Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BF5590544443B30345E096F57B882E70CEBAA45B4D65631AFBBB71D32F233DE1/0/323830333a336539303a3230303a3a2f34302d3430203d3e20323732393233.roa
File:                     323830333a336539303a3230303a3a2f34302d3430203d3e20323732393233.roa (raw, json)
Hash identifier:          RpQGi9GrYVNVU+RZwuS35yVIVf0Aw1pwLP5XeARZ8+0=
Subject key identifier:   B9:04:D3:25:13:5E:A7:37:39:C4:E6:6A:68:B9:49:A3:71:DF:7E:BD
Certificate issuer:       /CN=066347F3B4CE39202F57E5F9BBA727C66DF7D360
Certificate serial:       4B27342632A14718759059D3375485BC35E81964
Authority key identifier: 06:63:47:F3:B4:CE:39:20:2F:57:E5:F9:BB:A7:27:C6:6D:F7:D3:60
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/066347F3B4CE39202F57E5F9BBA727C66DF7D360.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BF5590544443B30345E096F57B882E70CEBAA45B4D65631AFBBB71D32F233DE1/0/323830333a336539303a3230303a3a2f34302d3430203d3e20323732393233.roa
Signing time:             Tue 04 Feb 2025 18:49:24 +0000
ROA not before:           Tue 04 Feb 2025 18:44:24 +0000
ROA not after:            Tue 03 Feb 2026 18:49:24 +0000
asID:                     272923
IP address blocks:        2803:3e90:200::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BF5590544443B30345E096F57B882E70CEBAA45B4D65631AFBBB71D32F233DE1/0/066347F3B4CE39202F57E5F9BBA727C66DF7D360.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BF5590544443B30345E096F57B882E70CEBAA45B4D65631AFBBB71D32F233DE1/0/066347F3B4CE39202F57E5F9BBA727C66DF7D360.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/066347F3B4CE39202F57E5F9BBA727C66DF7D360.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 23:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:27:34:26:32:a1:47:18:75:90:59:d3:37:54:85:bc:35:e8:19:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=066347F3B4CE39202F57E5F9BBA727C66DF7D360
        Validity
            Not Before: Feb  4 18:44:24 2025 GMT
            Not After : Feb  3 18:49:24 2026 GMT
        Subject: CN=B904D325135EA73739C4E66A68B949A371DF7EBD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:15:ac:06:76:27:ea:1c:e2:a8:dc:14:01:08:
                    77:1e:6f:d6:04:54:8f:ea:22:36:32:16:0f:e7:05:
                    a2:64:c5:21:72:6e:b7:bf:8c:c7:76:96:84:fb:7a:
                    02:f1:1d:61:b3:5e:66:3b:ce:7b:77:43:36:71:18:
                    0f:9d:72:9b:60:78:7a:a9:55:7a:5c:2a:1f:b8:c3:
                    98:06:83:cb:79:86:96:3c:d5:66:5a:70:ed:36:64:
                    99:1b:ea:ca:d0:2a:da:60:02:f3:04:0b:c1:ef:cb:
                    70:8f:94:c7:95:28:cd:e9:10:03:fb:21:15:96:37:
                    8d:3a:9b:06:b9:1a:63:20:0f:c3:65:e8:41:1c:54:
                    64:14:5b:b7:8c:c7:1c:07:14:fb:4c:78:8a:5e:53:
                    db:12:40:70:59:25:a2:d8:97:2c:c2:75:b1:a9:ff:
                    3f:c6:82:1f:3e:f9:9c:e9:6d:3c:ec:92:e8:77:35:
                    c5:9f:6b:1c:f7:ee:48:80:2f:2c:e1:29:56:40:2c:
                    a4:00:8f:9e:49:37:07:6d:9b:af:13:dc:41:01:ce:
                    3e:f2:b9:5f:e0:59:e3:9b:f1:83:ef:e7:13:ef:8d:
                    f2:cd:63:16:7d:b4:cc:49:c3:a1:a6:a0:ee:7f:25:
                    ca:76:8b:50:8c:d5:1d:a8:a9:e6:75:9e:e3:5e:90:
                    75:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:04:D3:25:13:5E:A7:37:39:C4:E6:6A:68:B9:49:A3:71:DF:7E:BD
            X509v3 Authority Key Identifier:
                keyid:06:63:47:F3:B4:CE:39:20:2F:57:E5:F9:BB:A7:27:C6:6D:F7:D3:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BF5590544443B30345E096F57B882E70CEBAA45B4D65631AFBBB71D32F233DE1/0/066347F3B4CE39202F57E5F9BBA727C66DF7D360.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/066347F3B4CE39202F57E5F9BBA727C66DF7D360.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BF5590544443B30345E096F57B882E70CEBAA45B4D65631AFBBB71D32F233DE1/0/323830333a336539303a3230303a3a2f34302d3430203d3e20323732393233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3e90:200::/40

    Signature Algorithm: sha256WithRSAEncryption
         5f:f1:c3:4c:e1:08:7d:ec:a5:fa:48:91:7f:af:55:ae:4e:a9:
         d2:eb:ec:3c:7b:b4:1a:f5:31:30:75:53:09:bb:0f:de:0b:62:
         b2:79:35:8e:80:1b:c0:84:10:68:fe:e9:b3:a1:98:09:2b:68:
         3e:67:6b:5d:ef:37:84:d1:84:49:7d:97:45:1a:ba:29:c8:28:
         50:56:9e:5c:b7:57:cb:32:60:08:46:39:f6:6a:09:05:64:65:
         41:41:7f:a3:fd:45:fa:30:0a:67:bd:ed:62:c3:9f:d1:8c:7e:
         2e:b2:20:66:f9:55:7b:09:54:d9:a5:d8:82:b6:13:3f:5c:fe:
         f1:37:3c:80:69:ba:ca:a9:cd:00:45:8b:b7:8f:44:2e:97:aa:
         13:bd:03:2e:81:65:48:10:89:d0:84:5b:ce:50:8e:19:16:c2:
         70:f0:8c:f8:3d:81:ba:6d:43:65:af:11:61:10:de:45:aa:72:
         6e:d7:2b:18:b4:b3:a1:24:04:31:94:03:96:5c:80:32:83:20:
         59:fd:16:b8:b4:ec:34:0b:67:de:74:06:2d:97:f4:d9:f0:df:
         aa:4b:15:f3:fd:78:01:15:a0:9a:bd:0d:57:bc:aa:bc:45:79:
         2d:32:7d:90:c8:b7:89:d5:65:ff:d9:ed:42:f3:1b:0b:2b:e3:
         cb:8b:73:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 10:36:18 2025 by rpki-client