Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/496497EF299227274C2063BD972DB97CB241EAC0AA62932C9E772B9D451C778C/0/323830363a3231663a3a2f33322d3332203d3e20323635353034.roa
File:                     323830363a3231663a3a2f33322d3332203d3e20323635353034.roa (raw, json)
Hash identifier:          5e87LDT1/1cY2lyl3pnzTH8UXCpNOPQFDB3hxYC+w4E=
Subject key identifier:   E0:34:94:FC:D9:A1:3D:5A:2C:11:EE:C7:AF:68:D6:3C:43:E9:91:F3
Certificate issuer:       /CN=1D60040EDE066CB0A53E8AF443F0D85DA89D7F68
Certificate serial:       32E51DFDA1914518A6012D243080007767355554
Authority key identifier: 1D:60:04:0E:DE:06:6C:B0:A5:3E:8A:F4:43:F0:D8:5D:A8:9D:7F:68
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1D60040EDE066CB0A53E8AF443F0D85DA89D7F68.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/496497EF299227274C2063BD972DB97CB241EAC0AA62932C9E772B9D451C778C/0/323830363a3231663a3a2f33322d3332203d3e20323635353034.roa
Signing time:             Tue 04 Feb 2025 18:27:37 +0000
ROA not before:           Tue 04 Feb 2025 18:22:37 +0000
ROA not after:            Tue 03 Feb 2026 18:27:37 +0000
asID:                     265504
IP address blocks:        2806:21f::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/496497EF299227274C2063BD972DB97CB241EAC0AA62932C9E772B9D451C778C/0/1D60040EDE066CB0A53E8AF443F0D85DA89D7F68.crl
                          rsync://repository.lacnic.net/rpki/lacnic/496497EF299227274C2063BD972DB97CB241EAC0AA62932C9E772B9D451C778C/0/1D60040EDE066CB0A53E8AF443F0D85DA89D7F68.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1D60040EDE066CB0A53E8AF443F0D85DA89D7F68.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 20:30:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:e5:1d:fd:a1:91:45:18:a6:01:2d:24:30:80:00:77:67:35:55:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D60040EDE066CB0A53E8AF443F0D85DA89D7F68
        Validity
            Not Before: Feb  4 18:22:37 2025 GMT
            Not After : Feb  3 18:27:37 2026 GMT
        Subject: CN=E03494FCD9A13D5A2C11EEC7AF68D63C43E991F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:70:8f:27:9a:41:81:b2:40:f5:5b:18:12:2b:
                    9b:9f:07:ce:54:e3:3e:f8:39:61:9e:11:48:aa:32:
                    47:11:c8:74:1b:b0:d9:8d:30:94:a2:18:3a:3d:20:
                    59:9b:ca:af:b7:57:eb:db:47:1a:26:5b:05:c0:ae:
                    b5:49:56:6d:33:08:69:e0:e4:60:b8:12:b6:b8:79:
                    d2:ac:bf:59:41:8d:3b:0b:62:5d:8b:4f:b5:e1:31:
                    8b:85:d7:c5:f3:44:38:ac:ff:6a:ad:25:0c:6c:68:
                    e2:7a:a3:f7:40:26:eb:29:a0:34:e2:c0:e6:03:a5:
                    d3:28:5c:d0:35:8c:2a:2c:bc:b7:9f:b0:de:8f:99:
                    f3:61:53:25:db:4d:24:35:61:2f:6c:57:50:53:6b:
                    e0:d3:f6:94:11:32:a7:13:f3:74:65:7e:3a:34:a9:
                    a7:57:ce:14:11:ef:97:d7:26:6d:b7:9f:a3:c2:1c:
                    b9:41:cc:04:7a:88:82:a5:27:18:c6:c6:e7:13:cd:
                    8f:13:4f:eb:f8:fc:5f:70:a3:9f:20:c5:35:5d:d8:
                    2c:84:35:96:83:ce:01:de:71:b8:aa:d0:93:4f:ab:
                    9a:b2:f8:e4:09:66:c2:fd:09:3f:f9:3a:de:73:2a:
                    e9:f7:b8:c1:c7:1a:93:1a:e3:d2:b4:03:be:a8:c2:
                    bf:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:34:94:FC:D9:A1:3D:5A:2C:11:EE:C7:AF:68:D6:3C:43:E9:91:F3
            X509v3 Authority Key Identifier:
                keyid:1D:60:04:0E:DE:06:6C:B0:A5:3E:8A:F4:43:F0:D8:5D:A8:9D:7F:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/496497EF299227274C2063BD972DB97CB241EAC0AA62932C9E772B9D451C778C/0/1D60040EDE066CB0A53E8AF443F0D85DA89D7F68.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1D60040EDE066CB0A53E8AF443F0D85DA89D7F68.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/496497EF299227274C2063BD972DB97CB241EAC0AA62932C9E772B9D451C778C/0/323830363a3231663a3a2f33322d3332203d3e20323635353034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:21f::/32

    Signature Algorithm: sha256WithRSAEncryption
         12:df:f0:84:57:5b:8d:4e:3a:a5:4e:70:9f:3c:91:b4:c8:05:
         55:ce:de:de:ac:d4:cf:a1:8a:a4:88:1b:ea:e1:bb:74:91:81:
         5f:bc:ef:35:38:56:59:55:0f:56:71:c8:b8:8e:d9:88:d4:ed:
         46:ae:97:70:69:91:46:34:29:0b:24:98:f7:18:2c:64:31:1a:
         7e:0c:6f:ef:05:57:fb:02:63:20:0c:fa:ac:2e:21:17:20:c2:
         a9:ad:90:b9:2d:19:dc:33:c4:9b:12:fc:4a:af:ea:8a:72:58:
         cb:e6:5a:13:44:c2:6d:85:ef:9f:10:49:b9:d1:f1:b3:4f:7b:
         ae:e0:96:1b:47:c6:36:47:dd:79:00:ad:0d:3e:d8:e9:9d:b7:
         48:70:72:8a:9c:df:77:df:fa:54:57:a5:e4:7b:c6:26:cf:a5:
         5a:22:44:a4:00:c4:a8:36:4b:6c:a2:b6:5b:63:a9:0b:69:5f:
         ec:4d:7b:b6:b6:2a:8c:89:6b:08:97:c7:08:36:8f:8c:26:7e:
         81:59:ed:a9:f9:68:43:09:9f:39:7a:c0:e3:7a:b7:69:40:d5:
         85:de:6f:89:f4:ae:bf:af:84:26:34:d6:2e:21:c3:48:32:0f:
         47:01:5e:f1:94:bc:51:eb:75:8e:4b:2b:23:6a:86:64:02:ec:
         8e:8c:01:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:57:53 2025 by rpki-client