Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9DA8C80805BCA4CF63DDA4FBAE73E61851D724B6E761919681A32FF8212233BE/0/323830313a31333a643830303a3a2f34382d3438203d3e203134303830.roa
File:                     323830313a31333a643830303a3a2f34382d3438203d3e203134303830.roa (raw, json)
Hash identifier:          kkafS8rLlGBeQ6VUx0AiD6jnTOHLthXrAqZWKLP0AKs=
Subject key identifier:   03:2B:64:93:92:E9:21:20:C5:03:57:35:94:47:3F:06:15:EF:B0:61
Certificate issuer:       /CN=2DD53BD69D3A3477F5372EF3689D3AC6BCC5D11B
Certificate serial:       717117127B999265A440112937B829EA74A144AD
Authority key identifier: 2D:D5:3B:D6:9D:3A:34:77:F5:37:2E:F3:68:9D:3A:C6:BC:C5:D1:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2DD53BD69D3A3477F5372EF3689D3AC6BCC5D11B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9DA8C80805BCA4CF63DDA4FBAE73E61851D724B6E761919681A32FF8212233BE/0/323830313a31333a643830303a3a2f34382d3438203d3e203134303830.roa
Signing time:             Tue 04 Feb 2025 18:20:21 +0000
ROA not before:           Tue 04 Feb 2025 18:15:21 +0000
ROA not after:            Tue 03 Feb 2026 18:20:21 +0000
asID:                     14080
IP address blocks:        2801:13:d800::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9DA8C80805BCA4CF63DDA4FBAE73E61851D724B6E761919681A32FF8212233BE/0/2DD53BD69D3A3477F5372EF3689D3AC6BCC5D11B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9DA8C80805BCA4CF63DDA4FBAE73E61851D724B6E761919681A32FF8212233BE/0/2DD53BD69D3A3477F5372EF3689D3AC6BCC5D11B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2DD53BD69D3A3477F5372EF3689D3AC6BCC5D11B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 18:34:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:71:17:12:7b:99:92:65:a4:40:11:29:37:b8:29:ea:74:a1:44:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2DD53BD69D3A3477F5372EF3689D3AC6BCC5D11B
        Validity
            Not Before: Feb  4 18:15:21 2025 GMT
            Not After : Feb  3 18:20:21 2026 GMT
        Subject: CN=032B649392E92120C503573594473F0615EFB061
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:f5:b9:39:87:52:57:0c:7f:62:37:1d:e5:50:
                    d3:f9:bb:36:21:01:f4:37:d0:62:55:99:ba:b4:86:
                    f1:9a:6a:4f:82:12:27:fb:7f:95:7d:c3:21:b4:6e:
                    0a:8d:81:9e:d2:b1:90:68:69:cc:88:58:f1:1a:b8:
                    5e:02:09:60:85:42:ce:16:90:59:07:d0:ac:07:59:
                    b4:3d:3c:df:09:b5:4a:3f:83:4a:a9:62:c4:c8:ea:
                    99:3f:95:4a:22:07:14:e0:84:e8:39:66:69:49:c6:
                    64:74:ab:dc:5d:aa:01:a8:a3:5b:ed:65:d2:2b:f5:
                    07:a6:bf:a4:23:24:32:56:7c:53:54:c5:90:c5:85:
                    9f:e0:bb:ab:11:18:ee:42:30:85:2a:6a:2a:f7:9d:
                    de:a4:99:36:45:0c:f1:37:4e:3c:29:61:65:b0:b7:
                    41:a6:39:8e:18:63:cc:fa:24:6c:43:e2:32:90:5c:
                    b5:db:43:38:b0:99:c9:4a:37:15:09:19:f7:c3:9c:
                    ca:b7:da:80:1f:77:c7:9a:62:57:b4:ad:38:02:7a:
                    1a:9f:5f:2d:53:f3:44:2f:b5:db:1e:4a:32:f6:a3:
                    4b:7f:ef:54:02:1f:06:32:0c:00:ec:50:eb:2a:1e:
                    99:ce:7c:cd:e5:59:a2:a7:15:2f:0f:b8:0b:f9:84:
                    5b:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:2B:64:93:92:E9:21:20:C5:03:57:35:94:47:3F:06:15:EF:B0:61
            X509v3 Authority Key Identifier:
                keyid:2D:D5:3B:D6:9D:3A:34:77:F5:37:2E:F3:68:9D:3A:C6:BC:C5:D1:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9DA8C80805BCA4CF63DDA4FBAE73E61851D724B6E761919681A32FF8212233BE/0/2DD53BD69D3A3477F5372EF3689D3AC6BCC5D11B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2DD53BD69D3A3477F5372EF3689D3AC6BCC5D11B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9DA8C80805BCA4CF63DDA4FBAE73E61851D724B6E761919681A32FF8212233BE/0/323830313a31333a643830303a3a2f34382d3438203d3e203134303830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:13:d800::/48

    Signature Algorithm: sha256WithRSAEncryption
         5c:95:81:18:e7:60:23:8c:4a:7e:1e:3f:39:1c:9c:ef:45:55:
         e9:b9:ad:97:17:25:13:fd:6f:81:bd:e2:35:ed:88:32:25:46:
         36:86:7b:4f:41:fd:6c:62:fc:1a:e7:f9:ed:2d:c8:52:85:52:
         4c:79:4a:fd:e7:d2:1b:83:17:b0:86:8d:ac:a1:03:90:0a:72:
         5c:7a:a6:bd:9c:99:83:f3:ae:37:f6:77:c1:19:3f:8f:b0:7c:
         e0:24:5c:61:ec:d6:20:0c:14:73:bc:6c:f3:3c:11:01:eb:f8:
         2b:88:23:e2:1a:65:a3:33:ab:6c:2d:44:5a:0c:9e:c1:99:ec:
         c5:ab:68:40:51:bb:27:f2:7b:ac:00:af:d1:3c:6c:44:58:1f:
         6b:cf:4b:84:0a:20:fe:53:e4:64:a5:e8:5f:2a:a6:14:3d:03:
         dc:d0:df:fa:6d:e9:cc:68:f8:c7:f7:62:89:31:43:cc:bd:dc:
         4b:7c:bb:2f:0a:0b:e1:bc:b2:96:74:6d:bb:cc:5c:6e:3c:71:
         59:b2:2e:ad:4b:3c:50:0f:34:bf:7f:32:97:a8:4b:9d:e6:0d:
         9b:08:13:64:60:73:ad:03:ae:c9:d0:b0:54:d1:3e:4e:e6:ed:
         13:2f:89:d8:f8:e0:0f:84:f2:83:67:d9:7f:e6:5e:69:c1:94:
         94:99:71:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:08:25 2025 by rpki-client