Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/61520A7D41AEECE4A3C67244EDFA5EFF5F3843BAE18136CF370ADEBE2490800C/0/323830333a393635303a3a2f33322d3438203d3e20323733323035.roa
File:                     323830333a393635303a3a2f33322d3438203d3e20323733323035.roa (raw, json)
Hash identifier:          Ui+oKYXAjQVAPlwuVQ7Mx3yalQ4MkA6sfGi1DWFfSlw=
Subject key identifier:   76:D4:4C:25:D4:09:D3:F6:E1:0F:36:AA:5C:57:C2:8A:B0:9A:7F:A2
Certificate issuer:       /CN=B9E5BDCE9B3D2EDD3FBB3DC37F49B81DDE5A6C86
Certificate serial:       4CCCFE6C4BA15BCC9EB640BE4B8B2AD50B2C14DA
Authority key identifier: B9:E5:BD:CE:9B:3D:2E:DD:3F:BB:3D:C3:7F:49:B8:1D:DE:5A:6C:86
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9E5BDCE9B3D2EDD3FBB3DC37F49B81DDE5A6C86.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/61520A7D41AEECE4A3C67244EDFA5EFF5F3843BAE18136CF370ADEBE2490800C/0/323830333a393635303a3a2f33322d3438203d3e20323733323035.roa
Signing time:             Thu 19 Jun 2025 00:15:00 +0000
ROA not before:           Thu 19 Jun 2025 00:10:00 +0000
ROA not after:            Thu 18 Jun 2026 00:15:00 +0000
asID:                     273205
IP address blocks:        2803:9650::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/61520A7D41AEECE4A3C67244EDFA5EFF5F3843BAE18136CF370ADEBE2490800C/0/B9E5BDCE9B3D2EDD3FBB3DC37F49B81DDE5A6C86.crl
                          rsync://repository.lacnic.net/rpki/lacnic/61520A7D41AEECE4A3C67244EDFA5EFF5F3843BAE18136CF370ADEBE2490800C/0/B9E5BDCE9B3D2EDD3FBB3DC37F49B81DDE5A6C86.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9E5BDCE9B3D2EDD3FBB3DC37F49B81DDE5A6C86.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Jul 2025 22:51:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:cc:fe:6c:4b:a1:5b:cc:9e:b6:40:be:4b:8b:2a:d5:0b:2c:14:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9E5BDCE9B3D2EDD3FBB3DC37F49B81DDE5A6C86
        Validity
            Not Before: Jun 19 00:10:00 2025 GMT
            Not After : Jun 18 00:15:00 2026 GMT
        Subject: CN=76D44C25D409D3F6E10F36AA5C57C28AB09A7FA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:0d:fb:ff:b3:4a:0a:af:cc:f4:1e:12:44:3b:
                    15:d4:c1:a0:87:5b:cc:8d:27:31:8a:67:f0:26:b2:
                    df:19:31:d3:19:15:11:48:f0:27:03:a7:43:2f:75:
                    75:e2:2c:55:57:b4:d4:10:64:92:98:91:80:9a:2b:
                    7f:de:fc:f0:d4:56:71:a6:c4:ba:d4:6e:54:30:31:
                    08:a2:0e:b1:0b:5f:2f:2a:71:58:96:47:9a:73:0b:
                    76:14:6e:c7:14:19:d2:f3:32:c8:6e:7a:af:19:e8:
                    cc:52:a8:1f:12:9c:1f:e6:99:d2:e7:5d:e5:c2:93:
                    70:5d:81:86:9b:85:f8:99:2c:fb:93:90:55:3d:99:
                    e7:d2:db:7b:f2:d8:6e:76:77:49:06:9f:13:8e:f9:
                    c8:0d:f2:b6:9d:42:d3:6e:58:4c:d9:89:06:10:82:
                    83:d8:96:09:a6:e4:22:64:08:ea:e3:6e:54:b8:f0:
                    53:7c:ae:67:af:70:be:99:05:38:e1:78:2b:8f:b2:
                    54:0c:93:26:f0:ee:64:2e:65:9c:dc:fe:3a:35:23:
                    43:e2:66:59:29:4e:8e:ea:db:2c:0b:b2:3e:01:cc:
                    3a:06:46:76:ad:f7:84:c6:10:9b:ec:ba:68:f8:2e:
                    cb:d3:46:98:0c:bf:19:5c:87:a5:27:1a:bd:ee:1b:
                    24:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:D4:4C:25:D4:09:D3:F6:E1:0F:36:AA:5C:57:C2:8A:B0:9A:7F:A2
            X509v3 Authority Key Identifier:
                keyid:B9:E5:BD:CE:9B:3D:2E:DD:3F:BB:3D:C3:7F:49:B8:1D:DE:5A:6C:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/61520A7D41AEECE4A3C67244EDFA5EFF5F3843BAE18136CF370ADEBE2490800C/0/B9E5BDCE9B3D2EDD3FBB3DC37F49B81DDE5A6C86.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9E5BDCE9B3D2EDD3FBB3DC37F49B81DDE5A6C86.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/61520A7D41AEECE4A3C67244EDFA5EFF5F3843BAE18136CF370ADEBE2490800C/0/323830333a393635303a3a2f33322d3438203d3e20323733323035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9650::/32

    Signature Algorithm: sha256WithRSAEncryption
         96:56:bb:59:22:12:a1:3c:df:a4:97:aa:50:3f:17:1f:ca:95:
         7b:f7:33:27:9b:3e:ba:fa:b5:0f:90:9e:fd:a2:13:5a:41:a8:
         ad:a8:fa:8a:2f:f8:e0:f8:b0:d0:4b:03:0e:be:d3:53:8f:a1:
         fc:16:58:05:b2:39:60:9e:db:8c:fa:9c:77:ea:36:fb:06:5e:
         80:f6:91:66:7b:6b:3f:9a:07:56:ec:1e:8a:70:a9:c8:8e:5f:
         dc:91:ab:e5:a7:13:64:57:20:fe:53:be:5b:f6:9e:7a:bf:8a:
         09:a0:89:a5:45:50:6d:fe:74:19:b4:4c:19:a3:9a:fa:48:d5:
         e2:2f:dd:0b:38:77:cd:b1:09:02:a3:92:59:ff:b1:66:4e:c6:
         3a:c7:f3:16:71:26:3f:d6:3f:de:f8:10:17:67:2c:8c:85:68:
         27:32:73:44:95:6c:45:8c:c8:60:c8:3a:9e:41:54:91:c6:6e:
         b7:8d:55:53:a6:23:f5:2a:79:1d:83:5e:9a:b2:b5:b3:5c:dc:
         9f:cb:d9:4a:e6:03:ba:2f:c1:a8:cc:03:e8:8f:43:3f:d7:a5:
         46:31:ef:b9:90:5f:81:2e:a3:d6:c6:4f:66:b3:f9:0a:3e:1d:
         17:9b:aa:49:12:8d:ce:8f:1d:ae:e3:9f:c0:13:39:e3:a9:03:
         20:68:95:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 22:42:30 2025 by rpki-client