Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/368DDC0BEA654DEA43F4EC9399B84F0523B2B7B30EC9B3E6AB862C694907B3CC/0/323830313a31623a643030303a3a2f34382d3438203d3e20323635363936.roa
File:                     323830313a31623a643030303a3a2f34382d3438203d3e20323635363936.roa (raw, json)
Hash identifier:          RGOv+a4lCAATtvTxK6Ql4FhtaVJws7t4mDSypVuCrIE=
Subject key identifier:   EC:0F:08:E1:4F:D3:23:39:97:72:56:83:6E:34:2F:75:EF:4D:13:DD
Certificate issuer:       /CN=738DF3EF50BFD106CD59B65BB914A3C67F537DF2
Certificate serial:       27879D02B6BA6C592CAEC8538B943A174087D432
Authority key identifier: 73:8D:F3:EF:50:BF:D1:06:CD:59:B6:5B:B9:14:A3:C6:7F:53:7D:F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/738DF3EF50BFD106CD59B65BB914A3C67F537DF2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/368DDC0BEA654DEA43F4EC9399B84F0523B2B7B30EC9B3E6AB862C694907B3CC/0/323830313a31623a643030303a3a2f34382d3438203d3e20323635363936.roa
Signing time:             Tue 04 Feb 2025 18:42:52 +0000
ROA not before:           Tue 04 Feb 2025 18:37:52 +0000
ROA not after:            Tue 03 Feb 2026 18:42:52 +0000
asID:                     265696
IP address blocks:        2801:1b:d000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/368DDC0BEA654DEA43F4EC9399B84F0523B2B7B30EC9B3E6AB862C694907B3CC/0/738DF3EF50BFD106CD59B65BB914A3C67F537DF2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/368DDC0BEA654DEA43F4EC9399B84F0523B2B7B30EC9B3E6AB862C694907B3CC/0/738DF3EF50BFD106CD59B65BB914A3C67F537DF2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/738DF3EF50BFD106CD59B65BB914A3C67F537DF2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:87:9d:02:b6:ba:6c:59:2c:ae:c8:53:8b:94:3a:17:40:87:d4:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=738DF3EF50BFD106CD59B65BB914A3C67F537DF2
        Validity
            Not Before: Feb  4 18:37:52 2025 GMT
            Not After : Feb  3 18:42:52 2026 GMT
        Subject: CN=EC0F08E14FD32339977256836E342F75EF4D13DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:50:fb:45:c5:7f:1a:05:b2:83:4d:de:39:41:
                    be:da:7c:1c:10:13:ca:ca:7a:64:1e:d9:a0:77:03:
                    5e:8b:1d:b3:a0:8f:37:5f:cf:ec:c5:47:5b:d2:3a:
                    bf:5a:f5:e0:4a:eb:5d:a1:31:18:0e:ba:87:dd:59:
                    e4:66:9e:e6:df:4b:72:5d:b6:cb:cb:2b:b1:af:1f:
                    23:0d:91:b8:b2:23:24:75:42:d2:81:03:2a:67:9e:
                    7c:63:0e:05:30:8b:fe:35:c0:34:69:ea:8f:79:7e:
                    e8:1c:16:0c:38:6c:3a:ff:5a:b9:f9:19:54:92:7a:
                    d5:c3:61:bb:fe:19:58:05:3e:61:a4:af:f8:24:a8:
                    06:25:a1:5b:44:47:69:69:79:28:40:85:8b:5e:49:
                    a1:21:d1:dc:44:f9:28:03:3f:6a:ca:7a:b9:68:eb:
                    67:b4:a7:86:cb:57:93:72:26:04:7a:40:58:5a:63:
                    b7:29:38:c6:9e:0a:1c:b8:59:e8:27:65:73:34:64:
                    f9:d9:65:05:45:f3:6f:a7:32:c9:d1:b0:86:fc:3f:
                    2c:7f:c3:98:a2:10:6d:6c:e0:f5:6c:75:6f:b6:73:
                    5f:84:1e:eb:a4:a2:b7:be:d3:28:65:fe:21:d0:f4:
                    55:7b:f8:6d:3d:b1:09:35:fb:b8:1e:ed:bf:30:04:
                    bd:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:0F:08:E1:4F:D3:23:39:97:72:56:83:6E:34:2F:75:EF:4D:13:DD
            X509v3 Authority Key Identifier:
                keyid:73:8D:F3:EF:50:BF:D1:06:CD:59:B6:5B:B9:14:A3:C6:7F:53:7D:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/368DDC0BEA654DEA43F4EC9399B84F0523B2B7B30EC9B3E6AB862C694907B3CC/0/738DF3EF50BFD106CD59B65BB914A3C67F537DF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/738DF3EF50BFD106CD59B65BB914A3C67F537DF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/368DDC0BEA654DEA43F4EC9399B84F0523B2B7B30EC9B3E6AB862C694907B3CC/0/323830313a31623a643030303a3a2f34382d3438203d3e20323635363936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1b:d000::/48

    Signature Algorithm: sha256WithRSAEncryption
         77:6d:f6:bc:56:d4:5d:eb:55:66:f8:7a:f1:96:ac:e4:5e:2b:
         2e:12:d7:21:87:a3:76:ae:41:75:dd:fa:14:3c:e2:7e:89:08:
         16:8b:4e:3c:ec:dc:05:83:94:ba:05:c8:5c:c2:fc:ca:f3:a7:
         40:b7:90:98:cb:92:bf:60:ea:2f:90:b2:63:72:26:35:d5:20:
         af:f1:ae:62:19:7b:a8:bc:67:95:c4:ec:cf:76:aa:dd:83:79:
         68:fa:62:fd:3d:57:58:66:29:fd:ea:85:be:e2:2c:fd:24:f2:
         0b:9e:e4:eb:4c:13:3f:8e:0c:97:2a:69:96:67:5b:b7:ef:9c:
         e5:f4:12:15:d8:4c:6a:0b:b0:ff:f2:be:a5:e1:fb:d0:6d:2a:
         1a:94:2d:80:a9:d9:9c:3d:80:26:a1:fa:83:7c:44:c2:a6:fd:
         0f:e4:ea:c7:2f:76:22:9e:b4:b0:13:93:45:c0:fa:ba:35:83:
         c0:81:0b:81:82:18:bf:86:09:fe:c1:53:fe:01:2c:ce:74:03:
         03:c9:67:03:ca:24:72:41:65:7d:1c:0e:36:04:85:7c:a5:fa:
         9f:9c:2a:ef:a9:1f:37:be:a3:2a:26:1c:0e:ef:6e:01:4d:2c:
         42:cc:8f:b2:a7:89:d8:9e:b4:ea:e8:40:9f:e7:a4:30:c5:cd:
         4a:ec:a2:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:10:42 2025 by rpki-client