Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/62674DC29A839A80762D48C4CF6F8F2E42C55E1701859C29C6DD670D051BF3C7/0/323830333a333336303a3a2f33322d3332203d3e20323639373934.roa
File:                     323830333a333336303a3a2f33322d3332203d3e20323639373934.roa (raw, json)
Hash identifier:          FwuuZllmYA0Rmgi/b9g95k7XImJa488hkzfbRsalBFY=
Subject key identifier:   41:72:09:31:05:35:54:71:5C:AE:36:E3:46:8B:D1:ED:B6:4B:14:5F
Certificate issuer:       /CN=5443AD9524CE360F9B33C4BE7285C62CCC9E8F65
Certificate serial:       6B8C2E0523115588A8C1468550AA8F709DB77D57
Authority key identifier: 54:43:AD:95:24:CE:36:0F:9B:33:C4:BE:72:85:C6:2C:CC:9E:8F:65
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5443AD9524CE360F9B33C4BE7285C62CCC9E8F65.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/62674DC29A839A80762D48C4CF6F8F2E42C55E1701859C29C6DD670D051BF3C7/0/323830333a333336303a3a2f33322d3332203d3e20323639373934.roa
Signing time:             Tue 04 Feb 2025 18:30:49 +0000
ROA not before:           Tue 04 Feb 2025 18:25:49 +0000
ROA not after:            Tue 03 Feb 2026 18:30:49 +0000
asID:                     269794
IP address blocks:        2803:3360::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/62674DC29A839A80762D48C4CF6F8F2E42C55E1701859C29C6DD670D051BF3C7/0/5443AD9524CE360F9B33C4BE7285C62CCC9E8F65.crl
                          rsync://repository.lacnic.net/rpki/lacnic/62674DC29A839A80762D48C4CF6F8F2E42C55E1701859C29C6DD670D051BF3C7/0/5443AD9524CE360F9B33C4BE7285C62CCC9E8F65.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5443AD9524CE360F9B33C4BE7285C62CCC9E8F65.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:29:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:8c:2e:05:23:11:55:88:a8:c1:46:85:50:aa:8f:70:9d:b7:7d:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5443AD9524CE360F9B33C4BE7285C62CCC9E8F65
        Validity
            Not Before: Feb  4 18:25:49 2025 GMT
            Not After : Feb  3 18:30:49 2026 GMT
        Subject: CN=41720931053554715CAE36E3468BD1EDB64B145F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:25:52:63:02:ec:65:b4:bc:b9:db:f4:2d:7e:
                    97:bc:fb:45:05:94:d0:bd:b3:04:71:da:de:27:e7:
                    35:d3:bf:b8:26:c2:a5:0d:7a:48:d9:98:76:fc:e8:
                    60:c7:f8:96:86:b0:a5:30:75:58:05:2f:56:cd:77:
                    67:f5:35:27:9b:c0:fa:30:0e:e6:1d:03:c5:d4:a9:
                    fe:01:52:8c:3f:12:ee:5a:26:26:93:04:2b:ed:18:
                    69:51:33:d6:4d:b2:bb:34:36:d0:20:4f:bb:72:ea:
                    98:66:90:68:31:03:fc:05:f9:90:df:10:95:35:66:
                    6b:04:ea:49:c0:31:11:07:80:70:ef:d2:93:6d:df:
                    33:f4:2e:20:9a:a3:25:d9:5c:c6:5a:57:27:74:f3:
                    00:bc:dd:6a:5b:43:af:aa:7d:9b:66:73:c6:54:2f:
                    1a:8a:5c:95:38:64:ff:59:61:5e:1c:39:c4:89:74:
                    01:e2:58:31:7c:db:7d:ce:96:0f:39:e1:41:bd:12:
                    7a:23:2d:d5:72:99:14:96:91:39:c7:b3:7b:78:1b:
                    fb:5c:03:93:10:7a:7e:03:3f:b9:44:08:74:55:fe:
                    99:f6:36:29:e3:d2:d0:98:51:83:28:6f:b9:da:ef:
                    a8:19:60:53:ec:02:e6:d5:4b:0a:30:d2:3d:44:8d:
                    98:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:72:09:31:05:35:54:71:5C:AE:36:E3:46:8B:D1:ED:B6:4B:14:5F
            X509v3 Authority Key Identifier:
                keyid:54:43:AD:95:24:CE:36:0F:9B:33:C4:BE:72:85:C6:2C:CC:9E:8F:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/62674DC29A839A80762D48C4CF6F8F2E42C55E1701859C29C6DD670D051BF3C7/0/5443AD9524CE360F9B33C4BE7285C62CCC9E8F65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5443AD9524CE360F9B33C4BE7285C62CCC9E8F65.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/62674DC29A839A80762D48C4CF6F8F2E42C55E1701859C29C6DD670D051BF3C7/0/323830333a333336303a3a2f33322d3332203d3e20323639373934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3360::/32

    Signature Algorithm: sha256WithRSAEncryption
         21:fe:a6:08:6b:ef:32:8d:ab:ea:51:b9:74:f5:73:8a:c3:89:
         25:a1:b8:83:c6:a6:94:f1:88:21:46:fe:97:48:0d:6e:99:d1:
         fd:99:ee:77:05:70:64:2b:e0:32:88:61:41:2c:4b:eb:24:20:
         43:9c:86:d4:13:eb:30:75:8a:99:0f:61:0c:87:a7:c0:ca:0d:
         d6:2a:4f:5c:cc:78:2a:ed:76:9e:f7:fc:b6:6b:39:4b:f5:e6:
         e7:1f:bb:dd:f0:81:dc:b0:d3:80:ad:e3:0c:5f:0c:74:2e:69:
         06:49:f9:85:cf:76:69:f1:27:ff:5e:bd:65:41:80:75:b6:87:
         58:88:42:a5:a3:5c:c2:fb:e9:58:11:eb:73:a8:6c:e1:31:c8:
         c5:30:03:87:5d:32:c3:90:e5:ec:c1:9b:df:49:c4:89:e3:91:
         89:e7:97:f0:6e:7f:e2:47:0a:1f:0f:ed:bd:c4:4e:dc:22:63:
         e1:82:73:3e:f5:95:69:eb:a0:ad:b1:a5:bb:11:11:cf:0a:a7:
         c8:83:b6:92:23:5f:ae:b9:71:36:2f:02:04:39:69:16:f5:9b:
         79:64:98:27:ad:3f:63:1e:4a:7b:4a:9c:a4:75:02:6d:49:46:
         b7:ee:62:b1:77:8b:20:36:6a:f3:6f:e9:6e:16:ca:aa:e6:7f:
         b2:de:54:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:04:37 2025 by rpki-client