Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/323830333a333338303a343030303a3a2f33362d3336203d3e203237383138.roa
File:                     323830333a333338303a343030303a3a2f33362d3336203d3e203237383138.roa (raw, json)
Hash identifier:          X2rthvpVW8co8p1em5jZu5zL5IYe7nLtxZ/p9TtFO4w=
Subject key identifier:   6A:8D:F6:5B:92:98:34:F5:E5:F3:23:A6:F4:FA:6E:C2:B7:CC:D7:E3
Certificate issuer:       /CN=20DDB465F07E0C4CF8244E3A2605195B41ADA3BB
Certificate serial:       2656FD08AF0EBC66329D8E54AF8918F2FB64D7D5
Authority key identifier: 20:DD:B4:65:F0:7E:0C:4C:F8:24:4E:3A:26:05:19:5B:41:AD:A3:BB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/323830333a333338303a343030303a3a2f33362d3336203d3e203237383138.roa
Signing time:             Tue 04 Feb 2025 18:25:05 +0000
ROA not before:           Tue 04 Feb 2025 18:20:05 +0000
ROA not after:            Tue 03 Feb 2026 18:25:05 +0000
asID:                     27818
IP address blocks:        2803:3380:4000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:56:fd:08:af:0e:bc:66:32:9d:8e:54:af:89:18:f2:fb:64:d7:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20DDB465F07E0C4CF8244E3A2605195B41ADA3BB
        Validity
            Not Before: Feb  4 18:20:05 2025 GMT
            Not After : Feb  3 18:25:05 2026 GMT
        Subject: CN=6A8DF65B929834F5E5F323A6F4FA6EC2B7CCD7E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:8b:48:d9:7c:39:76:80:92:e4:d7:80:e8:36:
                    54:10:41:ff:38:c3:f5:70:c3:94:e6:21:58:d3:8b:
                    2d:d2:5b:48:9a:39:99:ea:e4:26:8c:71:89:b5:8c:
                    a8:53:fd:ac:b1:51:50:03:5f:a5:c6:f8:c5:4a:2c:
                    04:16:57:71:fa:c9:f2:27:db:a8:0b:31:5c:e8:0f:
                    a3:22:6b:3a:d2:e0:71:73:72:ff:93:c7:3b:f0:fb:
                    93:82:47:3b:61:5f:63:d0:e0:e7:df:e9:5d:b6:c8:
                    9e:24:3d:d0:9a:32:00:05:8b:4a:f8:0a:a2:31:10:
                    6e:bf:21:ab:db:07:2b:a8:f0:b3:78:4a:56:36:70:
                    f8:69:22:c5:dd:a8:1d:b7:f8:4c:b3:e0:54:35:da:
                    e8:b7:23:71:fa:dc:19:3c:17:4b:e0:a6:b9:9e:bb:
                    02:5d:e0:21:66:6e:61:63:d1:0b:cf:d6:e5:7c:79:
                    07:bd:68:ab:85:62:94:ca:55:c1:b9:90:68:db:a2:
                    dc:4f:52:9d:30:4b:20:7e:57:bb:48:b0:0d:38:88:
                    ac:8e:b7:65:11:d4:28:fd:47:c3:32:a5:8a:23:b5:
                    f8:4e:34:bc:4b:2a:e2:5b:d9:23:97:0a:f8:95:aa:
                    19:d6:cf:9e:2a:6f:95:a9:28:51:24:1e:88:38:fe:
                    32:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:8D:F6:5B:92:98:34:F5:E5:F3:23:A6:F4:FA:6E:C2:B7:CC:D7:E3
            X509v3 Authority Key Identifier:
                keyid:20:DD:B4:65:F0:7E:0C:4C:F8:24:4E:3A:26:05:19:5B:41:AD:A3:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/323830333a333338303a343030303a3a2f33362d3336203d3e203237383138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3380:4000::/36

    Signature Algorithm: sha256WithRSAEncryption
         09:b5:b7:ce:28:f8:71:60:18:db:2b:4e:26:90:3a:97:bd:d5:
         b0:6a:41:6a:53:fe:af:83:c8:98:5b:f7:56:0f:f3:8e:67:90:
         02:99:b4:fe:ac:37:ca:fd:04:91:94:21:df:60:08:67:2c:e6:
         c4:0a:da:ed:10:7b:69:6c:21:67:a9:33:b8:92:d1:76:3e:59:
         1a:66:68:a0:62:d7:b7:27:61:23:74:74:cd:7c:46:1b:a2:1c:
         47:8f:ec:c7:5e:27:eb:fe:ba:ee:20:f6:6b:7e:49:ce:fe:77:
         41:43:b0:b2:a8:c7:a0:25:bf:62:4a:20:2a:ba:bb:18:34:69:
         82:a0:6e:c6:f9:22:8d:44:ee:51:ef:86:04:32:8d:50:dd:85:
         a3:e3:74:6a:12:b5:0e:87:1c:8a:3f:65:89:fb:51:d4:d0:68:
         44:3d:50:da:f9:58:dd:b2:5a:2a:4a:a3:05:e0:67:c4:55:2c:
         38:8e:57:da:cc:dc:4e:14:31:69:e2:b4:d8:6b:36:aa:c9:ca:
         a4:78:68:e9:ac:b8:ea:83:94:b4:60:6f:a0:7e:37:bd:03:b9:
         09:3f:6f:bc:c3:3c:6e:45:88:e8:7f:e4:90:69:3b:57:0f:69:
         27:ff:ca:c9:b2:8a:de:ee:6e:fb:1b:ad:b8:45:00:2b:60:49:
         e9:9b:23:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:05:58 2025 by rpki-client