:3b:75:9c:65:85:fa:a2:8a:85:61:97:bf:49:25:
         a7:6e:66:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:36:46 2025 by rpki-client