Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/323830333a623065303a623030313a3a2f34382d3438203d3e203634313330.roa
File:                     323830333a623065303a623030313a3a2f34382d3438203d3e203634313330.roa (raw, json)
Hash identifier:          sgMtZs4NmFWfwz/jPeR7MTpn6Dn4sJGefrCNYYjIfwg=
Subject key identifier:   3B:54:E6:31:DF:9B:40:33:46:6C:3A:0C:EC:6E:89:A5:A2:22:0B:1E
Certificate issuer:       /CN=B9661B0E7FC75ED767D18B56FC749BAED21FC195
Certificate serial:       6F4AEAA62AFCD4DE5D67D89F8D05AED7FB3611D6
Authority key identifier: B9:66:1B:0E:7F:C7:5E:D7:67:D1:8B:56:FC:74:9B:AE:D2:1F:C1:95
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/323830333a623065303a623030313a3a2f34382d3438203d3e203634313330.roa
Signing time:             Wed 04 Jun 2025 15:55:00 +0000
ROA not before:           Wed 04 Jun 2025 15:50:00 +0000
ROA not after:            Wed 03 Jun 2026 15:55:00 +0000
asID:                     64130
IP address blocks:        2803:b0e0:b001::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.crl
                          rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 21:11:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:4a:ea:a6:2a:fc:d4:de:5d:67:d8:9f:8d:05:ae:d7:fb:36:11:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9661B0E7FC75ED767D18B56FC749BAED21FC195
        Validity
            Not Before: Jun  4 15:50:00 2025 GMT
            Not After : Jun  3 15:55:00 2026 GMT
        Subject: CN=3B54E631DF9B4033466C3A0CEC6E89A5A2220B1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:a9:41:17:dd:e3:2a:b8:41:68:ea:28:fc:f0:
                    ab:65:2b:18:fd:de:d9:79:c9:38:3d:22:75:a2:69:
                    6b:7e:41:a4:8b:3e:de:b6:16:40:df:d6:90:8e:ed:
                    f4:ac:49:19:f2:56:4c:fc:43:e5:b8:09:5a:cb:62:
                    dc:7d:0f:c2:2d:64:e9:b1:6b:16:9c:b9:09:87:c2:
                    e0:d0:e0:87:0f:29:40:86:0b:c0:47:c6:7a:3c:76:
                    4f:98:68:63:b0:a7:98:b1:65:bc:9b:fd:8f:16:e4:
                    be:c6:42:f9:d3:45:51:ac:1d:7e:d7:6f:c1:ff:0b:
                    c0:aa:21:a5:a1:d3:4a:b9:c2:f5:fa:da:5b:a4:76:
                    80:88:1a:d0:87:9d:31:dd:3d:8a:08:46:1a:19:af:
                    dc:ae:88:0c:6d:b9:7f:06:46:4a:e5:f4:6a:01:40:
                    6f:b7:bc:4d:d0:10:0c:db:c6:c5:0d:77:9a:94:6f:
                    88:18:74:3d:32:cb:39:db:8f:ca:a4:8e:2d:88:4d:
                    2f:be:bf:b6:52:bf:8a:26:c1:99:cd:78:d8:56:31:
                    12:6e:4e:15:0a:87:06:62:b6:56:29:c9:8b:d3:1d:
                    91:f1:a7:d9:b6:56:c9:93:01:2e:fb:0e:5b:d5:d7:
                    47:7d:d0:62:6f:d2:18:08:4c:b6:93:66:cf:eb:94:
                    85:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:54:E6:31:DF:9B:40:33:46:6C:3A:0C:EC:6E:89:A5:A2:22:0B:1E
            X509v3 Authority Key Identifier:
                keyid:B9:66:1B:0E:7F:C7:5E:D7:67:D1:8B:56:FC:74:9B:AE:D2:1F:C1:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/323830333a623065303a623030313a3a2f34382d3438203d3e203634313330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b0e0:b001::/48

    Signature Algorithm: sha256WithRSAEncryption
         aa:95:49:af:6d:64:d5:83:77:cf:59:35:66:cc:6a:70:2e:cd:
         38:a3:88:49:23:82:ee:bb:7e:a1:f5:79:00:bf:44:98:db:af:
         a8:4c:b1:9f:91:2d:e1:06:68:a7:7c:98:3f:0f:8b:27:ff:f3:
         86:05:02:9a:47:9d:3d:5e:92:cc:cc:e7:99:5b:d8:99:74:af:
         f3:0e:0b:76:03:19:7b:e8:26:1d:6f:4e:19:43:b2:98:fb:13:
         76:5d:08:df:36:79:93:7f:39:9e:d1:da:14:95:06:a1:b4:b2:
         40:c1:28:2a:9c:bf:3d:44:a8:63:76:a9:3a:c9:24:2c:ca:fb:
         65:db:a7:b3:41:28:55:c9:70:71:43:99:5a:ec:9e:ce:32:70:
         2f:9c:1a:53:7b:bb:b8:0c:4f:f1:f2:a2:e2:3c:c1:06:8e:0b:
         11:b6:9e:bf:f6:01:fa:66:7e:d6:24:eb:91:28:72:92:7e:1b:
         d1:78:8e:13:df:5a:36:2b:3d:2d:62:4d:c6:a9:48:a4:20:eb:
         67:d6:67:a8:cf:95:56:90:e9:1f:35:75:10:83:5a:66:c9:52:
         b7:6e:f7:b1:a6:31:95:2c:19:08:f9:78:0b:fe:c7:e4:5c:07:
         83:0f:57:a0:73:4b:19:3f:8e:ef:17:dd:17:f1:c2:4a:c7:16:
         14:ee:ad:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 11:26:46 2025 by rpki-client