Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/714AA9E6363D040BAE08801005DD8A8335AE50D46DFF53B3359E46BCAF42F0D6/0/323830303a3637303a3a2f33322d3332203d3e20323632353839.roa
File:                     323830303a3637303a3a2f33322d3332203d3e20323632353839.roa (raw, json)
Hash identifier:          LIc8g4j12EjSBq6s3uLe0ei4dmDU3JeReg3vmDdykiw=
Subject key identifier:   28:C6:6B:F0:6E:78:6C:60:ED:70:93:4F:83:C5:3A:16:DC:7B:18:9A
Certificate issuer:       /CN=2152913C2D5333E6F48DA45B339F5C285841364B
Certificate serial:       42ADB4976B6205225E13A0526C1F1348686DE7B4
Authority key identifier: 21:52:91:3C:2D:53:33:E6:F4:8D:A4:5B:33:9F:5C:28:58:41:36:4B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2152913C2D5333E6F48DA45B339F5C285841364B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/714AA9E6363D040BAE08801005DD8A8335AE50D46DFF53B3359E46BCAF42F0D6/0/323830303a3637303a3a2f33322d3332203d3e20323632353839.roa
Signing time:             Fri 25 Jul 2025 13:25:00 +0000
ROA not before:           Fri 25 Jul 2025 13:20:00 +0000
ROA not after:            Fri 24 Jul 2026 13:25:00 +0000
asID:                     262589
IP address blocks:        2800:670::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/714AA9E6363D040BAE08801005DD8A8335AE50D46DFF53B3359E46BCAF42F0D6/0/2152913C2D5333E6F48DA45B339F5C285841364B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/714AA9E6363D040BAE08801005DD8A8335AE50D46DFF53B3359E46BCAF42F0D6/0/2152913C2D5333E6F48DA45B339F5C285841364B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2152913C2D5333E6F48DA45B339F5C285841364B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 03 Aug 2025 18:38:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:ad:b4:97:6b:62:05:22:5e:13:a0:52:6c:1f:13:48:68:6d:e7:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2152913C2D5333E6F48DA45B339F5C285841364B
        Validity
            Not Before: Jul 25 13:20:00 2025 GMT
            Not After : Jul 24 13:25:00 2026 GMT
        Subject: CN=28C66BF06E786C60ED70934F83C53A16DC7B189A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:33:04:fd:14:56:66:ba:7e:3b:bf:af:dc:9e:
                    4b:60:a7:8c:18:22:44:56:6c:94:4c:84:ee:23:6a:
                    f6:41:f1:91:5d:0d:fc:41:4a:27:e0:22:6a:31:25:
                    7b:bb:4f:bc:a0:99:5e:00:3d:c5:9b:a2:c1:1d:11:
                    57:37:75:3e:ba:2f:78:22:be:79:7b:b1:2b:be:21:
                    53:85:19:8f:11:08:26:36:5a:58:7d:01:d4:df:99:
                    90:c5:e2:10:12:3f:8c:88:79:3c:ae:16:56:bf:59:
                    62:37:d5:ac:51:d6:d8:2a:af:3f:ad:e2:38:0f:35:
                    1e:93:77:26:fd:f3:8b:03:67:5a:62:5f:53:7f:71:
                    0f:5a:86:dc:93:61:43:df:11:ec:53:2c:d4:b6:a5:
                    ce:54:d8:f9:30:f2:47:fd:f5:f4:45:4a:f9:07:4f:
                    d3:29:f7:fc:8b:09:0f:67:a6:8b:79:9b:12:f8:38:
                    1e:26:68:f7:cb:ad:4a:8c:32:73:2c:af:27:a8:72:
                    bc:37:56:10:fc:26:b1:4b:68:96:79:bb:80:bc:09:
                    1b:01:aa:b4:8c:07:02:01:b0:3d:61:97:c3:3b:68:
                    95:ad:72:74:63:f3:5a:9d:a2:1b:ba:1f:22:ae:c3:
                    5f:98:fc:5f:cd:0c:93:8c:d9:7e:6a:34:67:df:07:
                    2a:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:C6:6B:F0:6E:78:6C:60:ED:70:93:4F:83:C5:3A:16:DC:7B:18:9A
            X509v3 Authority Key Identifier:
                keyid:21:52:91:3C:2D:53:33:E6:F4:8D:A4:5B:33:9F:5C:28:58:41:36:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/714AA9E6363D040BAE08801005DD8A8335AE50D46DFF53B3359E46BCAF42F0D6/0/2152913C2D5333E6F48DA45B339F5C285841364B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2152913C2D5333E6F48DA45B339F5C285841364B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/714AA9E6363D040BAE08801005DD8A8335AE50D46DFF53B3359E46BCAF42F0D6/0/323830303a3637303a3a2f33322d3332203d3e20323632353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:670::/32

    Signature Algorithm: sha256WithRSAEncryption
         80:33:46:29:4f:ec:82:59:65:63:ab:43:73:2a:69:3b:58:29:
         d3:ed:1b:d2:a0:eb:0a:9c:c6:ae:ae:4a:78:88:38:6f:78:58:
         1e:a2:88:b3:36:be:ea:b7:95:a1:b5:da:ee:3f:6e:bc:b5:7f:
         69:11:ba:3b:02:dd:d1:ec:4d:4b:1f:7f:4f:ff:2f:57:07:13:
         41:37:21:dc:f7:fa:e8:1e:95:74:36:0d:29:aa:e4:5c:12:cd:
         2a:7c:70:52:97:0d:b9:ea:1d:fc:8a:5a:9d:dc:a9:bb:b0:9c:
         e7:42:61:00:0d:1d:06:a9:44:ef:2c:13:38:c9:58:eb:5f:87:
         1c:e3:cd:19:2c:1d:42:75:df:9b:9e:f4:82:32:c6:b9:e3:96:
         0b:e1:42:84:85:0e:95:51:35:bb:e1:5e:ce:9b:53:39:3b:36:
         97:cd:da:db:44:a3:e0:5a:06:e7:6f:49:b7:e5:0e:63:d4:cb:
         71:dd:26:c7:c8:fd:81:e9:ca:6b:f3:76:46:65:b7:7a:fc:e1:
         08:0f:4d:66:25:58:e4:48:7f:eb:83:1a:5f:9d:04:8e:1e:d3:
         7e:44:fe:dd:36:b8:83:9a:27:45:e1:02:ac:e2:26:dc:b0:3a:
         04:0d:4f:79:51:2b:53:24:fb:24:ae:34:4e:b3:60:79:9e:09:
         65:e6:9b:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 04:38:16 2025 by rpki-client