Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C32A8D50921BD87E43FA761FF973EE18169DD40683D0E47F21FE7576E4C359E0/0/323830313a3164613a3a2f34342d3438203d3e20323730303138.roa
File:                     323830313a3164613a3a2f34342d3438203d3e20323730303138.roa (raw, json)
Hash identifier:          bNx20jMhFEU1iVaLpxcvD4IwX+BjbktWSS+MJ0RvPvM=
Subject key identifier:   8F:2D:1F:B0:77:E8:C1:59:D9:03:42:F1:C3:0B:E8:38:31:A6:95:1A
Certificate issuer:       /CN=72B67FDA04246C53AE1C1A7EBE6EF57B4E9C842C
Certificate serial:       46BB17B4E39D2F8AEEDBC70D411B4211C12201A3
Authority key identifier: 72:B6:7F:DA:04:24:6C:53:AE:1C:1A:7E:BE:6E:F5:7B:4E:9C:84:2C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/72B67FDA04246C53AE1C1A7EBE6EF57B4E9C842C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C32A8D50921BD87E43FA761FF973EE18169DD40683D0E47F21FE7576E4C359E0/0/323830313a3164613a3a2f34342d3438203d3e20323730303138.roa
Signing time:             Tue 04 Feb 2025 18:09:01 +0000
ROA not before:           Tue 04 Feb 2025 18:04:01 +0000
ROA not after:            Tue 03 Feb 2026 18:09:01 +0000
asID:                     270018
IP address blocks:        2801:1da::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C32A8D50921BD87E43FA761FF973EE18169DD40683D0E47F21FE7576E4C359E0/0/72B67FDA04246C53AE1C1A7EBE6EF57B4E9C842C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C32A8D50921BD87E43FA761FF973EE18169DD40683D0E47F21FE7576E4C359E0/0/72B67FDA04246C53AE1C1A7EBE6EF57B4E9C842C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/72B67FDA04246C53AE1C1A7EBE6EF57B4E9C842C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 01:50:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:bb:17:b4:e3:9d:2f:8a:ee:db:c7:0d:41:1b:42:11:c1:22:01:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72B67FDA04246C53AE1C1A7EBE6EF57B4E9C842C
        Validity
            Not Before: Feb  4 18:04:01 2025 GMT
            Not After : Feb  3 18:09:01 2026 GMT
        Subject: CN=8F2D1FB077E8C159D90342F1C30BE83831A6951A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:99:4f:51:b7:99:02:d1:6c:94:2c:88:17:90:
                    5a:e7:74:1f:d5:3d:c4:0f:c7:d1:d2:b3:ac:84:04:
                    4a:07:98:45:5b:3c:6b:ac:3c:5e:c0:6a:dd:ef:ea:
                    5d:94:b3:55:7d:32:8a:f7:06:97:93:30:57:f6:7e:
                    e3:96:1b:e1:ed:d0:cd:99:36:ac:97:66:b9:19:04:
                    22:1d:c2:28:5c:dd:97:9a:4f:36:59:08:e1:0c:c8:
                    ba:c9:f5:1f:f9:30:17:1f:96:65:be:56:f7:64:ae:
                    fd:b3:d0:d6:1c:bb:36:66:56:0c:98:f9:b4:ab:f1:
                    67:cd:4a:9e:af:54:ae:5f:ea:64:fb:f7:10:ec:12:
                    df:07:43:7d:f5:04:c5:4c:00:82:d0:12:ce:6b:32:
                    22:1b:36:fd:62:38:f9:67:2c:c8:4d:8f:5f:ea:11:
                    b8:9c:c6:94:58:bb:e4:56:f7:aa:ac:7e:27:16:3f:
                    9e:27:10:b8:d2:a0:04:6f:26:65:a0:82:cb:44:cf:
                    cc:f9:43:bc:50:06:74:80:ee:ee:08:55:5b:f2:64:
                    80:34:b6:43:1c:81:c1:4b:cc:fe:87:bd:9c:31:73:
                    95:29:25:da:4f:1c:c2:a3:7c:20:86:b7:59:be:8b:
                    5d:80:82:6a:cb:0c:34:8a:62:ec:ff:69:88:37:f2:
                    8e:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:2D:1F:B0:77:E8:C1:59:D9:03:42:F1:C3:0B:E8:38:31:A6:95:1A
            X509v3 Authority Key Identifier:
                keyid:72:B6:7F:DA:04:24:6C:53:AE:1C:1A:7E:BE:6E:F5:7B:4E:9C:84:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C32A8D50921BD87E43FA761FF973EE18169DD40683D0E47F21FE7576E4C359E0/0/72B67FDA04246C53AE1C1A7EBE6EF57B4E9C842C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/72B67FDA04246C53AE1C1A7EBE6EF57B4E9C842C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C32A8D50921BD87E43FA761FF973EE18169DD40683D0E47F21FE7576E4C359E0/0/323830313a3164613a3a2f34342d3438203d3e20323730303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1da::/44

    Signature Algorithm: sha256WithRSAEncryption
         a4:a5:22:9f:78:b1:e0:c8:12:58:0d:4c:cf:fe:41:a6:4e:18:
         1e:77:d3:66:b8:32:bd:bb:54:a6:9e:7a:a9:27:a7:35:7d:67:
         e7:44:a1:ba:88:b2:61:ed:ad:35:f3:8b:5a:c5:02:8b:4a:b3:
         78:4f:a1:18:1b:e0:2c:a1:9d:4b:2b:24:e8:b4:59:70:ee:a9:
         51:49:64:27:e8:c6:11:a2:65:0f:67:86:5a:81:b5:71:bd:45:
         0d:76:cf:51:fd:3a:b4:52:78:7b:1a:55:c1:69:31:6d:56:b5:
         c5:3d:80:f8:79:02:62:3c:b6:78:dc:46:7d:14:1b:12:96:36:
         ee:7b:f7:df:a2:c6:da:fa:76:46:54:33:9a:5b:5d:1e:74:b8:
         6e:ce:eb:b5:ce:06:e9:4c:16:97:53:ee:76:51:7d:1e:40:4c:
         13:53:90:d8:a2:c2:99:f3:3a:c7:c7:74:9c:6b:cf:07:64:e9:
         41:ff:f9:48:09:1e:41:08:eb:d5:6b:44:7e:f1:27:2e:e8:64:
         2d:79:7f:5a:ad:a5:93:52:11:92:e4:63:31:e2:cc:2c:44:20:
         d0:1f:8e:62:b8:ca:12:58:f7:95:58:78:78:3f:f6:72:30:b0:
         27:0a:0f:5a:b5:39:36:e4:ed:55:8f:54:1b:e1:81:62:15:87:
         12:09:81:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:10:32 2025 by rpki-client