Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5971E8848332E32EA74D5364D63827562450775146F204776D51548F098E3362/0/323830333a323138303a3a2f33342d3438203d3e203237393431.roa
File:                     323830333a323138303a3a2f33342d3438203d3e203237393431.roa (raw, json)
Hash identifier:          iqr4eWJpLBkmqfrhHM6ahmyGxNKWf8KdDe4NIMB8asQ=
Subject key identifier:   BD:29:16:8E:65:AD:87:4A:12:5F:81:21:9D:D4:32:F5:54:6A:C7:86
Certificate issuer:       /CN=4BC81E6B81F4EADC2BDBE339C81FDDB275E19369
Certificate serial:       04E93B04FF1CDD8444D425C82768D6AFA725B8E0
Authority key identifier: 4B:C8:1E:6B:81:F4:EA:DC:2B:DB:E3:39:C8:1F:DD:B2:75:E1:93:69
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4BC81E6B81F4EADC2BDBE339C81FDDB275E19369.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5971E8848332E32EA74D5364D63827562450775146F204776D51548F098E3362/0/323830333a323138303a3a2f33342d3438203d3e203237393431.roa
Signing time:             Tue 04 Feb 2025 18:01:36 +0000
ROA not before:           Tue 04 Feb 2025 17:56:36 +0000
ROA not after:            Tue 03 Feb 2026 18:01:36 +0000
asID:                     27941
IP address blocks:        2803:2180::/34 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5971E8848332E32EA74D5364D63827562450775146F204776D51548F098E3362/0/4BC81E6B81F4EADC2BDBE339C81FDDB275E19369.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5971E8848332E32EA74D5364D63827562450775146F204776D51548F098E3362/0/4BC81E6B81F4EADC2BDBE339C81FDDB275E19369.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4BC81E6B81F4EADC2BDBE339C81FDDB275E19369.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 17:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:e9:3b:04:ff:1c:dd:84:44:d4:25:c8:27:68:d6:af:a7:25:b8:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4BC81E6B81F4EADC2BDBE339C81FDDB275E19369
        Validity
            Not Before: Feb  4 17:56:36 2025 GMT
            Not After : Feb  3 18:01:36 2026 GMT
        Subject: CN=BD29168E65AD874A125F81219DD432F5546AC786
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:6b:13:8b:f9:28:4a:04:0f:df:84:68:ab:05:
                    27:07:52:d4:6f:58:a2:ba:5c:b0:5b:4c:09:af:db:
                    98:31:47:de:34:63:65:6b:2f:0f:55:7a:fc:c4:e2:
                    3b:6b:e4:5b:09:de:07:aa:79:42:68:44:6b:0e:4e:
                    78:d1:87:47:29:64:cd:01:f0:6a:4b:7d:ad:c0:f8:
                    d9:1f:b8:af:5f:be:ea:e6:50:71:17:ac:3d:47:1c:
                    25:8b:a8:63:42:ce:26:04:08:27:46:43:2a:ac:b3:
                    bd:69:77:94:47:ec:4d:1b:b1:c2:a3:43:10:78:75:
                    a7:32:7d:d2:2a:dc:6a:9a:91:38:59:1a:c5:7f:06:
                    ec:5f:bf:75:19:d4:89:e1:41:66:2f:c2:a7:3f:75:
                    f7:46:63:38:f7:fe:d0:47:97:c2:46:9b:53:5d:7a:
                    f9:b1:0b:0f:ec:f8:5c:9d:27:3b:eb:f3:c9:a6:91:
                    f6:7a:19:a6:70:8b:72:1c:aa:7f:68:b9:66:d2:2d:
                    44:57:d7:02:9f:13:64:14:b0:8b:4f:29:5b:5a:ff:
                    08:f5:ef:ad:78:88:03:8e:3f:87:9d:a4:07:4b:62:
                    c5:d1:60:f8:d6:11:f9:6f:13:4c:7d:7a:85:8e:79:
                    54:6c:40:7d:22:55:44:d0:9d:7f:27:f8:fb:64:f8:
                    26:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:29:16:8E:65:AD:87:4A:12:5F:81:21:9D:D4:32:F5:54:6A:C7:86
            X509v3 Authority Key Identifier:
                keyid:4B:C8:1E:6B:81:F4:EA:DC:2B:DB:E3:39:C8:1F:DD:B2:75:E1:93:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5971E8848332E32EA74D5364D63827562450775146F204776D51548F098E3362/0/4BC81E6B81F4EADC2BDBE339C81FDDB275E19369.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4BC81E6B81F4EADC2BDBE339C81FDDB275E19369.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5971E8848332E32EA74D5364D63827562450775146F204776D51548F098E3362/0/323830333a323138303a3a2f33342d3438203d3e203237393431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2180::/34

    Signature Algorithm: sha256WithRSAEncryption
         2e:a7:3b:bd:7b:61:1e:88:15:07:d4:c8:67:b7:b6:75:db:e3:
         90:67:af:24:0e:72:d0:4f:f0:33:0a:34:b9:1f:42:96:e0:4c:
         2a:10:9f:a7:09:ab:42:87:36:33:b5:4d:6a:7b:65:4a:53:ea:
         e3:aa:52:7c:fc:e3:69:29:99:57:fd:bf:82:38:a6:5b:aa:b7:
         c4:74:73:c8:b8:95:27:6a:d5:9c:93:88:ed:b6:d0:7d:ff:23:
         72:2e:fc:24:98:37:90:01:86:6f:a1:d2:58:93:54:3b:18:84:
         e6:21:36:7b:0d:89:d0:3b:4d:3c:1f:97:0f:1d:9d:63:d6:85:
         e7:ce:19:84:d8:08:e7:7b:bd:1f:43:1a:36:8e:b6:1e:01:c6:
         a4:26:bb:4f:51:1c:26:9c:a6:60:2f:ac:1a:e7:54:f4:a3:d8:
         63:d8:22:7a:b1:d5:da:f8:e4:3c:e0:77:06:2f:4d:25:0b:c3:
         00:7b:93:6f:7e:a4:c5:9c:20:fd:ff:c7:7e:c3:ed:da:2f:e5:
         bd:64:b9:40:c7:54:d6:4f:fb:d2:91:49:4e:37:13:06:1e:68:
         56:a2:5b:9a:b0:50:41:88:13:29:0b:0a:64:8e:74:0e:ff:49:
         f9:86:53:57:87:5b:cc:43:01:df:38:3c:e4:bc:f8:87:fd:06:
         6a:83:cb:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 00:39:16 2025 by rpki-client