Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C71E9B6EEE78F12B15E3BEBF954942DBC0CDCA94DA317B83F0CD62B2FDB26ECE/0/323830333a393430303a3a2f33322d3439203d3e203237383339.roa
File:                     323830333a393430303a3a2f33322d3439203d3e203237383339.roa (raw, json)
Hash identifier:          A29ATOWGjGhQj7v77AX470EZdFoQTQuw6LsAxiyx/2s=
Subject key identifier:   8A:4D:FB:EE:BA:01:7B:50:85:CA:78:E7:34:FC:FE:E1:68:4A:64:DB
Certificate issuer:       /CN=21B4A6594D293307A54FC67EA972CF9E807930DF
Certificate serial:       295141C35902A3566FEE25AB0D746198D19ABA15
Authority key identifier: 21:B4:A6:59:4D:29:33:07:A5:4F:C6:7E:A9:72:CF:9E:80:79:30:DF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21B4A6594D293307A54FC67EA972CF9E807930DF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C71E9B6EEE78F12B15E3BEBF954942DBC0CDCA94DA317B83F0CD62B2FDB26ECE/0/323830333a393430303a3a2f33322d3439203d3e203237383339.roa
Signing time:             Tue 04 Feb 2025 18:16:40 +0000
ROA not before:           Tue 04 Feb 2025 18:11:40 +0000
ROA not after:            Tue 03 Feb 2026 18:16:40 +0000
asID:                     27839
IP address blocks:        2803:9400::/32 maxlen: 49
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C71E9B6EEE78F12B15E3BEBF954942DBC0CDCA94DA317B83F0CD62B2FDB26ECE/0/21B4A6594D293307A54FC67EA972CF9E807930DF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C71E9B6EEE78F12B15E3BEBF954942DBC0CDCA94DA317B83F0CD62B2FDB26ECE/0/21B4A6594D293307A54FC67EA972CF9E807930DF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21B4A6594D293307A54FC67EA972CF9E807930DF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:51:41:c3:59:02:a3:56:6f:ee:25:ab:0d:74:61:98:d1:9a:ba:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21B4A6594D293307A54FC67EA972CF9E807930DF
        Validity
            Not Before: Feb  4 18:11:40 2025 GMT
            Not After : Feb  3 18:16:40 2026 GMT
        Subject: CN=8A4DFBEEBA017B5085CA78E734FCFEE1684A64DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:3f:5e:4e:fd:8b:fc:40:8d:d3:95:4b:94:4d:
                    d5:4c:81:bd:af:31:12:b0:4b:88:f3:03:0e:01:41:
                    32:87:d8:5e:55:30:6e:c9:64:b0:9f:1c:f5:52:08:
                    7e:3f:7e:8a:a8:00:10:78:da:7f:cf:36:58:cd:d0:
                    e4:74:c8:55:70:fd:72:e5:a3:3b:66:9b:6d:52:fd:
                    42:a0:5c:72:db:11:66:d4:dd:bb:fc:30:a4:a0:1b:
                    09:21:04:72:74:61:66:4c:f8:5b:2e:db:72:5b:db:
                    a8:25:df:55:40:34:99:db:52:71:90:20:6b:b3:76:
                    21:19:5e:83:cf:36:0f:3a:5c:f3:00:f9:22:51:8f:
                    80:e9:a9:7a:e0:4b:99:23:88:9c:c8:e1:11:ec:1d:
                    62:59:86:c0:e2:96:07:15:d1:97:92:31:6f:9a:87:
                    30:b6:4e:1e:75:a0:c2:79:f7:99:5d:80:5f:e5:b7:
                    48:5c:fa:21:26:6e:65:e1:32:42:dc:3b:4c:9c:6e:
                    a6:d7:b9:ea:f8:29:8f:9c:53:fd:5a:42:f1:73:9b:
                    6a:fc:96:0c:be:36:f6:c1:77:33:fb:d4:f0:ec:c3:
                    49:59:37:c0:e2:66:bb:8b:84:e7:87:40:b8:93:52:
                    fb:51:c5:13:12:30:96:b1:b2:c7:50:4d:d1:cc:1a:
                    0d:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:4D:FB:EE:BA:01:7B:50:85:CA:78:E7:34:FC:FE:E1:68:4A:64:DB
            X509v3 Authority Key Identifier:
                keyid:21:B4:A6:59:4D:29:33:07:A5:4F:C6:7E:A9:72:CF:9E:80:79:30:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C71E9B6EEE78F12B15E3BEBF954942DBC0CDCA94DA317B83F0CD62B2FDB26ECE/0/21B4A6594D293307A54FC67EA972CF9E807930DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21B4A6594D293307A54FC67EA972CF9E807930DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C71E9B6EEE78F12B15E3BEBF954942DBC0CDCA94DA317B83F0CD62B2FDB26ECE/0/323830333a393430303a3a2f33322d3439203d3e203237383339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9400::/32

    Signature Algorithm: sha256WithRSAEncryption
         87:92:45:c9:c6:20:24:fc:b7:5d:3e:78:d1:ed:86:3f:5a:64:
         21:5c:20:77:f9:af:09:62:69:b6:00:82:9b:a5:7d:d8:43:6f:
         31:46:4d:0a:98:48:d9:33:d4:8a:df:92:45:f1:33:3c:66:58:
         53:01:aa:85:39:e3:61:c2:e9:a1:ce:48:bd:f4:fc:f3:83:00:
         e5:92:a4:8a:d1:ae:73:b5:30:58:08:4e:e0:60:7c:24:91:27:
         22:5d:1d:b7:3b:b3:03:11:ee:3d:6a:1f:ca:62:34:cc:22:bc:
         23:33:a0:4c:89:7e:39:fb:4b:46:86:fa:74:d3:bb:da:fb:cf:
         5c:1a:8b:bc:af:76:1d:e2:e2:8e:e0:f5:24:cc:9d:0a:08:47:
         4d:64:0b:c3:94:0b:81:11:8c:71:26:38:27:00:8e:d0:20:c9:
         8f:f4:7b:d7:67:62:ad:1a:80:c0:ab:e0:4c:6f:d9:0d:e0:f0:
         a8:4d:26:c2:88:9b:d0:a8:f7:fa:11:3f:da:73:b1:7b:11:d1:
         9c:17:bd:1b:95:8e:6c:30:b1:0d:0e:56:20:6d:ef:3f:92:7d:
         fe:07:b8:b7:87:6d:98:e2:24:68:c1:2e:81:3c:88:b2:56:23:
         ec:2d:d0:1b:08:f9:c9:bd:eb:c5:c7:0a:90:1f:69:5f:d4:91:
         eb:42:88:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:32:47 2025 by rpki-client