Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/323830333a663038303a323161303a3a2f34332d3634203d3e203634313230.roa
File:                     323830333a663038303a323161303a3a2f34332d3634203d3e203634313230.roa (raw, json)
Hash identifier:          05QouCu+HluAguQYskJ4tBgQWZ/NK6CrWa9mHyVx/z8=
Subject key identifier:   93:7B:DF:C4:1C:2E:21:50:F9:EB:5A:CA:AC:1D:6A:2E:A1:F1:1B:F9
Certificate issuer:       /CN=D6017AACFB785EAB7EA56D24337CDCD724EAC2AD
Certificate serial:       5A7F82A871913941746BF188F58C1BD04AC6961F
Authority key identifier: D6:01:7A:AC:FB:78:5E:AB:7E:A5:6D:24:33:7C:DC:D7:24:EA:C2:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/323830333a663038303a323161303a3a2f34332d3634203d3e203634313230.roa
Signing time:             Thu 20 Feb 2025 13:50:00 +0000
ROA not before:           Thu 20 Feb 2025 13:45:00 +0000
ROA not after:            Thu 19 Feb 2026 13:50:00 +0000
asID:                     64120
IP address blocks:        2803:f080:21a0::/43 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 14 Apr 2025 17:30:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:7f:82:a8:71:91:39:41:74:6b:f1:88:f5:8c:1b:d0:4a:c6:96:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6017AACFB785EAB7EA56D24337CDCD724EAC2AD
        Validity
            Not Before: Feb 20 13:45:00 2025 GMT
            Not After : Feb 19 13:50:00 2026 GMT
        Subject: CN=937BDFC41C2E2150F9EB5ACAAC1D6A2EA1F11BF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:86:ce:3f:3f:60:55:df:a5:fc:0d:af:3d:07:
                    5e:1c:d8:a4:fe:dd:15:79:e6:88:31:03:9a:bf:26:
                    5c:51:34:cf:0a:be:7e:76:21:aa:53:ce:83:f2:76:
                    b4:51:ed:97:5e:6e:3e:c9:92:0d:5c:6b:59:86:55:
                    22:45:1d:5e:33:f5:4a:c2:68:46:63:62:6d:9d:54:
                    cf:05:b4:f4:ab:f0:92:0f:fa:54:6c:ea:78:2b:fc:
                    3d:50:4c:58:95:28:f2:d1:17:1a:28:b3:b6:c2:18:
                    e4:28:ad:fd:33:c7:96:95:af:e9:f7:3f:c1:03:6e:
                    58:5d:6b:c8:05:2a:ca:24:10:84:a6:a8:5c:d7:2c:
                    c8:ce:12:32:2d:90:84:8d:c1:2e:78:a3:48:6c:66:
                    53:31:c3:e6:24:50:88:d2:a9:c9:9e:64:34:95:d1:
                    97:b2:82:c6:39:d7:ca:cd:56:c1:dd:18:9a:ca:2c:
                    02:04:cf:49:86:2d:d8:e3:38:2d:73:ea:ce:6f:c2:
                    49:9f:87:d7:9b:77:e3:1a:1e:09:36:08:d2:68:3b:
                    ca:03:40:9c:8a:06:10:d9:b6:0e:30:2f:77:36:11:
                    26:f6:04:ba:10:25:85:9d:c3:d0:b2:69:89:84:a8:
                    8c:4a:96:c6:c3:2e:96:6c:b7:cd:4d:06:48:93:16:
                    63:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:7B:DF:C4:1C:2E:21:50:F9:EB:5A:CA:AC:1D:6A:2E:A1:F1:1B:F9
            X509v3 Authority Key Identifier:
                keyid:D6:01:7A:AC:FB:78:5E:AB:7E:A5:6D:24:33:7C:DC:D7:24:EA:C2:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/323830333a663038303a323161303a3a2f34332d3634203d3e203634313230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f080:21a0::/43

    Signature Algorithm: sha256WithRSAEncryption
         2d:7d:3e:83:3c:6d:0f:c4:43:fb:b4:df:1a:b9:7f:36:a8:f7:
         b9:9c:0d:1c:6e:68:2f:1b:d3:b9:5e:58:03:be:e0:7f:1a:d7:
         54:d8:0f:43:e5:94:ba:d8:4a:e0:a0:99:63:b9:ec:2a:16:db:
         c8:32:11:c7:d2:14:f0:12:ee:70:dc:72:c2:b8:85:df:b6:e8:
         7c:9f:3b:cc:c5:da:39:52:cd:3a:3c:5a:26:1a:ca:aa:39:12:
         23:a8:9b:2b:77:0b:57:4c:af:6b:6e:97:ed:c0:58:a9:4c:26:
         1b:70:28:43:6c:b3:89:20:2b:f8:0d:f3:a8:02:aa:7e:ca:92:
         d1:9f:e4:52:9f:3e:c0:5b:59:a1:3a:66:be:b5:2d:fd:e3:8c:
         01:03:01:c7:73:07:8a:15:3e:2b:c7:d8:3e:fa:f3:c9:3a:8b:
         b2:52:43:77:f3:a3:b6:e9:d7:05:ca:4d:f6:27:51:2a:51:90:
         cd:aa:da:12:a8:ee:83:54:0f:74:0f:9d:13:74:67:c6:ab:83:
         a9:8d:66:47:ac:83:f3:32:bd:4c:fd:61:41:60:77:8e:e1:e7:
         7c:52:6c:a9:56:70:6a:72:e1:e6:d2:9b:c2:47:d2:2e:f0:89:
         a7:f8:fd:4d:01:37:44:94:c4:13:67:bc:71:d8:99:e8:63:cb:
         85:a3:71:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 11:14:29 2025 by rpki-client