Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4AF0A8E8D2F117077A68AE39F25C29A3D34B2F736344AD8D5FE0287891A15E8B/0/323830333a393531303a3a2f33322d3438203d3e20323639383537.roa
File:                     323830333a393531303a3a2f33322d3438203d3e20323639383537.roa (raw, json)
Hash identifier:          OT/AzeAIQJ+1hRsjfQ/9QfYwpcDMT3J+r68R/nxG5k4=
Subject key identifier:   6B:EC:0E:C1:0E:FA:B1:F2:B7:B5:A7:FA:51:22:AD:F5:A3:DA:2F:7D
Certificate issuer:       /CN=6654725F1F6F3373337E7798BC2F48B6CFEC81F5
Certificate serial:       266CAAEFFA596D40449C7731A27EB9B79508E895
Authority key identifier: 66:54:72:5F:1F:6F:33:73:33:7E:77:98:BC:2F:48:B6:CF:EC:81:F5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6654725F1F6F3373337E7798BC2F48B6CFEC81F5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4AF0A8E8D2F117077A68AE39F25C29A3D34B2F736344AD8D5FE0287891A15E8B/0/323830333a393531303a3a2f33322d3438203d3e20323639383537.roa
Signing time:             Tue 04 Feb 2025 18:27:36 +0000
ROA not before:           Tue 04 Feb 2025 18:22:36 +0000
ROA not after:            Tue 03 Feb 2026 18:27:36 +0000
asID:                     269857
IP address blocks:        2803:9510::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4AF0A8E8D2F117077A68AE39F25C29A3D34B2F736344AD8D5FE0287891A15E8B/0/6654725F1F6F3373337E7798BC2F48B6CFEC81F5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4AF0A8E8D2F117077A68AE39F25C29A3D34B2F736344AD8D5FE0287891A15E8B/0/6654725F1F6F3373337E7798BC2F48B6CFEC81F5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6654725F1F6F3373337E7798BC2F48B6CFEC81F5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Mar 2025 05:41:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:6c:aa:ef:fa:59:6d:40:44:9c:77:31:a2:7e:b9:b7:95:08:e8:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6654725F1F6F3373337E7798BC2F48B6CFEC81F5
        Validity
            Not Before: Feb  4 18:22:36 2025 GMT
            Not After : Feb  3 18:27:36 2026 GMT
        Subject: CN=6BEC0EC10EFAB1F2B7B5A7FA5122ADF5A3DA2F7D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:60:2b:5e:fe:32:51:55:9a:fa:5f:8b:2a:e0:
                    59:a5:a9:68:1f:c3:2c:0e:af:f2:fb:64:be:53:01:
                    b4:c1:2d:26:61:46:b9:49:39:bc:0f:2b:60:4e:04:
                    2d:fc:28:8d:00:d4:4b:84:84:60:08:76:4a:65:b4:
                    bc:07:14:d5:71:08:9f:98:5d:c1:b5:64:52:8f:5a:
                    b5:d8:93:56:87:f8:e8:e1:78:b9:2a:36:b2:67:86:
                    c6:65:91:e5:6d:91:62:f6:ac:88:ad:ec:9c:69:e9:
                    2c:9a:c2:a0:0e:f4:63:b7:35:9f:8a:91:aa:23:4a:
                    0a:d5:04:41:f4:b3:29:00:b6:fd:8f:36:cd:11:d0:
                    88:b9:8c:6a:1e:1e:7b:58:30:b3:a4:84:c5:b3:87:
                    f0:7c:73:9b:de:88:3d:6f:e7:15:24:cf:d9:65:d0:
                    ec:55:f2:28:e2:0e:99:b1:d2:91:ae:4d:84:54:01:
                    5f:e9:75:1b:de:87:65:2e:54:a7:89:d9:06:02:ad:
                    a9:8d:f2:f5:09:3f:04:a1:2a:fc:c3:4f:e8:3b:b0:
                    b0:44:9c:75:f0:32:fb:bf:83:10:8f:1b:2b:b2:8f:
                    a6:ab:0e:6c:8b:8d:5d:ba:0e:f1:99:75:de:76:3f:
                    7e:1c:c9:4f:5f:c3:ba:2e:92:05:aa:24:89:7b:54:
                    0b:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:EC:0E:C1:0E:FA:B1:F2:B7:B5:A7:FA:51:22:AD:F5:A3:DA:2F:7D
            X509v3 Authority Key Identifier:
                keyid:66:54:72:5F:1F:6F:33:73:33:7E:77:98:BC:2F:48:B6:CF:EC:81:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4AF0A8E8D2F117077A68AE39F25C29A3D34B2F736344AD8D5FE0287891A15E8B/0/6654725F1F6F3373337E7798BC2F48B6CFEC81F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6654725F1F6F3373337E7798BC2F48B6CFEC81F5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4AF0A8E8D2F117077A68AE39F25C29A3D34B2F736344AD8D5FE0287891A15E8B/0/323830333a393531303a3a2f33322d3438203d3e20323639383537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9510::/32

    Signature Algorithm: sha256WithRSAEncryption
         83:3f:52:08:f7:cb:4e:47:e5:6a:8f:90:b8:01:70:6f:a0:b8:
         0f:91:95:3f:b1:3b:5c:14:50:bd:91:39:a6:ec:9b:1c:76:c5:
         b3:af:ee:8c:f6:2a:12:c5:34:e6:ce:59:85:ad:3f:d3:9d:6e:
         db:6f:95:53:15:5b:22:c3:e4:3a:42:e2:45:a4:3f:c8:be:e8:
         9d:e1:4c:2e:3a:c4:78:5f:36:14:e1:07:d3:af:69:30:72:24:
         6b:2e:c5:80:de:fa:bd:fe:35:c6:e6:ed:78:86:6a:5c:95:83:
         39:db:f0:9a:69:9d:c9:4e:c2:ce:a5:69:e1:d0:9e:81:5b:54:
         47:b4:bf:e9:f5:b8:63:31:c9:d9:68:4c:54:42:49:25:0e:45:
         15:6c:9a:ad:47:f5:c2:f5:25:16:39:30:f2:4e:5f:e2:53:fe:
         bb:41:ce:d1:71:b8:e0:45:cc:56:7c:98:15:10:6d:10:31:16:
         9f:23:73:80:22:0e:cb:aa:b1:55:9a:1e:20:cb:ce:41:a0:2b:
         92:d5:b4:44:8e:51:6e:1e:fa:14:58:87:92:d9:9f:a4:ea:01:
         5d:2b:79:e3:d8:aa:74:0d:35:d9:2a:86:c6:c4:22:e4:34:e7:
         0f:1d:0a:73:7a:ee:2a:e5:26:87:2f:49:9c:92:4c:f2:cb:bf:
         e8:49:5e:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 06:21:00 2025 by rpki-client