Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/272467CD58545DB3C91B9FD59703A48BA0F1BACF3D5C56AA7C90CBE691CC6F44/0/323830333a663234303a353030303a3a2f33362d3336203d3e203631353038.roa
File:                     323830333a663234303a353030303a3a2f33362d3336203d3e203631353038.roa (raw, json)
Hash identifier:          KjVVokRQH83tXHgPk/DWXdtDJVG75jvcACquRIh0EFg=
Subject key identifier:   4C:18:2D:98:FB:24:41:C2:5F:AB:75:B6:ED:E0:FB:EB:DF:0A:DE:51
Certificate issuer:       /CN=818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD
Certificate serial:       630B6BB174AB8FCE404CE3F1710BD8DD34D5D667
Authority key identifier: 81:8F:5B:44:DD:81:3B:A4:BC:8A:04:C7:D2:55:04:2F:1A:E4:B2:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/272467CD58545DB3C91B9FD59703A48BA0F1BACF3D5C56AA7C90CBE691CC6F44/0/323830333a663234303a353030303a3a2f33362d3336203d3e203631353038.roa
Signing time:             Tue 04 Feb 2025 18:28:54 +0000
ROA not before:           Tue 04 Feb 2025 18:23:54 +0000
ROA not after:            Tue 03 Feb 2026 18:28:54 +0000
asID:                     61508
IP address blocks:        2803:f240:5000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/272467CD58545DB3C91B9FD59703A48BA0F1BACF3D5C56AA7C90CBE691CC6F44/0/818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/272467CD58545DB3C91B9FD59703A48BA0F1BACF3D5C56AA7C90CBE691CC6F44/0/818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 04:59:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:0b:6b:b1:74:ab:8f:ce:40:4c:e3:f1:71:0b:d8:dd:34:d5:d6:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD
        Validity
            Not Before: Feb  4 18:23:54 2025 GMT
            Not After : Feb  3 18:28:54 2026 GMT
        Subject: CN=4C182D98FB2441C25FAB75B6EDE0FBEBDF0ADE51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:99:3a:75:75:55:d7:ca:00:77:36:69:f3:36:
                    cf:26:62:37:28:76:d9:65:05:6b:52:bb:55:c9:08:
                    33:88:5e:7e:48:6d:79:e7:82:8f:c5:e1:fd:76:d9:
                    49:f7:0a:01:a0:d7:1d:ec:1a:62:9c:b6:d4:e2:b9:
                    fa:39:62:c8:16:2a:76:8b:e3:b2:44:1a:74:a6:6d:
                    b1:fe:01:d8:c4:02:ea:33:3e:f6:64:14:c1:61:a7:
                    91:7e:17:7b:80:ea:6b:31:31:0e:0a:3e:78:60:f0:
                    85:43:f9:5a:b7:e1:16:6e:29:98:1c:04:87:65:09:
                    ba:a9:37:0b:6a:84:35:6d:29:27:1f:3b:c9:80:b4:
                    9a:ec:1f:ee:db:3c:77:2e:b3:4b:19:dd:0a:59:3d:
                    01:ea:ef:5a:07:d7:60:8e:99:38:20:92:8b:88:11:
                    9c:18:ed:2b:7b:12:4a:24:59:3f:47:02:30:80:1d:
                    79:22:29:22:4d:ab:ba:7e:f2:9e:2c:1a:29:9b:67:
                    b9:32:37:95:9c:c9:53:ae:5f:6e:eb:88:eb:19:39:
                    df:09:e0:9c:7e:51:09:b3:75:ea:f8:40:71:41:b8:
                    95:f9:07:0c:ea:7d:d1:57:1e:6d:0d:f2:44:81:bf:
                    64:65:6f:50:b2:01:eb:77:81:10:ee:4b:2f:aa:1e:
                    39:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:18:2D:98:FB:24:41:C2:5F:AB:75:B6:ED:E0:FB:EB:DF:0A:DE:51
            X509v3 Authority Key Identifier:
                keyid:81:8F:5B:44:DD:81:3B:A4:BC:8A:04:C7:D2:55:04:2F:1A:E4:B2:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/272467CD58545DB3C91B9FD59703A48BA0F1BACF3D5C56AA7C90CBE691CC6F44/0/818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/272467CD58545DB3C91B9FD59703A48BA0F1BACF3D5C56AA7C90CBE691CC6F44/0/323830333a663234303a353030303a3a2f33362d3336203d3e203631353038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f240:5000::/36

    Signature Algorithm: sha256WithRSAEncryption
         01:dc:a7:cc:f2:35:af:7f:3f:6c:e5:44:34:37:cd:5d:b9:33:
         97:6c:fd:2a:17:6a:aa:2f:dc:22:10:71:63:59:dd:37:8e:e2:
         65:e6:cc:db:e2:29:cf:7f:73:75:68:90:dc:58:e6:d8:b2:47:
         77:bd:f0:68:bb:00:c8:1c:2c:46:9b:55:22:c5:53:69:22:1a:
         ba:3b:74:88:da:7c:4c:0c:29:8e:d0:e2:05:d1:15:c7:d4:35:
         12:33:1a:5c:fa:3f:67:a5:8f:7c:bb:71:41:20:41:47:8c:10:
         28:47:ad:5f:a7:75:ef:8c:d2:94:74:b5:be:a2:cd:1e:a1:c8:
         77:ad:67:b5:a5:db:d4:51:0e:67:2c:58:c1:a5:d6:ba:c0:9f:
         60:ae:ec:c2:55:d7:78:08:4b:0c:a1:69:b7:75:c3:ee:b0:9d:
         31:6d:f0:4d:ac:18:9e:aa:ee:4a:09:71:dc:11:07:3b:26:e8:
         8e:21:59:6e:ff:ef:53:19:4b:b5:05:dd:aa:16:f4:d1:b3:bf:
         f3:bc:10:0b:b9:31:13:ed:80:da:80:65:5e:bf:dc:e2:bf:31:
         a4:8e:d2:ed:bb:70:22:ad:99:50:79:0a:e2:cf:a1:f8:c6:fb:
         29:26:4a:44:45:3b:2d:7c:0b:6f:df:e6:9c:e2:11:ed:72:8f:
         56:a3:49:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:33:10 2025 by rpki-client