Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D2DA8776F7A6C1CC6339173891BE65FFB62F46B6961F04AA7C949B4A76DD60B4/0/323830333a336339303a3a2f33322d3634203d3e20323733303139.roa
File:                     323830333a336339303a3a2f33322d3634203d3e20323733303139.roa (raw, json)
Hash identifier:          mrg/lKFcf2/MCHrm+b/2LRazWBgwqeYUvuZt4Yx5SbI=
Subject key identifier:   BB:DC:C7:D7:0D:EC:9B:F0:F6:5B:B3:F6:CB:B8:BD:C4:0A:50:83:42
Certificate issuer:       /CN=B60DE235AFFBEBC89B74335E1C207C7C284BA7A5
Certificate serial:       340DE3517FFCB3CA7BDED283EC93D53B5332F84B
Authority key identifier: B6:0D:E2:35:AF:FB:EB:C8:9B:74:33:5E:1C:20:7C:7C:28:4B:A7:A5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B60DE235AFFBEBC89B74335E1C207C7C284BA7A5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D2DA8776F7A6C1CC6339173891BE65FFB62F46B6961F04AA7C949B4A76DD60B4/0/323830333a336339303a3a2f33322d3634203d3e20323733303139.roa
Signing time:             Tue 04 Feb 2025 18:53:16 +0000
ROA not before:           Tue 04 Feb 2025 18:48:16 +0000
ROA not after:            Tue 03 Feb 2026 18:53:16 +0000
asID:                     273019
IP address blocks:        2803:3c90::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D2DA8776F7A6C1CC6339173891BE65FFB62F46B6961F04AA7C949B4A76DD60B4/0/B60DE235AFFBEBC89B74335E1C207C7C284BA7A5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D2DA8776F7A6C1CC6339173891BE65FFB62F46B6961F04AA7C949B4A76DD60B4/0/B60DE235AFFBEBC89B74335E1C207C7C284BA7A5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B60DE235AFFBEBC89B74335E1C207C7C284BA7A5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 04:07:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:0d:e3:51:7f:fc:b3:ca:7b:de:d2:83:ec:93:d5:3b:53:32:f8:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B60DE235AFFBEBC89B74335E1C207C7C284BA7A5
        Validity
            Not Before: Feb  4 18:48:16 2025 GMT
            Not After : Feb  3 18:53:16 2026 GMT
        Subject: CN=BBDCC7D70DEC9BF0F65BB3F6CBB8BDC40A508342
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:b3:30:3b:be:76:8a:09:90:35:82:e0:b8:8f:
                    41:33:78:29:c5:60:c0:9d:69:02:c8:cc:82:84:0e:
                    e4:df:ce:f2:d2:bb:06:ae:76:b5:63:67:9a:ad:95:
                    29:d9:b2:ac:82:b8:f8:88:0f:63:6e:5c:d6:d5:bf:
                    5c:45:65:6b:b9:b6:e0:84:0b:75:ad:e3:c8:8b:b4:
                    ae:b2:a8:5e:9c:fd:65:fb:9d:10:bc:ef:82:41:4e:
                    72:70:27:59:1c:05:fb:6c:1b:28:56:58:60:97:33:
                    20:3b:c5:16:be:44:fd:74:58:08:67:9f:dc:44:90:
                    2e:bf:d6:28:88:0a:86:a8:d8:86:67:24:f5:41:fe:
                    d4:22:9f:fa:9d:5d:a4:e0:ec:bc:d4:c6:9a:45:6a:
                    9c:3c:41:a0:d1:a2:4b:92:ea:9e:52:25:24:3d:6c:
                    62:b2:80:56:b1:6e:41:fb:68:04:c2:9d:e4:ba:16:
                    e4:f2:6c:e4:db:c9:10:5a:45:c3:ca:2d:ce:43:c5:
                    c3:3b:ad:9e:b8:4a:00:f1:eb:77:96:27:c8:b2:f8:
                    7c:c9:f6:82:46:83:4f:6b:38:fd:ba:b2:75:b4:27:
                    a9:c4:44:af:b1:45:bf:60:62:e2:d2:82:ad:aa:41:
                    c5:cc:b2:ea:3c:fd:a0:e8:77:e5:88:45:aa:3c:a4:
                    62:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:DC:C7:D7:0D:EC:9B:F0:F6:5B:B3:F6:CB:B8:BD:C4:0A:50:83:42
            X509v3 Authority Key Identifier:
                keyid:B6:0D:E2:35:AF:FB:EB:C8:9B:74:33:5E:1C:20:7C:7C:28:4B:A7:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D2DA8776F7A6C1CC6339173891BE65FFB62F46B6961F04AA7C949B4A76DD60B4/0/B60DE235AFFBEBC89B74335E1C207C7C284BA7A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B60DE235AFFBEBC89B74335E1C207C7C284BA7A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D2DA8776F7A6C1CC6339173891BE65FFB62F46B6961F04AA7C949B4A76DD60B4/0/323830333a336339303a3a2f33322d3634203d3e20323733303139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3c90::/32

    Signature Algorithm: sha256WithRSAEncryption
         92:f9:3c:07:89:34:66:37:0e:4a:5e:1d:34:67:17:11:4f:08:
         d6:ab:05:db:ea:e8:d2:fd:ae:e3:97:9d:95:10:a0:a3:2a:e6:
         43:c9:be:ad:b3:aa:c7:00:61:ad:14:19:ef:3e:7a:24:32:44:
         c3:1a:43:1e:5e:8a:52:cb:02:7b:42:4b:fa:35:bc:06:34:b5:
         2d:fb:ec:b7:c0:3d:d7:fa:8e:44:c1:94:c1:9e:d4:6f:92:6c:
         a7:7b:41:6b:fd:67:b1:52:ce:df:b9:1d:c6:af:39:c2:6f:c5:
         78:7a:24:ba:0f:2b:0f:81:e9:7a:3d:85:9f:82:b5:66:03:21:
         c1:05:80:1d:47:f5:eb:53:b3:cd:00:8f:83:e0:14:45:56:26:
         0d:ac:cd:50:75:66:2a:93:61:24:90:e7:c9:57:24:11:4c:bf:
         e6:45:07:98:ff:4a:4b:e1:de:51:e7:ad:d5:ae:78:d0:3b:0e:
         6b:cf:6f:94:3b:63:1f:3d:3a:3b:9c:f5:cc:bf:04:db:ba:65:
         6c:1a:b0:f8:cc:42:2f:fa:e6:ce:1b:4c:0a:6c:6e:58:89:ea:
         91:1a:09:c7:5d:b2:87:bb:7e:7c:02:9a:56:d7:8d:18:c1:17:
         a3:4f:f0:4f:46:49:be:62:a6:59:69:d1:58:1d:38:79:96:3d:
         4b:39:1c:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:09:08 2025 by rpki-client