Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B8821A5F06E8036E9E1AE0DFE027EE6076D72DCC6BC2655EA3BFDD6274FAD7E4/0/323830333a646463303a3a2f33322d3332203d3e203237383535.roa
File:                     323830333a646463303a3a2f33322d3332203d3e203237383535.roa (raw, json)
Hash identifier:          JIdhrCxU/jxShZGjPwbYJiXutQR8KaA35oYTCEmvY+A=
Subject key identifier:   61:DC:5B:9F:74:49:F2:44:65:2A:C1:ED:40:43:66:27:95:2B:15:0B
Certificate issuer:       /CN=2D9B47B31B2096B35C9794693DF659896A6B49CE
Certificate serial:       2C7DFDD2D6CC6A4E559601DCE1E70FA7A17AA970
Authority key identifier: 2D:9B:47:B3:1B:20:96:B3:5C:97:94:69:3D:F6:59:89:6A:6B:49:CE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D9B47B31B2096B35C9794693DF659896A6B49CE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B8821A5F06E8036E9E1AE0DFE027EE6076D72DCC6BC2655EA3BFDD6274FAD7E4/0/323830333a646463303a3a2f33322d3332203d3e203237383535.roa
Signing time:             Tue 04 Feb 2025 18:11:03 +0000
ROA not before:           Tue 04 Feb 2025 18:06:03 +0000
ROA not after:            Tue 03 Feb 2026 18:11:03 +0000
asID:                     27855
IP address blocks:        2803:ddc0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B8821A5F06E8036E9E1AE0DFE027EE6076D72DCC6BC2655EA3BFDD6274FAD7E4/0/2D9B47B31B2096B35C9794693DF659896A6B49CE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B8821A5F06E8036E9E1AE0DFE027EE6076D72DCC6BC2655EA3BFDD6274FAD7E4/0/2D9B47B31B2096B35C9794693DF659896A6B49CE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D9B47B31B2096B35C9794693DF659896A6B49CE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:7d:fd:d2:d6:cc:6a:4e:55:96:01:dc:e1:e7:0f:a7:a1:7a:a9:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D9B47B31B2096B35C9794693DF659896A6B49CE
        Validity
            Not Before: Feb  4 18:06:03 2025 GMT
            Not After : Feb  3 18:11:03 2026 GMT
        Subject: CN=61DC5B9F7449F244652AC1ED40436627952B150B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:a6:42:86:cb:29:1c:f8:d1:90:7e:0a:04:36:
                    47:96:de:22:2b:2e:6b:37:4c:4d:95:89:6e:16:be:
                    6f:d0:1b:4a:96:2b:e1:b6:a6:d2:84:ac:fb:fc:66:
                    e2:03:b6:0d:45:08:14:b0:35:9a:0f:8c:a1:06:83:
                    13:1b:d6:c1:55:71:cf:db:9e:ff:e3:1e:1a:80:0f:
                    4e:36:fb:ed:6b:78:85:4b:34:19:82:69:6e:99:c4:
                    a4:c2:8e:95:c1:f7:5e:44:7b:e5:9b:e0:2d:ac:c0:
                    ba:e4:05:5c:ed:c2:cc:23:90:9b:fe:73:74:c5:21:
                    99:91:b6:f7:95:6b:b1:55:b1:f7:5b:8b:1a:b4:01:
                    1d:a2:37:29:e7:65:1f:b2:23:87:e3:3f:05:31:e6:
                    d5:93:29:29:d1:81:49:3e:35:03:e2:87:17:41:cd:
                    b8:37:78:33:f4:dd:34:68:fb:95:6f:ab:9f:8b:4c:
                    7e:95:3b:37:d6:ea:a7:2c:70:f0:e1:c8:dd:af:98:
                    3f:cf:56:af:b3:d4:d6:26:28:3d:e8:42:50:a0:d9:
                    aa:21:ec:44:b9:5a:eb:22:95:0e:9b:f3:52:d1:b9:
                    9c:79:4c:08:04:21:09:a9:a9:1a:b0:c0:17:c2:9f:
                    23:f9:20:51:55:24:d0:86:12:1a:4a:9f:36:5e:77:
                    27:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:DC:5B:9F:74:49:F2:44:65:2A:C1:ED:40:43:66:27:95:2B:15:0B
            X509v3 Authority Key Identifier:
                keyid:2D:9B:47:B3:1B:20:96:B3:5C:97:94:69:3D:F6:59:89:6A:6B:49:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B8821A5F06E8036E9E1AE0DFE027EE6076D72DCC6BC2655EA3BFDD6274FAD7E4/0/2D9B47B31B2096B35C9794693DF659896A6B49CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D9B47B31B2096B35C9794693DF659896A6B49CE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B8821A5F06E8036E9E1AE0DFE027EE6076D72DCC6BC2655EA3BFDD6274FAD7E4/0/323830333a646463303a3a2f33322d3332203d3e203237383535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ddc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         04:07:e5:dd:0c:d3:e7:f7:4d:c4:85:3c:3b:ba:f6:2d:0f:cb:
         49:55:57:50:bb:0d:c7:2f:46:cc:2a:d2:01:c4:c1:be:d9:66:
         0c:34:9d:f7:36:4e:3d:92:cb:4b:13:69:b1:45:95:a5:ce:4f:
         80:28:ff:29:5e:e9:e4:69:84:7d:2b:00:9e:a6:0d:7f:26:6e:
         20:19:ba:1d:43:4a:d1:22:5c:7a:15:65:3a:00:99:11:fa:bc:
         ba:9d:14:a5:5f:f9:96:84:9e:95:bc:df:31:4f:26:45:bc:22:
         dc:dc:2c:5f:62:18:bd:a9:15:02:b3:02:97:62:21:cd:39:a8:
         24:94:1b:ba:dd:76:ec:c2:ea:d6:cc:2f:d9:33:74:0c:46:b4:
         a2:94:ba:10:57:62:d8:a2:fa:de:6f:8c:a2:72:10:1f:9c:ff:
         e9:9d:ae:d2:c6:bd:40:be:8f:7b:68:37:65:25:af:e0:42:46:
         49:fd:6d:47:34:77:9b:e2:9b:90:e9:75:ab:45:53:39:fa:86:
         8c:4f:f8:9a:68:7a:18:49:23:4e:77:06:03:fa:09:a5:76:01:
         6b:e2:a8:08:c8:95:2e:93:a6:8f:bf:da:fc:9c:e9:2c:cd:3e:
         8e:4a:97:32:1b:5b:f7:9e:2c:42:b5:e7:2b:25:74:86:9a:2a:
         0f:e5:12:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:22:15 2025 by rpki-client