Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/323830333a333338303a653030303a3a2f33362d3336203d3e203237383138.roa
File:                     323830333a333338303a653030303a3a2f33362d3336203d3e203237383138.roa (raw, json)
Hash identifier:          ZOVSKfD6clNoPgljdCEEukl2fyUqG7D8Cwm8Ccg0au4=
Subject key identifier:   8A:BC:77:07:29:AA:28:F9:C5:2B:9C:49:DA:95:88:5F:C3:02:5D:6C
Certificate issuer:       /CN=20DDB465F07E0C4CF8244E3A2605195B41ADA3BB
Certificate serial:       249A98B36557471775C8138B755709AAAAE5E504
Authority key identifier: 20:DD:B4:65:F0:7E:0C:4C:F8:24:4E:3A:26:05:19:5B:41:AD:A3:BB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/323830333a333338303a653030303a3a2f33362d3336203d3e203237383138.roa
Signing time:             Tue 04 Feb 2025 18:25:07 +0000
ROA not before:           Tue 04 Feb 2025 18:20:07 +0000
ROA not after:            Tue 03 Feb 2026 18:25:07 +0000
asID:                     27818
IP address blocks:        2803:3380:e000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:9a:98:b3:65:57:47:17:75:c8:13:8b:75:57:09:aa:aa:e5:e5:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20DDB465F07E0C4CF8244E3A2605195B41ADA3BB
        Validity
            Not Before: Feb  4 18:20:07 2025 GMT
            Not After : Feb  3 18:25:07 2026 GMT
        Subject: CN=8ABC770729AA28F9C52B9C49DA95885FC3025D6C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:71:c3:a7:07:8c:c3:ec:d1:87:bb:27:75:37:
                    78:83:93:0d:75:2f:c6:a9:8f:96:9c:a1:23:e1:ac:
                    ac:2b:1c:3b:75:0e:d9:09:77:aa:d2:9d:7c:9f:fc:
                    2b:55:3a:d3:91:ac:fb:e8:75:e7:05:70:d0:94:a3:
                    ca:c7:6b:6d:6a:60:96:95:b9:43:02:29:06:50:b9:
                    d7:27:a7:46:70:98:3f:b3:88:ba:88:b5:98:6a:84:
                    f3:4c:da:ad:b3:87:61:73:45:c3:b3:67:f8:1d:fb:
                    e3:dc:97:a7:b6:9e:3f:ee:07:e2:60:a7:97:25:43:
                    d0:70:d5:dd:16:3a:32:b4:9f:dd:d8:5b:18:93:dd:
                    c6:c8:90:ce:8a:7e:84:ec:a2:9b:97:7b:ac:0c:ce:
                    84:40:07:bd:6b:39:19:e1:66:3d:ed:6a:fc:ae:6f:
                    52:ea:af:b0:79:f0:8e:ad:e6:9a:be:c7:f2:9e:48:
                    23:bd:6c:3e:c1:dd:4e:c4:3e:d1:33:d1:3e:e8:72:
                    ec:74:0a:1b:19:c5:37:41:7c:1d:81:ee:64:2b:d5:
                    08:32:04:58:2c:b7:84:4f:13:1a:34:8c:82:f2:b7:
                    6f:d8:9b:ee:c9:18:c4:3e:7b:0b:2b:e8:57:79:69:
                    a9:fd:58:f8:62:08:e0:40:07:83:71:c6:7f:27:87:
                    d2:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:BC:77:07:29:AA:28:F9:C5:2B:9C:49:DA:95:88:5F:C3:02:5D:6C
            X509v3 Authority Key Identifier:
                keyid:20:DD:B4:65:F0:7E:0C:4C:F8:24:4E:3A:26:05:19:5B:41:AD:A3:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/323830333a333338303a653030303a3a2f33362d3336203d3e203237383138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3380:e000::/36

    Signature Algorithm: sha256WithRSAEncryption
         23:42:fe:9a:c1:5b:6e:f8:ed:5c:26:f1:45:4d:3d:53:b5:07:
         43:54:30:96:11:9c:48:3e:f5:80:65:d4:3c:70:fe:36:35:6e:
         6e:91:ef:09:98:d8:31:23:77:3f:f5:dd:a3:b6:33:a2:07:01:
         79:3f:ef:e2:c4:1f:b7:76:a4:2d:54:fd:f5:eb:bc:7f:ac:b2:
         d6:ba:e4:6c:23:91:69:1a:88:cc:67:1a:6d:13:51:a1:8f:c0:
         55:0d:2e:5c:79:6e:ef:23:0d:48:d5:11:ce:7a:31:75:c9:fc:
         fc:1b:8b:d3:dc:bd:6f:90:60:1e:fd:ef:e6:ec:d2:78:10:be:
         7a:8a:40:4d:e1:76:69:c0:c9:e3:9a:2c:5a:78:51:ab:70:50:
         c2:0d:2d:d9:3d:9f:de:e7:3b:e3:bd:66:9d:ab:35:a1:fe:24:
         80:d0:ee:34:50:c8:ec:f3:d8:8b:63:e3:b0:c7:0c:11:23:29:
         8c:bc:a7:ac:24:61:4f:cc:a5:7c:cf:4d:2b:8c:db:ca:e4:7c:
         c3:bb:a8:09:cd:af:32:6b:16:41:7b:f7:8c:05:33:11:2b:e8:
         32:90:99:84:ba:d1:91:98:7c:ea:ce:ad:8a:c9:66:cc:a9:dd:
         83:93:9d:ec:11:14:ed:47:98:95:14:75:e0:0f:48:07:31:c9:
         8f:05:4e:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:58:50 2025 by rpki-client