Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/323830333a323336303a663030303a3a2f33362d3336203d3e20323639373832.roa
File:                     323830333a323336303a663030303a3a2f33362d3336203d3e20323639373832.roa (raw, json)
Hash identifier:          BmfzENOQ56xIrXkDlp+4+eoj/ntqkP9u5js774zI10Y=
Subject key identifier:   3E:33:A6:C5:E1:F5:E1:3D:48:58:0D:97:E8:44:68:CE:B5:F4:0E:9F
Certificate issuer:       /CN=01A51A04B7D920D1806F07B0F77D143B1C7FAAE1
Certificate serial:       42410E50CF1E573300EA47895DC1234EE0589F90
Authority key identifier: 01:A5:1A:04:B7:D9:20:D1:80:6F:07:B0:F7:7D:14:3B:1C:7F:AA:E1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/323830333a323336303a663030303a3a2f33362d3336203d3e20323639373832.roa
Signing time:             Tue 04 Feb 2025 18:15:56 +0000
ROA not before:           Tue 04 Feb 2025 18:10:56 +0000
ROA not after:            Tue 03 Feb 2026 18:15:56 +0000
asID:                     269782
IP address blocks:        2803:2360:f000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:41:0e:50:cf:1e:57:33:00:ea:47:89:5d:c1:23:4e:e0:58:9f:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01A51A04B7D920D1806F07B0F77D143B1C7FAAE1
        Validity
            Not Before: Feb  4 18:10:56 2025 GMT
            Not After : Feb  3 18:15:56 2026 GMT
        Subject: CN=3E33A6C5E1F5E13D48580D97E84468CEB5F40E9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:47:7f:91:c1:66:ac:67:b4:a4:33:ea:5e:77:
                    c0:e7:41:af:cd:11:6d:53:a0:ac:cb:db:a8:e5:18:
                    1e:a2:9a:ea:1a:ba:eb:fe:ae:35:b8:46:b8:24:c9:
                    68:33:aa:a5:1a:ae:a0:e0:06:5c:25:56:78:b3:90:
                    29:b5:d1:5c:98:80:55:23:6f:17:14:c1:ba:23:35:
                    7f:36:f7:05:b3:94:0c:a0:e8:d0:0d:68:10:53:70:
                    82:be:31:33:ba:c2:11:dc:9a:0a:10:c0:2e:9d:bf:
                    68:c3:c7:c8:b2:9c:83:5f:a9:be:1c:6f:d6:0a:26:
                    bf:57:8d:15:f4:15:7a:a2:0d:67:11:f7:7c:25:b5:
                    6d:3f:4e:f8:bf:97:2a:f6:93:fc:de:7a:34:d0:76:
                    dc:f5:9f:58:80:9a:07:55:4f:48:05:25:c3:28:87:
                    3e:cd:a2:13:97:d7:10:cf:f9:0e:34:13:aa:08:f6:
                    eb:13:5b:6e:1d:a2:24:ed:fe:9d:37:a6:4c:c1:29:
                    67:85:56:5d:e8:e9:a5:e6:a4:1a:cb:57:e1:ae:d1:
                    55:9e:fd:86:f3:66:78:fa:57:27:c5:55:e8:51:ad:
                    75:91:96:87:71:97:26:29:fa:04:5a:c3:16:95:8a:
                    5f:68:a0:c9:6e:76:47:e6:a6:0a:1f:54:c8:ff:05:
                    7a:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:33:A6:C5:E1:F5:E1:3D:48:58:0D:97:E8:44:68:CE:B5:F4:0E:9F
            X509v3 Authority Key Identifier:
                keyid:01:A5:1A:04:B7:D9:20:D1:80:6F:07:B0:F7:7D:14:3B:1C:7F:AA:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/323830333a323336303a663030303a3a2f33362d3336203d3e20323639373832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2360:f000::/36

    Signature Algorithm: sha256WithRSAEncryption
         45:33:94:9f:0e:37:60:5a:40:82:bf:81:96:d0:35:78:2b:da:
         f0:6d:70:71:6d:8d:48:20:4f:58:00:02:84:98:58:a3:d2:ff:
         7d:55:3d:7e:97:74:ce:c0:0d:66:1a:b8:27:ec:31:34:13:cc:
         ea:1a:4f:be:05:38:85:5d:4b:bb:48:ea:42:c7:f7:93:c4:66:
         43:a2:b4:c5:37:6d:3c:bb:70:9d:b3:6e:9b:3a:54:ad:f2:e7:
         37:29:d1:59:c1:54:e5:fd:1a:86:26:4c:38:c8:9b:9c:a5:2f:
         90:d5:7a:f7:a5:66:f9:fb:17:df:ca:99:3e:ec:df:49:ae:6a:
         2b:27:5b:38:f3:2f:ba:b5:90:67:c4:73:7d:d0:31:b3:f3:d4:
         76:0b:aa:79:16:0a:f4:16:e4:d2:27:4b:d3:1a:62:d1:0e:90:
         dd:41:75:87:f6:ea:5c:c6:be:21:7c:f0:71:5e:63:8b:56:5e:
         7d:1e:e2:b3:ca:0b:06:46:f4:42:f0:5a:9b:b4:f9:41:c9:a7:
         91:cf:57:8c:87:25:18:51:ff:ba:6c:de:14:59:a8:b5:47:26:
         d2:23:fd:c7:b5:74:46:b2:3a:f8:23:d1:0e:0d:53:bb:b5:e5:
         0d:87:a9:81:d9:25:e9:cb:ae:a0:db:af:93:1e:50:e9:a0:8e:
         30:04:18:d5
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:05:37 2025 by rpki-client