Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C32D00BBF178D23F8C38F55F812B3B9051FE0328FD3C26DB95C5641ACE9DFB5E/0/323030313a313230353a3a2f33322d3332203d3e20323732333835.roa
File:                     323030313a313230353a3a2f33322d3332203d3e20323732333835.roa (raw, json)
Hash identifier:          //rRI1LuswIH0HKXdi/uVOr1jAjW1A50WSszW1IVhkw=
Subject key identifier:   D8:F8:BC:F4:AF:48:F7:6D:3E:53:5C:6F:0B:51:CB:5D:57:F1:9E:DC
Certificate issuer:       /CN=B2B94FF4E0943FED16547B6895C82B19BF25C4C5
Certificate serial:       0952616DA0479FF7002781F4F713C0D5414984BA
Authority key identifier: B2:B9:4F:F4:E0:94:3F:ED:16:54:7B:68:95:C8:2B:19:BF:25:C4:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B2B94FF4E0943FED16547B6895C82B19BF25C4C5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C32D00BBF178D23F8C38F55F812B3B9051FE0328FD3C26DB95C5641ACE9DFB5E/0/323030313a313230353a3a2f33322d3332203d3e20323732333835.roa
Signing time:             Sat 21 Jun 2025 01:23:02 +0000
ROA not before:           Sat 21 Jun 2025 01:18:02 +0000
ROA not after:            Sat 20 Jun 2026 01:23:02 +0000
asID:                     272385
IP address blocks:        2001:1205::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C32D00BBF178D23F8C38F55F812B3B9051FE0328FD3C26DB95C5641ACE9DFB5E/0/B2B94FF4E0943FED16547B6895C82B19BF25C4C5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C32D00BBF178D23F8C38F55F812B3B9051FE0328FD3C26DB95C5641ACE9DFB5E/0/B2B94FF4E0943FED16547B6895C82B19BF25C4C5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B2B94FF4E0943FED16547B6895C82B19BF25C4C5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 18:57:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:52:61:6d:a0:47:9f:f7:00:27:81:f4:f7:13:c0:d5:41:49:84:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2B94FF4E0943FED16547B6895C82B19BF25C4C5
        Validity
            Not Before: Jun 21 01:18:02 2025 GMT
            Not After : Jun 20 01:23:02 2026 GMT
        Subject: CN=D8F8BCF4AF48F76D3E535C6F0B51CB5D57F19EDC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:34:6e:87:11:b0:d2:4e:e2:63:66:e5:51:2b:
                    ea:05:ab:4b:f7:71:d9:83:f9:ba:a9:71:9e:21:42:
                    e7:f3:95:77:d1:26:e1:7e:0a:74:10:ab:e6:55:db:
                    6d:bf:b7:a8:1e:21:63:f5:ff:1e:91:d7:96:af:09:
                    08:db:f7:dc:3a:a6:0b:1e:ec:30:77:c4:8c:ee:1d:
                    ca:4b:da:28:31:4e:ea:c8:fc:28:84:c8:1d:62:0b:
                    f9:15:b6:72:58:85:68:2e:37:b4:ec:f5:d8:03:0d:
                    21:bd:90:de:fb:77:7c:5d:5e:b9:80:80:ed:9c:47:
                    35:79:03:b2:c1:8c:1f:23:48:e3:46:52:b1:ca:4d:
                    39:b2:d0:6a:d8:5b:2b:c4:d9:99:23:0c:5f:af:fd:
                    f9:51:7c:d7:ea:af:d5:f8:7f:57:4e:3d:54:0e:aa:
                    72:ad:24:81:5e:0d:33:5b:73:ca:ca:f5:78:8d:1d:
                    aa:1c:21:c3:72:86:62:07:d6:20:f3:9a:8c:53:5b:
                    bf:cd:83:d1:c2:be:f4:9d:f7:43:5a:63:25:b6:b6:
                    6c:96:7d:a6:41:ae:69:91:d6:b5:14:e3:5b:aa:51:
                    51:3a:ad:0a:8c:aa:e6:c2:e4:cb:97:9c:7e:1f:89:
                    57:8f:25:e2:d5:d2:f8:bf:0f:73:5c:02:e8:4c:e0:
                    3c:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:F8:BC:F4:AF:48:F7:6D:3E:53:5C:6F:0B:51:CB:5D:57:F1:9E:DC
            X509v3 Authority Key Identifier:
                keyid:B2:B9:4F:F4:E0:94:3F:ED:16:54:7B:68:95:C8:2B:19:BF:25:C4:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C32D00BBF178D23F8C38F55F812B3B9051FE0328FD3C26DB95C5641ACE9DFB5E/0/B2B94FF4E0943FED16547B6895C82B19BF25C4C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B2B94FF4E0943FED16547B6895C82B19BF25C4C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C32D00BBF178D23F8C38F55F812B3B9051FE0328FD3C26DB95C5641ACE9DFB5E/0/323030313a313230353a3a2f33322d3332203d3e20323732333835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1205::/32

    Signature Algorithm: sha256WithRSAEncryption
         5d:b2:f0:55:90:3b:fd:71:d5:07:e6:a2:a8:1d:81:21:53:9e:
         25:92:e7:07:90:a5:22:a4:8d:9b:df:2d:da:1c:d5:03:00:be:
         0b:3e:b4:1c:ac:ea:08:5f:cf:3c:cc:ff:1a:57:2f:54:0a:b6:
         9c:c1:d3:9d:4b:51:a2:7a:33:e7:b1:d2:bd:88:2b:e4:a3:7e:
         df:5c:50:fa:99:37:e4:f1:0a:bd:96:6b:c6:ba:a0:4e:1f:27:
         9e:18:45:e0:a8:18:98:b9:c5:ba:57:71:af:65:dd:52:e0:eb:
         30:a4:d3:d3:8f:a5:29:26:14:d7:8f:7a:fc:96:3e:82:6f:dc:
         85:64:bc:f2:f4:ff:e1:46:7d:e2:0d:97:d8:3b:b9:fd:f6:3e:
         a0:1a:04:77:8d:cc:c7:47:a9:2e:78:ea:13:9f:2c:a3:f8:6e:
         fb:70:89:cb:bc:86:c4:bf:76:49:90:4e:59:93:4a:ea:30:72:
         5c:f6:4b:82:1e:fc:45:b0:61:1c:47:9d:29:dd:3c:14:ea:88:
         94:a8:c6:f9:a1:b8:79:27:00:4b:1d:6c:d6:b4:86:69:dd:79:
         a7:7e:bd:c0:60:9b:82:79:ab:1e:e2:91:2d:0f:43:43:6d:28:
         c2:ae:40:14:c4:61:bc:48:b3:0e:54:ee:11:de:37:19:e0:dc:
         23:38:5b:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 09:56:04 2025 by rpki-client