Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/323830333a333338303a363030303a3a2f33362d3336203d3e203237383138.roa
File:                     323830333a333338303a363030303a3a2f33362d3336203d3e203237383138.roa (raw, json)
Hash identifier:          EFrulmmoW+VMfi1z6cDycZuJtLyytuPJjwQTThTXcFk=
Subject key identifier:   F9:F7:E2:51:14:AD:00:EF:04:5E:07:D0:FA:92:14:DA:88:A0:71:2B
Certificate issuer:       /CN=20DDB465F07E0C4CF8244E3A2605195B41ADA3BB
Certificate serial:       68B7C6558E19F448A7844A281F0BD39B4A1A0ABE
Authority key identifier: 20:DD:B4:65:F0:7E:0C:4C:F8:24:4E:3A:26:05:19:5B:41:AD:A3:BB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/323830333a333338303a363030303a3a2f33362d3336203d3e203237383138.roa
Signing time:             Tue 04 Feb 2025 18:25:06 +0000
ROA not before:           Tue 04 Feb 2025 18:20:06 +0000
ROA not after:            Tue 03 Feb 2026 18:25:06 +0000
asID:                     27818
IP address blocks:        2803:3380:6000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:b7:c6:55:8e:19:f4:48:a7:84:4a:28:1f:0b:d3:9b:4a:1a:0a:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20DDB465F07E0C4CF8244E3A2605195B41ADA3BB
        Validity
            Not Before: Feb  4 18:20:06 2025 GMT
            Not After : Feb  3 18:25:06 2026 GMT
        Subject: CN=F9F7E25114AD00EF045E07D0FA9214DA88A0712B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:fd:66:d8:71:fc:dc:49:52:74:62:96:08:c5:
                    10:c5:4b:9e:b9:05:46:2c:c1:0d:db:24:be:bd:6c:
                    db:b7:7f:d7:35:7b:f4:f6:8e:1a:43:93:6e:47:37:
                    66:3d:c8:55:3f:11:88:97:39:c0:d4:06:ab:a1:ab:
                    cd:2d:a0:bd:a9:ec:af:2d:2d:3f:72:6a:de:12:a7:
                    c4:c7:f5:3a:c8:17:2a:a4:27:39:c1:5f:2b:f1:a3:
                    20:10:ff:b9:cb:7b:9f:13:e3:75:eb:64:6e:4d:ba:
                    f7:3b:ed:26:40:0d:91:73:1f:8f:b5:97:45:bc:c5:
                    b8:14:f3:7e:83:5f:8b:bd:ff:e1:48:d7:a9:63:e8:
                    f3:da:ae:d6:09:4a:9c:ec:40:51:76:f7:a8:4e:4e:
                    51:68:ea:3c:ad:e7:63:b2:46:26:22:97:d0:73:8c:
                    ef:e1:1b:58:71:74:57:8d:7a:47:c9:5a:3b:3c:5e:
                    63:23:7a:ee:7d:5b:07:e2:e4:ea:e7:69:37:29:51:
                    e0:92:71:d0:53:03:37:b2:7e:a8:84:cd:31:57:ef:
                    df:34:72:d3:ce:df:fa:3c:a4:6c:64:18:1f:b3:aa:
                    90:3c:1a:17:52:2d:02:bb:e8:8a:31:b1:d5:55:98:
                    ff:50:b9:1f:bf:e4:a1:81:84:9d:ba:f3:2d:3c:e3:
                    55:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:F7:E2:51:14:AD:00:EF:04:5E:07:D0:FA:92:14:DA:88:A0:71:2B
            X509v3 Authority Key Identifier:
                keyid:20:DD:B4:65:F0:7E:0C:4C:F8:24:4E:3A:26:05:19:5B:41:AD:A3:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/323830333a333338303a363030303a3a2f33362d3336203d3e203237383138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3380:6000::/36

    Signature Algorithm: sha256WithRSAEncryption
         95:db:70:52:03:f6:62:57:f2:43:09:0d:e2:94:3d:c9:c0:95:
         4d:b0:3e:cd:5b:05:ae:bb:d5:7d:9c:9b:47:bc:52:bf:ce:de:
         bf:18:0f:41:7c:52:67:51:eb:aa:81:04:04:b9:10:de:77:b3:
         bc:5d:bf:26:1d:64:a6:38:9e:a7:1d:8d:b7:66:99:d9:74:90:
         9e:76:e1:71:b3:14:95:6e:dd:23:da:91:67:d3:16:9b:76:60:
         6d:8a:dc:6b:46:f8:48:28:8e:10:81:04:85:32:b9:27:15:52:
         ff:5a:d3:f9:5c:ce:b7:59:aa:53:93:3d:b2:d6:ad:83:ac:f9:
         13:01:d5:a5:89:c3:11:59:e0:8f:a3:9d:78:e2:a0:ca:15:fc:
         48:8b:88:84:c8:78:6f:6c:46:1c:51:21:18:04:69:29:34:60:
         01:bc:5a:e4:2b:95:8e:21:65:71:a4:c5:97:be:90:d1:27:47:
         19:fa:b8:64:56:f9:a1:7f:0a:a2:32:8a:bd:d8:6e:0a:52:ae:
         4b:b4:c7:3f:b3:6a:53:86:81:b1:12:59:f2:bc:20:26:c4:17:
         a7:c6:9a:72:5f:b1:f3:d5:9c:6a:2e:a4:1b:e8:7b:b5:27:d5:
         9a:4c:87:63:b5:0e:0b:18:08:9b:f2:be:8a:fe:e6:59:24:22:
         25:c1:13:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:06:25 2025 by rpki-client