Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C0628711B23CA72AF445EEAC587157FF997ED0A06D172B8A12CDDE399A05FE90/0/323830313a3132303a3a2f33322d3332203d3e203237373930.roa
File:                     323830313a3132303a3a2f33322d3332203d3e203237373930.roa (raw, json)
Hash identifier:          IGULfTSokK15UotyC4PkKPIdUjKo3UFq9kauPTluTHQ=
Subject key identifier:   5F:A5:43:2E:71:CB:0E:A9:A1:BD:F3:46:20:43:94:4B:3C:E6:6B:8C
Certificate issuer:       /CN=9C0595683D0FFF0E900C6C19AF389CA806D73B88
Certificate serial:       46A397172673842BE0CAF15BACF02543F12E0A62
Authority key identifier: 9C:05:95:68:3D:0F:FF:0E:90:0C:6C:19:AF:38:9C:A8:06:D7:3B:88
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9C0595683D0FFF0E900C6C19AF389CA806D73B88.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C0628711B23CA72AF445EEAC587157FF997ED0A06D172B8A12CDDE399A05FE90/0/323830313a3132303a3a2f33322d3332203d3e203237373930.roa
Signing time:             Tue 04 Feb 2025 18:10:35 +0000
ROA not before:           Tue 04 Feb 2025 18:05:35 +0000
ROA not after:            Tue 03 Feb 2026 18:10:35 +0000
asID:                     27790
IP address blocks:        2801:120::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C0628711B23CA72AF445EEAC587157FF997ED0A06D172B8A12CDDE399A05FE90/0/9C0595683D0FFF0E900C6C19AF389CA806D73B88.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C0628711B23CA72AF445EEAC587157FF997ED0A06D172B8A12CDDE399A05FE90/0/9C0595683D0FFF0E900C6C19AF389CA806D73B88.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9C0595683D0FFF0E900C6C19AF389CA806D73B88.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:a3:97:17:26:73:84:2b:e0:ca:f1:5b:ac:f0:25:43:f1:2e:0a:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C0595683D0FFF0E900C6C19AF389CA806D73B88
        Validity
            Not Before: Feb  4 18:05:35 2025 GMT
            Not After : Feb  3 18:10:35 2026 GMT
        Subject: CN=5FA5432E71CB0EA9A1BDF3462043944B3CE66B8C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ed:1f:64:80:bd:5c:64:e2:49:15:71:1d:17:
                    33:d6:24:ad:d2:69:bb:20:d1:28:f4:9a:48:43:c0:
                    1c:af:2e:34:6b:c3:07:72:6c:08:78:29:8f:4d:6c:
                    4e:68:dc:66:33:ee:d9:12:f4:f5:cc:a9:4b:28:45:
                    cf:25:98:08:88:5d:34:2f:56:6e:bf:ac:7c:3f:52:
                    19:78:54:aa:9b:6f:64:9f:18:f8:bb:d4:98:09:02:
                    fd:ca:6b:42:e7:7c:89:89:e8:a8:9e:10:60:10:32:
                    0c:f8:db:cb:e5:ab:e3:69:5c:48:8b:5d:c7:ff:bf:
                    33:d4:2f:8b:f2:06:15:88:5f:66:03:6d:44:13:87:
                    f0:fb:3b:37:6d:80:02:d0:25:aa:ab:3a:09:a1:89:
                    5d:9a:49:9f:72:99:86:96:35:e1:25:53:e0:96:d3:
                    d1:18:e4:4a:0c:63:25:3b:ef:9a:44:2b:ee:36:2c:
                    8e:17:69:32:fa:cf:01:01:95:b4:43:a5:e1:7a:5d:
                    56:4c:f5:5e:74:e2:49:a8:c4:88:cc:46:c2:88:17:
                    16:27:1d:c6:b1:38:28:05:00:e7:80:ab:be:00:08:
                    65:0b:80:00:6a:fb:50:a8:ee:60:81:77:44:aa:23:
                    5a:52:a2:9e:51:71:75:11:1d:68:44:3a:09:60:9f:
                    fa:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:A5:43:2E:71:CB:0E:A9:A1:BD:F3:46:20:43:94:4B:3C:E6:6B:8C
            X509v3 Authority Key Identifier:
                keyid:9C:05:95:68:3D:0F:FF:0E:90:0C:6C:19:AF:38:9C:A8:06:D7:3B:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C0628711B23CA72AF445EEAC587157FF997ED0A06D172B8A12CDDE399A05FE90/0/9C0595683D0FFF0E900C6C19AF389CA806D73B88.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9C0595683D0FFF0E900C6C19AF389CA806D73B88.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C0628711B23CA72AF445EEAC587157FF997ED0A06D172B8A12CDDE399A05FE90/0/323830313a3132303a3a2f33322d3332203d3e203237373930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:120::/32

    Signature Algorithm: sha256WithRSAEncryption
         48:37:08:84:ee:92:32:f2:22:f8:ce:43:db:bc:73:27:e6:6f:
         5b:6c:b8:08:d4:b8:9b:7e:2c:ea:fe:ca:f3:da:75:e5:67:a2:
         ec:b2:39:ec:1f:e2:76:bb:b6:ed:bb:e5:5c:d5:77:9d:3a:1c:
         82:a8:85:01:6b:91:a0:5f:04:db:07:60:81:80:9a:11:13:9d:
         2a:29:d1:5c:14:70:d5:09:d9:58:17:b1:cd:f0:51:f6:f1:ed:
         f1:b3:19:f8:8a:d3:2e:c7:02:03:77:f1:74:8c:a7:c9:33:6b:
         4f:66:c0:35:8f:9b:11:2d:8b:d1:e5:62:bf:92:f1:ee:a1:4f:
         9e:ee:37:6d:4b:30:e6:40:a5:99:e6:9a:46:32:d9:34:b5:98:
         9f:75:28:b2:64:0b:44:cc:d3:8c:1c:66:19:07:c2:44:21:af:
         fc:7c:12:16:ef:2e:ab:be:9b:ad:3d:5c:b7:86:61:6b:96:5d:
         94:19:85:49:d9:32:65:18:08:10:84:4b:61:5d:f9:e7:38:9e:
         23:fb:52:54:59:5a:de:1e:6e:fa:8d:2a:7f:7a:77:99:bc:b2:
         8c:a9:e6:52:82:25:64:2e:22:e2:49:08:70:6f:71:bc:ad:d5:
         d1:99:dc:35:a8:09:8a:73:c6:97:6c:de:e1:d7:ae:2a:bd:71:
         60:80:50:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:06:21 2025 by rpki-client