Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C5C6355BF8BBA02AFDEC01740418CBDA52FAFD119E16D539C11CA99768EA977F/0/323830333a373036303a3a2f33322d3332203d3e20323633373534.roa
File:                     323830333a373036303a3a2f33322d3332203d3e20323633373534.roa (raw, json)
Hash identifier:          XZ5uvPd0CsHum+ToCgRau0RrbUioGtJYfF4Y4kmnKAQ=
Subject key identifier:   F6:3E:AA:50:3E:0B:46:90:90:A2:0B:97:1B:A0:75:69:55:00:2A:FE
Certificate issuer:       /CN=C111E22B88AB3DF713ECEF3B43D97197F14347D7
Certificate serial:       7B2CBBABDF98EBBD32D0312232EDB8748AFE5B00
Authority key identifier: C1:11:E2:2B:88:AB:3D:F7:13:EC:EF:3B:43:D9:71:97:F1:43:47:D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C111E22B88AB3DF713ECEF3B43D97197F14347D7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C5C6355BF8BBA02AFDEC01740418CBDA52FAFD119E16D539C11CA99768EA977F/0/323830333a373036303a3a2f33322d3332203d3e20323633373534.roa
Signing time:             Tue 04 Feb 2025 18:51:15 +0000
ROA not before:           Tue 04 Feb 2025 18:46:15 +0000
ROA not after:            Tue 03 Feb 2026 18:51:15 +0000
asID:                     263754
IP address blocks:        2803:7060::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C5C6355BF8BBA02AFDEC01740418CBDA52FAFD119E16D539C11CA99768EA977F/0/C111E22B88AB3DF713ECEF3B43D97197F14347D7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C5C6355BF8BBA02AFDEC01740418CBDA52FAFD119E16D539C11CA99768EA977F/0/C111E22B88AB3DF713ECEF3B43D97197F14347D7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C111E22B88AB3DF713ECEF3B43D97197F14347D7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 04:49:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:2c:bb:ab:df:98:eb:bd:32:d0:31:22:32:ed:b8:74:8a:fe:5b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C111E22B88AB3DF713ECEF3B43D97197F14347D7
        Validity
            Not Before: Feb  4 18:46:15 2025 GMT
            Not After : Feb  3 18:51:15 2026 GMT
        Subject: CN=F63EAA503E0B469090A20B971BA0756955002AFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:fd:7c:59:0b:e2:6c:44:93:a4:80:34:7e:ef:
                    12:5c:8f:ae:fc:5e:c2:47:b3:4c:94:08:a7:bd:35:
                    0d:f4:42:03:1a:6d:6d:43:c1:73:3f:c9:e5:2f:aa:
                    04:61:7f:9c:75:13:c0:1d:80:a5:a4:c7:98:1a:ea:
                    9c:bb:b8:55:59:4e:7b:00:a1:18:5e:40:d1:89:f0:
                    22:a3:81:d4:86:cb:a6:b5:e6:9a:ac:8e:91:a7:86:
                    7f:62:f8:8a:bd:81:46:a9:6a:6a:b7:d4:e4:14:1f:
                    93:90:71:51:4b:6f:a2:f9:98:c9:af:a1:6e:e3:41:
                    67:de:28:3a:35:47:51:5d:36:1c:73:e1:3b:aa:4c:
                    2a:73:85:26:b5:83:91:f5:bf:3c:76:f5:f2:86:eb:
                    9a:e3:7b:f7:79:24:20:57:b4:82:68:b9:e8:00:5b:
                    42:c0:3f:79:bb:dc:dd:e5:67:84:1a:66:87:79:f2:
                    ae:98:49:ce:03:4f:4b:35:bd:b3:d7:09:95:82:12:
                    86:6b:1d:ca:05:05:16:e9:85:f2:5c:c5:91:7f:21:
                    ed:24:b8:d0:cf:1a:e7:c0:e8:a1:92:11:f8:bc:b5:
                    af:42:ee:23:22:23:a2:72:b9:27:b3:a3:ad:12:4c:
                    97:e4:19:99:38:19:30:00:d5:9f:e6:53:31:55:cf:
                    d5:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:3E:AA:50:3E:0B:46:90:90:A2:0B:97:1B:A0:75:69:55:00:2A:FE
            X509v3 Authority Key Identifier:
                keyid:C1:11:E2:2B:88:AB:3D:F7:13:EC:EF:3B:43:D9:71:97:F1:43:47:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C5C6355BF8BBA02AFDEC01740418CBDA52FAFD119E16D539C11CA99768EA977F/0/C111E22B88AB3DF713ECEF3B43D97197F14347D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C111E22B88AB3DF713ECEF3B43D97197F14347D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C5C6355BF8BBA02AFDEC01740418CBDA52FAFD119E16D539C11CA99768EA977F/0/323830333a373036303a3a2f33322d3332203d3e20323633373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7060::/32

    Signature Algorithm: sha256WithRSAEncryption
         8d:09:0f:b3:95:dd:9f:d1:8f:4d:57:7a:29:e1:30:f6:c3:f0:
         be:61:ba:fc:1e:fa:ef:77:87:9b:82:fc:0c:6a:52:ba:60:95:
         85:56:9c:25:57:0a:6f:be:e4:bd:d4:71:f0:b4:f1:0f:7c:35:
         ba:bb:15:dc:a4:1a:c5:80:d9:38:04:64:2a:84:a4:b0:2c:77:
         d5:e4:3b:9a:4e:8e:3b:00:64:eb:f7:22:fe:68:bf:a4:f6:37:
         a0:de:21:13:59:3d:a0:54:f6:3d:0c:1f:42:70:b2:3d:b5:c2:
         fc:54:18:4d:9a:f2:94:f1:29:26:ba:b1:85:7b:32:be:7f:62:
         0a:2c:41:c5:0b:3d:1a:f6:1e:bb:31:ff:60:60:0a:a0:85:0d:
         68:76:fa:d8:84:82:9f:93:64:35:7a:28:ee:f4:35:90:2e:bc:
         a1:91:3f:a3:6c:2b:14:2a:ad:a1:7d:07:3f:77:ca:38:b8:a3:
         23:ce:72:bf:76:98:ce:00:a3:c7:8f:8f:09:63:c3:2f:5e:b3:
         c0:a7:64:e0:65:ae:a5:c0:22:4b:6e:fe:0e:58:94:0d:4a:cb:
         15:53:e1:2e:2f:c5:4b:aa:66:92:c2:56:ca:01:2f:74:7d:29:
         b5:31:59:7a:a9:0e:77:3d:b6:d2:d3:56:2c:73:e1:d4:8a:46:
         db:06:31:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 16:39:06 2025 by rpki-client