Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/06E64E18233528A5D068C3F048C0B1888C5CFDAEB3647457AA1B09F1D3593827/0/323830333a323965303a3a2f33322d3332203d3e20323730303133.roa
File:                     323830333a323965303a3a2f33322d3332203d3e20323730303133.roa (raw, json)
Hash identifier:          rfaJ8R6lXm71hp5u2wzxzsZcwDSOFxIvvGcyxlvflSA=
Subject key identifier:   E4:76:B8:21:70:3F:71:85:F6:85:6A:E3:1E:F3:9F:9F:59:FF:3D:DD
Certificate issuer:       /CN=AF206703EB403B90C2C766F1557E43A0F0AC3C11
Certificate serial:       65309CB4A2B3C01FA66B1ACD53692E947A786EE6
Authority key identifier: AF:20:67:03:EB:40:3B:90:C2:C7:66:F1:55:7E:43:A0:F0:AC:3C:11
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF206703EB403B90C2C766F1557E43A0F0AC3C11.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/06E64E18233528A5D068C3F048C0B1888C5CFDAEB3647457AA1B09F1D3593827/0/323830333a323965303a3a2f33322d3332203d3e20323730303133.roa
Signing time:             Tue 04 Feb 2025 18:44:10 +0000
ROA not before:           Tue 04 Feb 2025 18:39:10 +0000
ROA not after:            Tue 03 Feb 2026 18:44:10 +0000
asID:                     270013
IP address blocks:        2803:29e0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/06E64E18233528A5D068C3F048C0B1888C5CFDAEB3647457AA1B09F1D3593827/0/AF206703EB403B90C2C766F1557E43A0F0AC3C11.crl
                          rsync://repository.lacnic.net/rpki/lacnic/06E64E18233528A5D068C3F048C0B1888C5CFDAEB3647457AA1B09F1D3593827/0/AF206703EB403B90C2C766F1557E43A0F0AC3C11.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF206703EB403B90C2C766F1557E43A0F0AC3C11.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:30:9c:b4:a2:b3:c0:1f:a6:6b:1a:cd:53:69:2e:94:7a:78:6e:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF206703EB403B90C2C766F1557E43A0F0AC3C11
        Validity
            Not Before: Feb  4 18:39:10 2025 GMT
            Not After : Feb  3 18:44:10 2026 GMT
        Subject: CN=E476B821703F7185F6856AE31EF39F9F59FF3DDD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f2:80:b0:51:c1:e0:8d:d4:e8:2a:8b:85:9a:
                    f8:ea:09:95:b0:c3:9e:0c:87:34:e5:fb:fb:67:2d:
                    1c:1e:f4:3c:4d:6c:86:a1:4c:dc:00:35:bd:c3:d3:
                    95:e3:7d:5d:a9:d4:89:70:ba:4b:cc:38:c5:db:ff:
                    25:07:74:80:b5:78:de:c4:74:2c:e4:ef:4c:87:f5:
                    cc:46:eb:a3:53:27:d1:4b:00:8f:39:2a:33:cf:8b:
                    8c:2e:1c:22:4d:98:e4:23:be:f0:05:07:2f:92:89:
                    29:05:c8:e3:6b:5f:83:26:a4:20:e9:1c:f5:68:ab:
                    17:23:bb:91:39:f3:4b:7b:27:62:a5:4b:84:69:e8:
                    79:9d:69:4c:ac:cd:27:82:5d:01:ee:96:d0:ae:7b:
                    6e:1e:c9:6d:57:43:4e:cd:de:2c:f9:83:16:cc:e4:
                    8b:25:67:0d:b9:62:48:d4:81:5f:f8:98:a6:a3:47:
                    9a:1f:3b:4b:bb:4c:a5:3e:5c:67:37:df:ce:39:db:
                    7c:ff:a1:06:e3:17:71:c1:ad:3d:fc:77:63:7e:1a:
                    f7:9f:3b:a1:9c:e7:48:d5:b5:52:ff:03:18:33:e5:
                    78:b4:0f:58:72:ce:f2:00:76:65:b8:f2:a9:96:61:
                    4d:f8:15:3e:e5:b9:1a:cb:50:7c:ad:c7:b4:d7:26:
                    5c:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:76:B8:21:70:3F:71:85:F6:85:6A:E3:1E:F3:9F:9F:59:FF:3D:DD
            X509v3 Authority Key Identifier:
                keyid:AF:20:67:03:EB:40:3B:90:C2:C7:66:F1:55:7E:43:A0:F0:AC:3C:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/06E64E18233528A5D068C3F048C0B1888C5CFDAEB3647457AA1B09F1D3593827/0/AF206703EB403B90C2C766F1557E43A0F0AC3C11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF206703EB403B90C2C766F1557E43A0F0AC3C11.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/06E64E18233528A5D068C3F048C0B1888C5CFDAEB3647457AA1B09F1D3593827/0/323830333a323965303a3a2f33322d3332203d3e20323730303133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:29e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         63:37:13:47:76:f6:23:f0:a2:11:44:e3:11:6d:e7:b8:ab:b4:
         11:6b:38:3a:f5:e0:45:29:ed:bb:02:6c:1a:eb:06:42:6d:8e:
         0d:fb:79:09:b9:39:4a:22:cd:25:a4:5b:aa:81:d8:f5:8f:05:
         e3:42:e1:a8:e3:21:04:00:29:df:65:77:15:16:4e:11:ce:ff:
         52:be:47:26:06:2f:b4:b4:39:e0:c9:76:fc:15:48:03:28:54:
         64:28:b8:17:c5:2f:b8:9e:ef:4f:ab:44:2a:56:fb:88:40:44:
         60:8e:7e:2c:00:94:b2:5c:1e:d7:c2:7b:e0:eb:bd:4a:2b:e9:
         2d:8d:3c:ad:1a:ac:b8:85:fa:df:1c:db:1b:e2:24:8d:5c:b9:
         cb:d9:0b:d7:9c:51:be:2d:98:01:db:74:17:47:1b:f1:0e:c5:
         c3:a1:3c:fe:3e:30:bf:45:99:c3:6a:1b:3f:1c:7d:48:77:06:
         b8:e4:23:3a:20:d3:6e:63:54:cc:27:38:bb:b6:17:54:7f:6a:
         ff:60:a9:bf:61:fd:d9:52:92:66:28:05:c0:8e:51:74:d4:0f:
         d6:a6:d4:59:a1:62:23:91:8c:2c:f2:34:a6:7d:be:a9:69:9b:
         59:ae:60:16:0f:42:73:0a:25:cc:88:5f:ae:8b:cd:8c:f5:4a:
         26:02:3f:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:59:55 2025 by rpki-client