Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E60FC7975894A40582CFF1B2E3F82B21EFBBC0EACB829B1927E7F06596733E57/0/323830333a383963303a3a2f33322d3332203d3e20323635373036.roa
File:                     323830333a383963303a3a2f33322d3332203d3e20323635373036.roa (raw, json)
Hash identifier:          Okgu7Jj4Gb4eTPidIxDv0oIyA5G14Yt2fkfJnhfMSUg=
Subject key identifier:   58:DC:15:7C:B2:76:6D:23:C0:ED:BE:17:4D:0C:EC:94:CE:E3:AA:57
Certificate issuer:       /CN=73F5635860CFCD6D03F2A4CDFFCA79190AAE6915
Certificate serial:       7FDB65873AAB8BAB2C873E46C800AAAEAF60276B
Authority key identifier: 73:F5:63:58:60:CF:CD:6D:03:F2:A4:CD:FF:CA:79:19:0A:AE:69:15
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/73F5635860CFCD6D03F2A4CDFFCA79190AAE6915.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E60FC7975894A40582CFF1B2E3F82B21EFBBC0EACB829B1927E7F06596733E57/0/323830333a383963303a3a2f33322d3332203d3e20323635373036.roa
Signing time:             Tue 04 Feb 2025 20:02:50 +0000
ROA not before:           Tue 04 Feb 2025 19:57:50 +0000
ROA not after:            Tue 03 Feb 2026 20:02:50 +0000
asID:                     265706
IP address blocks:        2803:89c0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E60FC7975894A40582CFF1B2E3F82B21EFBBC0EACB829B1927E7F06596733E57/0/73F5635860CFCD6D03F2A4CDFFCA79190AAE6915.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E60FC7975894A40582CFF1B2E3F82B21EFBBC0EACB829B1927E7F06596733E57/0/73F5635860CFCD6D03F2A4CDFFCA79190AAE6915.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/73F5635860CFCD6D03F2A4CDFFCA79190AAE6915.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 20 Apr 2025 05:14:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:db:65:87:3a:ab:8b:ab:2c:87:3e:46:c8:00:aa:ae:af:60:27:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73F5635860CFCD6D03F2A4CDFFCA79190AAE6915
        Validity
            Not Before: Feb  4 19:57:50 2025 GMT
            Not After : Feb  3 20:02:50 2026 GMT
        Subject: CN=58DC157CB2766D23C0EDBE174D0CEC94CEE3AA57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:90:3c:42:3a:e2:78:0d:39:00:15:a4:62:ae:
                    7f:ad:a9:af:f4:e1:dc:60:8a:fd:e7:b5:fc:79:a4:
                    6c:f9:a9:aa:eb:81:24:4d:63:ab:21:34:37:75:60:
                    68:e5:fb:b8:96:83:29:bc:14:51:7f:0a:4a:f6:e8:
                    ec:e8:e3:95:ef:76:f4:59:7f:bd:b3:f1:9d:c5:d5:
                    09:37:21:26:4e:08:63:d7:85:57:5f:fc:cf:1d:78:
                    69:cd:4d:a3:4d:69:5d:30:f2:e4:62:5c:5b:4c:87:
                    cb:91:ae:33:3e:1e:39:bb:b5:de:31:4f:31:2b:b0:
                    20:15:9e:83:30:82:24:0f:e4:80:3d:8c:66:33:c9:
                    a4:b7:30:21:2b:74:2a:a0:96:6d:aa:97:b4:9d:ad:
                    6c:7e:1e:b3:b4:91:e0:9a:e8:43:7d:2a:9d:4e:90:
                    f2:9b:20:1e:cf:5b:76:b6:4b:0a:97:e1:8c:7a:55:
                    ed:87:f0:c6:07:a8:ff:58:39:0e:3f:30:07:78:b2:
                    38:02:70:b8:de:52:2d:f7:b8:cd:93:6e:84:b9:84:
                    26:2f:88:a9:ad:be:2b:eb:d6:c5:b5:c6:2f:87:72:
                    c6:d0:d2:dd:50:25:ba:ef:f1:e4:e4:43:93:02:17:
                    0a:e1:0b:45:ec:b8:84:51:e0:4a:da:26:d0:0e:bd:
                    f8:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:DC:15:7C:B2:76:6D:23:C0:ED:BE:17:4D:0C:EC:94:CE:E3:AA:57
            X509v3 Authority Key Identifier:
                keyid:73:F5:63:58:60:CF:CD:6D:03:F2:A4:CD:FF:CA:79:19:0A:AE:69:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E60FC7975894A40582CFF1B2E3F82B21EFBBC0EACB829B1927E7F06596733E57/0/73F5635860CFCD6D03F2A4CDFFCA79190AAE6915.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/73F5635860CFCD6D03F2A4CDFFCA79190AAE6915.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E60FC7975894A40582CFF1B2E3F82B21EFBBC0EACB829B1927E7F06596733E57/0/323830333a383963303a3a2f33322d3332203d3e20323635373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:89c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         23:b8:3c:59:6e:5f:89:04:91:60:23:ad:b8:b9:35:ef:97:65:
         bc:3f:89:a5:fa:12:fa:f7:9c:b9:a6:f6:a7:00:37:b8:5f:e7:
         06:b2:43:c2:ad:4e:3d:16:73:eb:c2:c7:00:42:57:a5:bc:0b:
         5d:df:bc:4f:d5:e3:9e:6c:d9:2f:4b:38:bf:b3:08:7a:30:33:
         17:03:e8:03:2f:b4:3f:34:eb:fd:0c:4a:00:34:7d:75:7a:43:
         c5:fe:b8:19:49:17:d8:d4:3c:3a:b1:c1:c0:45:45:2a:c4:0f:
         f1:06:0d:26:46:46:b6:dd:dc:6d:0f:f3:58:ff:1d:d2:c6:44:
         8e:92:c5:37:1a:ac:6d:04:a9:d8:84:32:a7:4b:58:c6:5e:10:
         6d:ea:18:60:fb:35:d4:58:d9:ff:9b:22:34:a4:04:1f:28:a4:
         cb:2a:c6:16:32:77:2e:f0:5b:f5:d1:52:39:cc:ff:ac:6b:e4:
         4c:31:14:c2:0a:9a:08:2a:9b:40:03:88:8a:81:7d:ae:a0:ea:
         8b:90:b4:ee:e8:cf:57:55:69:79:42:74:9a:16:7b:00:f7:46:
         2a:3a:8b:00:0a:f1:6e:e8:b7:8d:fe:dd:0b:85:89:a2:13:d0:
         f4:0a:7e:dc:51:8a:17:4d:a3:0d:df:1c:7c:e7:7e:dc:19:b2:
         fb:15:05:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 03:53:44 2025 by rpki-client