Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8F39A89B89F9B334173387B21396CDACBF43847171DB32191BAE9418549B59F4/0/323830333a323034303a3a2f33322d3332203d3e203238303530.roa
File:                     323830333a323034303a3a2f33322d3332203d3e203238303530.roa (raw, json)
Hash identifier:          OmlbRyhT/ZJTfY7NLG2Wk/eDNN2JwiK/qbRcXt2tEDQ=
Subject key identifier:   0A:8F:94:1C:68:FE:B1:1D:CB:09:3C:18:F3:FE:3B:20:1B:0E:B0:65
Certificate issuer:       /CN=BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B
Certificate serial:       448FF1CD2B8C2C34ECBB9960FA54079DAC45EFB2
Authority key identifier: BD:5C:8B:3B:9F:5A:D1:E1:22:59:0B:3A:8C:84:9B:67:CE:09:B5:0B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8F39A89B89F9B334173387B21396CDACBF43847171DB32191BAE9418549B59F4/0/323830333a323034303a3a2f33322d3332203d3e203238303530.roa
Signing time:             Tue 04 Feb 2025 18:32:47 +0000
ROA not before:           Tue 04 Feb 2025 18:27:47 +0000
ROA not after:            Tue 03 Feb 2026 18:32:47 +0000
asID:                     28050
IP address blocks:        2803:2040::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8F39A89B89F9B334173387B21396CDACBF43847171DB32191BAE9418549B59F4/0/BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8F39A89B89F9B334173387B21396CDACBF43847171DB32191BAE9418549B59F4/0/BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 21:06:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:8f:f1:cd:2b:8c:2c:34:ec:bb:99:60:fa:54:07:9d:ac:45:ef:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B
        Validity
            Not Before: Feb  4 18:27:47 2025 GMT
            Not After : Feb  3 18:32:47 2026 GMT
        Subject: CN=0A8F941C68FEB11DCB093C18F3FE3B201B0EB065
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c0:7f:a7:52:cc:82:7d:10:a5:b8:0a:56:44:
                    09:df:f3:f3:ee:2c:14:11:63:e3:8b:7b:8c:c2:cb:
                    ba:6a:5a:19:37:8d:b9:ca:aa:6d:ec:cf:8d:5c:eb:
                    a5:d8:68:95:36:a4:d2:53:ce:35:11:29:a0:27:85:
                    dc:fb:9c:bd:5c:01:81:2d:78:c5:cc:89:1c:ec:8e:
                    6d:4b:c0:73:64:48:3b:76:72:8b:5c:69:92:a6:79:
                    72:d3:f0:89:bb:c3:b5:81:a2:9c:62:de:1f:01:f3:
                    e2:50:3c:a4:87:89:68:c8:f9:77:49:ee:37:6c:4e:
                    fe:ad:fb:fa:12:f9:54:06:ab:aa:73:ef:10:7a:44:
                    65:af:ee:d9:19:68:2e:c8:2e:dc:e3:89:0b:eb:bd:
                    b1:de:a7:04:65:d7:87:3e:4a:c4:5c:6f:7a:01:56:
                    a8:47:6f:cb:81:48:5a:54:f7:4c:55:b2:2e:d1:d5:
                    77:46:a0:48:d6:6a:8c:3f:f4:6e:3c:2e:53:b2:20:
                    2a:52:2a:7f:e5:a8:4e:d7:f7:3f:01:a0:9b:31:1f:
                    35:46:29:0e:07:bf:ff:3a:8b:a9:0f:f6:f7:95:ff:
                    ed:d0:c9:49:7c:d1:3d:fd:b2:6f:91:db:ba:84:c4:
                    d8:7c:67:1e:fc:44:ac:a3:5d:69:5a:8a:93:2d:43:
                    97:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:8F:94:1C:68:FE:B1:1D:CB:09:3C:18:F3:FE:3B:20:1B:0E:B0:65
            X509v3 Authority Key Identifier:
                keyid:BD:5C:8B:3B:9F:5A:D1:E1:22:59:0B:3A:8C:84:9B:67:CE:09:B5:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8F39A89B89F9B334173387B21396CDACBF43847171DB32191BAE9418549B59F4/0/BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8F39A89B89F9B334173387B21396CDACBF43847171DB32191BAE9418549B59F4/0/323830333a323034303a3a2f33322d3332203d3e203238303530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2040::/32

    Signature Algorithm: sha256WithRSAEncryption
         49:83:9f:3f:0d:18:44:65:a5:0c:1f:e3:fe:b5:be:71:e3:c7:
         50:18:ef:57:98:8f:fc:a0:7d:22:e6:92:22:36:99:e7:80:5c:
         bf:8a:af:17:08:97:71:9e:76:ee:1d:e2:e9:ea:1e:af:ec:64:
         e1:0c:71:28:3d:37:44:a7:35:1f:f6:2b:ff:25:1c:07:16:37:
         22:f8:f0:74:35:f4:84:92:3a:f0:8d:d4:02:b2:aa:6c:a3:9e:
         df:dc:ee:4a:8c:10:d4:5c:ae:9a:52:db:24:6f:d8:93:e5:a6:
         74:1e:61:d5:de:3e:df:eb:26:01:c7:20:73:c4:d2:3a:68:1a:
         b1:ed:4c:8b:21:83:09:95:11:15:f7:1d:ba:5c:b9:66:8e:4f:
         50:85:39:ed:10:54:a6:99:d4:26:06:44:e3:ca:57:e8:37:54:
         65:61:f6:43:83:c6:af:1c:60:f1:81:9c:9a:3d:f7:d7:0a:34:
         3d:21:27:b9:78:72:f9:4e:a7:79:71:13:a5:d6:d6:13:70:c5:
         86:3f:a1:cd:17:67:f8:8c:73:ed:d4:53:49:16:09:d0:7b:fa:
         ed:29:2a:1a:7b:9c:54:20:6f:5d:c0:75:1f:f8:e1:5b:c3:0a:
         77:fa:12:e2:dd:bb:5e:fa:22:78:0e:90:0e:49:ac:56:3e:3c:
         55:02:f3:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:23:20 2025 by rpki-client