Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B4566E3F88E296C83E6744720DAAFD5029186ADCE7602ECB15635E353B831C85/0/323830333a366238303a3a2f33322d3332203d3e203238303933.roa
File:                     323830333a366238303a3a2f33322d3332203d3e203238303933.roa (raw, json)
Hash identifier:          SCMnL7G/PbDmmC1Iv60EwME+USzGvdx5IhEbnb7Cp80=
Subject key identifier:   7A:51:71:6B:A7:20:84:65:37:E6:FD:67:BA:30:92:6D:AB:26:44:3F
Certificate issuer:       /CN=BC89FE48C5233A2B0F2B8D476CCF52FA53F5B32F
Certificate serial:       4930DC378A48AB061BAD43B6D5A8BEE0C9E3AFAA
Authority key identifier: BC:89:FE:48:C5:23:3A:2B:0F:2B:8D:47:6C:CF:52:FA:53:F5:B3:2F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BC89FE48C5233A2B0F2B8D476CCF52FA53F5B32F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B4566E3F88E296C83E6744720DAAFD5029186ADCE7602ECB15635E353B831C85/0/323830333a366238303a3a2f33322d3332203d3e203238303933.roa
Signing time:             Tue 04 Feb 2025 18:49:55 +0000
ROA not before:           Tue 04 Feb 2025 18:44:55 +0000
ROA not after:            Tue 03 Feb 2026 18:49:55 +0000
asID:                     28093
IP address blocks:        2803:6b80::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B4566E3F88E296C83E6744720DAAFD5029186ADCE7602ECB15635E353B831C85/0/BC89FE48C5233A2B0F2B8D476CCF52FA53F5B32F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B4566E3F88E296C83E6744720DAAFD5029186ADCE7602ECB15635E353B831C85/0/BC89FE48C5233A2B0F2B8D476CCF52FA53F5B32F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BC89FE48C5233A2B0F2B8D476CCF52FA53F5B32F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:30:dc:37:8a:48:ab:06:1b:ad:43:b6:d5:a8:be:e0:c9:e3:af:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BC89FE48C5233A2B0F2B8D476CCF52FA53F5B32F
        Validity
            Not Before: Feb  4 18:44:55 2025 GMT
            Not After : Feb  3 18:49:55 2026 GMT
        Subject: CN=7A51716BA720846537E6FD67BA30926DAB26443F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:6d:34:8b:47:ca:75:ed:7c:7d:8e:5c:2e:1a:
                    ac:fb:bd:09:93:42:42:fc:8f:fd:e7:57:83:28:5c:
                    a2:9f:8a:d3:b1:38:7f:fb:bc:53:e5:19:7b:47:0b:
                    01:62:83:a4:c0:45:44:63:be:24:a2:39:9e:89:0c:
                    aa:7c:4c:6e:c8:b6:81:b3:a1:19:49:40:d5:db:2f:
                    f8:19:bd:c6:8b:1f:d6:b8:e5:86:6d:1f:a1:45:e4:
                    28:ec:1e:2a:98:c2:f6:3d:ee:f7:ae:42:5f:2a:95:
                    4e:88:f6:a3:0f:4f:46:c6:0d:b0:f4:45:ea:8b:b9:
                    c1:f0:de:c9:08:02:06:5f:96:5f:1e:f6:06:82:c4:
                    ec:7d:c8:6d:6c:67:c6:70:84:5e:1c:91:34:76:97:
                    5e:4f:e0:9c:29:d9:51:ca:77:28:f9:64:97:82:d6:
                    03:cb:b1:99:a2:4d:96:c1:4a:6b:19:3c:2e:ef:ac:
                    75:e1:d5:35:65:b1:7d:6c:c8:78:f6:12:05:75:ef:
                    b6:e2:ab:d7:5d:a2:f1:b9:c0:fd:0d:07:ab:48:ba:
                    46:1b:97:5f:0d:2b:c9:99:67:84:06:6e:64:99:50:
                    21:50:89:56:8c:5e:b4:ce:e9:54:91:2e:a9:e4:ec:
                    23:bb:f1:5d:55:d8:e4:35:08:ab:dd:7f:87:2d:21:
                    36:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:51:71:6B:A7:20:84:65:37:E6:FD:67:BA:30:92:6D:AB:26:44:3F
            X509v3 Authority Key Identifier:
                keyid:BC:89:FE:48:C5:23:3A:2B:0F:2B:8D:47:6C:CF:52:FA:53:F5:B3:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B4566E3F88E296C83E6744720DAAFD5029186ADCE7602ECB15635E353B831C85/0/BC89FE48C5233A2B0F2B8D476CCF52FA53F5B32F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BC89FE48C5233A2B0F2B8D476CCF52FA53F5B32F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B4566E3F88E296C83E6744720DAAFD5029186ADCE7602ECB15635E353B831C85/0/323830333a366238303a3a2f33322d3332203d3e203238303933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6b80::/32

    Signature Algorithm: sha256WithRSAEncryption
         63:18:d3:53:9c:f2:0d:c0:fa:51:32:6a:b8:7f:16:94:d8:0b:
         b1:31:25:ef:3f:5e:ef:08:6d:bc:ca:26:68:ce:9a:93:45:3d:
         a0:a8:d7:87:b7:5a:a7:5f:65:c0:86:4e:be:00:91:d6:19:f0:
         b2:50:08:81:70:97:7f:e8:35:86:85:5f:ff:1c:ad:f0:71:3e:
         88:3f:d9:50:cc:2e:a3:e0:3f:2d:bc:2e:d5:bd:82:20:79:4a:
         e4:e5:60:61:87:13:84:25:0a:ad:8a:3c:28:9d:c8:8c:ae:d7:
         41:bc:de:3a:fe:bc:e6:5a:e8:13:37:16:f1:94:e9:2e:51:82:
         89:4c:53:49:1d:61:89:60:94:69:76:56:08:b3:a0:ac:f8:a2:
         1c:eb:61:52:13:65:2d:97:eb:c6:2e:6d:97:9e:de:3b:b1:f5:
         34:d9:08:86:f7:42:bf:b7:e6:34:78:80:f3:48:2a:cc:ba:9c:
         b2:71:f6:37:91:c3:9a:d0:9c:f5:bc:0d:72:c9:d4:1f:3a:98:
         a4:66:2b:ca:6f:d1:be:7f:b7:64:f3:a6:98:8e:c1:32:10:ff:
         3f:2a:0d:ff:e4:c9:6f:ad:f7:3a:b3:fb:e1:8e:c7:31:14:97:
         cf:84:42:bc:13:53:23:57:5b:61:8f:7d:0c:97:e3:80:03:94:
         31:c2:3c:e5
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUSTDcN4pIqwYbrUO21ai+4Mnjr6owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkM4OUZFNDhDNTIzM0EyQjBGMkI4RDQ3NkNDRjUyRkE1
M0Y1QjMyRjAeFw0yNTAyMDQxODQ0NTVaFw0yNjAyMDMxODQ5NTVaMDMxMTAvBgNV
BAMTKDdBNTE3MTZCQTcyMDg0NjUzN0U2RkQ2N0JBMzA5MjZEQUIyNjQ0M0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDObTSLR8p17Xx9jlwuGqz7vQmT
QkL8j/3nV4MoXKKfitOxOH/7vFPlGXtHCwFig6TARURjviSiOZ6JDKp8TG7ItoGz
oRlJQNXbL/gZvcaLH9a45YZtH6FF5CjsHiqYwvY97veuQl8qlU6I9qMPT0bGDbD0
ReqLucHw3skIAgZfll8e9gaCxOx9yG1sZ8ZwhF4ckTR2l15P4Jwp2VHKdyj5ZJeC
1gPLsZmiTZbBSmsZPC7vrHXh1TVlsX1syHj2EgV177biq9ddovG5wP0NB6tIukYb
l18NK8mZZ4QGbmSZUCFQiVaMXrTO6VSRLqnk7CO78V1V2OQ1CKvdf4ctITb1AgMB
AAGjggLHMIICwzAdBgNVHQ4EFgQUelFxa6cghGU35v1nujCSbasmRD8wHwYDVR0j
BBgwFoAUvIn+SMUjOisPK41HbM9S+lP1sy8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CNDU2NkUzRjg4RTI5NkM4M0U2NzQ0NzIwREFBRkQ1MDI5
MTg2QURDRTc2MDJFQ0IxNTYzNUUzNTNCODMxQzg1LzAvQkM4OUZFNDhDNTIzM0Ey
QjBGMkI4RDQ3NkNDRjUyRkE1M0Y1QjMyRi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CQzg5RkU0OEM1MjMzQTJCMEYy
QjhENDc2Q0NGNTJGQTUzRjVCMzJGLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQjQ1NjZFM0Y4OEUyOTZDODNFNjc0NDcyMERBQUZENTAyOTE4NkFEQ0U3
NjAyRUNCMTU2MzVFMzUzQjgzMUM4NS8wLzMyMzgzMDMzM2EzNjYyMzgzMDNhM2Ey
ZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzgzMDM5MzMucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoA2uAMA0G
CSqGSIb3DQEBCwUAA4IBAQBjGNNTnPINwPpRMmq4fxaU2AuxMSXvP17vCG28yiZo
zpqTRT2gqNeHt1qnX2XAhk6+AJHWGfCyUAiBcJd/6DWGhV//HK3wcT6IP9lQzC6j
4D8tvC7VvYIgeUrk5WBhhxOEJQqtijwonciMrtdBvN46/rzmWugTNxbxlOkuUYKJ
TFNJHWGJYJRpdlYIs6Cs+KIc62FSE2Utl+vGLm2Xnt47sfU02QiG90K/t+Y0eIDz
SCrMupyycfY3kcOa0Jz1vA1yydQfOpikZivKb9G+f7dk86aYjsEyEP8/Kg3/5Mlv
rfc6s/vhjscxFJfPhEK8E1MjV1thj30Ml+OAA5Qxwjzl
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:08:06 2025 by rpki-client