Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AC6775539AB5E464C39B712202D11F3E1F6B139B01BCBE4452CCB15F3BFF5C2F/0/323830303a613033303a3a2f33322d3634203d3e203137323837.roa
File:                     323830303a613033303a3a2f33322d3634203d3e203137323837.roa (raw, json)
Hash identifier:          Wa0CatU9I7abw7ucpIVY8+uBIXk5x1ExJpvTFZCYTlI=
Subject key identifier:   9D:67:E0:B1:E7:CF:18:C2:21:15:71:A6:09:8A:87:0D:07:88:4E:F4
Certificate issuer:       /CN=9A7EE2E0253D989D85B5851EF144D109EBB610DD
Certificate serial:       4BD9096BF9606C07B39BDB3D4691A9E6FC8C038A
Authority key identifier: 9A:7E:E2:E0:25:3D:98:9D:85:B5:85:1E:F1:44:D1:09:EB:B6:10:DD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A7EE2E0253D989D85B5851EF144D109EBB610DD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AC6775539AB5E464C39B712202D11F3E1F6B139B01BCBE4452CCB15F3BFF5C2F/0/323830303a613033303a3a2f33322d3634203d3e203137323837.roa
Signing time:             Fri 25 Jul 2025 23:34:09 +0000
ROA not before:           Fri 25 Jul 2025 23:29:09 +0000
ROA not after:            Fri 24 Jul 2026 23:34:09 +0000
asID:                     17287
IP address blocks:        2800:a030::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AC6775539AB5E464C39B712202D11F3E1F6B139B01BCBE4452CCB15F3BFF5C2F/0/9A7EE2E0253D989D85B5851EF144D109EBB610DD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AC6775539AB5E464C39B712202D11F3E1F6B139B01BCBE4452CCB15F3BFF5C2F/0/9A7EE2E0253D989D85B5851EF144D109EBB610DD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A7EE2E0253D989D85B5851EF144D109EBB610DD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 05 Aug 2025 00:20:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:d9:09:6b:f9:60:6c:07:b3:9b:db:3d:46:91:a9:e6:fc:8c:03:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A7EE2E0253D989D85B5851EF144D109EBB610DD
        Validity
            Not Before: Jul 25 23:29:09 2025 GMT
            Not After : Jul 24 23:34:09 2026 GMT
        Subject: CN=9D67E0B1E7CF18C2211571A6098A870D07884EF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:e7:4a:9d:5f:63:a5:32:78:ca:57:18:42:2c:
                    ef:2e:62:f0:27:1c:4e:6b:9c:cc:20:44:32:9f:d0:
                    21:9c:7f:21:f5:7e:13:8b:ca:dd:83:a4:80:d2:f0:
                    70:40:97:fb:7c:c0:60:d6:4c:f3:8a:a6:ba:fc:0e:
                    4a:c9:b2:4e:6f:48:b9:e4:5c:67:1c:75:79:9e:58:
                    3b:1a:43:f6:d8:6b:fd:5b:a6:d3:7e:34:57:59:02:
                    64:f3:98:0a:56:f8:e1:74:f7:1f:b7:28:87:e9:9d:
                    f6:ba:a9:c8:e7:45:0f:22:5a:ff:58:b6:c3:19:33:
                    18:94:88:0f:ac:41:8c:b1:f5:fa:77:00:ba:db:3a:
                    3a:b2:47:90:27:16:7e:44:41:e6:8d:a4:6a:74:b3:
                    de:e4:f7:83:e1:93:ae:ed:81:ec:b8:83:2f:03:90:
                    56:47:71:2a:1c:b4:f8:78:b4:b0:66:fe:57:45:ef:
                    32:c5:d2:95:cb:a6:73:0f:8c:2e:93:17:13:c5:59:
                    6f:4c:c6:86:03:23:3f:bf:74:07:e6:6e:92:0c:86:
                    2c:2a:2a:e6:58:d2:d7:14:56:b8:a9:7d:ff:18:80:
                    99:75:b3:5e:08:1b:69:18:2c:80:27:af:8a:3e:a4:
                    f8:17:e2:c4:e0:39:fb:64:9a:82:e6:2f:fc:24:9f:
                    6a:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:67:E0:B1:E7:CF:18:C2:21:15:71:A6:09:8A:87:0D:07:88:4E:F4
            X509v3 Authority Key Identifier:
                keyid:9A:7E:E2:E0:25:3D:98:9D:85:B5:85:1E:F1:44:D1:09:EB:B6:10:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AC6775539AB5E464C39B712202D11F3E1F6B139B01BCBE4452CCB15F3BFF5C2F/0/9A7EE2E0253D989D85B5851EF144D109EBB610DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A7EE2E0253D989D85B5851EF144D109EBB610DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AC6775539AB5E464C39B712202D11F3E1F6B139B01BCBE4452CCB15F3BFF5C2F/0/323830303a613033303a3a2f33322d3634203d3e203137323837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:a030::/32

    Signature Algorithm: sha256WithRSAEncryption
         a9:17:17:df:0c:b1:3e:1e:0b:74:68:9a:d6:92:cf:70:1a:c0:
         2c:5b:40:9c:25:03:7b:33:46:98:45:b3:ff:30:8e:e0:71:79:
         5f:db:97:07:24:eb:6e:6b:0c:8b:8d:22:ca:31:a0:46:34:62:
         b4:51:21:4b:86:40:54:cf:5f:cf:f2:7b:16:b5:4c:59:fc:18:
         55:ce:2c:2b:91:b3:43:05:c0:be:64:fd:4b:24:e1:f4:56:b0:
         af:ca:a9:b9:61:ed:01:17:dd:d8:7e:56:77:18:9b:63:43:51:
         bc:f9:c0:b4:ec:0f:e7:6e:c1:1e:e7:52:f6:27:fb:83:98:2d:
         1b:17:1a:b1:a1:46:e6:9e:6f:e1:00:bc:79:37:63:c0:26:de:
         bf:ff:e8:4b:27:69:dd:d0:05:f3:4d:ec:e2:8c:9c:73:eb:ff:
         fd:7e:ab:8a:d1:14:73:91:73:14:14:ea:d3:94:b5:d4:3d:43:
         68:04:e6:fe:33:c8:49:90:a5:e2:e9:5b:97:a9:f2:e1:45:58:
         f6:43:20:33:b1:42:f1:12:c6:f3:1a:83:bf:0f:12:2e:8a:0c:
         e9:e0:f0:19:8a:2f:45:dc:7e:7c:2d:17:cd:d6:ab:23:ea:b8:
         ec:53:22:93:ad:63:ce:5c:cf:bb:25:07:62:ba:84:d2:79:a4:
         60:fd:06:8c
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUS9kJa/lgbAezm9s9RpGp5vyMA4owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUE3RUUyRTAyNTNEOTg5RDg1QjU4NTFFRjE0NEQxMDlF
QkI2MTBERDAeFw0yNTA3MjUyMzI5MDlaFw0yNjA3MjQyMzM0MDlaMDMxMTAvBgNV
BAMTKDlENjdFMEIxRTdDRjE4QzIyMTE1NzFBNjA5OEE4NzBEMDc4ODRFRjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCE50qdX2OlMnjKVxhCLO8uYvAn
HE5rnMwgRDKf0CGcfyH1fhOLyt2DpIDS8HBAl/t8wGDWTPOKprr8DkrJsk5vSLnk
XGccdXmeWDsaQ/bYa/1bptN+NFdZAmTzmApW+OF09x+3KIfpnfa6qcjnRQ8iWv9Y
tsMZMxiUiA+sQYyx9fp3ALrbOjqyR5AnFn5EQeaNpGp0s97k94Phk67tgey4gy8D
kFZHcSoctPh4tLBm/ldF7zLF0pXLpnMPjC6TFxPFWW9MxoYDIz+/dAfmbpIMhiwq
KuZY0tcUVripff8YgJl1s14IG2kYLIAnr4o+pPgX4sTgOftkmoLmL/wkn2qDAgMB
AAGjggLHMIICwzAdBgNVHQ4EFgQUnWfgsefPGMIhFXGmCYqHDQeITvQwHwYDVR0j
BBgwFoAUmn7i4CU9mJ2FtYUe8UTRCeu2EN0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BQzY3NzU1MzlBQjVFNDY0QzM5QjcxMjIwMkQxMUYzRTFG
NkIxMzlCMDFCQ0JFNDQ1MkNDQjE1RjNCRkY1QzJGLzAvOUE3RUUyRTAyNTNEOTg5
RDg1QjU4NTFFRjE0NEQxMDlFQkI2MTBERC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85QTdFRTJFMDI1M0Q5ODlEODVC
NTg1MUVGMTQ0RDEwOUVCQjYxMERELmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQUM2Nzc1NTM5QUI1RTQ2NEMzOUI3MTIyMDJEMTFGM0UxRjZCMTM5QjAx
QkNCRTQ0NTJDQ0IxNUYzQkZGNUMyRi8wLzMyMzgzMDMwM2E2MTMwMzMzMDNhM2Ey
ZjMzMzIyZDM2MzQyMDNkM2UyMDMxMzczMjM4Mzcucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoAKAwMA0G
CSqGSIb3DQEBCwUAA4IBAQCpFxffDLE+Hgt0aJrWks9wGsAsW0CcJQN7M0aYRbP/
MI7gcXlf25cHJOtuawyLjSLKMaBGNGK0USFLhkBUz1/P8nsWtUxZ/BhVziwrkbND
BcC+ZP1LJOH0VrCvyqm5Ye0BF93YflZ3GJtjQ1G8+cC07A/nbsEe51L2J/uDmC0b
FxqxoUbmnm/hALx5N2PAJt6//+hLJ2nd0AXzTezijJxz6//9fquK0RRzkXMUFOrT
lLXUPUNoBOb+M8hJkKXi6VuXqfLhRVj2QyAzsULxEsbzGoO/DxIuigzp4PAZii9F
3H58LRfN1qsj6rjsUyKTrWPOXM+7JQdiuoTSeaRg/QaM
-----END CERTIFICATE-----
Generated at Fri Aug 1 18:21:21 2025 by rpki-client