Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/83A255FCE12BB26D5E1202F7987362AF9551BFC5B0336BD0ED979FDAEBA20571/0/323830303a3536303a3a2f33322d3438203d3e203237383333.roa
File:                     323830303a3536303a3a2f33322d3438203d3e203237383333.roa (raw, json)
Hash identifier:          ez7Cvsuen4aLqsejC4Ly7wcFueAOPqY9oQNscalOBwk=
Subject key identifier:   F3:3F:D8:B0:61:2B:04:CD:58:CC:CB:0D:A2:90:D2:06:E1:E3:A9:36
Certificate issuer:       /CN=BB049027AED3847EFEF3E2D27C66FE9D520E44B1
Certificate serial:       6EC1CEFF2A3B11521B81CEFD00A832DBB07499EF
Authority key identifier: BB:04:90:27:AE:D3:84:7E:FE:F3:E2:D2:7C:66:FE:9D:52:0E:44:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BB049027AED3847EFEF3E2D27C66FE9D520E44B1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/83A255FCE12BB26D5E1202F7987362AF9551BFC5B0336BD0ED979FDAEBA20571/0/323830303a3536303a3a2f33322d3438203d3e203237383333.roa
Signing time:             Tue 04 Feb 2025 18:25:53 +0000
ROA not before:           Tue 04 Feb 2025 18:20:53 +0000
ROA not after:            Tue 03 Feb 2026 18:25:53 +0000
asID:                     27833
IP address blocks:        2800:560::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/83A255FCE12BB26D5E1202F7987362AF9551BFC5B0336BD0ED979FDAEBA20571/0/BB049027AED3847EFEF3E2D27C66FE9D520E44B1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/83A255FCE12BB26D5E1202F7987362AF9551BFC5B0336BD0ED979FDAEBA20571/0/BB049027AED3847EFEF3E2D27C66FE9D520E44B1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BB049027AED3847EFEF3E2D27C66FE9D520E44B1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 20:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:c1:ce:ff:2a:3b:11:52:1b:81:ce:fd:00:a8:32:db:b0:74:99:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB049027AED3847EFEF3E2D27C66FE9D520E44B1
        Validity
            Not Before: Feb  4 18:20:53 2025 GMT
            Not After : Feb  3 18:25:53 2026 GMT
        Subject: CN=F33FD8B0612B04CD58CCCB0DA290D206E1E3A936
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:35:d3:cd:aa:4e:e4:cf:e6:06:02:13:92:75:
                    8f:b6:3e:9a:81:d4:dc:7f:24:69:c7:45:18:05:b7:
                    5a:84:6a:90:d4:35:ca:9a:8c:b9:88:c6:11:4a:a6:
                    2a:6a:1b:18:fd:27:31:1c:b3:d8:ba:90:71:c5:8c:
                    33:fa:75:67:d2:e2:65:aa:33:38:e5:62:d9:3b:0e:
                    a5:be:9d:b6:35:2b:8e:6b:b1:db:e9:2f:71:c4:3a:
                    1d:b0:5d:b7:3e:53:80:1e:29:79:13:5b:fc:97:47:
                    52:84:4a:36:b8:b4:0d:75:da:81:2f:06:e5:91:c6:
                    1c:20:0e:fa:5c:0b:93:ba:9b:b2:bb:97:4f:f3:32:
                    24:14:57:d5:8e:fb:3c:aa:5e:24:b2:1e:c2:ad:0a:
                    eb:83:33:c8:9a:52:2a:57:0e:f8:c4:d6:72:00:38:
                    6e:43:be:dd:c0:24:d5:94:82:83:ab:8b:f5:2d:1b:
                    4b:57:6a:c5:26:f2:dd:34:13:ce:9a:36:3e:8b:8d:
                    e6:61:3d:ba:5b:41:98:30:27:00:2b:4d:c3:27:50:
                    44:70:3a:d2:a1:71:ed:90:29:9a:76:75:7a:79:63:
                    62:e7:e1:9f:17:ff:b6:ff:77:c5:f9:3a:7b:5c:b9:
                    ee:fc:fb:66:20:b8:3c:17:37:d6:4e:97:34:b3:8e:
                    c3:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:3F:D8:B0:61:2B:04:CD:58:CC:CB:0D:A2:90:D2:06:E1:E3:A9:36
            X509v3 Authority Key Identifier:
                keyid:BB:04:90:27:AE:D3:84:7E:FE:F3:E2:D2:7C:66:FE:9D:52:0E:44:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/83A255FCE12BB26D5E1202F7987362AF9551BFC5B0336BD0ED979FDAEBA20571/0/BB049027AED3847EFEF3E2D27C66FE9D520E44B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BB049027AED3847EFEF3E2D27C66FE9D520E44B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/83A255FCE12BB26D5E1202F7987362AF9551BFC5B0336BD0ED979FDAEBA20571/0/323830303a3536303a3a2f33322d3438203d3e203237383333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:560::/32

    Signature Algorithm: sha256WithRSAEncryption
         a7:93:77:d1:2f:34:f1:58:4f:88:f1:de:d7:7a:92:37:94:a8:
         0b:34:ad:d8:89:d5:36:83:e1:09:b2:69:75:57:70:fc:ea:80:
         7f:1c:24:2e:71:a4:43:3a:49:2b:7a:b5:43:5f:3a:89:b8:c0:
         df:6a:59:e8:ee:f8:28:d0:97:1f:fe:fb:46:61:2c:c2:e6:c6:
         39:c1:c0:c1:07:71:53:6f:08:14:a3:25:b0:6f:62:12:8f:ed:
         7d:6f:3c:fc:20:91:51:77:44:d6:19:df:88:b9:57:ba:54:d6:
         46:fc:70:b3:dc:25:12:d2:06:e7:8a:a4:17:e8:17:c8:3e:32:
         94:99:2a:18:36:8a:5b:2a:3f:72:3c:cb:16:4c:aa:5f:5c:44:
         17:77:86:52:ca:26:9e:9a:90:17:03:df:28:28:08:17:aa:46:
         55:d7:ae:12:34:cd:66:09:9d:d8:3f:f5:bc:95:e4:09:19:48:
         cd:99:c2:74:f6:ee:6d:d8:f0:06:de:43:49:86:43:88:2d:21:
         b9:08:06:e1:48:d7:71:f8:5a:26:b1:bc:dc:c8:c4:58:f0:c4:
         ce:d1:f2:cb:6a:9c:06:45:9d:07:31:81:a7:73:35:8c:d6:ad:
         69:c4:42:66:d3:5a:2c:08:fc:52:c4:65:c7:ec:d0:c4:c9:7a:
         d1:25:51:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:31:28 2025 by rpki-client