Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/30CC8E928CEFD03411023C0EDE689D1B7B796364201C2AC9B99E515B83A7F74D/0/323830333a386361303a353030303a3a2f33362d3336203d3e20323636383332.roa
File:                     323830333a386361303a353030303a3a2f33362d3336203d3e20323636383332.roa (raw, json)
Hash identifier:          cxAOo0gR67902KeM0Kn+QEf8fZapSUNwf+r9TeE3k9g=
Subject key identifier:   A6:AA:72:35:2C:20:58:8E:1A:5D:C3:D7:77:54:EC:39:D4:3B:92:FB
Certificate issuer:       /CN=CB51CF25AE68F0C858FEB51FF72D964BE568AA54
Certificate serial:       1E929E16CA97B8A8B2391D9125FBC86DCC452FCB
Authority key identifier: CB:51:CF:25:AE:68:F0:C8:58:FE:B5:1F:F7:2D:96:4B:E5:68:AA:54
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB51CF25AE68F0C858FEB51FF72D964BE568AA54.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/30CC8E928CEFD03411023C0EDE689D1B7B796364201C2AC9B99E515B83A7F74D/0/323830333a386361303a353030303a3a2f33362d3336203d3e20323636383332.roa
Signing time:             Fri 24 Jan 2025 17:00:00 +0000
ROA not before:           Fri 24 Jan 2025 16:55:00 +0000
ROA not after:            Fri 23 Jan 2026 17:00:00 +0000
asID:                     266832
IP address blocks:        2803:8ca0:5000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/30CC8E928CEFD03411023C0EDE689D1B7B796364201C2AC9B99E515B83A7F74D/0/CB51CF25AE68F0C858FEB51FF72D964BE568AA54.crl
                          rsync://repository.lacnic.net/rpki/lacnic/30CC8E928CEFD03411023C0EDE689D1B7B796364201C2AC9B99E515B83A7F74D/0/CB51CF25AE68F0C858FEB51FF72D964BE568AA54.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB51CF25AE68F0C858FEB51FF72D964BE568AA54.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 20:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:92:9e:16:ca:97:b8:a8:b2:39:1d:91:25:fb:c8:6d:cc:45:2f:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CB51CF25AE68F0C858FEB51FF72D964BE568AA54
        Validity
            Not Before: Jan 24 16:55:00 2025 GMT
            Not After : Jan 23 17:00:00 2026 GMT
        Subject: CN=A6AA72352C20588E1A5DC3D77754EC39D43B92FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:c8:97:c4:29:a5:f4:27:90:de:f9:60:6c:4c:
                    81:b5:fe:5b:1f:fd:6e:60:b2:66:ef:9c:ac:a3:a1:
                    3f:e4:75:67:40:c3:82:e3:8f:32:60:a7:a8:73:e8:
                    09:08:50:f2:9f:d4:db:20:fb:18:83:58:16:40:98:
                    89:9f:c3:41:3c:56:d6:61:ef:1c:2e:1a:0a:d1:5d:
                    79:d2:59:34:4d:6d:3b:1d:ae:3d:33:07:0e:7a:2b:
                    84:78:8b:a4:1d:70:60:b0:bc:17:d0:38:b5:3d:b7:
                    05:b8:1b:79:5a:10:2b:60:34:31:56:31:ad:79:b3:
                    3b:e7:17:57:7d:ff:60:30:29:24:01:8e:75:f6:a4:
                    3f:d4:64:2d:1d:ba:2c:29:d2:ce:eb:6d:80:42:57:
                    6f:7b:53:e8:5d:53:94:2a:25:ac:57:68:3b:1c:9f:
                    6e:23:e0:fc:89:4f:5b:f9:84:8c:39:93:1a:cb:55:
                    e7:35:1e:76:c5:ab:f8:31:9c:ae:9e:ec:09:e0:9e:
                    2f:52:9a:43:0f:0c:73:fb:f9:a4:c9:dc:9f:6b:0a:
                    dd:9f:2d:51:0e:1a:7b:8e:d5:5d:b4:ec:33:43:b3:
                    be:9a:1a:30:15:93:06:5d:ce:6f:c8:0d:33:df:e4:
                    44:18:5f:7b:99:d1:e1:2e:dd:9d:c9:1b:bb:ea:b2:
                    0a:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:AA:72:35:2C:20:58:8E:1A:5D:C3:D7:77:54:EC:39:D4:3B:92:FB
            X509v3 Authority Key Identifier:
                keyid:CB:51:CF:25:AE:68:F0:C8:58:FE:B5:1F:F7:2D:96:4B:E5:68:AA:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/30CC8E928CEFD03411023C0EDE689D1B7B796364201C2AC9B99E515B83A7F74D/0/CB51CF25AE68F0C858FEB51FF72D964BE568AA54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB51CF25AE68F0C858FEB51FF72D964BE568AA54.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/30CC8E928CEFD03411023C0EDE689D1B7B796364201C2AC9B99E515B83A7F74D/0/323830333a386361303a353030303a3a2f33362d3336203d3e20323636383332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8ca0:5000::/36

    Signature Algorithm: sha256WithRSAEncryption
         6a:b9:ec:2e:77:e0:b2:0e:e3:d7:b2:58:19:74:88:95:ca:7f:
         c8:ac:4c:cc:ef:91:dc:6e:3a:d0:34:06:18:2c:ce:08:f2:a6:
         7a:38:88:66:c0:60:a9:04:a5:ab:ae:14:fd:63:ae:fa:c9:3d:
         11:53:25:fe:db:57:1d:c1:dd:7f:59:f6:ef:a0:0d:71:fa:a2:
         67:6f:2d:2c:e7:ab:dd:d3:c3:93:50:79:bb:8e:f1:e4:18:93:
         79:84:3c:61:81:7a:e9:d6:38:27:4a:c1:20:c8:d4:7b:82:f0:
         b8:c8:5f:bc:6d:0a:41:5a:09:b3:c4:f9:59:35:9d:13:7a:e8:
         ed:94:a6:71:f9:3e:93:ca:f4:fd:5a:90:ec:4f:23:87:f5:08:
         3c:e9:c8:40:ca:f8:e9:3a:9e:60:b4:c9:ab:aa:aa:3e:c6:a9:
         64:55:5d:72:c4:85:ba:e9:4c:b6:ed:b3:d0:26:a4:a2:b5:b8:
         17:27:6f:58:0e:04:85:8b:0d:cf:fa:25:92:e0:73:48:07:8c:
         3e:8a:39:72:55:be:d4:b5:a3:e0:13:47:b7:47:8c:57:68:21:
         ca:64:76:18:13:e1:92:f3:05:86:60:15:55:25:d0:2e:26:f2:
         6e:42:bb:c9:c6:02:70:71:26:12:53:ec:f9:90:fb:1c:0b:02:
         64:ff:f2:63
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 18 21:47:48 2025 by rpki-client