Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C807CF0B4CE6F86AFE2E2BCC4558592073A054D8004756AD53D69E594095D57B/0/323830333a633732303a3a2f33322d3438203d3e20323636373536.roa
File:                     323830333a633732303a3a2f33322d3438203d3e20323636373536.roa (raw, json)
Hash identifier:          OjzG7W/gke3Esaub/EqhBx1NajeEKfiFTH6G6Ms7+pE=
Subject key identifier:   46:6A:58:AC:14:CD:20:3D:50:CF:7B:44:25:06:67:2B:F0:B6:62:B6
Certificate issuer:       /CN=669067DB1387B4BF8A246E94B03A0308DCCF3C6D
Certificate serial:       4A5E768AE2A84D6F7791644848FBBBC775DAA432
Authority key identifier: 66:90:67:DB:13:87:B4:BF:8A:24:6E:94:B0:3A:03:08:DC:CF:3C:6D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/669067DB1387B4BF8A246E94B03A0308DCCF3C6D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C807CF0B4CE6F86AFE2E2BCC4558592073A054D8004756AD53D69E594095D57B/0/323830333a633732303a3a2f33322d3438203d3e20323636373536.roa
Signing time:             Tue 04 Feb 2025 18:49:09 +0000
ROA not before:           Tue 04 Feb 2025 18:44:09 +0000
ROA not after:            Tue 03 Feb 2026 18:49:09 +0000
asID:                     266756
IP address blocks:        2803:c720::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C807CF0B4CE6F86AFE2E2BCC4558592073A054D8004756AD53D69E594095D57B/0/669067DB1387B4BF8A246E94B03A0308DCCF3C6D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C807CF0B4CE6F86AFE2E2BCC4558592073A054D8004756AD53D69E594095D57B/0/669067DB1387B4BF8A246E94B03A0308DCCF3C6D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/669067DB1387B4BF8A246E94B03A0308DCCF3C6D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 14 Apr 2025 20:38:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:5e:76:8a:e2:a8:4d:6f:77:91:64:48:48:fb:bb:c7:75:da:a4:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=669067DB1387B4BF8A246E94B03A0308DCCF3C6D
        Validity
            Not Before: Feb  4 18:44:09 2025 GMT
            Not After : Feb  3 18:49:09 2026 GMT
        Subject: CN=466A58AC14CD203D50CF7B442506672BF0B662B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:3d:a2:03:e3:bb:fe:1b:6d:24:99:71:5e:b0:
                    da:2c:8b:2e:ee:26:5b:19:1b:4e:10:c0:e7:c3:8a:
                    52:4e:d6:80:d0:5c:33:13:5f:29:ff:7a:81:6c:18:
                    72:15:d1:99:4f:52:16:fa:4f:e0:8f:0b:72:fc:f8:
                    53:90:d1:88:4f:f6:d4:5f:25:f1:f6:76:e6:18:e1:
                    f3:04:78:35:11:8d:41:2d:a0:9a:99:0d:b2:ad:5e:
                    4a:b4:92:67:60:b9:b8:3c:2f:a7:06:ce:ae:e7:d2:
                    fc:84:76:0e:ef:e5:e5:8e:0d:83:b1:21:61:9c:4a:
                    21:5a:93:77:86:f5:91:7e:58:9e:55:d1:2e:bd:0e:
                    77:ad:53:59:61:17:21:7c:8e:d3:0c:40:1b:d7:ef:
                    5d:88:a1:f5:a0:e5:91:fd:76:42:1f:48:b5:b8:e4:
                    62:a5:5a:3e:00:9d:9f:c9:6f:12:be:93:55:33:26:
                    e9:08:22:c9:32:22:51:61:37:6d:a2:70:83:18:65:
                    95:a4:a7:f0:9b:b7:a6:08:47:1e:0d:38:0b:99:ab:
                    e5:5d:f3:c1:9e:9e:59:1a:5c:58:14:18:79:f8:f6:
                    7a:ed:b8:3e:3f:38:45:ad:99:92:72:71:ac:3d:d7:
                    7f:12:12:df:1c:37:d2:f6:59:64:52:ae:54:be:5d:
                    bc:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:6A:58:AC:14:CD:20:3D:50:CF:7B:44:25:06:67:2B:F0:B6:62:B6
            X509v3 Authority Key Identifier:
                keyid:66:90:67:DB:13:87:B4:BF:8A:24:6E:94:B0:3A:03:08:DC:CF:3C:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C807CF0B4CE6F86AFE2E2BCC4558592073A054D8004756AD53D69E594095D57B/0/669067DB1387B4BF8A246E94B03A0308DCCF3C6D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/669067DB1387B4BF8A246E94B03A0308DCCF3C6D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C807CF0B4CE6F86AFE2E2BCC4558592073A054D8004756AD53D69E594095D57B/0/323830333a633732303a3a2f33322d3438203d3e20323636373536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c720::/32

    Signature Algorithm: sha256WithRSAEncryption
         8c:ea:30:c6:e0:ba:ac:57:6b:d1:41:76:d3:2f:9a:61:01:c5:
         fb:0c:2a:96:13:0a:27:4d:2a:35:93:74:15:90:6b:23:ca:e2:
         89:62:a5:c6:65:af:e8:e5:6d:eb:2b:09:ea:dc:c4:6c:65:07:
         ea:d1:3e:16:6e:59:93:d1:50:33:4f:92:f8:22:f3:e1:d2:af:
         cf:dd:54:73:fb:70:4f:93:bb:c3:4d:21:42:bc:49:e3:52:f6:
         cd:c0:e3:0c:8d:26:d2:45:1f:ed:b3:43:95:72:37:07:1f:9d:
         08:98:33:31:18:fe:27:c5:cc:df:fb:d0:c1:19:00:00:3d:8b:
         4b:1b:9c:34:6d:eb:f8:0a:54:08:04:8b:e8:2e:78:97:94:2c:
         c9:03:da:09:63:b4:05:7e:4c:28:7b:d4:5c:20:c2:3f:2b:b8:
         79:f0:cb:13:34:5d:ce:ff:cf:9b:6c:61:9d:91:94:d2:61:b8:
         b2:6f:21:b7:f0:24:e7:cd:ab:f6:db:5d:85:7b:e2:0a:cd:1e:
         82:7d:cb:f7:e9:5b:93:c5:40:5b:9b:d0:41:d5:d2:ac:f8:71:
         bd:d4:1d:4a:5c:e9:62:16:19:48:b5:d3:76:39:9a:61:f4:c2:
         58:7f:82:be:6a:fd:53:f2:6d:de:67:ca:00:8e:0e:17:33:37:
         46:06:cf:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 19:29:27 2025 by rpki-client