Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BB9511EBA9E6BCCA39A0C407DBEBE3EEF1F1026FE4366A6831E1B9043706886D/0/323830333a336232303a3a2f33322d3438203d3e203532333431.roa
File:                     323830333a336232303a3a2f33322d3438203d3e203532333431.roa (raw, json)
Hash identifier:          fThQs6XPP9GBXIx/GQcX6pB6oahUwiln/3+wrqw737c=
Subject key identifier:   AF:B2:17:38:22:09:B1:6C:47:C1:DB:30:FB:F9:FB:FB:34:06:BE:7D
Certificate issuer:       /CN=DD83A38C1B926CD5F2F9741F8AFEE7C3179D6603
Certificate serial:       45DA58A1854246CE718DEF0CC968073586A69F4C
Authority key identifier: DD:83:A3:8C:1B:92:6C:D5:F2:F9:74:1F:8A:FE:E7:C3:17:9D:66:03
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DD83A38C1B926CD5F2F9741F8AFEE7C3179D6603.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BB9511EBA9E6BCCA39A0C407DBEBE3EEF1F1026FE4366A6831E1B9043706886D/0/323830333a336232303a3a2f33322d3438203d3e203532333431.roa
Signing time:             Tue 04 Feb 2025 20:00:02 +0000
ROA not before:           Tue 04 Feb 2025 19:55:02 +0000
ROA not after:            Tue 03 Feb 2026 20:00:02 +0000
asID:                     52341
IP address blocks:        2803:3b20::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BB9511EBA9E6BCCA39A0C407DBEBE3EEF1F1026FE4366A6831E1B9043706886D/0/DD83A38C1B926CD5F2F9741F8AFEE7C3179D6603.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BB9511EBA9E6BCCA39A0C407DBEBE3EEF1F1026FE4366A6831E1B9043706886D/0/DD83A38C1B926CD5F2F9741F8AFEE7C3179D6603.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DD83A38C1B926CD5F2F9741F8AFEE7C3179D6603.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:da:58:a1:85:42:46:ce:71:8d:ef:0c:c9:68:07:35:86:a6:9f:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DD83A38C1B926CD5F2F9741F8AFEE7C3179D6603
        Validity
            Not Before: Feb  4 19:55:02 2025 GMT
            Not After : Feb  3 20:00:02 2026 GMT
        Subject: CN=AFB217382209B16C47C1DB30FBF9FBFB3406BE7D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:25:3d:e4:d1:38:c9:cf:6a:dc:8a:cd:12:32:
                    ed:d6:d6:10:2c:17:c1:9d:37:a4:97:97:36:62:6b:
                    2f:9d:2c:ed:63:d5:8f:f9:b3:06:70:3a:6c:b2:c8:
                    86:63:03:c7:af:91:2b:cd:98:b9:13:2c:b1:9e:b8:
                    9c:3c:50:b4:6c:2d:76:36:fd:be:70:ed:fb:63:86:
                    6c:b1:50:7f:bf:0c:b6:28:fe:57:1f:11:fc:a6:fb:
                    2f:54:0b:54:29:a7:84:a2:4d:56:3e:8d:06:31:17:
                    9c:59:11:4d:e9:cc:1d:ac:f3:15:fe:cb:86:db:74:
                    71:51:f1:03:19:74:bd:93:70:82:73:29:c4:2b:47:
                    be:af:6a:4e:83:33:6f:b6:72:d9:30:de:70:76:ba:
                    1b:95:57:fb:da:8f:7c:cc:99:39:47:d9:c5:93:f2:
                    c8:12:6f:b4:a9:f7:85:a5:d7:2f:20:11:ba:12:f5:
                    46:01:a2:8d:de:1c:8f:0d:f1:03:1c:1a:25:08:e4:
                    82:6f:19:c0:78:d2:2f:65:09:f6:e4:1e:ed:3f:0a:
                    8d:fd:05:a8:eb:ef:03:d1:d6:95:62:84:25:76:f9:
                    40:e2:0c:57:5b:b4:f5:8b:a2:cc:7e:2f:96:84:78:
                    2a:5a:0d:ae:92:56:0c:d6:be:af:49:38:56:ae:03:
                    c9:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:B2:17:38:22:09:B1:6C:47:C1:DB:30:FB:F9:FB:FB:34:06:BE:7D
            X509v3 Authority Key Identifier:
                keyid:DD:83:A3:8C:1B:92:6C:D5:F2:F9:74:1F:8A:FE:E7:C3:17:9D:66:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BB9511EBA9E6BCCA39A0C407DBEBE3EEF1F1026FE4366A6831E1B9043706886D/0/DD83A38C1B926CD5F2F9741F8AFEE7C3179D6603.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DD83A38C1B926CD5F2F9741F8AFEE7C3179D6603.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BB9511EBA9E6BCCA39A0C407DBEBE3EEF1F1026FE4366A6831E1B9043706886D/0/323830333a336232303a3a2f33322d3438203d3e203532333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3b20::/32

    Signature Algorithm: sha256WithRSAEncryption
         84:12:1f:fa:1f:11:3c:d5:10:d0:83:29:a5:e1:30:df:87:04:
         dc:86:a5:ee:87:62:fc:31:ef:e2:cc:2e:71:ae:a9:b6:3b:20:
         cd:f4:c1:45:5e:45:b1:dd:43:e1:c4:54:ca:f4:43:d2:e4:6d:
         22:fd:a7:f2:75:36:1c:8f:df:4f:e1:50:ca:7e:25:cc:e6:51:
         96:a9:e1:f8:e9:8e:78:9f:4a:6f:b6:6c:4d:8b:0e:06:75:54:
         82:20:13:67:01:64:82:07:32:7a:eb:e9:73:e7:51:e9:a9:31:
         d3:2a:36:0a:f7:00:4f:d9:6f:74:53:56:f0:24:f4:bc:06:d0:
         20:9a:77:c9:6f:56:66:c7:ac:a5:b0:74:fe:99:48:58:d3:82:
         29:1b:9a:0c:56:74:2c:02:7c:8b:8e:4b:36:67:34:49:5c:83:
         b6:16:54:21:16:02:dd:66:9b:c4:50:a0:df:82:c6:a3:9b:2a:
         ef:c1:e4:96:84:74:89:c1:fc:13:40:b1:f7:1f:c0:ce:de:c2:
         d0:30:1c:d9:47:51:3e:f6:6e:0f:c5:e9:3e:20:e6:4d:06:24:
         a4:5f:5b:e8:20:38:df:7f:ee:7f:4e:89:ca:70:e7:0b:f6:df:
         3e:3f:3c:cc:e2:71:29:97:a5:84:14:1c:ae:2e:18:5f:88:fc:
         4f:b4:c7:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:59:51 2025 by rpki-client