Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1D4E961A231CD13A76EEB28F44BD4C7BE9C86B64213124A12BAD2CDD7DC61586/0/323830333a616336303a3a2f33322d3438203d3e20323637383439.roa
File:                     323830333a616336303a3a2f33322d3438203d3e20323637383439.roa (raw, json)
Hash identifier:          jBOLlcFtGjxNkS7xPFVKcy/rl1KbbvdPWRl7CrvHNsI=
Subject key identifier:   28:F4:A4:77:6A:37:8A:ED:60:D6:78:27:37:D7:CD:55:93:64:F8:73
Certificate issuer:       /CN=7DA5922CAF9214C6E4545724FFE93FC180331E96
Certificate serial:       02CDF0FAF0AC7E0E33BB1FAE77F6A11FBAC5204A
Authority key identifier: 7D:A5:92:2C:AF:92:14:C6:E4:54:57:24:FF:E9:3F:C1:80:33:1E:96
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7DA5922CAF9214C6E4545724FFE93FC180331E96.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1D4E961A231CD13A76EEB28F44BD4C7BE9C86B64213124A12BAD2CDD7DC61586/0/323830333a616336303a3a2f33322d3438203d3e20323637383439.roa
Signing time:             Tue 04 Feb 2025 18:43:39 +0000
ROA not before:           Tue 04 Feb 2025 18:38:39 +0000
ROA not after:            Tue 03 Feb 2026 18:43:39 +0000
asID:                     267849
IP address blocks:        2803:ac60::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1D4E961A231CD13A76EEB28F44BD4C7BE9C86B64213124A12BAD2CDD7DC61586/0/7DA5922CAF9214C6E4545724FFE93FC180331E96.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1D4E961A231CD13A76EEB28F44BD4C7BE9C86B64213124A12BAD2CDD7DC61586/0/7DA5922CAF9214C6E4545724FFE93FC180331E96.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7DA5922CAF9214C6E4545724FFE93FC180331E96.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 20:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:cd:f0:fa:f0:ac:7e:0e:33:bb:1f:ae:77:f6:a1:1f:ba:c5:20:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7DA5922CAF9214C6E4545724FFE93FC180331E96
        Validity
            Not Before: Feb  4 18:38:39 2025 GMT
            Not After : Feb  3 18:43:39 2026 GMT
        Subject: CN=28F4A4776A378AED60D6782737D7CD559364F873
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:ad:91:8c:19:8b:80:eb:bf:33:e9:11:27:3b:
                    c8:ee:c3:ec:47:d9:58:d5:70:96:b1:dd:ae:3e:22:
                    5d:81:0d:58:ce:35:7f:db:cb:cd:c6:3a:b4:ba:e9:
                    da:7c:21:89:a9:ab:b0:3c:4f:c5:07:f2:23:1f:95:
                    16:2f:ef:7f:f1:94:9d:be:ea:38:9b:12:b6:81:57:
                    b0:ea:94:0b:66:79:0b:b5:a0:0e:1f:f4:e5:48:9e:
                    a4:85:78:e0:f9:96:c9:96:4e:06:2d:0a:8e:9d:08:
                    d8:a6:0b:19:15:07:78:0d:1c:30:e8:e3:8a:27:43:
                    b4:a7:1a:27:18:71:1c:a6:ef:cb:c4:a5:26:5e:53:
                    08:35:c7:c1:c2:c7:3d:4b:18:4f:b1:fa:f2:24:27:
                    a0:34:33:33:fc:4e:19:23:0b:70:04:59:93:36:47:
                    05:a7:26:9d:ac:5e:13:9f:65:24:50:01:18:ea:c2:
                    01:9d:15:0b:33:98:68:b3:01:65:4f:be:8f:80:4c:
                    e0:02:4d:0a:16:b5:75:18:9d:dd:a6:ee:ee:d0:00:
                    57:a2:f4:aa:59:0f:c1:75:4a:62:af:fd:ea:d1:e1:
                    4c:1f:68:93:a2:bc:b7:45:f5:b7:39:4b:a9:b1:ae:
                    5d:6f:55:0a:47:dd:aa:33:ee:e6:b0:47:19:d8:73:
                    37:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:F4:A4:77:6A:37:8A:ED:60:D6:78:27:37:D7:CD:55:93:64:F8:73
            X509v3 Authority Key Identifier:
                keyid:7D:A5:92:2C:AF:92:14:C6:E4:54:57:24:FF:E9:3F:C1:80:33:1E:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1D4E961A231CD13A76EEB28F44BD4C7BE9C86B64213124A12BAD2CDD7DC61586/0/7DA5922CAF9214C6E4545724FFE93FC180331E96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7DA5922CAF9214C6E4545724FFE93FC180331E96.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1D4E961A231CD13A76EEB28F44BD4C7BE9C86B64213124A12BAD2CDD7DC61586/0/323830333a616336303a3a2f33322d3438203d3e20323637383439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ac60::/32

    Signature Algorithm: sha256WithRSAEncryption
         66:86:d0:bd:34:c5:79:57:e4:4f:50:d6:45:54:6e:95:17:36:
         b0:fd:b2:a6:27:eb:79:45:58:91:d5:64:df:46:bf:53:3a:2f:
         b7:88:ee:85:4d:ac:f3:05:06:e7:ac:b8:8c:22:93:b9:27:30:
         e9:f6:69:62:b3:22:98:a6:af:e9:4a:b7:20:24:f4:dc:33:cc:
         16:35:78:e1:aa:af:58:9d:6c:25:d9:8b:56:1c:ec:ba:e8:44:
         b8:d6:92:fb:d9:89:8e:c8:65:bc:fa:8f:70:97:ec:f3:88:21:
         11:f6:44:75:44:59:28:dc:87:0a:0a:71:a4:3f:6a:bd:58:57:
         e8:ab:45:28:22:68:d6:7a:f6:69:c7:34:6b:62:f2:ed:72:e2:
         b2:e4:83:92:8f:a3:9a:b2:94:2f:5c:c1:bc:e9:49:bc:74:cf:
         6b:2f:9a:72:39:59:13:73:fa:e3:b0:17:d8:8c:84:bf:d0:fd:
         fd:cb:8e:c9:8c:8c:eb:07:f9:7b:eb:96:77:2f:82:71:8b:e9:
         8e:85:04:de:4a:06:b1:0b:ab:5e:73:d0:86:67:57:bb:ba:89:
         dc:96:8e:5c:1a:23:3d:e9:18:0a:40:25:49:11:05:f8:21:23:
         9a:a1:4a:fa:b2:57:da:be:dc:5c:08:38:56:79:33:6e:f4:2b:
         88:a9:2a:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 17:47:30 2025 by rpki-client