Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/962BF872D2B1D94AEC1DF5A2CAE8B011B11426454C2622D42BD424E213F9CF46/0/323830333a323030303a3a2f33322d3332203d3e203532343930.roa
File:                     323830333a323030303a3a2f33322d3332203d3e203532343930.roa (raw, json)
Hash identifier:          PFuLgdA7IydQT6dejBuJUP/m2C0+fwtFl7a2AjaxrXA=
Subject key identifier:   D8:0F:74:36:D0:63:0C:97:54:42:7B:E3:C5:5F:21:C5:3F:22:57:74
Certificate issuer:       /CN=61BC0DF9DC0EB328D3B5AA53024308EF6731BC88
Certificate serial:       532C48949A02772696F828E933D45D0BD191F42D
Authority key identifier: 61:BC:0D:F9:DC:0E:B3:28:D3:B5:AA:53:02:43:08:EF:67:31:BC:88
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/61BC0DF9DC0EB328D3B5AA53024308EF6731BC88.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/962BF872D2B1D94AEC1DF5A2CAE8B011B11426454C2622D42BD424E213F9CF46/0/323830333a323030303a3a2f33322d3332203d3e203532343930.roa
Signing time:             Tue 04 Feb 2025 18:49:04 +0000
ROA not before:           Tue 04 Feb 2025 18:44:04 +0000
ROA not after:            Tue 03 Feb 2026 18:49:04 +0000
asID:                     52490
IP address blocks:        2803:2000::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/962BF872D2B1D94AEC1DF5A2CAE8B011B11426454C2622D42BD424E213F9CF46/0/61BC0DF9DC0EB328D3B5AA53024308EF6731BC88.crl
                          rsync://repository.lacnic.net/rpki/lacnic/962BF872D2B1D94AEC1DF5A2CAE8B011B11426454C2622D42BD424E213F9CF46/0/61BC0DF9DC0EB328D3B5AA53024308EF6731BC88.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/61BC0DF9DC0EB328D3B5AA53024308EF6731BC88.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 04:14:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:2c:48:94:9a:02:77:26:96:f8:28:e9:33:d4:5d:0b:d1:91:f4:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61BC0DF9DC0EB328D3B5AA53024308EF6731BC88
        Validity
            Not Before: Feb  4 18:44:04 2025 GMT
            Not After : Feb  3 18:49:04 2026 GMT
        Subject: CN=D80F7436D0630C9754427BE3C55F21C53F225774
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:d6:c5:02:0b:19:57:dc:3c:95:f8:cc:fc:d2:
                    78:41:6e:75:9f:87:ab:37:3e:c7:c4:3e:95:a0:42:
                    48:55:15:08:56:44:57:da:36:f3:9d:18:2f:2e:46:
                    e8:82:48:54:55:d6:54:65:a7:cb:08:de:5c:04:19:
                    dd:be:50:76:a1:cd:00:df:c2:67:c9:7e:b8:a2:23:
                    0f:96:79:46:92:fb:eb:50:81:93:a2:80:d6:81:29:
                    c3:be:73:59:4b:98:e0:1f:7b:65:8d:a6:64:2a:3c:
                    a3:6e:1b:50:b4:01:1f:e1:a3:13:35:95:6a:d3:07:
                    eb:21:3e:87:e1:39:95:e7:7e:85:15:59:0a:0d:b1:
                    9a:ea:d5:4c:1b:92:32:34:66:fb:d0:9b:af:61:0a:
                    bc:e9:d1:06:25:05:a3:06:48:d3:f5:6e:67:83:a1:
                    76:a7:8e:69:ba:f1:3d:18:27:f2:ca:0d:60:6e:9b:
                    8e:77:20:d0:38:d0:25:ef:1d:92:00:10:bd:a8:1d:
                    91:59:a4:94:31:eb:27:92:f5:b9:12:5a:f6:c4:b2:
                    49:b6:f7:37:e9:ab:c0:6c:7f:d1:49:14:49:4f:ab:
                    c6:3e:b6:d9:99:91:db:51:27:b5:6d:8b:e0:00:19:
                    85:7d:30:85:12:be:2a:0a:21:65:b9:72:0b:3a:f8:
                    4a:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:0F:74:36:D0:63:0C:97:54:42:7B:E3:C5:5F:21:C5:3F:22:57:74
            X509v3 Authority Key Identifier:
                keyid:61:BC:0D:F9:DC:0E:B3:28:D3:B5:AA:53:02:43:08:EF:67:31:BC:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/962BF872D2B1D94AEC1DF5A2CAE8B011B11426454C2622D42BD424E213F9CF46/0/61BC0DF9DC0EB328D3B5AA53024308EF6731BC88.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/61BC0DF9DC0EB328D3B5AA53024308EF6731BC88.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/962BF872D2B1D94AEC1DF5A2CAE8B011B11426454C2622D42BD424E213F9CF46/0/323830333a323030303a3a2f33322d3332203d3e203532343930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2000::/32

    Signature Algorithm: sha256WithRSAEncryption
         43:0e:ac:47:86:09:2a:0c:57:0e:5f:cb:45:15:ad:58:8e:9b:
         64:5b:93:0c:f1:4a:2f:4e:69:02:67:5d:12:cb:e9:52:89:96:
         91:79:e6:e5:59:7c:40:43:25:69:8c:2b:09:58:58:cf:b4:ec:
         eb:b8:2d:b3:8d:ce:b3:83:62:c2:b5:b6:a6:53:57:88:31:61:
         9b:f6:92:4e:ff:1a:f3:05:1f:cd:08:49:45:48:92:46:b5:50:
         d2:1e:dc:e7:cc:1a:b9:9a:3e:f2:6c:00:27:50:1e:20:c5:10:
         a3:02:24:75:d9:69:84:b1:db:1e:80:8f:ae:7f:91:06:20:ad:
         0a:29:11:e2:a9:e7:7a:15:44:11:cd:38:f8:83:7c:97:33:96:
         ac:59:cb:7d:2c:7d:f8:a1:a4:03:7f:d8:11:d4:81:fe:9c:7e:
         36:1c:b2:d6:9e:69:cd:fd:e1:07:df:38:55:8f:7e:28:15:01:
         d2:17:54:41:1d:0b:a0:4a:0e:66:7f:9e:81:76:bc:d0:67:f1:
         bf:4f:28:b1:4c:6a:60:f6:bd:c5:28:3f:d0:2f:82:37:63:74:
         9d:74:dd:d4:ae:19:a3:48:28:e1:0d:d6:cd:4a:71:91:96:b9:
         0a:d7:f0:c0:1e:70:c0:b0:30:0c:96:e3:24:5a:13:c3:4c:c9:
         ae:59:5d:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:50:40 2025 by rpki-client