Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/49103830332AC6B62BE5F050A24A7698B457D89966AC49F9D2D0D53B614ACD3F/0/323830313a303a32303a3a2f34382d3438203d3e203237393437.roa
File:                     323830313a303a32303a3a2f34382d3438203d3e203237393437.roa (raw, json)
Hash identifier:          dpuSAsEARdkYoRi84gkPLS41HAtoNj6FqFRb6JYjVMU=
Subject key identifier:   3E:16:D4:F6:23:3A:B5:96:DB:6E:AC:A6:AD:8E:20:45:E9:60:2F:E8
Certificate issuer:       /CN=5094E25430BCD5E2E482E64388ADB10B84687666
Certificate serial:       6B756CB56ABD2EF5F95D15914466285A7799D82D
Authority key identifier: 50:94:E2:54:30:BC:D5:E2:E4:82:E6:43:88:AD:B1:0B:84:68:76:66
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5094E25430BCD5E2E482E64388ADB10B84687666.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/49103830332AC6B62BE5F050A24A7698B457D89966AC49F9D2D0D53B614ACD3F/0/323830313a303a32303a3a2f34382d3438203d3e203237393437.roa
Signing time:             Tue 04 Mar 2025 20:11:19 +0000
ROA not before:           Tue 04 Mar 2025 20:06:19 +0000
ROA not after:            Tue 03 Mar 2026 20:11:19 +0000
asID:                     27947
IP address blocks:        2801:0:20::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/49103830332AC6B62BE5F050A24A7698B457D89966AC49F9D2D0D53B614ACD3F/0/5094E25430BCD5E2E482E64388ADB10B84687666.crl
                          rsync://repository.lacnic.net/rpki/lacnic/49103830332AC6B62BE5F050A24A7698B457D89966AC49F9D2D0D53B614ACD3F/0/5094E25430BCD5E2E482E64388ADB10B84687666.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5094E25430BCD5E2E482E64388ADB10B84687666.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:75:6c:b5:6a:bd:2e:f5:f9:5d:15:91:44:66:28:5a:77:99:d8:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5094E25430BCD5E2E482E64388ADB10B84687666
        Validity
            Not Before: Mar  4 20:06:19 2025 GMT
            Not After : Mar  3 20:11:19 2026 GMT
        Subject: CN=3E16D4F6233AB596DB6EACA6AD8E2045E9602FE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:ed:00:fc:cd:72:7b:f2:ba:71:d3:d1:bf:25:
                    1c:4a:ee:9e:cd:17:33:00:b8:c9:3c:67:ff:40:d9:
                    d9:43:a1:b9:67:6d:ec:22:f5:64:4e:1e:76:9c:9f:
                    12:44:dd:3b:c5:f1:09:b7:5b:09:bc:76:a9:b7:07:
                    cc:5a:8d:30:55:52:7e:8b:dd:38:74:dc:9b:d3:e7:
                    c7:4e:a4:83:ee:e6:1b:0a:b1:b0:99:11:2c:30:8c:
                    aa:4c:ff:46:14:e9:4e:50:ff:ef:ff:96:6b:8c:b2:
                    13:68:46:56:b0:3f:79:ba:8e:46:47:80:78:ab:36:
                    ee:5e:fd:c3:d0:e1:83:67:27:a0:c0:de:30:8e:14:
                    d6:0f:e2:31:fe:93:85:14:7b:ac:36:7a:b6:a6:5c:
                    5a:82:d7:33:73:2b:15:20:94:81:ab:16:98:57:d7:
                    c6:4d:06:48:3f:5f:47:4a:f2:ee:ce:36:a3:e9:5c:
                    0d:c0:ad:54:27:ca:64:5a:86:56:de:97:db:09:61:
                    10:58:bd:2d:2b:ac:ac:ef:11:5d:6b:67:14:66:cd:
                    f5:a8:39:b3:54:fa:38:f1:80:e5:54:ad:f1:ae:2d:
                    b1:04:2c:44:94:12:c7:51:2d:2b:1a:84:0f:3e:11:
                    38:19:6b:47:53:b4:6e:0f:2e:3f:ba:a4:b7:2d:f5:
                    5f:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:16:D4:F6:23:3A:B5:96:DB:6E:AC:A6:AD:8E:20:45:E9:60:2F:E8
            X509v3 Authority Key Identifier:
                keyid:50:94:E2:54:30:BC:D5:E2:E4:82:E6:43:88:AD:B1:0B:84:68:76:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/49103830332AC6B62BE5F050A24A7698B457D89966AC49F9D2D0D53B614ACD3F/0/5094E25430BCD5E2E482E64388ADB10B84687666.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5094E25430BCD5E2E482E64388ADB10B84687666.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/49103830332AC6B62BE5F050A24A7698B457D89966AC49F9D2D0D53B614ACD3F/0/323830313a303a32303a3a2f34382d3438203d3e203237393437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:0:20::/48

    Signature Algorithm: sha256WithRSAEncryption
         16:e7:a4:29:f0:26:a1:3a:ad:7b:85:3a:37:19:f9:31:39:41:
         d1:b5:c4:a6:12:2f:90:80:51:1c:a3:b1:3d:ad:f4:49:1a:d5:
         6d:a7:01:35:8c:80:15:85:60:e0:5b:fc:3e:8c:df:d3:59:30:
         16:5e:81:02:1e:ee:2b:6d:90:4e:da:38:2b:0f:1b:b4:b5:78:
         00:50:f0:77:ee:3c:2b:62:f1:c6:1f:62:dd:1b:00:69:ea:04:
         f9:20:4c:9e:0c:2b:a2:a5:30:97:9f:6f:84:28:34:a9:c9:1b:
         03:2a:00:50:49:ef:23:12:a5:fe:68:12:58:9c:2c:8a:0a:d9:
         81:0b:52:35:2f:7a:10:51:6f:b2:22:9b:5c:7e:79:fb:d9:45:
         47:5d:72:5b:4c:0c:71:5f:cd:bf:7a:ff:0b:31:43:34:81:78:
         79:94:23:77:4c:29:58:9e:e3:7d:4d:a1:12:2f:9c:be:69:57:
         c3:f2:70:ff:25:c5:ea:04:41:5c:d5:2c:0b:06:4f:90:23:7f:
         43:ca:f0:e0:c4:42:ac:84:23:a7:11:d7:73:2a:60:07:d1:31:
         2e:80:c3:df:78:45:9c:b7:ee:be:e5:90:3e:94:2b:05:97:b1:
         06:42:0c:6f:d1:0e:70:3f:77:d4:10:62:75:de:c5:b8:7d:0e:
         1e:28:41:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:07:05 2025 by rpki-client