Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CB49828355CAE78B8A7162EC32F371E65CD840A8223C3054A33B5C7DAE817E23/0/323830333a663532303a3a2f33322d3332203d3e20323636363935.roa
File:                     323830333a663532303a3a2f33322d3332203d3e20323636363935.roa (raw, json)
Hash identifier:          Jz9l++h+Q5ySZsde2g2nHxqBnS+LLHoermhB+X99QIM=
Subject key identifier:   10:96:17:E4:C7:95:19:CB:83:DF:66:4F:A4:89:FE:77:BA:73:1F:7A
Certificate issuer:       /CN=9E6E566CCFB396F50AA0EE8B6011CD17E7AF2E57
Certificate serial:       2E6121E8F45E1A9235842EAED9FFB6A60D0F1B5D
Authority key identifier: 9E:6E:56:6C:CF:B3:96:F5:0A:A0:EE:8B:60:11:CD:17:E7:AF:2E:57
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9E6E566CCFB396F50AA0EE8B6011CD17E7AF2E57.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CB49828355CAE78B8A7162EC32F371E65CD840A8223C3054A33B5C7DAE817E23/0/323830333a663532303a3a2f33322d3332203d3e20323636363935.roa
Signing time:             Tue 04 Feb 2025 18:34:49 +0000
ROA not before:           Tue 04 Feb 2025 18:29:49 +0000
ROA not after:            Tue 03 Feb 2026 18:34:49 +0000
asID:                     266695
IP address blocks:        2803:f520::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CB49828355CAE78B8A7162EC32F371E65CD840A8223C3054A33B5C7DAE817E23/0/9E6E566CCFB396F50AA0EE8B6011CD17E7AF2E57.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CB49828355CAE78B8A7162EC32F371E65CD840A8223C3054A33B5C7DAE817E23/0/9E6E566CCFB396F50AA0EE8B6011CD17E7AF2E57.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9E6E566CCFB396F50AA0EE8B6011CD17E7AF2E57.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 08:39:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:61:21:e8:f4:5e:1a:92:35:84:2e:ae:d9:ff:b6:a6:0d:0f:1b:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9E6E566CCFB396F50AA0EE8B6011CD17E7AF2E57
        Validity
            Not Before: Feb  4 18:29:49 2025 GMT
            Not After : Feb  3 18:34:49 2026 GMT
        Subject: CN=109617E4C79519CB83DF664FA489FE77BA731F7A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:7e:eb:5f:33:b4:68:ba:47:70:f5:98:87:25:
                    63:1c:f3:df:08:44:5f:55:ed:01:93:60:2b:7c:8b:
                    b7:1a:67:36:16:79:a1:7a:4b:f5:ba:33:0d:f6:cf:
                    53:c8:47:1f:4b:15:d6:b4:4c:bf:1f:50:c6:cc:14:
                    8d:b4:35:33:78:66:02:1a:9a:be:06:8b:a9:8d:5e:
                    85:27:a2:ba:15:af:75:85:de:b9:16:3d:53:83:77:
                    0e:54:bd:f1:25:99:c9:25:0b:35:54:a5:20:4a:8b:
                    2a:1b:df:b2:9b:b0:8f:b9:ff:99:96:73:cd:4e:29:
                    07:d2:f1:a9:2d:e6:b5:5f:18:8f:b2:35:8f:86:6b:
                    d3:2f:a8:e0:0e:16:56:97:c4:72:0f:99:f0:6c:9e:
                    14:55:f6:08:61:f8:e3:b6:1e:f3:85:41:5b:f3:c4:
                    4b:fb:eb:e8:d7:73:0f:2a:de:f7:4c:22:de:37:1a:
                    b5:a2:02:d0:ca:d5:35:14:f9:db:aa:15:a2:66:3b:
                    57:2f:28:7b:dd:52:da:46:97:6d:4c:9b:23:a8:88:
                    da:63:8a:2e:6a:fb:62:63:a1:0f:4c:34:fa:47:d0:
                    73:44:f4:6c:a6:55:4c:22:6d:e6:7d:52:72:60:29:
                    a0:fd:1a:57:7d:22:e0:1b:2a:21:3b:64:c2:27:37:
                    72:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:96:17:E4:C7:95:19:CB:83:DF:66:4F:A4:89:FE:77:BA:73:1F:7A
            X509v3 Authority Key Identifier:
                keyid:9E:6E:56:6C:CF:B3:96:F5:0A:A0:EE:8B:60:11:CD:17:E7:AF:2E:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CB49828355CAE78B8A7162EC32F371E65CD840A8223C3054A33B5C7DAE817E23/0/9E6E566CCFB396F50AA0EE8B6011CD17E7AF2E57.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9E6E566CCFB396F50AA0EE8B6011CD17E7AF2E57.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CB49828355CAE78B8A7162EC32F371E65CD840A8223C3054A33B5C7DAE817E23/0/323830333a663532303a3a2f33322d3332203d3e20323636363935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f520::/32

    Signature Algorithm: sha256WithRSAEncryption
         7c:0b:db:cf:1a:cb:1a:54:43:34:1b:12:51:4a:88:63:6c:64:
         15:ba:39:46:36:e9:d0:0b:20:39:4c:f2:c3:ab:95:77:99:f5:
         68:68:96:34:71:c1:4a:19:97:49:5e:56:6d:1f:c5:ac:7b:e8:
         c2:f5:5e:b8:a9:d3:4a:37:56:bb:3d:82:f8:84:0f:ae:50:29:
         2f:f9:6f:af:91:0f:31:93:93:20:d1:bd:47:19:a2:80:02:2d:
         98:1b:8f:4e:e3:93:ed:d1:a2:bd:45:6d:66:34:4a:bf:f3:f4:
         ac:17:36:1e:47:4d:5b:cf:22:1e:12:9a:91:0b:a8:e2:6b:f4:
         5c:fb:f9:6c:d6:34:ac:77:14:7e:89:d0:1b:75:20:82:72:f2:
         a6:12:ce:f0:c0:c0:6a:37:21:7f:29:d0:9a:dc:21:ec:6b:49:
         39:a8:db:c6:88:f3:6c:54:30:35:90:d1:d2:15:b9:e6:89:c0:
         ca:7e:f7:39:7a:b7:76:86:70:3a:ff:3c:56:58:4e:bf:4d:d3:
         78:40:e2:a1:26:84:a6:c5:22:44:08:eb:ab:39:2b:96:a6:e3:
         9f:bc:e6:62:2a:5f:03:b4:59:2b:f2:6b:e3:09:0f:a4:3e:66:
         92:d1:62:bb:5c:78:44:55:5f:78:76:94:77:32:62:10:8f:84:
         99:24:bf:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:27:19 2025 by rpki-client