Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/323830333a663038303a633030303a3a2f33352d3433203d3e20323732303034.roa
File:                     323830333a663038303a633030303a3a2f33352d3433203d3e20323732303034.roa (raw, json)
Hash identifier:          ow3kLSmLbwNY4/sUQsLW47+QSmiJRSztyggE91Jb/nk=
Subject key identifier:   AE:46:7E:8D:28:08:BA:97:39:3E:21:02:22:83:8E:0F:48:5B:3B:05
Certificate issuer:       /CN=D6017AACFB785EAB7EA56D24337CDCD724EAC2AD
Certificate serial:       5C0AD8FDC900383C11D144BD90AFC60639D75EFF
Authority key identifier: D6:01:7A:AC:FB:78:5E:AB:7E:A5:6D:24:33:7C:DC:D7:24:EA:C2:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/323830333a663038303a633030303a3a2f33352d3433203d3e20323732303034.roa
Signing time:             Tue 04 Feb 2025 18:42:02 +0000
ROA not before:           Tue 04 Feb 2025 18:37:02 +0000
ROA not after:            Tue 03 Feb 2026 18:42:02 +0000
asID:                     272004
IP address blocks:        2803:f080:c000::/35 maxlen: 43
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 14 Apr 2025 20:38:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:0a:d8:fd:c9:00:38:3c:11:d1:44:bd:90:af:c6:06:39:d7:5e:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6017AACFB785EAB7EA56D24337CDCD724EAC2AD
        Validity
            Not Before: Feb  4 18:37:02 2025 GMT
            Not After : Feb  3 18:42:02 2026 GMT
        Subject: CN=AE467E8D2808BA97393E210222838E0F485B3B05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:7a:80:33:f6:84:3c:0a:be:06:1e:4d:25:66:
                    c1:61:ca:fc:7f:0b:1f:e0:0a:c7:dc:69:a6:30:c1:
                    ab:b9:d3:d5:7f:99:03:c8:e4:fa:be:c2:ae:96:12:
                    e2:7f:13:c9:38:35:ea:7c:94:2a:6f:1f:7a:77:ca:
                    66:a0:dc:70:14:71:05:fc:c3:8b:04:7d:14:c7:13:
                    fb:d7:22:b8:f5:c4:b1:57:0c:49:e1:41:68:20:11:
                    0b:36:64:88:1e:d2:10:33:12:f2:a5:63:7b:51:a5:
                    af:52:23:b7:45:a7:4c:92:7f:ee:ea:4b:6c:44:fe:
                    92:2b:e6:79:3e:7b:70:34:b3:89:9c:67:00:f9:fb:
                    00:a7:0b:8c:fe:0c:9c:92:15:16:28:1b:6b:e8:a8:
                    78:08:91:75:db:7b:ec:6e:46:a8:34:32:92:9d:22:
                    bf:38:0d:26:b9:ea:a5:ea:3c:47:00:92:9f:93:8f:
                    44:48:47:c8:51:51:90:eb:b5:33:3f:54:a5:9c:e9:
                    e0:7a:0e:74:54:1f:49:07:66:f5:42:03:f5:1a:fb:
                    78:f9:66:c8:3a:27:6e:0c:24:46:dd:fe:34:dc:12:
                    f0:e7:95:c1:00:42:9a:23:c0:12:fc:50:2f:d0:a3:
                    13:19:62:63:a7:3b:b7:91:4a:06:13:bf:32:1e:12:
                    10:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:46:7E:8D:28:08:BA:97:39:3E:21:02:22:83:8E:0F:48:5B:3B:05
            X509v3 Authority Key Identifier:
                keyid:D6:01:7A:AC:FB:78:5E:AB:7E:A5:6D:24:33:7C:DC:D7:24:EA:C2:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/323830333a663038303a633030303a3a2f33352d3433203d3e20323732303034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f080:c000::/35

    Signature Algorithm: sha256WithRSAEncryption
         8d:a3:84:bc:a9:e8:75:6e:61:98:f9:35:b1:71:25:19:82:aa:
         60:db:1c:4d:dd:2b:d8:2a:22:71:7d:77:c3:75:51:c6:1a:3a:
         01:6a:0a:73:79:f0:2c:ce:bd:bb:cf:44:cf:19:09:b1:65:aa:
         14:c1:97:8b:ec:15:a2:79:89:61:39:e3:ec:ba:6d:57:aa:b9:
         64:f5:3f:17:32:44:b6:71:17:5a:89:47:72:e1:87:95:a0:8d:
         2c:21:c8:c7:df:c7:0a:79:2d:18:d0:a0:cb:d0:42:28:ec:d8:
         ed:f9:95:ca:8c:db:02:1a:9a:0a:88:48:89:e1:5a:40:14:26:
         f7:23:0a:a5:09:82:61:df:24:7e:f0:91:ee:78:12:10:81:4e:
         ff:fa:be:f5:c5:5a:a2:bf:f4:73:b1:02:f9:61:c6:79:89:3d:
         ec:85:e7:42:a3:08:3e:07:e1:b7:2a:21:86:b6:9b:09:ca:72:
         46:26:17:b6:4f:25:fd:b5:a9:af:51:a0:f5:8d:1c:e6:9c:a5:
         5e:06:66:b0:ea:a4:d3:fc:27:93:c3:a9:1e:ee:05:04:af:d5:
         02:8e:7c:c3:e1:cb:34:99:bf:01:8e:f0:37:4d:ba:91:02:95:
         a8:a0:e6:10:7f:70:1e:db:24:19:aa:70:6f:bc:0b:fa:ad:36:
         c2:5d:18:e4
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 11 13:40:05 2025 by rpki-client