Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D932B69CBE34140327D3802970BFFFBE9112C0C84B4AD58C28D44E1578550061/0/323830333a316135303a3a2f33322d3332203d3e20323639393830.roa
File:                     323830333a316135303a3a2f33322d3332203d3e20323639393830.roa (raw, json)
Hash identifier:          yjxjeOB1Q5ACKTd4vciwlK8fAjFY+aglQpK8KDxgyfY=
Subject key identifier:   D0:24:D7:D0:B0:2F:A7:E3:0C:B5:63:52:9F:46:D6:E4:E3:C5:D3:06
Certificate issuer:       /CN=B19DCDB64E506EAC5C80E9A6A0E22F0DF25D723C
Certificate serial:       35C0A4D95A956917CD30C44BA137B02DEA4EEB4A
Authority key identifier: B1:9D:CD:B6:4E:50:6E:AC:5C:80:E9:A6:A0:E2:2F:0D:F2:5D:72:3C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B19DCDB64E506EAC5C80E9A6A0E22F0DF25D723C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D932B69CBE34140327D3802970BFFFBE9112C0C84B4AD58C28D44E1578550061/0/323830333a316135303a3a2f33322d3332203d3e20323639393830.roa
Signing time:             Tue 03 Jun 2025 14:30:01 +0000
ROA not before:           Tue 03 Jun 2025 14:25:01 +0000
ROA not after:            Tue 02 Jun 2026 14:30:01 +0000
asID:                     269980
IP address blocks:        2803:1a50::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D932B69CBE34140327D3802970BFFFBE9112C0C84B4AD58C28D44E1578550061/0/B19DCDB64E506EAC5C80E9A6A0E22F0DF25D723C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D932B69CBE34140327D3802970BFFFBE9112C0C84B4AD58C28D44E1578550061/0/B19DCDB64E506EAC5C80E9A6A0E22F0DF25D723C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B19DCDB64E506EAC5C80E9A6A0E22F0DF25D723C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 13 Jun 2025 08:43:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:c0:a4:d9:5a:95:69:17:cd:30:c4:4b:a1:37:b0:2d:ea:4e:eb:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B19DCDB64E506EAC5C80E9A6A0E22F0DF25D723C
        Validity
            Not Before: Jun  3 14:25:01 2025 GMT
            Not After : Jun  2 14:30:01 2026 GMT
        Subject: CN=D024D7D0B02FA7E30CB563529F46D6E4E3C5D306
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c2:61:3d:7b:92:6b:3a:ad:79:c8:1b:dc:04:
                    bd:17:21:92:37:17:75:a4:52:05:2a:10:46:bf:3a:
                    39:80:2b:b4:64:fb:42:a7:ed:58:d5:c5:9a:f0:b8:
                    54:d1:92:fa:a7:50:a1:e3:ad:0a:2d:bc:a8:11:e5:
                    a7:21:1d:66:53:b4:d1:3d:73:31:5f:b9:27:2a:8c:
                    70:29:93:36:b4:56:56:1b:16:89:c2:6f:fb:10:46:
                    b7:c7:6d:2e:fb:79:ea:9d:6f:a3:15:c3:7b:67:a0:
                    13:30:bb:cd:91:0b:95:36:b8:ba:e2:61:c6:4e:3e:
                    0b:06:28:c8:6e:94:f6:49:9f:7a:0a:ac:f0:51:81:
                    82:82:30:0e:1a:c5:d3:ef:33:88:db:c7:8f:22:f2:
                    f3:33:e6:a2:00:39:f1:35:f1:f3:73:7f:65:0f:74:
                    71:31:f8:18:5d:d0:c4:82:2c:45:a7:b7:00:28:79:
                    97:04:37:97:83:56:35:e3:62:58:89:b7:25:d2:d2:
                    86:03:d6:ca:70:43:64:86:fa:71:eb:73:ea:8f:a5:
                    df:c7:09:d9:85:db:8f:e6:3a:30:50:98:8f:b1:b1:
                    b7:cc:61:77:90:b8:83:e4:73:a3:b3:f6:b6:3d:97:
                    a4:64:bf:61:71:af:b9:8b:b4:ee:86:7d:20:00:25:
                    ab:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:24:D7:D0:B0:2F:A7:E3:0C:B5:63:52:9F:46:D6:E4:E3:C5:D3:06
            X509v3 Authority Key Identifier:
                keyid:B1:9D:CD:B6:4E:50:6E:AC:5C:80:E9:A6:A0:E2:2F:0D:F2:5D:72:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D932B69CBE34140327D3802970BFFFBE9112C0C84B4AD58C28D44E1578550061/0/B19DCDB64E506EAC5C80E9A6A0E22F0DF25D723C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B19DCDB64E506EAC5C80E9A6A0E22F0DF25D723C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D932B69CBE34140327D3802970BFFFBE9112C0C84B4AD58C28D44E1578550061/0/323830333a316135303a3a2f33322d3332203d3e20323639393830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1a50::/32

    Signature Algorithm: sha256WithRSAEncryption
         ce:ee:c6:58:18:de:e4:42:08:6f:4e:6f:78:c8:66:e9:57:0d:
         e3:53:72:53:e2:e0:5b:c4:44:85:dc:ec:8e:2b:12:25:fc:da:
         dd:59:d5:aa:8f:98:b3:33:84:65:27:35:8e:62:bf:e7:21:1b:
         5e:41:df:c1:68:77:94:f9:2a:b9:f6:45:ec:1f:bf:e9:13:b3:
         07:bb:6c:10:91:30:f9:20:2e:b5:92:dd:ac:d1:3d:9a:1e:7c:
         5c:8b:ba:8f:d6:97:88:b5:97:38:95:9e:4f:88:47:78:e0:72:
         d5:33:13:67:7c:e5:16:16:1b:5b:01:8e:76:be:07:c9:fa:0f:
         85:02:f1:a5:0d:ec:94:ed:c9:39:d6:35:89:31:62:48:15:7f:
         1c:5d:b5:17:ce:73:c8:8c:26:d6:3f:b3:94:7b:3f:72:5e:ee:
         ac:fb:fc:31:af:21:0f:5a:81:f9:72:61:13:65:2c:c7:57:3c:
         37:81:1b:30:dc:ba:6b:34:61:db:d8:75:68:80:22:c3:0b:0e:
         9e:7e:be:05:08:b9:a6:39:31:e1:19:36:73:c3:ed:d9:21:da:
         2f:bc:50:1f:ef:c2:38:ed:ae:39:4a:77:f8:a2:ae:0d:6b:ea:
         69:a3:8a:79:98:90:cf:b4:1c:da:74:64:69:44:91:1a:38:a3:
         e9:55:fa:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 04:50:23 2025 by rpki-client