Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5DFFCE3580001D765733A50303B9C614D470365605A55EA8A03720302F514528/0/323830333a363134303a3a2f33322d3332203d3e20323634363239.roa
File:                     323830333a363134303a3a2f33322d3332203d3e20323634363239.roa (raw, json)
Hash identifier:          6q8DHcm+QgR6F7SB4l+ZNj1IOOYtPwLmW2p495Vv9Xk=
Subject key identifier:   75:6B:98:3A:D5:BD:A6:17:C8:C4:F5:7A:8B:60:B3:D1:16:DC:36:B5
Certificate issuer:       /CN=08FB62A084CE347FB5CEE83696FE4D3837F1E456
Certificate serial:       6734AC90FD303FD4FB50DE69228F1EAA43934461
Authority key identifier: 08:FB:62:A0:84:CE:34:7F:B5:CE:E8:36:96:FE:4D:38:37:F1:E4:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08FB62A084CE347FB5CEE83696FE4D3837F1E456.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5DFFCE3580001D765733A50303B9C614D470365605A55EA8A03720302F514528/0/323830333a363134303a3a2f33322d3332203d3e20323634363239.roa
Signing time:             Tue 04 Feb 2025 18:18:39 +0000
ROA not before:           Tue 04 Feb 2025 18:13:39 +0000
ROA not after:            Tue 03 Feb 2026 18:18:39 +0000
asID:                     264629
IP address blocks:        2803:6140::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5DFFCE3580001D765733A50303B9C614D470365605A55EA8A03720302F514528/0/08FB62A084CE347FB5CEE83696FE4D3837F1E456.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5DFFCE3580001D765733A50303B9C614D470365605A55EA8A03720302F514528/0/08FB62A084CE347FB5CEE83696FE4D3837F1E456.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08FB62A084CE347FB5CEE83696FE4D3837F1E456.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 20:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:34:ac:90:fd:30:3f:d4:fb:50:de:69:22:8f:1e:aa:43:93:44:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08FB62A084CE347FB5CEE83696FE4D3837F1E456
        Validity
            Not Before: Feb  4 18:13:39 2025 GMT
            Not After : Feb  3 18:18:39 2026 GMT
        Subject: CN=756B983AD5BDA617C8C4F57A8B60B3D116DC36B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:f8:1e:08:48:e0:20:95:ff:66:14:48:a8:46:
                    44:80:52:26:cf:78:d3:f8:1d:d0:4c:43:9e:f5:c0:
                    c0:34:8d:e9:ea:82:2d:11:50:da:0e:30:06:e3:75:
                    8c:68:81:86:8d:cd:89:e8:16:8a:ab:b3:b5:90:ed:
                    48:aa:cf:25:9d:a6:92:df:89:38:35:34:73:9d:a2:
                    fe:65:9c:66:8b:41:48:b4:6c:d2:89:12:d1:97:70:
                    d2:ab:0d:2b:c7:28:b3:da:c7:de:49:7e:ce:86:dc:
                    d0:20:ba:c7:8b:35:eb:69:9c:f5:c4:b0:47:5e:ed:
                    4b:66:7d:d2:56:08:76:5a:8c:62:85:da:0a:9e:f3:
                    cc:fb:1d:59:63:5e:6e:ae:32:19:fb:89:2e:eb:b3:
                    79:b1:35:8e:af:ec:e6:58:02:4a:1f:78:b6:00:c2:
                    97:c1:a2:46:35:d7:c3:d7:9c:0e:3f:0c:61:01:ef:
                    c6:ff:ba:48:fe:e4:25:f0:b0:88:52:a0:ec:00:5e:
                    3f:de:3e:9d:f1:cd:9a:04:ab:8f:8e:40:aa:4c:d1:
                    55:b3:fc:9f:60:f3:80:78:09:ee:94:7c:2e:2a:d1:
                    5a:f7:c4:7b:a1:23:85:38:fe:7f:60:32:18:bd:56:
                    41:5a:ab:ee:94:bc:26:da:0c:74:f3:8f:05:43:f8:
                    ac:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:6B:98:3A:D5:BD:A6:17:C8:C4:F5:7A:8B:60:B3:D1:16:DC:36:B5
            X509v3 Authority Key Identifier:
                keyid:08:FB:62:A0:84:CE:34:7F:B5:CE:E8:36:96:FE:4D:38:37:F1:E4:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5DFFCE3580001D765733A50303B9C614D470365605A55EA8A03720302F514528/0/08FB62A084CE347FB5CEE83696FE4D3837F1E456.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08FB62A084CE347FB5CEE83696FE4D3837F1E456.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5DFFCE3580001D765733A50303B9C614D470365605A55EA8A03720302F514528/0/323830333a363134303a3a2f33322d3332203d3e20323634363239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6140::/32

    Signature Algorithm: sha256WithRSAEncryption
         75:ae:28:ca:d6:36:df:61:49:f6:ab:a7:5b:71:09:78:45:7d:
         c3:a5:7a:44:78:fb:2e:49:ec:53:05:6d:19:f8:95:c5:52:28:
         35:07:7f:ad:ae:04:7c:12:74:c6:2c:dd:4e:ca:94:82:3c:0f:
         43:b2:fe:12:eb:4c:7e:6b:c7:11:fa:f3:c6:95:7e:72:d7:1f:
         ee:c7:e7:07:0d:f0:2b:94:b5:a7:34:e9:99:ab:df:3c:47:0f:
         86:84:a2:4a:ef:f6:55:fe:aa:33:c9:73:3c:47:5d:61:e9:83:
         91:70:7c:59:21:52:ea:44:b4:92:c1:9f:24:7e:3c:2c:6d:6b:
         cb:e6:79:75:d3:31:a1:2f:cf:63:ec:51:bc:31:a4:13:dd:75:
         6d:82:0e:c5:d0:12:35:05:9c:4e:71:2c:a6:04:c5:f8:35:d5:
         4f:56:60:ac:b3:fc:15:18:78:f8:26:cc:d0:ce:73:74:68:1d:
         d4:5b:00:16:9f:6a:e9:ae:ef:a8:c8:4d:c5:6f:54:09:b2:44:
         54:2e:13:4e:37:12:35:ea:2b:d0:64:67:02:49:3f:a4:68:a6:
         27:aa:e1:b1:3a:0f:81:4d:42:b5:a3:13:32:3c:5e:70:59:b4:
         48:79:cf:ee:e1:18:b0:09:05:f6:3f:63:e7:16:6c:df:6e:ac:
         c4:0b:d6:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:51:40 2025 by rpki-client