Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B54750A0D80A3259C6D7C94912CBB4F7736CCA9796F75C3EF97ADDA81AE72ECE/0/323830333a613861303a3a2f33322d3438203d3e20323636383032.roa
File:                     323830333a613861303a3a2f33322d3438203d3e20323636383032.roa (raw, json)
Hash identifier:          3lvlph+YZ28IZom+7iQr/HrAfM8DgWQjORor+/KSRCA=
Subject key identifier:   D6:B4:08:B9:BE:7D:84:D2:45:1E:00:F0:C4:7B:85:43:5D:AD:6B:50
Certificate issuer:       /CN=9DDF7010D9766829525CC44FC34F3B14225EB013
Certificate serial:       612F545A37427DCFB866F15DEAD262A03CA6E842
Authority key identifier: 9D:DF:70:10:D9:76:68:29:52:5C:C4:4F:C3:4F:3B:14:22:5E:B0:13
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9DDF7010D9766829525CC44FC34F3B14225EB013.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B54750A0D80A3259C6D7C94912CBB4F7736CCA9796F75C3EF97ADDA81AE72ECE/0/323830333a613861303a3a2f33322d3438203d3e20323636383032.roa
Signing time:             Tue 04 Feb 2025 18:41:01 +0000
ROA not before:           Tue 04 Feb 2025 18:36:01 +0000
ROA not after:            Tue 03 Feb 2026 18:41:01 +0000
asID:                     266802
IP address blocks:        2803:a8a0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B54750A0D80A3259C6D7C94912CBB4F7736CCA9796F75C3EF97ADDA81AE72ECE/0/9DDF7010D9766829525CC44FC34F3B14225EB013.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B54750A0D80A3259C6D7C94912CBB4F7736CCA9796F75C3EF97ADDA81AE72ECE/0/9DDF7010D9766829525CC44FC34F3B14225EB013.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9DDF7010D9766829525CC44FC34F3B14225EB013.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Apr 2025 11:56:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:2f:54:5a:37:42:7d:cf:b8:66:f1:5d:ea:d2:62:a0:3c:a6:e8:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DDF7010D9766829525CC44FC34F3B14225EB013
        Validity
            Not Before: Feb  4 18:36:01 2025 GMT
            Not After : Feb  3 18:41:01 2026 GMT
        Subject: CN=D6B408B9BE7D84D2451E00F0C47B85435DAD6B50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:b1:4a:de:ce:64:3d:62:0f:03:ff:69:53:2a:
                    b6:83:18:ab:0c:a9:82:1e:c7:89:bb:51:17:e3:ba:
                    d6:cd:c3:8d:cf:15:60:99:1f:22:89:af:cb:71:37:
                    fd:fb:c1:5c:db:5f:1a:e6:a6:d8:ea:7b:7c:c6:2b:
                    9f:97:fd:93:f3:3d:8e:5b:d1:62:8a:60:6c:fd:5d:
                    54:db:4b:ce:ab:df:ad:3c:ed:62:ec:4f:0b:d6:be:
                    bf:4c:e8:bb:b0:7d:3d:e3:aa:44:38:8d:ac:df:44:
                    ab:5d:21:ea:91:e3:6c:bc:25:2f:4d:bd:6d:c4:c2:
                    2f:1a:de:f7:98:db:7c:cc:58:39:f3:54:e9:12:5d:
                    0b:2d:ea:11:1f:40:2f:2d:08:0b:f0:b1:75:c4:7e:
                    5b:7c:ce:aa:ef:b7:1b:ba:cc:a8:6e:ad:18:e6:22:
                    0e:95:d9:21:ca:78:b6:16:43:ea:a2:56:b4:b2:89:
                    08:9f:8c:2b:bc:63:48:2e:f7:90:fd:59:3f:f3:97:
                    ce:64:bc:43:70:0c:3b:1d:73:fc:b7:37:47:a7:85:
                    68:0f:28:26:34:b7:01:3f:24:b7:88:ea:32:26:e0:
                    c3:5b:bd:00:a3:af:58:c7:42:f8:da:4b:87:53:1c:
                    f7:8b:73:30:1f:d1:52:8f:79:4d:6f:7f:de:29:c9:
                    48:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:B4:08:B9:BE:7D:84:D2:45:1E:00:F0:C4:7B:85:43:5D:AD:6B:50
            X509v3 Authority Key Identifier:
                keyid:9D:DF:70:10:D9:76:68:29:52:5C:C4:4F:C3:4F:3B:14:22:5E:B0:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B54750A0D80A3259C6D7C94912CBB4F7736CCA9796F75C3EF97ADDA81AE72ECE/0/9DDF7010D9766829525CC44FC34F3B14225EB013.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9DDF7010D9766829525CC44FC34F3B14225EB013.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B54750A0D80A3259C6D7C94912CBB4F7736CCA9796F75C3EF97ADDA81AE72ECE/0/323830333a613861303a3a2f33322d3438203d3e20323636383032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:a8a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         1f:ac:ba:48:46:52:59:b8:e3:74:7c:45:be:54:59:fb:d9:1a:
         3a:58:53:f7:5f:60:4b:0d:11:82:9d:cb:e8:26:d5:e3:91:3f:
         a4:8b:4c:e1:b2:54:5d:1e:62:30:6e:de:9d:eb:1c:cd:44:39:
         95:b7:a2:01:7f:b9:4e:2e:ee:41:44:2b:c0:70:48:0d:c5:1d:
         d3:8c:d8:56:08:78:63:bb:40:79:a4:fd:0d:cf:c3:b4:54:d1:
         d6:12:27:c8:db:b1:f9:90:4f:f2:d1:aa:1e:fa:3d:c0:04:c6:
         6d:be:ca:62:9f:ef:9b:f5:e1:80:bb:13:04:32:f5:97:bc:3a:
         2f:12:c8:dc:85:01:c2:5e:ec:ee:3a:f1:f1:62:11:30:45:0b:
         f3:55:a5:0c:d6:53:da:2a:e4:55:5d:00:d4:b7:6b:e2:4c:1a:
         2d:b0:29:43:72:5b:cb:1d:0f:6c:24:66:9a:ea:09:75:f3:aa:
         dd:68:b5:b8:a3:4e:ae:38:f2:f2:79:73:a7:7b:e2:f9:59:87:
         13:40:1d:5f:0d:78:ae:b4:c7:41:0c:bf:87:a3:62:c0:73:b6:
         d6:34:ad:5b:15:1b:c5:5b:64:98:e6:55:62:f5:83:48:95:d6:
         d3:e4:fc:01:96:70:63:f8:7b:07:8e:9d:cf:2b:83:e2:74:fd:
         6b:d2:e6:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 19:28:47 2025 by rpki-client