Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6C7652360DAEFC4809109B92972A8067FE01A587C50B17269FDE078A78BC4F2D/0/323830333a323463303a3a2f33322d3438203d3e20323634373936.roa
File:                     323830333a323463303a3a2f33322d3438203d3e20323634373936.roa (raw, json)
Hash identifier:          oMh8HDqjAXh8HP/hZBIxgiRJZXx9zpAcq+a8txVSaVs=
Subject key identifier:   8D:C4:95:61:13:B8:1F:88:E5:22:FF:FB:33:2D:64:BD:79:C0:FB:44
Certificate issuer:       /CN=7ED9ACC4C7390FB2C083BA37C144A9057A422D2D
Certificate serial:       196A022D61564F93BE6B9C54807010328EF3C5AC
Authority key identifier: 7E:D9:AC:C4:C7:39:0F:B2:C0:83:BA:37:C1:44:A9:05:7A:42:2D:2D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7ED9ACC4C7390FB2C083BA37C144A9057A422D2D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6C7652360DAEFC4809109B92972A8067FE01A587C50B17269FDE078A78BC4F2D/0/323830333a323463303a3a2f33322d3438203d3e20323634373936.roa
Signing time:             Tue 04 Feb 2025 18:05:42 +0000
ROA not before:           Tue 04 Feb 2025 18:00:42 +0000
ROA not after:            Tue 03 Feb 2026 18:05:42 +0000
asID:                     264796
IP address blocks:        2803:24c0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6C7652360DAEFC4809109B92972A8067FE01A587C50B17269FDE078A78BC4F2D/0/7ED9ACC4C7390FB2C083BA37C144A9057A422D2D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6C7652360DAEFC4809109B92972A8067FE01A587C50B17269FDE078A78BC4F2D/0/7ED9ACC4C7390FB2C083BA37C144A9057A422D2D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7ED9ACC4C7390FB2C083BA37C144A9057A422D2D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:6a:02:2d:61:56:4f:93:be:6b:9c:54:80:70:10:32:8e:f3:c5:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ED9ACC4C7390FB2C083BA37C144A9057A422D2D
        Validity
            Not Before: Feb  4 18:00:42 2025 GMT
            Not After : Feb  3 18:05:42 2026 GMT
        Subject: CN=8DC4956113B81F88E522FFFB332D64BD79C0FB44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:4c:a2:1a:43:fc:f2:99:9b:fa:e9:0b:83:5e:
                    df:18:b7:42:83:cb:90:63:eb:70:b2:66:1f:2c:51:
                    e1:03:2b:88:58:9c:d7:d7:4d:70:6f:72:99:12:51:
                    1a:48:26:43:02:11:62:05:75:cc:59:af:c8:09:df:
                    44:7c:ab:75:e7:cb:50:0c:05:e5:d2:e2:b9:c7:dd:
                    cc:5b:2d:46:f1:c0:19:5e:ad:df:15:3d:53:52:76:
                    34:20:b1:53:b3:4b:7b:63:ec:6c:87:b5:2f:58:6a:
                    5d:dc:ab:13:d4:09:9f:9b:f2:03:da:d1:21:a7:af:
                    0c:5b:e3:ef:00:ab:d2:36:d6:a5:29:8c:27:b6:c0:
                    5e:03:10:a4:59:8a:c1:9f:8f:51:d8:26:16:4b:54:
                    2c:b9:06:23:9f:d4:38:ee:1b:50:e4:df:f6:46:4b:
                    1e:9c:a8:a6:bd:41:ad:76:90:61:7d:7f:d6:e1:5f:
                    34:b2:1f:4c:b3:e9:c7:b2:59:58:3e:1b:2d:98:fd:
                    27:1d:4e:c5:5e:4b:9a:6f:d8:b7:48:c5:11:59:09:
                    6f:6b:1a:01:72:64:35:b7:44:c4:57:dc:83:91:21:
                    c3:b4:fe:af:9d:d2:e0:c3:3c:f8:85:5e:aa:39:2c:
                    38:b3:76:2f:7b:1f:b4:43:fa:e7:9e:d8:c5:b8:b7:
                    d2:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:C4:95:61:13:B8:1F:88:E5:22:FF:FB:33:2D:64:BD:79:C0:FB:44
            X509v3 Authority Key Identifier:
                keyid:7E:D9:AC:C4:C7:39:0F:B2:C0:83:BA:37:C1:44:A9:05:7A:42:2D:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6C7652360DAEFC4809109B92972A8067FE01A587C50B17269FDE078A78BC4F2D/0/7ED9ACC4C7390FB2C083BA37C144A9057A422D2D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7ED9ACC4C7390FB2C083BA37C144A9057A422D2D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6C7652360DAEFC4809109B92972A8067FE01A587C50B17269FDE078A78BC4F2D/0/323830333a323463303a3a2f33322d3438203d3e20323634373936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:24c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         30:e8:92:10:f9:0c:5f:e0:d3:35:72:ad:8a:80:fc:02:e4:39:
         1e:a1:04:e3:74:10:7f:df:02:39:5d:dc:0e:ba:0e:bf:b6:e0:
         58:3a:e5:e5:7f:4d:33:63:8c:0c:37:e7:40:5d:4c:76:e0:0f:
         cb:23:90:6c:61:95:42:4b:25:04:15:dc:61:8c:53:f6:4b:6e:
         8e:6e:0a:2c:7b:0f:de:52:b8:fb:b6:0d:7d:a7:a9:9d:0f:69:
         86:dc:9a:12:4e:fd:ee:6e:00:f9:98:fd:da:4d:45:07:eb:42:
         52:2a:e0:b8:ff:b9:a2:d5:48:59:4a:00:85:72:bf:49:8b:1b:
         a0:1d:47:10:1e:f0:8f:16:f4:65:6a:8c:f3:e9:78:50:16:1d:
         1c:0a:f1:74:a2:33:b7:56:b3:46:e4:cf:b3:ef:84:a5:a4:91:
         15:20:f4:c9:fe:70:83:a2:e4:51:a0:95:b1:74:d0:c1:68:d0:
         b5:0a:92:d1:c4:bf:4b:c6:09:c6:79:ac:8a:e6:2d:ae:62:ec:
         53:ac:c2:d4:74:81:f3:40:59:24:4c:44:b3:13:10:36:72:1b:
         89:e2:1f:8b:eb:d5:ef:73:71:fc:b9:b2:f9:91:04:82:5d:b3:
         88:ce:cc:11:7a:5f:6a:d3:a9:19:9b:b2:bd:0d:10:5d:49:9c:
         d2:df:23:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:59:03 2025 by rpki-client