Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/69BB55EA9235D147025B32B9AEC5160107DE56283C0F0D8550BE32B0883CFF0C/0/323830333a3230303a3a2f33322d3332203d3e203532323834.roa
File:                     323830333a3230303a3a2f33322d3332203d3e203532323834.roa (raw, json)
Hash identifier:          MiQMhUoUTjwOA2721zifzta026zkcUt9yXJ6IVZv4aM=
Subject key identifier:   22:D9:4A:3B:75:3F:90:75:BD:1F:94:1E:1D:33:BD:48:E3:99:EA:F1
Certificate issuer:       /CN=3C0D9824A61951890549A3BAB2843EF4DD28F6EF
Certificate serial:       17FD5E872F1AF7EF08E1803DB45DDA2CFFA3E690
Authority key identifier: 3C:0D:98:24:A6:19:51:89:05:49:A3:BA:B2:84:3E:F4:DD:28:F6:EF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C0D9824A61951890549A3BAB2843EF4DD28F6EF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/69BB55EA9235D147025B32B9AEC5160107DE56283C0F0D8550BE32B0883CFF0C/0/323830333a3230303a3a2f33322d3332203d3e203532323834.roa
Signing time:             Tue 04 Feb 2025 20:05:25 +0000
ROA not before:           Tue 04 Feb 2025 20:00:25 +0000
ROA not after:            Tue 03 Feb 2026 20:05:25 +0000
asID:                     52284
IP address blocks:        2803:200::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/69BB55EA9235D147025B32B9AEC5160107DE56283C0F0D8550BE32B0883CFF0C/0/3C0D9824A61951890549A3BAB2843EF4DD28F6EF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/69BB55EA9235D147025B32B9AEC5160107DE56283C0F0D8550BE32B0883CFF0C/0/3C0D9824A61951890549A3BAB2843EF4DD28F6EF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C0D9824A61951890549A3BAB2843EF4DD28F6EF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 20 Apr 2025 21:28:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:fd:5e:87:2f:1a:f7:ef:08:e1:80:3d:b4:5d:da:2c:ff:a3:e6:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C0D9824A61951890549A3BAB2843EF4DD28F6EF
        Validity
            Not Before: Feb  4 20:00:25 2025 GMT
            Not After : Feb  3 20:05:25 2026 GMT
        Subject: CN=22D94A3B753F9075BD1F941E1D33BD48E399EAF1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:30:a9:93:ea:64:11:67:e9:53:29:f0:56:7a:
                    44:15:58:a4:1a:67:48:1f:81:e6:ca:3d:b0:3d:62:
                    4b:a8:ef:03:49:a5:ce:20:91:d4:b2:e9:7a:8a:f3:
                    76:18:d6:72:d0:9b:cc:cc:0e:9e:7e:06:dd:07:41:
                    b4:2b:6d:4a:48:c9:a6:f5:43:b7:55:45:9f:ef:e4:
                    dc:00:6d:8f:1e:73:bb:20:d6:b0:f5:21:21:70:48:
                    cf:48:f4:50:8d:11:f7:96:7b:e2:c7:d0:01:b6:b6:
                    16:25:cd:84:16:5e:bb:37:e5:b2:57:65:2e:4a:9d:
                    8a:47:aa:de:20:c2:73:4b:9e:dc:d9:8a:ff:75:3e:
                    73:fb:78:40:e5:e6:7e:7a:d6:e7:a7:4b:77:df:96:
                    12:fd:34:f4:f2:e5:c8:6d:98:c4:1a:97:a1:85:9f:
                    d2:66:b0:fb:3c:73:22:7d:4b:1a:0c:56:f0:6b:78:
                    69:32:af:f8:db:c0:89:ba:cd:46:7a:99:3e:0c:c6:
                    31:c0:ca:0e:db:e9:bb:c4:70:cb:12:7f:36:1b:6b:
                    28:c1:f0:9a:35:b3:3f:97:08:9c:26:1d:87:3f:ff:
                    47:0d:06:42:b8:55:5f:2a:98:6e:95:38:62:9b:db:
                    37:99:fa:ef:5d:ea:81:a8:ed:e1:aa:8c:27:ca:3d:
                    e4:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:D9:4A:3B:75:3F:90:75:BD:1F:94:1E:1D:33:BD:48:E3:99:EA:F1
            X509v3 Authority Key Identifier:
                keyid:3C:0D:98:24:A6:19:51:89:05:49:A3:BA:B2:84:3E:F4:DD:28:F6:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/69BB55EA9235D147025B32B9AEC5160107DE56283C0F0D8550BE32B0883CFF0C/0/3C0D9824A61951890549A3BAB2843EF4DD28F6EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C0D9824A61951890549A3BAB2843EF4DD28F6EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/69BB55EA9235D147025B32B9AEC5160107DE56283C0F0D8550BE32B0883CFF0C/0/323830333a3230303a3a2f33322d3332203d3e203532323834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:200::/32

    Signature Algorithm: sha256WithRSAEncryption
         a1:3e:51:93:78:93:56:b8:22:60:2e:55:b5:82:b5:0c:e0:13:
         d5:55:a9:9e:eb:7a:cb:a0:58:58:62:f6:dd:a9:bd:11:8a:51:
         4a:71:e6:4e:15:5d:fd:7a:82:60:95:4e:70:31:e6:24:63:9c:
         b6:7e:8a:75:1e:1a:36:79:cd:20:58:8b:08:75:6b:59:5f:93:
         7b:df:f0:16:3a:be:af:93:63:c6:21:7e:4a:d5:32:6d:14:9d:
         d8:a0:8c:9f:c3:44:c4:69:8d:da:fe:39:91:d0:a4:88:ab:a3:
         34:3f:00:69:3e:66:c8:a1:55:85:36:9e:37:fd:41:15:51:ed:
         50:2e:98:69:b4:c4:75:0c:9b:7e:8c:a9:f5:6d:00:9d:f1:60:
         95:46:06:ee:dc:b3:a5:66:59:ae:3a:ba:98:79:22:10:30:cd:
         91:ec:12:4f:8d:62:e8:c8:97:d2:3c:68:aa:d4:df:56:5a:a5:
         5d:7f:5a:08:53:89:12:95:c2:02:c5:a1:9d:3e:78:47:5a:d6:
         1c:b2:e4:fc:22:af:41:1d:4f:71:63:b8:39:e8:ac:7c:f8:d6:
         f6:37:5c:23:57:92:bc:d8:b8:cf:2e:b2:f9:e8:5b:35:2c:52:
         54:b6:d5:fa:ad:38:ae:b4:ca:7f:1a:0f:55:a0:84:d1:1d:30:
         30:54:1c:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 21:05:23 2025 by rpki-client