Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/00006E0DD4A4BCABFB42915D286D16FA3FE7192F62E58D1B2AF6D2B04751E8D3/0/323830333a313763303a3a2f33322d3332203d3e203631343636.roa
File:                     323830333a313763303a3a2f33322d3332203d3e203631343636.roa (raw, json)
Hash identifier:          hMF0a500sclmmguXsSvDLop8/P6hogPV3ggKF5W4Xu4=
Subject key identifier:   B3:F0:09:38:00:CC:6F:74:BF:AF:15:8C:8F:B9:96:A9:7B:B5:20:06
Certificate issuer:       /CN=3BFDA956D2EBAAD5BE52A01761CB47696CBDD731
Certificate serial:       0B349F294F0F5580957F5C02D92907BD7215E11B
Authority key identifier: 3B:FD:A9:56:D2:EB:AA:D5:BE:52:A0:17:61:CB:47:69:6C:BD:D7:31
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3BFDA956D2EBAAD5BE52A01761CB47696CBDD731.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/00006E0DD4A4BCABFB42915D286D16FA3FE7192F62E58D1B2AF6D2B04751E8D3/0/323830333a313763303a3a2f33322d3332203d3e203631343636.roa
Signing time:             Tue 04 Feb 2025 18:44:05 +0000
ROA not before:           Tue 04 Feb 2025 18:39:05 +0000
ROA not after:            Tue 03 Feb 2026 18:44:05 +0000
asID:                     61466
IP address blocks:        2803:17c0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/00006E0DD4A4BCABFB42915D286D16FA3FE7192F62E58D1B2AF6D2B04751E8D3/0/3BFDA956D2EBAAD5BE52A01761CB47696CBDD731.crl
                          rsync://repository.lacnic.net/rpki/lacnic/00006E0DD4A4BCABFB42915D286D16FA3FE7192F62E58D1B2AF6D2B04751E8D3/0/3BFDA956D2EBAAD5BE52A01761CB47696CBDD731.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3BFDA956D2EBAAD5BE52A01761CB47696CBDD731.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 05:22:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:34:9f:29:4f:0f:55:80:95:7f:5c:02:d9:29:07:bd:72:15:e1:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3BFDA956D2EBAAD5BE52A01761CB47696CBDD731
        Validity
            Not Before: Feb  4 18:39:05 2025 GMT
            Not After : Feb  3 18:44:05 2026 GMT
        Subject: CN=B3F0093800CC6F74BFAF158C8FB996A97BB52006
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:f2:b2:85:3e:b7:0a:ba:37:01:f0:ba:92:ec:
                    8f:f7:05:fc:e8:66:cc:39:dc:fe:cb:35:30:50:c9:
                    5f:d7:cc:83:c5:53:e9:83:e4:6b:dd:4d:30:c2:35:
                    5f:87:e7:61:9b:64:52:b9:65:8d:22:7b:8f:89:38:
                    3d:3e:75:4b:90:42:1b:45:f7:7a:00:ff:dc:77:b0:
                    01:ef:e5:22:a0:1e:68:ba:e4:e4:85:c4:34:ad:35:
                    36:c5:df:3c:36:b7:af:22:d7:c6:22:5d:eb:ee:bc:
                    70:3c:6f:2b:27:11:a1:e0:4b:fb:2e:0c:ea:76:12:
                    d6:c7:6c:33:9a:85:e5:93:8d:f9:65:e4:61:2f:39:
                    83:e5:29:72:da:eb:4c:01:66:f2:2f:4b:42:3a:04:
                    ed:db:0d:38:35:66:48:84:c6:98:e4:54:09:85:93:
                    e7:6c:a9:c7:88:07:d5:6d:74:15:52:90:bb:af:ac:
                    04:b4:3f:3f:1e:12:5e:4c:b6:54:07:be:6f:d3:ed:
                    05:b9:ba:ab:28:67:b2:d3:7b:5b:6c:97:92:99:ff:
                    d0:8d:ae:95:b5:81:6c:4f:a1:ba:e6:63:55:62:81:
                    0f:a7:75:de:15:b8:c8:b1:a3:75:96:cc:48:11:73:
                    59:e0:50:07:ba:56:74:19:e3:97:84:d5:ee:8c:46:
                    9a:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:F0:09:38:00:CC:6F:74:BF:AF:15:8C:8F:B9:96:A9:7B:B5:20:06
            X509v3 Authority Key Identifier:
                keyid:3B:FD:A9:56:D2:EB:AA:D5:BE:52:A0:17:61:CB:47:69:6C:BD:D7:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/00006E0DD4A4BCABFB42915D286D16FA3FE7192F62E58D1B2AF6D2B04751E8D3/0/3BFDA956D2EBAAD5BE52A01761CB47696CBDD731.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3BFDA956D2EBAAD5BE52A01761CB47696CBDD731.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/00006E0DD4A4BCABFB42915D286D16FA3FE7192F62E58D1B2AF6D2B04751E8D3/0/323830333a313763303a3a2f33322d3332203d3e203631343636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:17c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         7c:74:52:bf:4f:c5:ac:e6:00:fd:cd:3a:74:7f:a0:6e:63:13:
         f7:4f:76:6f:44:39:99:9f:48:24:0e:87:30:50:37:2f:b5:7c:
         c1:18:6f:86:73:e0:10:d4:c3:7d:94:ad:8a:5d:37:9c:21:2e:
         06:80:8e:36:fb:2f:25:af:d4:e5:99:89:02:02:2e:e8:7f:78:
         d2:72:22:b1:4a:a5:f6:bd:a3:e0:51:a4:96:d3:42:2f:f2:1e:
         04:c3:32:ae:3c:77:14:66:22:29:85:58:60:b4:17:0d:3a:8b:
         ad:a9:17:a8:a6:de:9b:23:51:f0:92:e0:73:85:5b:a6:7d:14:
         84:26:36:b8:ba:08:04:2e:c5:a7:8a:bc:8a:38:c9:e6:48:a4:
         ee:2c:2e:af:e4:7e:36:f6:c5:1c:2f:8b:f8:f5:d6:ce:5e:3a:
         1c:a4:da:c8:45:81:83:11:0e:92:fa:2f:62:b2:26:4f:15:8c:
         c9:82:f3:0e:ea:6b:6a:55:df:bc:12:dd:bb:9f:17:9c:33:a9:
         3a:f4:17:c5:e4:e4:82:14:7c:c7:b3:8c:23:29:d0:1e:58:35:
         0f:90:a7:19:17:86:7b:dd:b3:de:59:a0:bc:fa:fe:3a:53:bb:
         77:7f:93:22:a5:c5:97:45:f8:d9:ef:c4:46:6f:27:ad:5b:13:
         ee:4e:9d:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 13 18:50:30 2025 by rpki-client