Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ED2D51395E2CCAA773D82961D1627A6E38A9BCB3127EDDB8F01FDE9DF43442D/0/323830363a3365313a3a2f33322d3438203d3e20323730313531.roa
File:                     323830363a3365313a3a2f33322d3438203d3e20323730313531.roa (raw, json)
Hash identifier:          D5luKJhDunFcfJYf8owGFjPzzRrkc5THxVuQoDUf+Vw=
Subject key identifier:   84:7A:A8:53:2A:50:67:6D:4F:35:2F:1F:6D:E4:BC:01:9F:16:06:62
Certificate issuer:       /CN=C75798560649F727F4B8EEB5DE65CE896EF27A0F
Certificate serial:       6FCDF4CD03F984199A80B9AAA5F5170462C52B92
Authority key identifier: C7:57:98:56:06:49:F7:27:F4:B8:EE:B5:DE:65:CE:89:6E:F2:7A:0F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C75798560649F727F4B8EEB5DE65CE896EF27A0F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ED2D51395E2CCAA773D82961D1627A6E38A9BCB3127EDDB8F01FDE9DF43442D/0/323830363a3365313a3a2f33322d3438203d3e20323730313531.roa
Signing time:             Tue 04 Feb 2025 18:07:56 +0000
ROA not before:           Tue 04 Feb 2025 18:02:56 +0000
ROA not after:            Tue 03 Feb 2026 18:07:56 +0000
asID:                     270151
IP address blocks:        2806:3e1::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5ED2D51395E2CCAA773D82961D1627A6E38A9BCB3127EDDB8F01FDE9DF43442D/0/C75798560649F727F4B8EEB5DE65CE896EF27A0F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5ED2D51395E2CCAA773D82961D1627A6E38A9BCB3127EDDB8F01FDE9DF43442D/0/C75798560649F727F4B8EEB5DE65CE896EF27A0F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C75798560649F727F4B8EEB5DE65CE896EF27A0F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:cd:f4:cd:03:f9:84:19:9a:80:b9:aa:a5:f5:17:04:62:c5:2b:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C75798560649F727F4B8EEB5DE65CE896EF27A0F
        Validity
            Not Before: Feb  4 18:02:56 2025 GMT
            Not After : Feb  3 18:07:56 2026 GMT
        Subject: CN=847AA8532A50676D4F352F1F6DE4BC019F160662
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:15:5e:20:53:8f:f1:51:67:cc:fb:85:54:61:
                    82:71:70:54:18:0f:f6:9d:65:5c:ca:89:ee:68:f6:
                    4e:f3:9a:40:38:4d:40:3d:94:7f:61:66:7d:10:34:
                    5e:fe:b2:9a:3e:2f:3e:ba:85:78:6a:20:98:71:5d:
                    e0:f5:84:10:ce:b7:12:ba:9d:14:f7:d3:33:c4:85:
                    99:de:6c:c9:35:18:cf:22:6f:2f:23:4a:ec:9b:74:
                    6b:08:56:63:64:75:2e:e9:81:57:5c:a1:c6:bd:50:
                    f5:ad:6f:95:60:f1:b1:e0:91:e8:26:b5:8c:2c:c9:
                    77:29:c5:fc:fb:27:ea:86:9d:7b:27:39:c8:bb:46:
                    49:5a:f6:a9:07:12:0b:72:8a:2d:40:a0:6b:ff:c4:
                    c5:8a:e4:f4:f7:b1:5d:b6:f2:3e:e0:16:38:bd:c3:
                    4c:4b:02:ef:78:a0:50:27:9b:42:5e:9d:d8:61:83:
                    0f:38:ed:7f:fe:ea:62:0e:78:33:06:dd:3b:e5:c4:
                    06:c0:3d:d7:30:97:ab:71:59:f7:f8:dd:ef:60:e1:
                    a3:f3:20:cf:c8:78:9f:4c:19:38:5f:1a:86:45:d5:
                    00:f2:eb:15:99:0f:a5:ba:8f:cd:1e:db:62:40:a1:
                    8c:09:78:ff:5a:77:94:8e:d2:55:47:bf:90:11:ef:
                    8f:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:7A:A8:53:2A:50:67:6D:4F:35:2F:1F:6D:E4:BC:01:9F:16:06:62
            X509v3 Authority Key Identifier:
                keyid:C7:57:98:56:06:49:F7:27:F4:B8:EE:B5:DE:65:CE:89:6E:F2:7A:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ED2D51395E2CCAA773D82961D1627A6E38A9BCB3127EDDB8F01FDE9DF43442D/0/C75798560649F727F4B8EEB5DE65CE896EF27A0F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C75798560649F727F4B8EEB5DE65CE896EF27A0F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ED2D51395E2CCAA773D82961D1627A6E38A9BCB3127EDDB8F01FDE9DF43442D/0/323830363a3365313a3a2f33322d3438203d3e20323730313531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:3e1::/32

    Signature Algorithm: sha256WithRSAEncryption
         03:49:c6:99:e4:0e:f8:bd:79:84:ca:ad:fd:a6:3e:ec:e7:d8:
         03:68:12:12:4e:24:38:18:29:1b:72:e0:ca:db:3e:ab:2c:5e:
         59:66:38:df:ac:8a:5e:98:98:a9:10:7e:92:89:1e:9b:5a:b8:
         17:3f:ad:dc:aa:ce:37:34:bd:b9:9a:a1:ab:1e:86:be:58:65:
         3c:79:89:b3:6a:75:2b:8f:90:67:e2:5a:ec:a3:fc:6e:e9:35:
         85:4b:2e:6d:39:ee:64:42:3c:4a:8d:ac:f6:75:44:f7:33:76:
         87:24:31:9a:5b:b7:32:bc:f2:6a:f6:41:d9:9f:1a:7f:26:7b:
         4a:35:39:6d:20:8a:36:6f:f4:2c:b1:cb:db:07:2e:88:70:4a:
         db:3b:51:d1:da:29:10:12:00:16:75:e6:b9:43:7e:9d:df:ff:
         63:39:b3:bd:14:64:55:f5:86:d1:c4:65:df:11:f3:d5:f3:35:
         67:5a:8c:85:8d:18:db:d8:18:3e:e5:1e:48:27:6c:31:6f:f0:
         a3:67:05:e6:d1:6a:e5:06:66:84:14:6c:42:a8:04:0e:2f:e3:
         69:8a:3e:81:4e:9e:66:fc:c7:b5:2c:21:ff:b4:b9:2e:e0:5e:
         a8:bc:8a:02:de:b9:a1:6e:c4:3d:ab:f6:8c:ae:63:f0:df:8f:
         d1:99:04:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:10:25 2025 by rpki-client