Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1F726A421DB5230E7BD6CC6E9641FE904F19310899DF0BADCD09F8E76A262373/0/323830333a663639303a3a2f33322d3438203d3e20323732393037.roa
File:                     323830333a663639303a3a2f33322d3438203d3e20323732393037.roa (raw, json)
Hash identifier:          xmQkwKFg/xc2MZEJpKtoLwKM2CIJJsQjv54dVRm82Zo=
Subject key identifier:   A5:D6:D8:00:3B:7B:55:F4:74:D0:53:42:A9:DE:3E:A7:2C:93:37:CF
Certificate issuer:       /CN=D19ACB3B0FCAE804AD6F349C25F29C346A335251
Certificate serial:       32DBD2DCAF9E22935960B39104074A317D7C0EB2
Authority key identifier: D1:9A:CB:3B:0F:CA:E8:04:AD:6F:34:9C:25:F2:9C:34:6A:33:52:51
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D19ACB3B0FCAE804AD6F349C25F29C346A335251.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1F726A421DB5230E7BD6CC6E9641FE904F19310899DF0BADCD09F8E76A262373/0/323830333a663639303a3a2f33322d3438203d3e20323732393037.roa
Signing time:             Fri 20 Jun 2025 18:20:00 +0000
ROA not before:           Fri 20 Jun 2025 18:15:00 +0000
ROA not after:            Fri 19 Jun 2026 18:20:00 +0000
asID:                     272907
IP address blocks:        2803:f690::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1F726A421DB5230E7BD6CC6E9641FE904F19310899DF0BADCD09F8E76A262373/0/D19ACB3B0FCAE804AD6F349C25F29C346A335251.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1F726A421DB5230E7BD6CC6E9641FE904F19310899DF0BADCD09F8E76A262373/0/D19ACB3B0FCAE804AD6F349C25F29C346A335251.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D19ACB3B0FCAE804AD6F349C25F29C346A335251.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 03:56:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:db:d2:dc:af:9e:22:93:59:60:b3:91:04:07:4a:31:7d:7c:0e:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D19ACB3B0FCAE804AD6F349C25F29C346A335251
        Validity
            Not Before: Jun 20 18:15:00 2025 GMT
            Not After : Jun 19 18:20:00 2026 GMT
        Subject: CN=A5D6D8003B7B55F474D05342A9DE3EA72C9337CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:fa:a8:2e:aa:90:6d:57:b8:c9:2d:cb:e3:26:
                    42:f1:17:cd:f1:4f:96:6d:04:24:dc:68:c5:44:ce:
                    05:7e:df:14:ab:fd:ee:26:4f:44:25:92:c7:72:b2:
                    d1:d5:be:7d:c6:06:c3:76:7c:42:34:e8:e1:e2:ad:
                    39:91:b3:3f:cd:98:3e:24:82:7b:b9:f1:58:96:33:
                    28:32:17:00:da:c8:34:35:df:ef:77:a6:92:ad:e5:
                    ec:9f:4e:81:7e:b6:be:db:82:ef:9d:de:f5:b7:b6:
                    25:d2:8b:81:23:39:ea:b9:50:f9:02:d6:6a:b4:ea:
                    a8:5a:92:07:e9:03:93:62:bc:0b:f9:96:94:5c:07:
                    93:96:6d:f4:17:82:d5:64:f3:e9:23:51:9c:1a:71:
                    b3:4c:45:6b:9b:8d:0f:5f:72:2f:98:fd:5f:29:c0:
                    1e:6d:f1:a5:72:3a:de:7c:b0:ff:b7:a8:ee:28:12:
                    72:be:dd:9b:6a:ac:c9:73:92:6a:47:1c:02:8c:79:
                    1e:f5:b1:fc:95:7a:38:28:d8:a3:b4:cb:89:7c:72:
                    b0:32:4b:67:50:16:59:29:41:8f:0b:8b:bd:42:ee:
                    bf:a0:45:9f:da:bc:c1:3f:d6:79:83:20:bf:31:aa:
                    64:5b:91:a6:d7:eb:bf:bd:6e:22:40:76:36:4f:d4:
                    82:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:D6:D8:00:3B:7B:55:F4:74:D0:53:42:A9:DE:3E:A7:2C:93:37:CF
            X509v3 Authority Key Identifier:
                keyid:D1:9A:CB:3B:0F:CA:E8:04:AD:6F:34:9C:25:F2:9C:34:6A:33:52:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1F726A421DB5230E7BD6CC6E9641FE904F19310899DF0BADCD09F8E76A262373/0/D19ACB3B0FCAE804AD6F349C25F29C346A335251.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D19ACB3B0FCAE804AD6F349C25F29C346A335251.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1F726A421DB5230E7BD6CC6E9641FE904F19310899DF0BADCD09F8E76A262373/0/323830333a663639303a3a2f33322d3438203d3e20323732393037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f690::/32

    Signature Algorithm: sha256WithRSAEncryption
         26:a4:a3:c8:db:65:46:05:73:46:47:be:eb:b9:48:ac:3a:41:
         39:d7:f1:44:14:a5:60:15:45:03:51:09:fb:83:1e:ac:bc:0a:
         fa:65:5c:f4:52:d5:19:74:9b:b7:f3:9a:a1:b9:84:cb:e5:eb:
         e1:e4:39:87:87:f1:99:73:2b:1e:cb:68:33:19:78:9e:cb:ec:
         b9:49:16:a4:b1:7c:25:b5:d5:ea:54:33:78:38:85:a5:e8:2c:
         97:ed:82:62:e1:fa:16:67:c3:45:dd:38:b3:c5:24:71:fc:40:
         ac:81:16:b1:66:8d:92:9e:69:02:85:22:c9:8d:de:0a:a5:38:
         cf:31:a1:10:26:7c:9d:9c:e1:77:ad:85:3f:00:5e:17:6f:1f:
         b9:c1:3b:c8:e1:2a:c5:2c:39:ca:28:a4:0d:33:fb:1d:0b:a0:
         a6:e3:5f:2e:7c:dd:31:86:1c:7e:b4:ac:12:7f:43:67:41:60:
         32:35:45:7c:30:8d:23:e2:ea:53:25:e4:13:5c:c1:d3:6f:ba:
         67:71:ce:dc:cc:44:2f:c3:82:4b:6c:a0:7c:ac:00:ef:df:63:
         f8:3a:70:a5:60:4b:f3:a5:ac:5f:84:0e:7e:b3:24:cd:7a:54:
         75:1b:6b:08:2c:f0:d4:0e:18:b1:80:13:dd:27:6d:ca:dc:06:
         bd:d6:6b:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 17:16:47 2025 by rpki-client