Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7DEC94D7F5FA7DBCED768551B0F81E515B00E6C71BA1EB2F75850F62C2FA7031/0/323830333a3538303a3a2f33322d3438203d3e203631343439.roa
File:                     323830333a3538303a3a2f33322d3438203d3e203631343439.roa (raw, json)
Hash identifier:          X3adZnV60dwdRi/gOpY/hmrf4ILIYdUsprWZYobge+o=
Subject key identifier:   63:F7:16:C6:CB:B4:64:1F:66:3C:34:F7:CF:55:F5:BA:98:0C:13:65
Certificate issuer:       /CN=FC36177FB5D3BE96FC909B995D58454E8724B088
Certificate serial:       E1B5A7567CB775726981707512C25C8844C222
Authority key identifier: FC:36:17:7F:B5:D3:BE:96:FC:90:9B:99:5D:58:45:4E:87:24:B0:88
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC36177FB5D3BE96FC909B995D58454E8724B088.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7DEC94D7F5FA7DBCED768551B0F81E515B00E6C71BA1EB2F75850F62C2FA7031/0/323830333a3538303a3a2f33322d3438203d3e203631343439.roa
Signing time:             Tue 04 Feb 2025 18:31:02 +0000
ROA not before:           Tue 04 Feb 2025 18:26:02 +0000
ROA not after:            Tue 03 Feb 2026 18:31:02 +0000
asID:                     61449
IP address blocks:        2803:580::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7DEC94D7F5FA7DBCED768551B0F81E515B00E6C71BA1EB2F75850F62C2FA7031/0/FC36177FB5D3BE96FC909B995D58454E8724B088.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7DEC94D7F5FA7DBCED768551B0F81E515B00E6C71BA1EB2F75850F62C2FA7031/0/FC36177FB5D3BE96FC909B995D58454E8724B088.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC36177FB5D3BE96FC909B995D58454E8724B088.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 20:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            e1:b5:a7:56:7c:b7:75:72:69:81:70:75:12:c2:5c:88:44:c2:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC36177FB5D3BE96FC909B995D58454E8724B088
        Validity
            Not Before: Feb  4 18:26:02 2025 GMT
            Not After : Feb  3 18:31:02 2026 GMT
        Subject: CN=63F716C6CBB4641F663C34F7CF55F5BA980C1365
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:2e:17:c4:64:02:90:44:6c:ca:8c:55:e6:b5:
                    1a:f8:9a:d9:86:68:ca:a7:53:5c:ac:23:b4:0d:fb:
                    ca:99:42:81:a9:16:af:c9:70:a0:be:10:48:f9:ff:
                    ce:27:c1:36:3b:57:6a:b9:45:5f:6e:d5:47:50:05:
                    2e:af:4b:56:c7:f0:33:b6:a9:d1:e8:06:1b:e0:e4:
                    34:e9:c8:d0:db:99:b8:d7:8b:61:73:9d:a6:cd:45:
                    8f:ca:d7:6d:fb:7e:69:35:db:fe:36:34:f2:16:92:
                    f9:68:a2:9e:cc:92:e5:23:76:81:5d:05:a5:23:32:
                    ca:3e:b1:f8:24:b8:ca:38:b4:e0:96:3d:55:07:63:
                    23:00:18:50:36:3b:36:d5:0e:e5:2b:bb:4b:6d:46:
                    af:b7:f0:db:19:4b:53:93:50:d8:2e:30:27:33:39:
                    25:d0:a4:3a:9d:57:57:21:90:73:a9:cc:18:26:2f:
                    ba:73:67:e5:0a:b2:45:40:dd:a4:80:0b:01:f3:4e:
                    d3:f7:46:eb:10:1f:80:5e:e4:ee:8d:d7:90:6a:c4:
                    15:ae:f0:28:64:c2:da:5e:c4:39:ae:ed:e6:d9:27:
                    78:15:ce:3e:50:b8:47:7d:3d:9b:e4:b2:2c:6b:3d:
                    51:42:18:83:b3:7c:e2:f1:b7:8a:64:bf:0e:29:71:
                    de:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:F7:16:C6:CB:B4:64:1F:66:3C:34:F7:CF:55:F5:BA:98:0C:13:65
            X509v3 Authority Key Identifier:
                keyid:FC:36:17:7F:B5:D3:BE:96:FC:90:9B:99:5D:58:45:4E:87:24:B0:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7DEC94D7F5FA7DBCED768551B0F81E515B00E6C71BA1EB2F75850F62C2FA7031/0/FC36177FB5D3BE96FC909B995D58454E8724B088.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC36177FB5D3BE96FC909B995D58454E8724B088.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7DEC94D7F5FA7DBCED768551B0F81E515B00E6C71BA1EB2F75850F62C2FA7031/0/323830333a3538303a3a2f33322d3438203d3e203631343439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:580::/32

    Signature Algorithm: sha256WithRSAEncryption
         4c:55:09:56:45:8e:4e:f0:32:de:bc:cf:ae:5c:7a:47:b5:c5:
         28:01:8f:95:3b:32:b7:eb:88:74:89:fb:c6:27:68:36:a5:94:
         85:89:40:91:ef:76:9d:19:59:d6:4b:da:36:1a:64:70:92:15:
         63:14:0a:b7:54:ea:71:ba:22:62:f5:01:b2:c7:10:fa:7a:c7:
         2d:29:74:55:44:09:20:dd:7a:ae:c6:56:9d:e6:f9:f8:9a:e2:
         96:24:fd:f4:62:8f:11:36:b6:12:a6:14:4c:d4:29:8b:ca:8f:
         7a:8d:e4:66:01:ab:c1:40:a7:56:1d:1f:36:1d:fe:60:f7:ea:
         43:c2:7c:5a:93:c1:0c:91:47:5d:45:37:c2:9b:c4:28:00:68:
         0e:2f:91:d6:49:79:8e:51:47:5d:9a:0e:36:8f:13:42:4b:d3:
         27:c1:a6:49:51:17:30:b3:31:d8:65:3c:6a:1b:08:15:0a:bf:
         52:7d:45:90:b1:d6:e0:6c:97:d7:0f:b1:19:58:41:af:49:05:
         23:55:78:76:e0:92:d0:24:49:a8:75:d9:fe:ac:ad:8f:66:40:
         60:f7:0c:43:1c:b3:72:7f:ff:62:0d:b6:10:4e:c0:80:6d:fb:
         1d:96:b8:e3:3a:c6:2e:40:36:4e:0a:89:2a:cb:ab:50:d9:05:
         e5:96:0e:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 21:09:01 2025 by rpki-client