Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8B5CCFD453A229B9F6C4385704CBADA93C76B2F2844CCD556677C12D8C7A97C1/0/323830333a6565303a3a2f34382d3438203d3e20323639393738.roa
File:                     323830333a6565303a3a2f34382d3438203d3e20323639393738.roa (raw, json)
Hash identifier:          sj3ZnFLk6pHThFku3Qhor4EupdUIFnWsHjc9vn57HGE=
Subject key identifier:   B9:EB:34:12:E7:F1:7F:0E:3C:75:F5:96:3F:9F:2F:62:AD:0A:8B:BF
Certificate issuer:       /CN=6A3360A7AAF500169AA1D3966EF9EDFA825A544E
Certificate serial:       1DCB7BA3C566232A4251980C1DD9EA1DCD09ADC3
Authority key identifier: 6A:33:60:A7:AA:F5:00:16:9A:A1:D3:96:6E:F9:ED:FA:82:5A:54:4E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A3360A7AAF500169AA1D3966EF9EDFA825A544E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8B5CCFD453A229B9F6C4385704CBADA93C76B2F2844CCD556677C12D8C7A97C1/0/323830333a6565303a3a2f34382d3438203d3e20323639393738.roa
Signing time:             Tue 04 Feb 2025 19:57:57 +0000
ROA not before:           Tue 04 Feb 2025 19:52:57 +0000
ROA not after:            Tue 03 Feb 2026 19:57:57 +0000
asID:                     269978
IP address blocks:        2803:ee0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8B5CCFD453A229B9F6C4385704CBADA93C76B2F2844CCD556677C12D8C7A97C1/0/6A3360A7AAF500169AA1D3966EF9EDFA825A544E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8B5CCFD453A229B9F6C4385704CBADA93C76B2F2844CCD556677C12D8C7A97C1/0/6A3360A7AAF500169AA1D3966EF9EDFA825A544E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A3360A7AAF500169AA1D3966EF9EDFA825A544E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 18:55:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:cb:7b:a3:c5:66:23:2a:42:51:98:0c:1d:d9:ea:1d:cd:09:ad:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A3360A7AAF500169AA1D3966EF9EDFA825A544E
        Validity
            Not Before: Feb  4 19:52:57 2025 GMT
            Not After : Feb  3 19:57:57 2026 GMT
        Subject: CN=B9EB3412E7F17F0E3C75F5963F9F2F62AD0A8BBF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:3a:50:a1:43:4e:27:16:f9:16:63:97:98:66:
                    e6:cc:de:c0:fd:3b:0e:96:56:d8:17:93:69:d0:54:
                    64:3e:5c:c6:54:f6:9f:6d:66:d0:f7:8d:28:7b:da:
                    a4:b0:ec:10:fc:23:d9:94:2a:e2:50:ae:7e:0e:40:
                    83:ef:83:26:7a:07:80:0b:d7:ba:cb:a8:7a:91:28:
                    ea:ff:7d:e1:97:f5:25:f3:25:32:0f:e3:f3:b8:5f:
                    05:d4:4e:86:ff:b4:21:7e:d2:d9:9d:8a:66:bd:99:
                    e4:92:5f:4e:99:ff:59:a8:8b:13:d6:87:dc:45:59:
                    01:03:4d:86:1e:9e:11:91:3b:4a:37:38:ed:a3:34:
                    81:5a:d9:c6:5b:e4:58:dd:8b:a7:01:59:c9:76:66:
                    cc:1f:e4:d6:96:21:74:92:f1:7f:36:4a:ce:03:4c:
                    ac:23:3d:fe:e3:38:20:e7:32:8a:48:c3:8a:d8:00:
                    a6:b8:c2:69:8e:1d:23:bf:fa:c2:a0:cc:df:81:4a:
                    d2:d6:92:24:e4:2b:bb:20:1c:f3:03:87:cb:42:b5:
                    82:e2:2d:89:65:e0:e9:77:f0:cd:54:24:d4:32:71:
                    ab:05:9b:a9:43:5b:c8:3c:5b:3c:4d:fa:ee:94:87:
                    41:9b:5e:32:0a:0e:09:c6:b4:bc:e0:18:26:24:2b:
                    86:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:EB:34:12:E7:F1:7F:0E:3C:75:F5:96:3F:9F:2F:62:AD:0A:8B:BF
            X509v3 Authority Key Identifier:
                keyid:6A:33:60:A7:AA:F5:00:16:9A:A1:D3:96:6E:F9:ED:FA:82:5A:54:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8B5CCFD453A229B9F6C4385704CBADA93C76B2F2844CCD556677C12D8C7A97C1/0/6A3360A7AAF500169AA1D3966EF9EDFA825A544E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A3360A7AAF500169AA1D3966EF9EDFA825A544E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8B5CCFD453A229B9F6C4385704CBADA93C76B2F2844CCD556677C12D8C7A97C1/0/323830333a6565303a3a2f34382d3438203d3e20323639393738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ee0::/48

    Signature Algorithm: sha256WithRSAEncryption
         9b:50:55:37:b2:b4:63:b3:3c:f9:7c:a0:12:9a:ad:04:64:61:
         d9:de:d0:3f:0b:c2:a8:23:8a:92:4f:66:97:a4:a1:b4:5d:95:
         60:b1:92:e5:10:aa:28:0b:fe:32:74:e3:87:94:38:1a:2a:4d:
         93:85:a7:55:52:ea:be:1b:35:5b:4a:ab:04:ba:e0:58:b2:3e:
         c7:f3:a5:32:85:9a:33:67:54:ab:ec:60:e7:f4:67:a4:2c:39:
         dc:9e:6e:a8:09:d2:3a:7d:84:84:71:25:48:e8:ca:33:95:8c:
         88:0d:15:c3:af:93:ef:73:aa:48:19:04:f9:37:8f:5e:e7:2b:
         80:3f:19:5a:63:3c:5d:d4:1c:f5:b3:98:71:63:15:30:97:40:
         2b:7b:4b:47:53:fc:cc:d6:fe:ba:69:7b:c7:65:ba:98:a6:c0:
         3b:a2:a8:01:38:7a:78:f6:a9:40:2c:34:64:3c:4e:1c:fd:95:
         00:29:81:ba:ea:69:dd:c4:43:c2:fe:2a:a5:73:ac:90:f3:ab:
         b0:f7:27:8a:7b:57:87:22:23:9d:88:33:20:cf:7e:5e:0f:14:
         22:bd:cf:34:2a:34:9a:6b:ee:74:84:db:62:82:ca:7c:29:5d:
         c1:f0:db:0c:3f:a5:c5:ba:23:61:fb:bc:dd:08:19:b5:02:9c:
         8c:4f:cf:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 03:28:53 2025 by rpki-client