Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AC8A462074B98D3F9638821F9060DECDE1637FCAB7B5FCD6A69D9450167A2798/0/323830303a3430303a3a2f33322d3438203d3e203237363638.roa
File:                     323830303a3430303a3a2f33322d3438203d3e203237363638.roa (raw, json)
Hash identifier:          vfwW1Y66WnSw0h7MGgPYPB6qkSCytO1ZF7Bg24IDpIE=
Subject key identifier:   D6:40:DE:F4:17:99:C5:B7:CE:76:28:D8:E3:91:81:EA:AC:06:A9:FC
Certificate issuer:       /CN=61672627CE7E727EFF60A56D0A466F15315B7FD0
Certificate serial:       6FCBCD29A43ECC3B6CCBF95253796822D027A4DA
Authority key identifier: 61:67:26:27:CE:7E:72:7E:FF:60:A5:6D:0A:46:6F:15:31:5B:7F:D0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/61672627CE7E727EFF60A56D0A466F15315B7FD0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AC8A462074B98D3F9638821F9060DECDE1637FCAB7B5FCD6A69D9450167A2798/0/323830303a3430303a3a2f33322d3438203d3e203237363638.roa
Signing time:             Tue 04 Feb 2025 19:57:44 +0000
ROA not before:           Tue 04 Feb 2025 19:52:44 +0000
ROA not after:            Tue 03 Feb 2026 19:57:44 +0000
asID:                     27668
IP address blocks:        2800:400::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AC8A462074B98D3F9638821F9060DECDE1637FCAB7B5FCD6A69D9450167A2798/0/61672627CE7E727EFF60A56D0A466F15315B7FD0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AC8A462074B98D3F9638821F9060DECDE1637FCAB7B5FCD6A69D9450167A2798/0/61672627CE7E727EFF60A56D0A466F15315B7FD0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/61672627CE7E727EFF60A56D0A466F15315B7FD0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 00:13:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:cb:cd:29:a4:3e:cc:3b:6c:cb:f9:52:53:79:68:22:d0:27:a4:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61672627CE7E727EFF60A56D0A466F15315B7FD0
        Validity
            Not Before: Feb  4 19:52:44 2025 GMT
            Not After : Feb  3 19:57:44 2026 GMT
        Subject: CN=D640DEF41799C5B7CE7628D8E39181EAAC06A9FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:80:38:5e:83:fc:31:e9:f6:5a:1c:e5:40:dc:
                    f8:c5:3b:83:93:cb:51:18:53:82:10:59:74:62:9c:
                    e0:7f:b9:8b:a2:51:21:e8:b0:f1:0f:cc:6f:4c:27:
                    96:f4:c9:0e:c6:2e:72:a2:1a:80:c2:6b:2a:ec:79:
                    38:55:7d:91:dc:6d:02:97:63:fb:01:1a:b8:6c:03:
                    e5:a4:b0:5a:e6:19:a8:80:8d:ca:1e:84:f7:fe:a4:
                    ee:1e:bc:ee:9d:d9:10:25:32:f1:6f:a0:9f:8a:3a:
                    8c:53:17:1b:de:0a:89:dc:32:ae:b8:d8:bc:d3:e6:
                    b0:9d:e7:3f:73:1f:e6:3e:b3:0d:02:94:6b:80:7e:
                    85:ff:14:08:29:d0:e3:d1:17:26:77:ef:b8:ad:19:
                    85:4c:62:76:f9:09:d6:eb:c2:3b:71:a6:cf:80:be:
                    d4:9c:6b:59:0f:4c:72:fc:5d:34:19:cc:7d:8b:aa:
                    47:4d:86:9c:cf:05:12:89:50:16:2b:87:9f:39:d1:
                    93:52:77:a1:5c:be:fb:ab:2b:ed:5a:ba:44:e2:f0:
                    7f:ed:1e:00:c8:bd:2b:72:61:83:04:8b:16:8d:e5:
                    d5:50:e9:72:0a:ca:eb:5c:70:ec:d4:36:24:22:a7:
                    15:c8:e0:a9:66:93:b1:83:ce:6b:87:9b:69:8e:17:
                    8b:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:40:DE:F4:17:99:C5:B7:CE:76:28:D8:E3:91:81:EA:AC:06:A9:FC
            X509v3 Authority Key Identifier:
                keyid:61:67:26:27:CE:7E:72:7E:FF:60:A5:6D:0A:46:6F:15:31:5B:7F:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AC8A462074B98D3F9638821F9060DECDE1637FCAB7B5FCD6A69D9450167A2798/0/61672627CE7E727EFF60A56D0A466F15315B7FD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/61672627CE7E727EFF60A56D0A466F15315B7FD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AC8A462074B98D3F9638821F9060DECDE1637FCAB7B5FCD6A69D9450167A2798/0/323830303a3430303a3a2f33322d3438203d3e203237363638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:400::/32

    Signature Algorithm: sha256WithRSAEncryption
         77:bf:92:de:19:86:18:29:0a:03:a3:2e:1b:21:63:9b:91:b7:
         2c:d9:1f:29:1f:1d:2f:d4:68:e3:4b:ff:fd:6e:d5:58:37:25:
         59:ee:be:5c:41:15:34:a3:f0:09:d6:8b:ce:7c:0b:25:92:24:
         1d:81:fd:71:c1:d7:8b:05:70:31:19:c5:36:56:e3:57:96:55:
         db:31:8f:45:ff:3f:7f:60:8c:e6:8e:32:5a:f6:ca:df:53:38:
         5d:80:bd:95:57:7f:33:6a:ca:c0:3e:00:2e:ed:f3:59:d3:7e:
         71:4e:92:39:03:1b:ae:ef:c6:fe:49:75:59:12:de:07:29:e1:
         9f:81:0a:de:0e:06:8d:53:51:05:75:fc:1f:e7:76:dd:9b:db:
         82:2b:a0:9b:92:53:40:c7:bb:76:79:2a:2a:36:a5:6f:cd:c6:
         f9:ed:c1:75:aa:c1:29:9a:3f:36:17:ac:0a:9b:13:c8:b0:53:
         39:18:94:9c:27:7a:fd:23:ec:4e:bd:1b:bc:b3:a8:a2:c2:7b:
         30:80:7d:cd:bf:7c:ed:c5:9e:e0:71:a9:55:50:ea:b9:a4:ed:
         a8:c2:91:97:4d:54:d7:2a:11:b7:fb:61:68:59:27:59:23:9e:
         b9:36:a1:32:c9:2b:1e:0f:ba:dd:93:bd:34:60:40:35:ec:15:
         c9:c2:1b:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 22:11:46 2025 by rpki-client