Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BBF53C8DE4ABD1D5E6B5CBE67FC7AC179E24B68E23837A483B3EB4D595604C8A/0/323830333a336238303a633032303a3a2f34382d3438203d3e203331313238.roa
File:                     323830333a336238303a633032303a3a2f34382d3438203d3e203331313238.roa (raw, json)
Hash identifier:          rRX/xZuvK3TdSMOkkgglvOkEbxQG8DhSVl1Jczc7xqo=
Subject key identifier:   B6:99:9E:38:7D:6C:43:79:02:06:A5:2D:F8:34:E5:5A:DE:67:34:7D
Certificate issuer:       /CN=6E90D630525F8D2B3768945D2D18476B244030E8
Certificate serial:       6BC95162E4E53E550C6C06B70F93831EAC652B78
Authority key identifier: 6E:90:D6:30:52:5F:8D:2B:37:68:94:5D:2D:18:47:6B:24:40:30:E8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6E90D630525F8D2B3768945D2D18476B244030E8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BBF53C8DE4ABD1D5E6B5CBE67FC7AC179E24B68E23837A483B3EB4D595604C8A/0/323830333a336238303a633032303a3a2f34382d3438203d3e203331313238.roa
Signing time:             Tue 22 Apr 2025 04:40:00 +0000
ROA not before:           Tue 22 Apr 2025 04:35:00 +0000
ROA not after:            Tue 21 Apr 2026 04:40:00 +0000
asID:                     31128
IP address blocks:        2803:3b80:c020::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BBF53C8DE4ABD1D5E6B5CBE67FC7AC179E24B68E23837A483B3EB4D595604C8A/0/6E90D630525F8D2B3768945D2D18476B244030E8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BBF53C8DE4ABD1D5E6B5CBE67FC7AC179E24B68E23837A483B3EB4D595604C8A/0/6E90D630525F8D2B3768945D2D18476B244030E8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6E90D630525F8D2B3768945D2D18476B244030E8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 30 Apr 2025 05:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:c9:51:62:e4:e5:3e:55:0c:6c:06:b7:0f:93:83:1e:ac:65:2b:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6E90D630525F8D2B3768945D2D18476B244030E8
        Validity
            Not Before: Apr 22 04:35:00 2025 GMT
            Not After : Apr 21 04:40:00 2026 GMT
        Subject: CN=B6999E387D6C43790206A52DF834E55ADE67347D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:55:fc:11:6a:c5:04:69:93:8a:ea:0f:fa:40:
                    08:12:2f:03:83:12:4a:39:68:ec:73:1d:16:c2:62:
                    a9:20:0d:a3:07:3b:f0:0a:9b:f5:8b:f2:7b:2a:a6:
                    7e:70:7f:a5:fe:a2:f3:16:fa:70:99:a3:03:31:73:
                    21:16:df:2c:5a:c9:b5:70:c3:68:37:e2:41:2e:5c:
                    a3:e1:8c:5c:41:cc:3c:75:52:85:aa:49:a7:62:b0:
                    ef:25:af:06:74:3a:cb:9c:a7:04:2f:12:bd:63:3b:
                    b9:08:61:11:5c:d9:91:a5:64:d1:71:ee:aa:d5:ab:
                    b5:9f:00:a7:be:71:fe:36:87:b9:2f:ee:43:a7:8d:
                    08:e2:59:14:dc:f4:3b:d8:84:34:1d:b6:5c:c8:49:
                    61:f0:32:e2:88:61:b5:8c:9d:22:be:33:97:fb:f2:
                    55:b1:6b:ac:aa:ac:0b:5a:e9:d9:65:fd:7b:9c:a1:
                    f6:61:32:0d:56:fd:e3:72:00:6d:d9:d1:be:7e:f4:
                    b0:fe:b0:32:56:93:99:43:7c:b9:57:11:da:c0:05:
                    79:d6:2a:c1:84:95:60:bb:b3:aa:7e:70:0c:9c:fa:
                    7e:74:d5:26:8d:36:e3:2f:af:11:9f:06:2e:af:6a:
                    6b:11:55:5b:32:33:27:fa:b1:e8:59:f6:e0:10:d0:
                    49:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:99:9E:38:7D:6C:43:79:02:06:A5:2D:F8:34:E5:5A:DE:67:34:7D
            X509v3 Authority Key Identifier:
                keyid:6E:90:D6:30:52:5F:8D:2B:37:68:94:5D:2D:18:47:6B:24:40:30:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BBF53C8DE4ABD1D5E6B5CBE67FC7AC179E24B68E23837A483B3EB4D595604C8A/0/6E90D630525F8D2B3768945D2D18476B244030E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6E90D630525F8D2B3768945D2D18476B244030E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BBF53C8DE4ABD1D5E6B5CBE67FC7AC179E24B68E23837A483B3EB4D595604C8A/0/323830333a336238303a633032303a3a2f34382d3438203d3e203331313238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3b80:c020::/48

    Signature Algorithm: sha256WithRSAEncryption
         b7:d0:e0:03:20:00:80:96:4b:42:91:0d:ae:38:1f:52:c3:7e:
         b9:2d:b7:2d:7a:61:b0:10:fa:b2:d6:2f:6b:8b:10:c3:4f:03:
         3a:66:39:f7:d3:5f:10:97:2c:e8:92:fc:1e:c3:f6:00:4e:32:
         f9:95:e5:87:6e:35:39:e7:44:d7:69:ba:08:b0:42:29:ab:ce:
         81:6a:88:eb:62:6d:da:ee:0c:3c:5b:bb:f2:cb:4b:c3:85:44:
         31:f0:6f:87:e0:6b:f3:26:04:08:15:5a:2c:a4:a7:58:32:10:
         a4:a0:59:bd:71:75:a0:c2:91:35:95:c5:b6:59:e7:cf:2a:7a:
         ae:d7:46:3b:e2:30:0a:a6:6b:d2:b6:99:cf:ab:5b:d7:14:3a:
         80:49:24:58:df:5f:78:4c:e6:dd:c5:5c:9c:d1:8b:f2:54:53:
         69:cd:1b:b5:49:01:ba:8c:73:cd:15:29:2c:71:90:18:90:69:
         c3:ad:df:2e:54:eb:c4:0c:c6:63:83:47:b8:a6:1d:39:52:4e:
         61:ae:2f:e0:f7:a3:63:f5:0f:89:e8:82:07:c2:8f:f4:8c:ee:
         88:96:47:7f:af:c8:df:8d:bd:72:0c:e5:5e:aa:5a:59:58:c8:
         a1:e5:b8:be:c1:2f:db:84:46:70:49:66:6f:53:ae:28:77:88:
         41:b4:5a:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:37:06 2025 by rpki-client on console.sobornost.net