Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BB0C32254BADF118E3E8E1FC5E1D13916CA9F020D47B417DEF5FA9CEE16B8A7E/0/323830333a626332303a3a2f33322d3438203d3e203532343638.roa
File:                     323830333a626332303a3a2f33322d3438203d3e203532343638.roa (raw, json)
Hash identifier:          Q0i/zOTswJRhVWnXpsI9uzLqXEiTYaGogd4Sq3B39Uw=
Subject key identifier:   8D:82:02:6A:D5:F4:A7:B5:4D:2B:96:80:C7:21:4D:76:C9:65:12:03
Certificate issuer:       /CN=3969A916AB2A182C19F90F28E002F43BBA68A0E4
Certificate serial:       4D7A4F2044BAD6E42A75368950FA498740E30C2B
Authority key identifier: 39:69:A9:16:AB:2A:18:2C:19:F9:0F:28:E0:02:F4:3B:BA:68:A0:E4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3969A916AB2A182C19F90F28E002F43BBA68A0E4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BB0C32254BADF118E3E8E1FC5E1D13916CA9F020D47B417DEF5FA9CEE16B8A7E/0/323830333a626332303a3a2f33322d3438203d3e203532343638.roa
Signing time:             Tue 04 Feb 2025 18:43:03 +0000
ROA not before:           Tue 04 Feb 2025 18:38:03 +0000
ROA not after:            Tue 03 Feb 2026 18:43:03 +0000
asID:                     52468
IP address blocks:        2803:bc20::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BB0C32254BADF118E3E8E1FC5E1D13916CA9F020D47B417DEF5FA9CEE16B8A7E/0/3969A916AB2A182C19F90F28E002F43BBA68A0E4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BB0C32254BADF118E3E8E1FC5E1D13916CA9F020D47B417DEF5FA9CEE16B8A7E/0/3969A916AB2A182C19F90F28E002F43BBA68A0E4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3969A916AB2A182C19F90F28E002F43BBA68A0E4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:7a:4f:20:44:ba:d6:e4:2a:75:36:89:50:fa:49:87:40:e3:0c:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3969A916AB2A182C19F90F28E002F43BBA68A0E4
        Validity
            Not Before: Feb  4 18:38:03 2025 GMT
            Not After : Feb  3 18:43:03 2026 GMT
        Subject: CN=8D82026AD5F4A7B54D2B9680C7214D76C9651203
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:c9:00:b3:92:db:2e:f9:37:84:7b:dc:f4:e4:
                    64:db:12:6e:20:49:80:4a:e2:03:70:64:34:4f:30:
                    79:f3:ed:65:c2:60:11:f8:52:6b:ba:1d:67:84:c4:
                    6a:35:fa:f2:a0:21:f8:13:ab:0e:65:78:c8:12:db:
                    2f:88:81:04:10:59:56:3a:a6:9a:fd:fc:3f:fc:cf:
                    ac:8d:de:8d:1f:95:35:e8:94:dd:74:aa:f0:fe:62:
                    e8:e8:da:69:88:10:3b:05:1f:6b:bb:68:3c:a0:c6:
                    4c:77:46:20:13:6e:65:d0:1f:36:28:8b:35:9b:48:
                    82:e1:1d:5c:0d:9f:3d:62:67:e7:44:3b:9a:6f:fd:
                    dd:9c:05:a1:14:d4:b4:33:22:66:57:01:e2:62:b7:
                    9b:47:14:bb:85:d1:ce:ee:f7:8e:08:88:b9:84:b2:
                    99:83:52:f4:5e:b9:aa:60:11:fc:ee:40:7c:ad:71:
                    a8:cd:d0:f7:f9:b6:4b:3c:7a:4b:10:db:74:4b:4f:
                    e7:c0:d1:64:68:88:32:60:b0:1e:63:ab:c9:95:ee:
                    c8:f5:a7:bd:b3:66:61:7e:33:7c:aa:46:16:ad:93:
                    d8:8b:14:e4:67:2e:c8:65:28:b1:7e:d1:9b:55:d4:
                    b1:80:74:95:e0:42:2c:b5:d3:e7:ea:9c:8f:75:c6:
                    7e:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:82:02:6A:D5:F4:A7:B5:4D:2B:96:80:C7:21:4D:76:C9:65:12:03
            X509v3 Authority Key Identifier:
                keyid:39:69:A9:16:AB:2A:18:2C:19:F9:0F:28:E0:02:F4:3B:BA:68:A0:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BB0C32254BADF118E3E8E1FC5E1D13916CA9F020D47B417DEF5FA9CEE16B8A7E/0/3969A916AB2A182C19F90F28E002F43BBA68A0E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3969A916AB2A182C19F90F28E002F43BBA68A0E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BB0C32254BADF118E3E8E1FC5E1D13916CA9F020D47B417DEF5FA9CEE16B8A7E/0/323830333a626332303a3a2f33322d3438203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:bc20::/32

    Signature Algorithm: sha256WithRSAEncryption
         17:e3:33:dc:a8:9f:70:4b:cc:43:27:3f:f2:e2:93:86:f2:06:
         f9:61:4b:2e:a1:ef:30:2c:46:8f:d1:7c:82:68:e9:b0:df:8c:
         65:81:f0:66:2e:b7:a7:cb:27:8f:83:e2:64:fb:71:b8:63:5c:
         11:7f:4c:34:39:72:24:a7:81:61:a7:cd:b7:3d:ba:5a:d1:a8:
         aa:92:84:42:fc:16:a3:02:f8:d0:da:fe:9a:f4:b3:2e:1b:e2:
         46:d5:ac:2c:9a:a2:a6:d9:fe:98:09:f8:58:46:97:6d:76:a3:
         00:2b:b3:01:7f:a8:10:2c:8f:6a:b9:09:c9:db:ab:40:14:15:
         f6:6c:3e:60:f6:d8:99:33:e2:89:bd:e7:11:12:7b:57:4e:f1:
         a5:b1:13:f0:3d:50:fc:87:22:95:65:4f:5c:47:45:0f:2e:29:
         1a:9b:e9:e3:83:af:d6:d5:b4:eb:d4:a6:b8:b3:ab:a7:5d:f3:
         50:31:e4:c5:94:c6:27:84:80:8a:3c:b0:05:4e:af:49:99:d9:
         7e:e2:f2:d0:21:b7:25:e0:f4:17:8e:e6:fd:1b:86:66:25:7e:
         d9:3e:aa:79:b3:ac:5b:9b:d8:76:fc:ae:4d:66:09:15:18:01:
         b0:fd:16:65:25:c3:c2:c4:f2:42:66:8f:64:e1:f6:52:64:a6:
         55:10:56:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:09:03 2025 by rpki-client