Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5971E8848332E32EA74D5364D63827562450775146F204776D51548F098E3362/0/323830333a323138303a343030303a3a2f33342d3334203d3e203237393431.roa
File:                     323830333a323138303a343030303a3a2f33342d3334203d3e203237393431.roa (raw, json)
Hash identifier:          cXY5pWsKv11w8Wa5x7eiVcv4DTW2G6QDMBcUoLrnyLw=
Subject key identifier:   17:FD:EC:1E:5B:06:27:C4:80:DF:94:8B:B9:DB:63:53:82:96:2E:AA
Certificate issuer:       /CN=4BC81E6B81F4EADC2BDBE339C81FDDB275E19369
Certificate serial:       4D288E6608E95C814F8AE1355BE8A0867C1D5F7E
Authority key identifier: 4B:C8:1E:6B:81:F4:EA:DC:2B:DB:E3:39:C8:1F:DD:B2:75:E1:93:69
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4BC81E6B81F4EADC2BDBE339C81FDDB275E19369.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5971E8848332E32EA74D5364D63827562450775146F204776D51548F098E3362/0/323830333a323138303a343030303a3a2f33342d3334203d3e203237393431.roa
Signing time:             Tue 04 Feb 2025 18:01:36 +0000
ROA not before:           Tue 04 Feb 2025 17:56:36 +0000
ROA not after:            Tue 03 Feb 2026 18:01:36 +0000
asID:                     27941
IP address blocks:        2803:2180:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5971E8848332E32EA74D5364D63827562450775146F204776D51548F098E3362/0/4BC81E6B81F4EADC2BDBE339C81FDDB275E19369.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5971E8848332E32EA74D5364D63827562450775146F204776D51548F098E3362/0/4BC81E6B81F4EADC2BDBE339C81FDDB275E19369.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4BC81E6B81F4EADC2BDBE339C81FDDB275E19369.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 17:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:28:8e:66:08:e9:5c:81:4f:8a:e1:35:5b:e8:a0:86:7c:1d:5f:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4BC81E6B81F4EADC2BDBE339C81FDDB275E19369
        Validity
            Not Before: Feb  4 17:56:36 2025 GMT
            Not After : Feb  3 18:01:36 2026 GMT
        Subject: CN=17FDEC1E5B0627C480DF948BB9DB635382962EAA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:16:ed:18:e2:5e:3e:40:9a:d9:a9:c5:40:30:
                    85:06:92:e2:8c:f5:25:b7:52:c2:e3:5f:98:83:b8:
                    97:be:8c:7d:f3:c9:c1:b7:ac:aa:ce:a8:f7:fb:ec:
                    26:fb:0d:3d:9d:17:96:c8:09:e2:ee:98:ab:cc:14:
                    ce:fe:e2:df:96:cc:20:90:0a:8e:7c:3f:84:01:a6:
                    59:5b:cc:e2:80:b5:d6:9a:36:58:c1:e7:27:b6:ec:
                    36:69:a1:14:df:b2:ba:07:85:96:e4:c1:82:45:8e:
                    d8:fd:d2:6e:e9:ed:08:aa:2c:47:a9:39:26:48:24:
                    29:d4:6d:b9:80:2d:47:6c:21:3e:26:59:6b:c8:c8:
                    30:bc:11:fe:12:7e:3f:6e:e2:f5:89:77:9f:e5:5a:
                    dc:35:e6:fb:ed:c4:7a:56:70:58:ed:f1:e8:92:92:
                    e3:eb:15:ac:d5:31:47:ae:8f:0c:2c:45:2f:3f:fd:
                    90:40:99:af:48:95:3f:eb:69:a7:8c:03:00:c7:dc:
                    66:05:78:43:5c:d3:5a:f1:46:8d:39:b9:b1:bb:92:
                    a6:c0:57:e2:c2:d2:88:31:04:12:a6:d2:82:24:b7:
                    ea:cf:d0:15:c1:56:48:d4:26:8f:58:39:92:d1:75:
                    5a:9b:33:ca:37:d3:b0:6e:1b:5c:07:3f:fb:72:28:
                    a6:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:FD:EC:1E:5B:06:27:C4:80:DF:94:8B:B9:DB:63:53:82:96:2E:AA
            X509v3 Authority Key Identifier:
                keyid:4B:C8:1E:6B:81:F4:EA:DC:2B:DB:E3:39:C8:1F:DD:B2:75:E1:93:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5971E8848332E32EA74D5364D63827562450775146F204776D51548F098E3362/0/4BC81E6B81F4EADC2BDBE339C81FDDB275E19369.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4BC81E6B81F4EADC2BDBE339C81FDDB275E19369.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5971E8848332E32EA74D5364D63827562450775146F204776D51548F098E3362/0/323830333a323138303a343030303a3a2f33342d3334203d3e203237393431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2180:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         19:4e:34:58:03:02:36:84:e9:a9:79:b2:b4:68:17:d7:34:a7:
         f9:72:6b:71:d0:6a:89:05:5c:77:9d:3e:91:86:c1:70:0d:50:
         4b:62:1a:10:89:26:6a:88:95:e3:25:08:5d:34:fb:5a:95:9f:
         0b:dd:50:64:02:35:3e:9f:46:96:bf:2d:23:ef:0d:8d:cb:09:
         10:43:34:7a:29:83:95:75:9d:43:a3:60:df:09:07:fd:a2:8b:
         68:7a:0a:97:1c:08:54:0d:6e:0b:c2:49:94:57:bb:4f:4a:72:
         fe:a1:a1:8e:b4:e9:52:46:00:58:7e:58:93:70:b1:5a:9d:df:
         49:06:ce:41:2e:8b:80:8a:d2:12:2c:ba:31:2c:68:e2:d9:23:
         44:f7:95:5c:e9:c6:50:21:62:6e:c5:bb:df:3e:31:60:b9:6f:
         dc:02:03:eb:2c:33:0c:19:31:7f:3b:9f:0d:a3:0d:ae:78:45:
         fd:c8:e6:4f:74:8a:77:06:d4:e8:bd:bf:65:c5:e8:c7:13:54:
         b2:1e:82:53:6e:42:9a:20:01:e9:24:9b:3f:da:36:61:cb:44:
         bd:92:43:89:93:5c:39:bd:41:e5:ec:d4:fe:ad:e1:64:a3:cd:
         4c:27:b2:cb:83:e4:d1:6e:a9:a6:7f:48:e4:f4:d0:c7:eb:3b:
         71:9f:10:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 00:45:34 2025 by rpki-client