Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/296CACF4DBEE77502940FAD50279723AF0DA139E5C75A6B5BCEBA6B1C143DB88/0/323830333a323338303a3a2f33322d3332203d3e203631343930.roa
File:                     323830333a323338303a3a2f33322d3332203d3e203631343930.roa (raw, json)
Hash identifier:          37FGoqHql1lAwS1I4gY7cxjuGK15+aGng9+TwPzr39o=
Subject key identifier:   67:5B:F3:43:3D:F3:01:B2:78:12:A3:9A:6E:19:15:64:09:3A:59:96
Certificate issuer:       /CN=D74EEC332802572047CBE0FAB13F3CF2BA417AFF
Certificate serial:       1F8C1B0D623B021EBCCFAD4DB0E6A82DF312BAEF
Authority key identifier: D7:4E:EC:33:28:02:57:20:47:CB:E0:FA:B1:3F:3C:F2:BA:41:7A:FF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D74EEC332802572047CBE0FAB13F3CF2BA417AFF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/296CACF4DBEE77502940FAD50279723AF0DA139E5C75A6B5BCEBA6B1C143DB88/0/323830333a323338303a3a2f33322d3332203d3e203631343930.roa
Signing time:             Tue 04 Feb 2025 17:59:17 +0000
ROA not before:           Tue 04 Feb 2025 17:54:17 +0000
ROA not after:            Tue 03 Feb 2026 17:59:17 +0000
asID:                     61490
IP address blocks:        2803:2380::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/296CACF4DBEE77502940FAD50279723AF0DA139E5C75A6B5BCEBA6B1C143DB88/0/D74EEC332802572047CBE0FAB13F3CF2BA417AFF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/296CACF4DBEE77502940FAD50279723AF0DA139E5C75A6B5BCEBA6B1C143DB88/0/D74EEC332802572047CBE0FAB13F3CF2BA417AFF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D74EEC332802572047CBE0FAB13F3CF2BA417AFF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:8c:1b:0d:62:3b:02:1e:bc:cf:ad:4d:b0:e6:a8:2d:f3:12:ba:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D74EEC332802572047CBE0FAB13F3CF2BA417AFF
        Validity
            Not Before: Feb  4 17:54:17 2025 GMT
            Not After : Feb  3 17:59:17 2026 GMT
        Subject: CN=675BF3433DF301B27812A39A6E191564093A5996
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:5e:a3:91:d1:ea:a6:c3:05:a2:86:ed:da:58:
                    9d:ff:f9:36:d5:93:ad:7e:cd:d3:19:af:36:62:d8:
                    29:54:6a:5c:bd:16:c8:f6:14:d9:a2:8a:10:23:26:
                    83:1a:f7:45:bc:16:ec:0a:47:fd:71:63:f3:0f:62:
                    8f:8c:28:1e:f8:02:18:1d:05:a5:54:90:4a:d4:15:
                    9b:f4:7d:50:d4:ea:65:4d:2f:27:a0:14:df:ec:b8:
                    bf:a4:f6:b9:65:a9:49:49:4c:eb:77:0e:88:24:6b:
                    92:99:05:aa:09:7b:7f:ae:0f:37:87:2e:e3:9f:37:
                    a1:5f:eb:b9:99:56:98:08:3a:ed:eb:62:75:ec:bf:
                    86:f7:bc:6a:6d:26:96:88:31:63:9d:19:90:ac:ba:
                    86:50:21:0b:a8:c2:39:6e:d8:48:2e:cb:4a:fd:42:
                    ed:f9:f8:5f:c0:6e:94:2c:4d:ec:3b:c4:e1:c8:b3:
                    6c:d9:78:26:22:0c:5c:f3:45:37:19:99:df:46:c5:
                    f7:da:b4:a6:f9:46:c7:22:4b:5b:16:bc:ca:85:2f:
                    74:e7:f5:41:cd:c7:99:53:b0:ff:b4:a9:ab:dc:c6:
                    6c:b0:c1:d8:45:6f:67:f7:54:6f:d2:c6:2e:7c:37:
                    c5:32:17:41:8f:fa:5c:6e:63:74:3c:c1:bc:33:e3:
                    65:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:5B:F3:43:3D:F3:01:B2:78:12:A3:9A:6E:19:15:64:09:3A:59:96
            X509v3 Authority Key Identifier:
                keyid:D7:4E:EC:33:28:02:57:20:47:CB:E0:FA:B1:3F:3C:F2:BA:41:7A:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/296CACF4DBEE77502940FAD50279723AF0DA139E5C75A6B5BCEBA6B1C143DB88/0/D74EEC332802572047CBE0FAB13F3CF2BA417AFF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D74EEC332802572047CBE0FAB13F3CF2BA417AFF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/296CACF4DBEE77502940FAD50279723AF0DA139E5C75A6B5BCEBA6B1C143DB88/0/323830333a323338303a3a2f33322d3332203d3e203631343930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2380::/32

    Signature Algorithm: sha256WithRSAEncryption
         77:65:a3:6d:b3:e7:f4:9b:aa:ef:a5:14:1d:5d:3a:91:4f:7e:
         ba:62:1f:45:f6:9f:f2:bc:bf:89:09:9a:a2:8d:43:51:e9:00:
         de:de:a5:1b:19:b0:f1:e1:12:6f:1e:2a:f9:6e:cf:72:47:5c:
         f9:ec:dd:06:1a:d4:90:58:ba:7a:c8:38:8a:cd:e6:e5:e5:ed:
         a6:18:9e:25:57:16:84:5f:1b:15:3e:63:ba:50:8b:40:b9:e6:
         e5:27:cd:8f:f1:7a:63:09:3c:68:bf:22:11:26:93:35:c9:9c:
         40:aa:6f:20:85:cb:17:69:79:dd:bd:1a:f1:76:37:bf:f6:51:
         3b:b9:67:62:b5:02:97:95:8b:34:31:36:28:44:3f:20:34:75:
         56:23:d2:f7:3b:76:a4:de:ff:06:7a:31:2e:98:77:86:c7:d8:
         e2:16:22:ab:d9:ea:47:9c:43:fa:e9:74:2a:56:e7:84:8e:c0:
         d2:b9:cb:6a:fa:1d:6f:fe:c9:42:bb:9e:6e:31:3e:b6:63:ec:
         99:d9:85:b3:79:39:33:66:27:f1:e4:9c:cf:04:74:01:c0:8d:
         94:7f:f9:3a:47:1f:db:39:53:5e:47:12:31:e1:86:45:d3:c5:
         93:6e:d5:f5:df:f9:61:37:78:b9:c9:da:84:04:14:de:be:8a:
         31:7a:bb:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:47:11 2025 by rpki-client