Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CBDB24010B86A3FE880591945C772EAD110B2197A8B77548052388D83A679ED6/0/323830313a31333a653030303a3a2f34382d3438203d3e20323633383034.roa
File:                     323830313a31333a653030303a3a2f34382d3438203d3e20323633383034.roa (raw, json)
Hash identifier:          LSZ8wwIjJqg8Y8+PKi4enCdi9iva3Zy1NFRn+ojHAyw=
Subject key identifier:   2D:56:2D:9A:6B:46:23:75:04:41:03:D6:AD:35:D1:A9:5B:61:A7:0F
Certificate issuer:       /CN=BCC9449CE0FB26785CBE4A60D9D5514E9E177AF8
Certificate serial:       6ECBD2DB351E34C0B8A6ED83973FCD19B20454E5
Authority key identifier: BC:C9:44:9C:E0:FB:26:78:5C:BE:4A:60:D9:D5:51:4E:9E:17:7A:F8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC9449CE0FB26785CBE4A60D9D5514E9E177AF8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CBDB24010B86A3FE880591945C772EAD110B2197A8B77548052388D83A679ED6/0/323830313a31333a653030303a3a2f34382d3438203d3e20323633383034.roa
Signing time:             Tue 04 Feb 2025 18:56:23 +0000
ROA not before:           Tue 04 Feb 2025 18:51:23 +0000
ROA not after:            Tue 03 Feb 2026 18:56:23 +0000
asID:                     263804
IP address blocks:        2801:13:e000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CBDB24010B86A3FE880591945C772EAD110B2197A8B77548052388D83A679ED6/0/BCC9449CE0FB26785CBE4A60D9D5514E9E177AF8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CBDB24010B86A3FE880591945C772EAD110B2197A8B77548052388D83A679ED6/0/BCC9449CE0FB26785CBE4A60D9D5514E9E177AF8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC9449CE0FB26785CBE4A60D9D5514E9E177AF8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:cb:d2:db:35:1e:34:c0:b8:a6:ed:83:97:3f:cd:19:b2:04:54:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCC9449CE0FB26785CBE4A60D9D5514E9E177AF8
        Validity
            Not Before: Feb  4 18:51:23 2025 GMT
            Not After : Feb  3 18:56:23 2026 GMT
        Subject: CN=2D562D9A6B462375044103D6AD35D1A95B61A70F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:e8:a2:60:65:26:2d:cf:31:33:09:b5:67:f3:
                    12:13:1d:ab:75:bb:f0:28:59:d5:c3:65:74:d8:41:
                    f5:68:a8:86:b6:b9:f4:19:78:5b:5d:1b:6e:3a:bb:
                    8b:ca:c5:04:65:a3:75:9d:80:ce:b0:99:5c:48:3a:
                    6b:28:ae:c6:b6:74:37:82:0b:ad:30:e0:24:38:76:
                    a5:94:da:18:b0:14:32:67:45:2b:91:02:40:b9:e7:
                    99:1d:ad:c3:c7:1c:7b:38:90:0d:49:1f:42:ea:26:
                    9c:76:c6:b7:cb:c8:f2:5a:25:f7:be:e0:d9:3a:e3:
                    ea:fd:93:89:9b:fa:b7:82:3d:7e:eb:07:95:b1:9e:
                    89:f1:0f:c6:23:e5:dd:02:7c:57:8f:db:b2:b8:90:
                    6d:40:c2:f6:c4:46:bf:cb:d8:1c:33:36:07:50:bd:
                    fa:86:95:5d:eb:51:bb:4b:a5:78:a4:73:6b:e8:63:
                    e3:c3:1b:1e:7e:12:ea:b3:4c:e3:0f:e1:4e:24:dc:
                    f0:3a:9e:62:e2:ac:98:28:6f:5f:74:c1:6b:f0:ec:
                    13:8a:13:54:cb:ae:59:87:92:16:fc:0d:1b:97:79:
                    9f:c8:4e:c5:31:55:d5:be:9f:c2:8d:76:d6:f4:14:
                    d9:55:24:a0:ba:6f:95:91:64:10:f9:5e:fe:52:6a:
                    e5:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:56:2D:9A:6B:46:23:75:04:41:03:D6:AD:35:D1:A9:5B:61:A7:0F
            X509v3 Authority Key Identifier:
                keyid:BC:C9:44:9C:E0:FB:26:78:5C:BE:4A:60:D9:D5:51:4E:9E:17:7A:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CBDB24010B86A3FE880591945C772EAD110B2197A8B77548052388D83A679ED6/0/BCC9449CE0FB26785CBE4A60D9D5514E9E177AF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC9449CE0FB26785CBE4A60D9D5514E9E177AF8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CBDB24010B86A3FE880591945C772EAD110B2197A8B77548052388D83A679ED6/0/323830313a31333a653030303a3a2f34382d3438203d3e20323633383034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:13:e000::/48

    Signature Algorithm: sha256WithRSAEncryption
         37:48:09:34:3c:33:e7:4b:df:e1:01:12:4f:20:af:ed:69:1c:
         8d:56:1e:62:30:a8:10:97:89:5f:c7:af:da:17:3e:58:6f:6f:
         11:36:ed:50:7d:93:4a:33:e2:26:ad:7d:ab:16:e1:62:a2:81:
         08:22:de:df:22:83:b9:a9:65:f0:82:44:71:2f:39:e3:e4:b8:
         88:0d:3a:14:e8:88:9f:b7:e6:bb:f0:71:43:0f:a4:f7:e7:93:
         c0:33:a6:af:41:c9:8d:cb:ff:67:52:74:28:ab:ad:cd:a5:83:
         1f:d4:1d:4c:d3:e0:17:ed:57:7d:4f:03:64:06:85:04:f7:74:
         37:5f:38:c7:34:b0:24:4c:00:76:4c:23:11:bb:47:5e:df:06:
         ea:56:e3:89:57:a3:a5:f4:87:03:92:de:8f:ec:83:dd:b1:84:
         ab:29:67:61:6a:24:d7:cb:cf:62:fd:5b:4c:21:d2:6d:de:b0:
         a2:40:52:0b:9b:19:48:32:52:ff:8c:e4:ce:75:4f:24:1d:49:
         72:7c:36:ca:3b:c6:12:14:b2:0d:6e:d4:db:2e:aa:ef:fa:e5:
         ef:f5:e0:4b:86:57:87:a5:97:9c:4e:86:3e:45:ca:f0:3a:ab:
         bd:37:25:b9:cc:9e:94:26:18:00:5d:b9:ff:45:e4:8a:17:86:
         b0:2b:46:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:12:00 2025 by rpki-client