Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F40AADD9C3A2CB7ADB90AFE235A6092B23824D5EF00503F30B65187B2B22F321/0/323830333a663334303a3a2f33322d3438203d3e203134373534.roa
File:                     323830333a663334303a3a2f33322d3438203d3e203134373534.roa (raw, json)
Hash identifier:          ce1lWx4uOEsa75wmZeolEigAANvxL50LBkRPF6NXHXE=
Subject key identifier:   9B:99:C8:7A:32:FF:32:A6:86:2D:1D:92:79:84:1A:47:77:6A:B5:D2
Certificate issuer:       /CN=AD316BC50E186BC4D6EED8B1A71E2F7FAA5F953D
Certificate serial:       771914BAF9BEB71F6396DE672FB4DBFF2B11769D
Authority key identifier: AD:31:6B:C5:0E:18:6B:C4:D6:EE:D8:B1:A7:1E:2F:7F:AA:5F:95:3D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AD316BC50E186BC4D6EED8B1A71E2F7FAA5F953D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F40AADD9C3A2CB7ADB90AFE235A6092B23824D5EF00503F30B65187B2B22F321/0/323830333a663334303a3a2f33322d3438203d3e203134373534.roa
Signing time:             Tue 04 Feb 2025 18:25:56 +0000
ROA not before:           Tue 04 Feb 2025 18:20:56 +0000
ROA not after:            Tue 03 Feb 2026 18:25:56 +0000
asID:                     14754
IP address blocks:        2803:f340::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F40AADD9C3A2CB7ADB90AFE235A6092B23824D5EF00503F30B65187B2B22F321/0/AD316BC50E186BC4D6EED8B1A71E2F7FAA5F953D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F40AADD9C3A2CB7ADB90AFE235A6092B23824D5EF00503F30B65187B2B22F321/0/AD316BC50E186BC4D6EED8B1A71E2F7FAA5F953D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AD316BC50E186BC4D6EED8B1A71E2F7FAA5F953D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 01:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:19:14:ba:f9:be:b7:1f:63:96:de:67:2f:b4:db:ff:2b:11:76:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD316BC50E186BC4D6EED8B1A71E2F7FAA5F953D
        Validity
            Not Before: Feb  4 18:20:56 2025 GMT
            Not After : Feb  3 18:25:56 2026 GMT
        Subject: CN=9B99C87A32FF32A6862D1D9279841A47776AB5D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:e7:b2:41:35:56:2b:74:30:f9:89:a3:b3:64:
                    5f:10:1f:98:05:aa:8b:55:2a:52:da:11:21:96:5a:
                    d9:d0:26:dd:c5:ac:b8:02:79:76:2d:a9:b1:ff:a5:
                    0b:f6:4b:52:dd:97:85:2e:13:60:b0:81:41:5c:69:
                    2a:6b:f4:fa:3c:6b:ab:a5:c1:e8:e8:25:4f:71:15:
                    21:db:75:70:e5:8b:20:ea:74:0c:22:a9:b8:00:de:
                    f0:05:e4:69:28:4f:f3:d6:7b:2d:41:2a:62:ac:8b:
                    7c:4c:c2:4e:e3:ec:5b:ba:66:54:fd:b7:45:0b:3d:
                    cc:fe:7d:51:b4:7f:ce:c7:6f:9c:bb:11:35:31:76:
                    e8:c0:66:db:aa:26:0c:c1:c4:9a:b8:7f:57:16:72:
                    24:08:e8:0d:80:9a:67:7f:65:bd:6e:f4:e2:de:a0:
                    e1:2a:99:a3:cf:07:8c:4d:b7:8a:29:c5:18:2f:79:
                    ed:dd:7a:74:3f:c3:d3:dc:fb:85:1c:54:a7:82:c7:
                    f3:8b:ba:14:f4:11:56:e6:32:15:03:ac:13:b0:d7:
                    62:6e:8d:e2:2c:9a:fc:96:b5:d7:78:b1:ff:20:8c:
                    ed:de:7f:8d:8b:7f:b7:dc:f5:dd:f5:f7:e3:16:df:
                    2d:df:59:60:51:73:ba:f9:6c:9d:f2:cf:4a:ed:f6:
                    df:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:99:C8:7A:32:FF:32:A6:86:2D:1D:92:79:84:1A:47:77:6A:B5:D2
            X509v3 Authority Key Identifier:
                keyid:AD:31:6B:C5:0E:18:6B:C4:D6:EE:D8:B1:A7:1E:2F:7F:AA:5F:95:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F40AADD9C3A2CB7ADB90AFE235A6092B23824D5EF00503F30B65187B2B22F321/0/AD316BC50E186BC4D6EED8B1A71E2F7FAA5F953D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AD316BC50E186BC4D6EED8B1A71E2F7FAA5F953D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F40AADD9C3A2CB7ADB90AFE235A6092B23824D5EF00503F30B65187B2B22F321/0/323830333a663334303a3a2f33322d3438203d3e203134373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f340::/32

    Signature Algorithm: sha256WithRSAEncryption
         70:6b:9d:84:47:2b:fa:5d:ed:6a:e6:9f:8a:2a:b8:ab:0d:f6:
         7e:8a:71:ed:f4:6a:51:29:f4:3b:dd:71:20:c4:d1:01:75:7a:
         56:fa:f7:63:45:a5:e0:65:a1:cf:5b:92:90:0d:0b:a5:db:58:
         00:32:44:5e:da:92:84:08:b2:b8:29:25:43:34:0a:0c:23:a6:
         77:7f:29:85:8c:be:e2:f7:33:af:43:1a:9c:c1:c2:cf:fd:f4:
         c2:b8:0c:4c:6a:75:62:9c:70:2b:db:f4:f5:6f:a7:a9:a1:1a:
         de:d3:9f:11:ac:bd:db:a0:72:0d:d1:07:6e:dc:d3:8b:d5:93:
         40:4f:92:8d:1a:a0:0c:d8:72:5e:39:f4:1d:ce:b0:45:9d:13:
         5c:e5:f6:64:ba:1c:1e:37:80:f9:6e:4c:0e:e4:c2:78:9b:da:
         6f:4c:1c:24:d4:3b:81:2f:7b:81:f9:36:ce:2a:3a:c1:5d:5d:
         59:43:dd:53:74:eb:8f:b4:3a:01:5f:ae:c3:06:49:24:92:da:
         bf:5c:14:a2:f8:53:07:4a:e0:2d:e2:ec:2f:97:f5:d1:9f:6a:
         d1:c7:22:1a:83:5c:8e:9e:7a:6b:17:02:30:54:1c:ed:01:f1:
         49:39:a2:c1:81:dd:a6:de:80:15:c4:a0:63:2a:6e:23:44:68:
         33:de:18:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 21:06:51 2025 by rpki-client