Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6B85DD645358412F50187507022D0E21CC2E568B4E4092477FC9D525982BD371/0/323830303a3434303a3a2f33322d3438203d3e203237373338.roa
File:                     323830303a3434303a3a2f33322d3438203d3e203237373338.roa (raw, json)
Hash identifier:          ce5tfFhKlx/CGMb6wNQfe/fMWpDjKIu6g6ObZcYxa+I=
Subject key identifier:   9E:42:1A:B0:AC:AF:85:0E:B5:CA:75:CF:11:39:DF:80:7C:82:CD:2C
Certificate issuer:       /CN=E63A0B64348E70601DE867C594F34A8BB87EC911
Certificate serial:       7D836467797052710CA101AA8FCF9F0E32B504F2
Authority key identifier: E6:3A:0B:64:34:8E:70:60:1D:E8:67:C5:94:F3:4A:8B:B8:7E:C9:11
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E63A0B64348E70601DE867C594F34A8BB87EC911.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6B85DD645358412F50187507022D0E21CC2E568B4E4092477FC9D525982BD371/0/323830303a3434303a3a2f33322d3438203d3e203237373338.roa
Signing time:             Tue 04 Feb 2025 18:31:08 +0000
ROA not before:           Tue 04 Feb 2025 18:26:08 +0000
ROA not after:            Tue 03 Feb 2026 18:31:08 +0000
asID:                     27738
IP address blocks:        2800:440::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6B85DD645358412F50187507022D0E21CC2E568B4E4092477FC9D525982BD371/0/E63A0B64348E70601DE867C594F34A8BB87EC911.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6B85DD645358412F50187507022D0E21CC2E568B4E4092477FC9D525982BD371/0/E63A0B64348E70601DE867C594F34A8BB87EC911.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E63A0B64348E70601DE867C594F34A8BB87EC911.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:83:64:67:79:70:52:71:0c:a1:01:aa:8f:cf:9f:0e:32:b5:04:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E63A0B64348E70601DE867C594F34A8BB87EC911
        Validity
            Not Before: Feb  4 18:26:08 2025 GMT
            Not After : Feb  3 18:31:08 2026 GMT
        Subject: CN=9E421AB0ACAF850EB5CA75CF1139DF807C82CD2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:4a:f7:8f:4c:5c:84:29:49:a7:9d:f3:69:60:
                    df:f5:c0:93:e5:51:bd:a6:73:d9:4c:f3:0e:bb:94:
                    64:f3:70:39:bf:7e:6c:6d:b1:74:6f:8f:a6:75:11:
                    1c:8b:cc:7c:de:f0:46:2e:89:42:b2:85:1c:dc:d4:
                    85:13:7e:41:cd:21:0d:5b:89:17:1e:9c:0d:dc:3c:
                    6d:1a:ee:aa:52:ab:50:ac:39:a7:8e:fa:5b:03:20:
                    21:c6:65:3e:80:14:cb:9e:e0:d3:62:0b:a4:76:d8:
                    cf:6a:99:7f:97:84:f6:cd:c4:c8:40:d7:f2:c2:ee:
                    95:63:16:37:fd:13:e8:b5:e5:44:bc:47:ff:38:9e:
                    48:a2:a2:3d:30:d1:7f:3f:20:9a:ee:95:bd:8b:84:
                    e9:c3:64:dc:bc:42:fe:96:d0:5e:97:7b:4e:85:9f:
                    ea:3b:22:bd:95:f5:d5:ef:6a:96:d4:f8:6a:a0:52:
                    3a:52:ae:8a:e1:73:98:0b:22:87:cc:d8:87:8a:98:
                    41:08:93:ab:c3:df:44:c6:30:22:cc:8a:97:4d:79:
                    1f:f6:fa:02:b7:16:36:4a:b7:31:44:89:55:bc:e5:
                    bc:cf:8e:b2:25:0a:05:07:b8:b9:63:2e:d9:c6:0d:
                    29:83:4d:11:0e:ed:fd:ad:d8:c9:ef:fe:4d:be:1e:
                    55:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:42:1A:B0:AC:AF:85:0E:B5:CA:75:CF:11:39:DF:80:7C:82:CD:2C
            X509v3 Authority Key Identifier:
                keyid:E6:3A:0B:64:34:8E:70:60:1D:E8:67:C5:94:F3:4A:8B:B8:7E:C9:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6B85DD645358412F50187507022D0E21CC2E568B4E4092477FC9D525982BD371/0/E63A0B64348E70601DE867C594F34A8BB87EC911.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E63A0B64348E70601DE867C594F34A8BB87EC911.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6B85DD645358412F50187507022D0E21CC2E568B4E4092477FC9D525982BD371/0/323830303a3434303a3a2f33322d3438203d3e203237373338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:440::/32

    Signature Algorithm: sha256WithRSAEncryption
         08:af:c7:dd:2e:a5:4d:e8:96:38:4c:92:67:76:a0:9c:7d:cd:
         70:1d:4d:6a:17:75:f2:40:84:20:01:ce:bc:ba:3a:f1:07:d0:
         43:24:cf:0b:61:75:96:f7:48:a8:8a:01:5b:b5:4d:25:05:6a:
         b2:93:27:ec:0b:86:e3:2c:8a:df:b7:15:44:bd:c6:cf:b4:ce:
         9a:16:4f:9b:0e:9e:8b:52:b4:4f:b3:6a:8f:36:ef:ec:95:a0:
         3e:15:da:ae:92:89:57:15:30:0e:ef:f3:78:06:c6:1c:b7:a2:
         db:5f:26:5d:55:c6:b0:c0:85:98:13:99:47:6d:9c:5a:eb:2f:
         cc:fc:89:80:1b:c7:4f:bd:bf:cb:49:ff:53:a9:fc:19:7f:95:
         28:0f:5e:6f:d4:71:f5:8f:39:ed:4a:2b:c0:94:3e:3e:b8:af:
         9d:e5:e6:6c:c5:ee:cb:13:c9:b7:41:fc:83:75:5a:bc:9c:7d:
         95:9a:9c:a7:a9:6a:47:6f:bd:95:05:30:c5:02:1c:2a:90:af:
         a2:2e:43:3d:b0:4e:1c:05:54:03:9f:39:e9:6b:24:67:c2:6a:
         9c:84:48:2f:f8:71:f3:ea:10:b9:2e:b6:ee:24:cb:45:d7:4c:
         2f:33:4d:78:b9:c7:ed:8b:84:30:2b:20:bf:89:66:b3:c9:a6:
         2f:58:4c:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:31:20 2025 by rpki-client