Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F23301A603E627A876D246E387A187C252007ED947D0581CD15D81064A159A09/0/323830313a31333a323030303a3a2f34382d3438203d3e20323633323431.roa
File:                     323830313a31333a323030303a3a2f34382d3438203d3e20323633323431.roa (raw, json)
Hash identifier:          EPXIiLCyPgQhLyvuAqgLTQ/7MKLSlz7+nWHCcqZNOu0=
Subject key identifier:   C3:CD:72:30:79:9E:85:6D:D9:6F:65:A3:90:3E:1B:F9:0F:CD:81:98
Certificate issuer:       /CN=B723DA031356C8D23A9AE55421F6FA8B94D76B24
Certificate serial:       672E49A15AF0D265175D2ACD9DAF3C24FAE507E4
Authority key identifier: B7:23:DA:03:13:56:C8:D2:3A:9A:E5:54:21:F6:FA:8B:94:D7:6B:24
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B723DA031356C8D23A9AE55421F6FA8B94D76B24.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F23301A603E627A876D246E387A187C252007ED947D0581CD15D81064A159A09/0/323830313a31333a323030303a3a2f34382d3438203d3e20323633323431.roa
Signing time:             Tue 04 Feb 2025 18:10:03 +0000
ROA not before:           Tue 04 Feb 2025 18:05:03 +0000
ROA not after:            Tue 03 Feb 2026 18:10:03 +0000
asID:                     263241
IP address blocks:        2801:13:2000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F23301A603E627A876D246E387A187C252007ED947D0581CD15D81064A159A09/0/B723DA031356C8D23A9AE55421F6FA8B94D76B24.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F23301A603E627A876D246E387A187C252007ED947D0581CD15D81064A159A09/0/B723DA031356C8D23A9AE55421F6FA8B94D76B24.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B723DA031356C8D23A9AE55421F6FA8B94D76B24.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:2e:49:a1:5a:f0:d2:65:17:5d:2a:cd:9d:af:3c:24:fa:e5:07:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B723DA031356C8D23A9AE55421F6FA8B94D76B24
        Validity
            Not Before: Feb  4 18:05:03 2025 GMT
            Not After : Feb  3 18:10:03 2026 GMT
        Subject: CN=C3CD7230799E856DD96F65A3903E1BF90FCD8198
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:1f:c1:a3:0c:55:33:86:f2:f6:ad:3e:c9:fd:
                    a7:99:c1:f2:72:21:0d:b0:e6:df:a3:3b:c6:3a:66:
                    62:86:0b:6d:37:75:cc:0c:0a:37:c2:92:d9:cc:c5:
                    8a:f6:15:0f:4d:26:ee:a0:63:d3:ce:36:84:26:e2:
                    48:74:8e:04:fe:f1:2e:18:da:63:cd:b5:02:19:e2:
                    9c:18:ef:6e:b8:d5:11:77:2b:7d:62:c5:0e:5f:83:
                    60:77:eb:8f:4a:73:14:3c:e3:83:f9:55:fd:fd:f7:
                    f9:1f:7f:d8:6e:3b:96:10:02:8f:ed:7a:a9:40:00:
                    6c:61:4d:c5:a0:8a:bc:4b:2e:32:81:53:de:a4:df:
                    70:1a:e5:07:82:67:b5:25:7d:c8:3e:8d:94:b1:71:
                    8d:5e:87:a8:5d:05:7f:ba:55:1e:93:dd:34:97:c6:
                    8b:6b:c6:25:90:ea:cf:c5:af:7f:65:80:9b:fa:26:
                    0c:cf:b0:5f:1d:00:e6:91:54:69:21:fe:a0:f0:9e:
                    28:81:10:07:db:04:7b:4e:ab:f4:f3:d6:d5:d4:4d:
                    6a:58:42:4d:db:c5:95:96:16:74:0e:b8:b1:13:04:
                    22:37:f5:5b:29:76:7c:b8:0d:33:20:d2:d1:ec:fb:
                    42:f2:43:38:8e:ab:fb:6a:4e:71:a0:3c:b7:53:52:
                    99:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:CD:72:30:79:9E:85:6D:D9:6F:65:A3:90:3E:1B:F9:0F:CD:81:98
            X509v3 Authority Key Identifier:
                keyid:B7:23:DA:03:13:56:C8:D2:3A:9A:E5:54:21:F6:FA:8B:94:D7:6B:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F23301A603E627A876D246E387A187C252007ED947D0581CD15D81064A159A09/0/B723DA031356C8D23A9AE55421F6FA8B94D76B24.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B723DA031356C8D23A9AE55421F6FA8B94D76B24.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F23301A603E627A876D246E387A187C252007ED947D0581CD15D81064A159A09/0/323830313a31333a323030303a3a2f34382d3438203d3e20323633323431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:13:2000::/48

    Signature Algorithm: sha256WithRSAEncryption
         2c:be:73:53:11:d3:f8:1d:dc:97:d0:9f:dd:19:df:cf:96:21:
         1e:48:ab:62:72:0c:44:ca:11:81:84:e8:9c:59:28:5d:7a:07:
         88:ac:a7:1b:c9:1b:8e:ac:79:40:ab:9e:0f:8e:34:dd:0d:51:
         8f:43:2d:a1:59:31:51:4a:94:d1:be:08:a8:d7:07:39:e6:f5:
         cc:41:a6:62:0d:c8:23:d9:87:4f:c8:fa:1b:38:39:a1:d2:8c:
         d7:1a:11:29:1f:45:d5:67:c0:50:a6:4c:88:cd:2f:63:a0:61:
         7e:0f:16:31:fb:cb:c5:3b:a0:07:7d:e1:d4:24:fd:91:4f:43:
         41:33:6b:1e:62:f7:a7:7c:ce:69:2b:04:23:4f:15:1b:97:0e:
         39:d4:59:cb:0c:ae:54:85:29:bf:b6:5d:dc:7d:25:d8:3e:1d:
         a5:04:32:98:96:ee:34:71:00:29:92:0b:ba:4f:f0:60:df:ec:
         0d:8a:5a:88:c1:80:28:6a:7f:a7:69:1e:47:f9:3f:48:03:f4:
         95:7b:c0:0e:93:96:d3:d5:e2:52:ed:2c:d3:d3:51:ea:56:7b:
         9f:97:fc:b2:a4:1c:1a:bf:06:92:8c:21:ae:5f:54:67:a1:18:
         8d:48:9a:26:92:21:60:47:8c:04:2d:d4:d1:d3:29:24:a5:78:
         36:26:54:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:56:06 2025 by rpki-client