Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6B448B2F99F750DEE4FB3820BFDEEA5C070AC78AC1DDEAE4BA5B472B580DA264/0/323830333a363630343a3a2f33322d3634203d3e203238303735.roa
File:                     323830333a363630343a3a2f33322d3634203d3e203238303735.roa (raw, json)
Hash identifier:          zBrB4tSFaA2ReTYe6g/DcgOrCrUqpyLbGBaV10mzE/Q=
Subject key identifier:   F6:DB:D4:B3:4F:22:0A:4E:4E:7A:21:40:E1:C7:3A:84:B2:1C:96:2A
Certificate issuer:       /CN=CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18
Certificate serial:       5560FFBE72D2CBF24137C46F6DE9ADD54D49B6ED
Authority key identifier: CC:C7:DF:B2:C7:C9:FC:F2:F1:14:06:14:76:EC:B8:7B:57:3A:4E:18
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6B448B2F99F750DEE4FB3820BFDEEA5C070AC78AC1DDEAE4BA5B472B580DA264/0/323830333a363630343a3a2f33322d3634203d3e203238303735.roa
Signing time:             Tue 04 Feb 2025 19:59:03 +0000
ROA not before:           Tue 04 Feb 2025 19:54:03 +0000
ROA not after:            Tue 03 Feb 2026 19:59:03 +0000
asID:                     28075
IP address blocks:        2803:6604::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6B448B2F99F750DEE4FB3820BFDEEA5C070AC78AC1DDEAE4BA5B472B580DA264/0/CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6B448B2F99F750DEE4FB3820BFDEEA5C070AC78AC1DDEAE4BA5B472B580DA264/0/CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:60:ff:be:72:d2:cb:f2:41:37:c4:6f:6d:e9:ad:d5:4d:49:b6:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18
        Validity
            Not Before: Feb  4 19:54:03 2025 GMT
            Not After : Feb  3 19:59:03 2026 GMT
        Subject: CN=F6DBD4B34F220A4E4E7A2140E1C73A84B21C962A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:77:07:87:6e:d7:1f:48:78:22:02:b7:aa:c3:
                    52:fd:e7:79:8e:52:09:68:bf:13:ba:4e:98:a5:a7:
                    fe:5d:9f:69:9d:12:d9:4a:74:af:9a:d3:a5:ee:8e:
                    ea:d6:59:3f:ea:c2:59:48:f9:83:a3:29:f4:2b:bf:
                    a6:97:05:ea:e8:bf:fa:d7:83:9e:32:30:aa:2b:c2:
                    69:70:7f:a6:59:37:86:99:03:be:0a:b0:ce:d4:00:
                    16:ad:a7:c3:ec:2b:6c:24:33:42:bd:87:5f:dc:14:
                    7a:7c:73:97:55:c3:52:bd:00:b6:6a:32:a3:75:b2:
                    4f:c5:2e:76:d3:be:51:52:0f:7c:09:90:de:48:ca:
                    7b:0f:7f:bf:ac:aa:48:4e:85:32:44:e9:d3:31:fd:
                    a8:16:99:8c:08:11:de:95:59:e3:eb:7a:a7:e3:11:
                    a7:8d:9b:a5:e7:76:86:1b:47:a8:f6:76:fc:86:5f:
                    ba:af:cc:3b:3a:51:f5:87:b0:d6:43:47:11:ae:35:
                    36:4d:26:19:9b:b7:af:05:81:65:9c:4e:53:22:dd:
                    3b:6b:c2:30:8f:6b:2c:43:a5:00:22:45:a4:93:54:
                    57:9f:da:32:ca:3f:96:13:7a:8c:ff:00:e1:6e:56:
                    07:ab:76:a7:16:5e:c0:d6:31:2a:c8:ab:eb:8b:a0:
                    4a:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:DB:D4:B3:4F:22:0A:4E:4E:7A:21:40:E1:C7:3A:84:B2:1C:96:2A
            X509v3 Authority Key Identifier:
                keyid:CC:C7:DF:B2:C7:C9:FC:F2:F1:14:06:14:76:EC:B8:7B:57:3A:4E:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6B448B2F99F750DEE4FB3820BFDEEA5C070AC78AC1DDEAE4BA5B472B580DA264/0/CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6B448B2F99F750DEE4FB3820BFDEEA5C070AC78AC1DDEAE4BA5B472B580DA264/0/323830333a363630343a3a2f33322d3634203d3e203238303735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6604::/32

    Signature Algorithm: sha256WithRSAEncryption
         af:c9:95:82:ec:b1:92:fc:cd:90:b2:9f:55:b4:51:dc:74:9b:
         a8:76:d5:b6:9a:96:20:2f:4b:60:01:7a:92:2d:75:97:56:86:
         8b:9b:15:65:e9:24:50:0a:c6:1a:b9:5d:77:91:ae:6a:42:0e:
         13:2e:c0:f8:cd:7f:b6:28:5b:7c:89:d8:d7:a9:1b:4d:c2:d8:
         fc:b2:77:25:b9:7d:7d:09:0f:93:88:cf:39:b0:78:ed:e8:58:
         7f:5f:db:b0:b3:bb:4a:02:89:69:c3:cd:58:1c:a7:bc:cc:1f:
         e5:de:78:20:ed:98:8b:6b:5f:f0:27:a4:be:56:62:a2:30:d2:
         d6:e0:aa:15:d7:fb:e9:83:35:7e:6a:12:93:eb:94:22:a0:96:
         51:e0:30:75:92:c4:11:9a:d9:65:29:14:91:0e:1f:b2:b5:7d:
         7c:ca:93:52:55:0b:82:78:32:f1:d3:93:ec:a5:3d:42:56:29:
         de:dd:b0:0e:e1:3e:54:3f:81:14:15:96:6d:6a:bb:12:a4:4d:
         f0:24:6f:a9:b6:3b:84:56:83:10:78:24:94:58:b7:0a:0c:61:
         f3:78:e6:c2:6d:0c:ab:4f:48:55:36:3d:c0:8a:32:2e:b5:0a:
         48:b4:0b:b7:8b:0d:15:d3:af:87:09:a1:7d:f0:88:86:60:75:
         6a:6b:74:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:06:27 2025 by rpki-client