Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/72D8F6687C54A870ACE71A32E06DA4C25D3ECA2212104A275238420D3E9A4B1F/0/323830333a336639303a3a2f33322d3438203d3e20323733303836.roa
File:                     323830333a336639303a3a2f33322d3438203d3e20323733303836.roa (raw, json)
Hash identifier:          SxlzzQTzkzMgEXLH/jQuCuNAQV4gDt38QXO5IBhK3to=
Subject key identifier:   B6:C6:65:1D:41:70:93:B6:D1:4E:64:2C:AD:72:7C:D8:2D:4F:8B:E9
Certificate issuer:       /CN=4F756488F3CE4E25A1F0A875271CD9C70EACCA4C
Certificate serial:       4A5F94401CCF1E952F4EEB477AAB42321E2BF9A2
Authority key identifier: 4F:75:64:88:F3:CE:4E:25:A1:F0:A8:75:27:1C:D9:C7:0E:AC:CA:4C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4F756488F3CE4E25A1F0A875271CD9C70EACCA4C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/72D8F6687C54A870ACE71A32E06DA4C25D3ECA2212104A275238420D3E9A4B1F/0/323830333a336639303a3a2f33322d3438203d3e20323733303836.roa
Signing time:             Fri 07 Feb 2025 03:35:00 +0000
ROA not before:           Fri 07 Feb 2025 03:30:00 +0000
ROA not after:            Fri 06 Feb 2026 03:35:00 +0000
asID:                     273086
IP address blocks:        2803:3f90::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/72D8F6687C54A870ACE71A32E06DA4C25D3ECA2212104A275238420D3E9A4B1F/0/4F756488F3CE4E25A1F0A875271CD9C70EACCA4C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/72D8F6687C54A870ACE71A32E06DA4C25D3ECA2212104A275238420D3E9A4B1F/0/4F756488F3CE4E25A1F0A875271CD9C70EACCA4C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4F756488F3CE4E25A1F0A875271CD9C70EACCA4C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 23:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:5f:94:40:1c:cf:1e:95:2f:4e:eb:47:7a:ab:42:32:1e:2b:f9:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F756488F3CE4E25A1F0A875271CD9C70EACCA4C
        Validity
            Not Before: Feb  7 03:30:00 2025 GMT
            Not After : Feb  6 03:35:00 2026 GMT
        Subject: CN=B6C6651D417093B6D14E642CAD727CD82D4F8BE9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:34:c4:a4:5c:b0:37:ef:d9:c1:10:56:f7:9e:
                    c7:df:5e:a9:fb:9d:3a:e4:37:c5:8c:fa:df:44:98:
                    c1:29:ba:db:ac:62:c0:82:a4:46:a9:fd:55:14:7c:
                    e9:a8:68:d9:09:42:2c:7f:c8:f6:03:0c:f9:97:0f:
                    a2:7f:a0:0f:7a:b9:aa:42:64:2b:2e:87:55:c5:62:
                    75:e7:52:17:b7:37:73:67:1f:48:78:43:13:05:73:
                    96:f3:ac:6d:a8:e0:12:31:ca:31:92:8e:2d:61:c2:
                    2b:c1:84:60:05:35:76:03:f9:17:3d:56:69:96:c8:
                    d3:86:20:38:b2:ef:4a:32:07:d6:95:41:11:64:70:
                    1c:0b:2a:8e:fd:07:24:ee:16:bc:75:55:e1:17:d6:
                    c1:06:58:43:b4:cb:fc:73:f8:31:49:91:fc:9b:bc:
                    77:e9:09:c7:f9:f3:4c:b3:d4:3a:59:ca:00:24:7f:
                    7f:e3:6a:93:31:b9:a9:1c:94:e3:2b:66:89:92:87:
                    d6:ac:07:6c:65:25:a2:ce:bf:d4:fd:76:a7:e8:18:
                    ae:29:91:59:10:2e:06:19:db:34:f4:d7:05:bc:44:
                    0c:13:ed:7b:bc:45:ba:51:9a:ac:aa:57:54:d6:d7:
                    ed:7d:84:30:b1:e6:62:19:0d:9a:3d:a6:00:4e:60:
                    1d:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:C6:65:1D:41:70:93:B6:D1:4E:64:2C:AD:72:7C:D8:2D:4F:8B:E9
            X509v3 Authority Key Identifier:
                keyid:4F:75:64:88:F3:CE:4E:25:A1:F0:A8:75:27:1C:D9:C7:0E:AC:CA:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/72D8F6687C54A870ACE71A32E06DA4C25D3ECA2212104A275238420D3E9A4B1F/0/4F756488F3CE4E25A1F0A875271CD9C70EACCA4C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4F756488F3CE4E25A1F0A875271CD9C70EACCA4C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/72D8F6687C54A870ACE71A32E06DA4C25D3ECA2212104A275238420D3E9A4B1F/0/323830333a336639303a3a2f33322d3438203d3e20323733303836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3f90::/32

    Signature Algorithm: sha256WithRSAEncryption
         0d:5c:fc:d8:27:d6:c1:5f:b0:74:75:56:e4:f2:95:8d:d6:2a:
         69:21:83:41:90:d4:6b:22:e3:b3:99:c9:1d:35:ce:12:9e:da:
         fc:9e:0b:a1:72:6b:b3:c2:a0:4a:96:25:06:9c:bf:2d:d2:92:
         eb:b4:ab:94:f8:50:d8:c4:24:b8:44:3e:ff:9c:64:e9:27:2e:
         43:d0:3d:08:5b:9e:04:19:35:ed:40:67:43:ed:b3:42:63:57:
         cf:c6:ea:88:55:b7:e2:0b:27:ca:d8:23:3b:c5:29:ba:b3:5e:
         b4:0b:0a:58:1a:8d:fb:77:5b:82:3c:6e:41:db:b9:0a:73:91:
         cb:f7:8a:6c:2c:fe:89:b6:6e:16:5c:80:cd:c7:1d:63:ec:19:
         72:55:b6:92:ad:be:2e:38:55:7e:45:d6:39:67:38:55:9b:27:
         35:1c:bf:43:7c:d8:a5:d3:cd:71:50:6c:19:65:fc:32:a5:71:
         13:d9:e3:fd:f4:eb:39:e9:88:6d:55:97:e9:b5:21:b7:4b:ad:
         9c:52:b0:ee:c8:f6:fd:40:15:c7:c2:90:18:52:bd:cf:ff:39:
         16:f4:2c:fa:55:1d:40:f1:42:1a:31:93:00:ae:80:94:df:79:
         fd:54:0d:96:d3:93:1e:3f:c8:e3:b6:86:04:af:71:d0:78:1e:
         86:9e:9e:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 02:45:15 2025 by rpki-client