Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5908941AC14891934A6AB9537E6AC980A20D5FEB8F41AC8436184D5C68486FC8/0/323830333a326332303a3a2f33322d3332203d3e203532343638.roa
File:                     323830333a326332303a3a2f33322d3332203d3e203532343638.roa (raw, json)
Hash identifier:          eXMLoYmAaj/e8lzw/lSmKVsV6BBX1AMP8+imWvI+ksY=
Subject key identifier:   78:27:AA:49:60:A1:77:90:78:52:6F:3A:3F:A0:DB:DE:DF:04:37:84
Certificate issuer:       /CN=F0922EC2833EAD17A747DBA885C8FF32611CEA72
Certificate serial:       2C1654AB27E9027995C66A838DAD35CFF3690E62
Authority key identifier: F0:92:2E:C2:83:3E:AD:17:A7:47:DB:A8:85:C8:FF:32:61:1C:EA:72
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F0922EC2833EAD17A747DBA885C8FF32611CEA72.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5908941AC14891934A6AB9537E6AC980A20D5FEB8F41AC8436184D5C68486FC8/0/323830333a326332303a3a2f33322d3332203d3e203532343638.roa
Signing time:             Tue 04 Feb 2025 18:14:41 +0000
ROA not before:           Tue 04 Feb 2025 18:09:41 +0000
ROA not after:            Tue 03 Feb 2026 18:14:41 +0000
asID:                     52468
IP address blocks:        2803:2c20::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5908941AC14891934A6AB9537E6AC980A20D5FEB8F41AC8436184D5C68486FC8/0/F0922EC2833EAD17A747DBA885C8FF32611CEA72.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5908941AC14891934A6AB9537E6AC980A20D5FEB8F41AC8436184D5C68486FC8/0/F0922EC2833EAD17A747DBA885C8FF32611CEA72.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F0922EC2833EAD17A747DBA885C8FF32611CEA72.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:16:54:ab:27:e9:02:79:95:c6:6a:83:8d:ad:35:cf:f3:69:0e:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F0922EC2833EAD17A747DBA885C8FF32611CEA72
        Validity
            Not Before: Feb  4 18:09:41 2025 GMT
            Not After : Feb  3 18:14:41 2026 GMT
        Subject: CN=7827AA4960A1779078526F3A3FA0DBDEDF043784
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:dc:13:7c:e5:c4:cd:22:17:5e:6c:f7:b9:9c:
                    41:c9:57:c8:b6:94:2e:c1:40:10:22:4f:2a:1e:7c:
                    75:55:47:94:08:d3:e6:9b:ca:02:b6:20:55:05:29:
                    d4:55:a6:bd:3e:da:4c:a7:80:43:8e:e7:a7:a6:4d:
                    2a:20:f1:cd:ac:76:b8:e9:0e:c8:29:ce:d8:17:53:
                    ba:af:50:82:8d:69:7e:46:45:6e:2d:44:f9:1a:c9:
                    e8:36:55:40:8c:ac:7a:a4:d9:f6:de:52:5b:ef:17:
                    0d:60:c8:36:7c:df:a8:de:74:47:fa:c0:4e:c2:fe:
                    90:7f:4b:fa:dc:8e:93:a2:4e:6c:5e:66:e4:01:18:
                    00:f3:76:3a:23:a0:3e:27:8c:96:6b:40:60:5e:b8:
                    22:e4:96:2d:07:51:5b:0e:38:88:18:7f:35:f9:9d:
                    bf:6a:fd:91:2b:14:7d:c5:34:e3:a3:eb:c2:67:b6:
                    8f:f6:c1:f5:f0:18:27:43:3e:d1:8c:67:85:07:e8:
                    de:9a:0b:7f:a8:ab:e8:2c:dd:c3:67:8c:d9:80:ec:
                    db:5d:d0:28:fd:2b:c3:b5:5b:82:e9:29:30:fc:87:
                    5b:cf:32:a7:a7:a1:71:b9:b9:2f:56:e6:ba:ef:f9:
                    56:bd:7e:fa:8d:e3:6c:69:f4:50:21:0d:38:c0:5f:
                    1d:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:27:AA:49:60:A1:77:90:78:52:6F:3A:3F:A0:DB:DE:DF:04:37:84
            X509v3 Authority Key Identifier:
                keyid:F0:92:2E:C2:83:3E:AD:17:A7:47:DB:A8:85:C8:FF:32:61:1C:EA:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5908941AC14891934A6AB9537E6AC980A20D5FEB8F41AC8436184D5C68486FC8/0/F0922EC2833EAD17A747DBA885C8FF32611CEA72.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F0922EC2833EAD17A747DBA885C8FF32611CEA72.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5908941AC14891934A6AB9537E6AC980A20D5FEB8F41AC8436184D5C68486FC8/0/323830333a326332303a3a2f33322d3332203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2c20::/32

    Signature Algorithm: sha256WithRSAEncryption
         43:3d:e6:0d:ec:62:8f:b4:a8:77:37:82:cc:62:06:50:7e:19:
         b7:e2:d4:0d:7b:04:89:e7:80:a4:62:0b:9c:35:ec:ae:cc:38:
         a7:9c:17:89:e1:7f:42:97:20:8b:b7:e9:79:a9:64:ac:4e:a8:
         3f:19:c8:f1:c5:b6:9f:94:b3:4d:fd:7c:ef:84:e6:1f:8b:5d:
         6b:61:79:9a:e7:88:19:70:03:88:61:ab:8c:7c:3c:99:7e:2a:
         a6:bb:eb:67:22:f7:c6:f6:a8:ef:bd:f4:fc:74:77:74:69:c5:
         28:ca:2d:35:a9:b6:67:79:6d:22:84:07:c5:76:8d:cb:5a:77:
         6b:57:87:44:3e:0a:48:74:b4:17:b6:fa:b7:96:ba:7f:48:ed:
         92:3d:61:b2:94:39:25:d8:c9:94:fe:43:1f:bf:19:bf:a3:3a:
         ed:73:7c:15:d5:ef:c7:04:cf:ac:4d:17:b6:65:14:1f:03:9f:
         23:39:a4:60:d3:b8:32:5c:f1:25:4d:fe:54:a1:9f:e9:f3:c7:
         12:cc:1a:4b:10:f3:d1:d5:14:d4:ef:e1:48:f1:3a:78:70:ba:
         25:79:d9:b8:61:58:e5:70:7d:69:63:e2:40:0b:45:2b:e6:af:
         92:e4:9a:20:07:c5:8c:66:e5:fb:56:f7:e0:b2:b3:1b:a3:81:
         76:87:1f:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:08:40 2025 by rpki-client