Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/33E5E1E07AF42CF32825E2DE5FFAF60850775BF8D9261C5B47FEEE532E0ADF35/0/323830333a663036303a3a2f33322d3332203d3e20323634383236.roa
File:                     323830333a663036303a3a2f33322d3332203d3e20323634383236.roa (raw, json)
Hash identifier:          NexEN9I0fqG3FRIJB/Xr0nF4kIEdWpiQXwUOAqpPGBU=
Subject key identifier:   3E:B5:8B:24:30:3B:0B:77:C1:20:18:1E:1D:F0:7F:A2:B8:C9:95:88
Certificate issuer:       /CN=6862C98DB7C68668B89154477FE7C411837434D3
Certificate serial:       1E3D4EC6CD20D00115D5012205AD0A5725CD043E
Authority key identifier: 68:62:C9:8D:B7:C6:86:68:B8:91:54:47:7F:E7:C4:11:83:74:34:D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6862C98DB7C68668B89154477FE7C411837434D3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/33E5E1E07AF42CF32825E2DE5FFAF60850775BF8D9261C5B47FEEE532E0ADF35/0/323830333a663036303a3a2f33322d3332203d3e20323634383236.roa
Signing time:             Tue 04 Feb 2025 18:53:21 +0000
ROA not before:           Tue 04 Feb 2025 18:48:21 +0000
ROA not after:            Tue 03 Feb 2026 18:53:21 +0000
asID:                     264826
IP address blocks:        2803:f060::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/33E5E1E07AF42CF32825E2DE5FFAF60850775BF8D9261C5B47FEEE532E0ADF35/0/6862C98DB7C68668B89154477FE7C411837434D3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/33E5E1E07AF42CF32825E2DE5FFAF60850775BF8D9261C5B47FEEE532E0ADF35/0/6862C98DB7C68668B89154477FE7C411837434D3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6862C98DB7C68668B89154477FE7C411837434D3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 04:49:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:3d:4e:c6:cd:20:d0:01:15:d5:01:22:05:ad:0a:57:25:cd:04:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6862C98DB7C68668B89154477FE7C411837434D3
        Validity
            Not Before: Feb  4 18:48:21 2025 GMT
            Not After : Feb  3 18:53:21 2026 GMT
        Subject: CN=3EB58B24303B0B77C120181E1DF07FA2B8C99588
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:2b:e3:b4:32:8e:f7:85:f7:62:e7:4c:3d:8c:
                    43:dd:51:92:3c:2f:46:2e:5e:be:fb:18:d1:89:50:
                    8b:43:54:7a:69:91:f1:3e:b2:0a:57:95:b1:64:c1:
                    62:25:a5:38:24:79:41:8a:de:0c:58:3b:63:5c:fc:
                    fd:94:3f:20:f1:3b:0e:aa:53:ba:0e:40:55:ad:ec:
                    81:a7:01:2d:da:18:76:9a:e1:9d:69:40:e9:13:ae:
                    3a:92:78:c9:bf:0a:b0:7d:1a:89:36:56:4b:c0:38:
                    47:1b:36:ec:8a:ab:f7:b3:90:8f:74:07:8f:2c:e7:
                    06:e8:66:62:75:74:df:7a:c8:28:c7:30:d4:23:6e:
                    b7:9c:63:88:30:ab:08:94:c9:a7:32:6a:28:6c:80:
                    cd:f2:35:40:d5:c5:49:6a:65:b3:63:79:bc:f8:5d:
                    0f:e4:47:87:33:6c:a0:e3:10:cf:b1:8d:e3:9e:f5:
                    1c:15:ef:70:03:22:48:22:ae:60:47:c4:7c:4a:5a:
                    78:e2:89:52:b6:63:55:1e:04:1d:c9:42:36:da:91:
                    2f:e7:bc:d5:55:e3:71:54:42:c3:f7:eb:b7:34:d4:
                    e7:e6:39:37:db:86:f6:68:f8:ba:f9:99:33:b6:6e:
                    1d:2a:e8:f3:c8:93:d2:60:17:c7:9e:f4:ad:0d:72:
                    e7:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:B5:8B:24:30:3B:0B:77:C1:20:18:1E:1D:F0:7F:A2:B8:C9:95:88
            X509v3 Authority Key Identifier:
                keyid:68:62:C9:8D:B7:C6:86:68:B8:91:54:47:7F:E7:C4:11:83:74:34:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/33E5E1E07AF42CF32825E2DE5FFAF60850775BF8D9261C5B47FEEE532E0ADF35/0/6862C98DB7C68668B89154477FE7C411837434D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6862C98DB7C68668B89154477FE7C411837434D3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/33E5E1E07AF42CF32825E2DE5FFAF60850775BF8D9261C5B47FEEE532E0ADF35/0/323830333a663036303a3a2f33322d3332203d3e20323634383236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f060::/32

    Signature Algorithm: sha256WithRSAEncryption
         7b:13:78:1b:1c:71:04:e3:77:ec:d2:b0:c7:32:6d:ac:21:c3:
         84:38:8b:2c:35:77:83:6c:9c:ce:ff:d0:15:c7:68:25:88:c6:
         b4:44:92:48:44:27:ec:00:c8:2d:c1:01:4f:33:81:e4:a0:8c:
         e8:5f:22:e2:1f:a9:58:60:91:f7:7c:d2:fb:3a:3e:2f:c8:7c:
         ad:41:c1:f5:a1:c0:3e:de:6d:be:fb:dd:aa:17:46:69:1f:42:
         73:dc:84:bc:42:79:f3:11:1d:0c:01:60:42:ca:e0:81:0e:bb:
         ae:38:cd:07:bc:ce:6a:c0:6c:57:3d:98:d5:7c:2f:f5:93:90:
         68:ff:02:d1:98:71:af:33:5a:fd:3b:bf:88:b8:53:4d:c9:87:
         7d:2a:44:0d:d5:28:c9:27:38:cd:db:fe:1f:af:60:66:75:2e:
         8c:ab:86:46:b1:49:75:bf:30:56:7b:17:3a:5c:c6:1d:eb:70:
         06:68:79:0a:8e:1d:1f:8f:2b:c3:47:6b:4d:32:18:97:fb:1d:
         a4:90:14:1a:44:6d:3b:43:a4:b2:51:04:67:fa:27:e8:ea:ef:
         76:fc:53:61:47:8b:f1:75:49:ab:9f:f9:c6:84:62:d9:cd:ab:
         86:c6:b0:3b:7d:4e:95:c8:7d:3f:bc:48:86:64:40:6d:e0:ed:
         ca:d8:98:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 16:42:32 2025 by rpki-client