Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CC3CC60F06C7CB4308859E8355EC0A740C38F1BFB096D51AC2BDFD8727F90152/0/323830333a646163303a3a2f33322d3438203d3e20323635363334.roa
File:                     323830333a646163303a3a2f33322d3438203d3e20323635363334.roa (raw, json)
Hash identifier:          hSIgtjSbBBAfd2j0Bxhs9V+0cTYgPF8nO6nPO3nCBJQ=
Subject key identifier:   6A:6E:52:EA:F1:8B:6D:F4:FE:65:B3:6A:9D:C8:E3:74:5B:75:DC:2C
Certificate issuer:       /CN=704D35555DB11E7E7E56BDCB34E635E30C8C6978
Certificate serial:       2AD86F99FCE602857A8EB811B6375BA8A86FAC51
Authority key identifier: 70:4D:35:55:5D:B1:1E:7E:7E:56:BD:CB:34:E6:35:E3:0C:8C:69:78
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/704D35555DB11E7E7E56BDCB34E635E30C8C6978.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CC3CC60F06C7CB4308859E8355EC0A740C38F1BFB096D51AC2BDFD8727F90152/0/323830333a646163303a3a2f33322d3438203d3e20323635363334.roa
Signing time:             Tue 04 Feb 2025 18:35:30 +0000
ROA not before:           Tue 04 Feb 2025 18:30:30 +0000
ROA not after:            Tue 03 Feb 2026 18:35:30 +0000
asID:                     265634
IP address blocks:        2803:dac0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CC3CC60F06C7CB4308859E8355EC0A740C38F1BFB096D51AC2BDFD8727F90152/0/704D35555DB11E7E7E56BDCB34E635E30C8C6978.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CC3CC60F06C7CB4308859E8355EC0A740C38F1BFB096D51AC2BDFD8727F90152/0/704D35555DB11E7E7E56BDCB34E635E30C8C6978.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/704D35555DB11E7E7E56BDCB34E635E30C8C6978.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:d8:6f:99:fc:e6:02:85:7a:8e:b8:11:b6:37:5b:a8:a8:6f:ac:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=704D35555DB11E7E7E56BDCB34E635E30C8C6978
        Validity
            Not Before: Feb  4 18:30:30 2025 GMT
            Not After : Feb  3 18:35:30 2026 GMT
        Subject: CN=6A6E52EAF18B6DF4FE65B36A9DC8E3745B75DC2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:e2:c4:7a:97:30:14:35:e0:f6:9b:af:a4:b8:
                    ed:cc:ee:6f:0d:a4:72:36:64:8c:4a:3b:c6:db:24:
                    c9:ac:d5:37:a3:37:cb:5d:10:aa:17:54:6f:f2:25:
                    60:57:d8:c3:91:b8:db:26:07:34:73:dc:a5:8c:65:
                    a1:0c:26:14:63:a9:ee:e2:00:35:9d:0f:f9:02:2d:
                    13:cc:59:fa:e1:d4:35:12:20:1f:27:07:33:34:8c:
                    71:8b:27:77:8a:17:eb:03:ec:2e:44:50:8c:04:21:
                    ba:9c:af:f5:b6:98:ce:26:bb:e6:95:65:86:0a:1d:
                    56:9c:c5:73:31:28:bb:c2:85:d5:85:da:03:80:f6:
                    15:ae:cd:81:ec:37:17:2d:c5:10:3f:23:e6:da:b9:
                    e8:d7:61:5f:b3:eb:cb:76:8b:3a:9f:d5:c4:17:5f:
                    de:0f:8d:86:48:ee:62:2a:0a:b8:98:2b:01:68:7f:
                    9b:90:e2:21:32:2c:e1:47:2f:5b:52:00:7e:d4:f0:
                    5d:55:d7:db:26:97:ae:d6:24:76:ee:7d:2c:d2:6e:
                    a7:c2:f8:c0:8c:42:9f:d5:90:2d:fb:07:5a:6e:c3:
                    cc:14:1c:c5:42:47:fd:45:22:05:b3:5b:0a:6d:13:
                    4e:21:cf:a1:3f:cc:cc:05:fe:08:3b:18:27:73:48:
                    49:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:6E:52:EA:F1:8B:6D:F4:FE:65:B3:6A:9D:C8:E3:74:5B:75:DC:2C
            X509v3 Authority Key Identifier:
                keyid:70:4D:35:55:5D:B1:1E:7E:7E:56:BD:CB:34:E6:35:E3:0C:8C:69:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CC3CC60F06C7CB4308859E8355EC0A740C38F1BFB096D51AC2BDFD8727F90152/0/704D35555DB11E7E7E56BDCB34E635E30C8C6978.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/704D35555DB11E7E7E56BDCB34E635E30C8C6978.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CC3CC60F06C7CB4308859E8355EC0A740C38F1BFB096D51AC2BDFD8727F90152/0/323830333a646163303a3a2f33322d3438203d3e20323635363334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:dac0::/32

    Signature Algorithm: sha256WithRSAEncryption
         26:d5:34:01:be:75:9e:47:6e:d6:e9:c4:42:22:1b:b5:d9:00:
         dd:89:c7:b7:61:2b:50:57:96:9b:d8:79:72:cd:27:ae:1d:e7:
         96:87:5c:5f:6a:c3:a5:e3:23:08:57:de:04:c0:44:6c:f8:b1:
         ec:28:d0:55:ec:fe:71:b9:e7:df:4b:19:25:4a:fa:cf:38:56:
         8d:08:8b:c9:68:b8:45:bf:a8:20:90:63:a7:9e:64:79:9b:7a:
         66:77:03:11:02:3c:a7:68:e9:79:a8:ab:fe:a1:9a:ad:b4:33:
         1d:9e:a9:04:ae:42:64:7e:5c:5a:62:3a:70:ce:00:4e:73:14:
         c7:6c:0f:17:d0:10:b3:0b:90:b5:82:b4:65:79:e4:91:85:14:
         dd:f4:ee:a2:8e:df:42:65:ad:8a:da:bb:06:b9:25:09:f6:5e:
         c6:0c:53:b7:61:31:d5:ae:b5:ec:8a:5d:0a:9e:b9:f4:a7:46:
         fe:59:33:a6:e1:7c:29:5c:9d:c8:28:94:1d:71:61:c1:51:e2:
         a2:cf:38:61:50:bf:26:e6:da:51:81:f2:87:fa:5c:4b:a5:52:
         12:2c:06:f7:44:61:14:99:c4:35:5e:63:01:6d:e9:c8:7c:25:
         5e:e3:76:20:32:78:d6:d4:45:85:91:be:27:12:6c:8d:1d:f1:
         57:19:62:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:50:55 2025 by rpki-client