Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8B884F5A9FA4728E8608A3DDF8218084913B8C16C7D0FC9FB1E38574FDD15454/0/323830333a333265303a3a2f33322d3332203d3e20323639393238.roa
File:                     323830333a333265303a3a2f33322d3332203d3e20323639393238.roa (raw, json)
Hash identifier:          nB76hXAwUoryEDuU2ZQcyx6V4UUAq3evR1ObFKMBf0k=
Subject key identifier:   6D:0E:5C:65:95:83:58:3B:D5:46:91:2E:71:D5:F4:F0:5A:38:CA:82
Certificate issuer:       /CN=2B2CD4D6D45EAC25EE97D5E66BE938EF31A61686
Certificate serial:       7CBC0B9F6AF73793AFF679A29FC120C1728A2EC3
Authority key identifier: 2B:2C:D4:D6:D4:5E:AC:25:EE:97:D5:E6:6B:E9:38:EF:31:A6:16:86
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B2CD4D6D45EAC25EE97D5E66BE938EF31A61686.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8B884F5A9FA4728E8608A3DDF8218084913B8C16C7D0FC9FB1E38574FDD15454/0/323830333a333265303a3a2f33322d3332203d3e20323639393238.roa
Signing time:             Tue 04 Feb 2025 18:24:30 +0000
ROA not before:           Tue 04 Feb 2025 18:19:30 +0000
ROA not after:            Tue 03 Feb 2026 18:24:30 +0000
asID:                     269928
IP address blocks:        2803:32e0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8B884F5A9FA4728E8608A3DDF8218084913B8C16C7D0FC9FB1E38574FDD15454/0/2B2CD4D6D45EAC25EE97D5E66BE938EF31A61686.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8B884F5A9FA4728E8608A3DDF8218084913B8C16C7D0FC9FB1E38574FDD15454/0/2B2CD4D6D45EAC25EE97D5E66BE938EF31A61686.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B2CD4D6D45EAC25EE97D5E66BE938EF31A61686.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:bc:0b:9f:6a:f7:37:93:af:f6:79:a2:9f:c1:20:c1:72:8a:2e:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B2CD4D6D45EAC25EE97D5E66BE938EF31A61686
        Validity
            Not Before: Feb  4 18:19:30 2025 GMT
            Not After : Feb  3 18:24:30 2026 GMT
        Subject: CN=6D0E5C659583583BD546912E71D5F4F05A38CA82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:0f:1a:ab:71:44:26:fa:8a:84:07:76:4f:66:
                    08:cf:54:6d:79:7a:1c:43:ce:56:c2:02:68:76:af:
                    40:85:b1:84:52:9a:76:2b:27:08:c2:66:a2:b0:45:
                    0a:2d:b4:49:9a:3f:7c:c5:4c:5f:8c:e2:13:21:b0:
                    7f:18:99:9b:e5:39:0a:68:35:45:ca:67:38:a0:69:
                    bf:b9:e4:64:bb:ba:bd:55:e2:25:20:63:07:25:d6:
                    78:01:b2:36:97:35:9e:c7:44:4e:93:d7:20:1e:ff:
                    f1:1f:85:d3:c0:9b:7b:40:c9:39:79:29:bc:42:51:
                    8d:f8:11:94:0b:9a:1e:df:3c:3f:a2:eb:8d:72:0f:
                    81:58:e0:f9:69:b5:70:fe:15:d3:5a:98:4a:38:f8:
                    7d:72:30:25:52:0d:d4:26:02:07:1a:14:1f:bb:eb:
                    fe:99:8d:29:f7:0b:07:3c:7d:91:2a:f3:ed:4c:39:
                    06:41:74:46:29:86:24:21:ae:21:67:e0:eb:6a:2a:
                    ea:3e:ca:fb:49:ad:ca:29:a1:f8:b3:a2:35:37:ae:
                    b2:8f:6a:15:9e:ba:14:19:aa:5b:b3:2a:e3:f1:f7:
                    dc:90:29:5c:c3:b7:90:b8:e1:22:66:82:14:be:c5:
                    d1:d3:5f:0c:f0:91:9e:54:6a:b1:57:ed:b2:03:d1:
                    01:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:0E:5C:65:95:83:58:3B:D5:46:91:2E:71:D5:F4:F0:5A:38:CA:82
            X509v3 Authority Key Identifier:
                keyid:2B:2C:D4:D6:D4:5E:AC:25:EE:97:D5:E6:6B:E9:38:EF:31:A6:16:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8B884F5A9FA4728E8608A3DDF8218084913B8C16C7D0FC9FB1E38574FDD15454/0/2B2CD4D6D45EAC25EE97D5E66BE938EF31A61686.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B2CD4D6D45EAC25EE97D5E66BE938EF31A61686.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8B884F5A9FA4728E8608A3DDF8218084913B8C16C7D0FC9FB1E38574FDD15454/0/323830333a333265303a3a2f33322d3332203d3e20323639393238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:32e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         2f:40:0e:7f:2b:74:34:42:b8:fa:c4:82:a8:df:ea:9e:91:ac:
         c6:2c:77:b9:ef:f9:13:ca:20:51:c3:ad:09:f8:6b:03:06:e3:
         63:de:cb:f1:a5:07:79:b2:17:5b:56:c2:da:6d:89:75:3c:a1:
         9b:6b:68:98:b4:02:b9:ad:df:f8:26:22:27:55:d3:46:1c:65:
         69:fe:04:d2:6a:46:9a:9a:2c:74:e3:66:05:8a:b3:bf:49:f3:
         2b:76:b3:0e:e2:ca:8d:c7:e9:19:42:b8:b5:e5:9e:12:b5:0c:
         db:45:3e:99:e3:89:7c:f5:d7:1b:09:07:c8:d0:3b:dd:c6:b7:
         03:ff:e5:60:30:f7:77:e1:3b:eb:1c:a0:5f:6c:f4:a6:69:88:
         85:8b:0c:c9:bc:69:3f:5c:b7:ea:e8:bb:7d:da:af:d3:c5:8d:
         f2:6b:4f:3e:77:15:82:9d:e7:0d:9b:ea:96:6c:12:72:0a:bd:
         34:60:13:be:81:f8:f7:a8:58:72:ac:65:a5:35:8d:28:18:a0:
         f3:da:34:ec:ef:0a:ed:d7:ed:18:02:ec:c2:97:77:9f:f1:c4:
         8f:97:dd:12:fb:01:65:d2:62:5f:f8:87:44:90:68:58:39:2d:
         23:eb:77:4b:a9:1f:5f:14:5e:66:fe:a0:2c:34:6a:a3:31:fa:
         4f:f1:04:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:48:24 2025 by rpki-client