Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0B0A0A5FB5D274CC3A2312017898B85F188FB9C0831C6112C82A20F45903BE7/0/323830363a3430323a3a2f33342d3438203d3e20323730313739.roa
File:                     323830363a3430323a3a2f33342d3438203d3e20323730313739.roa (raw, json)
Hash identifier:          qpznsT2e8GqiyQMyBpc66x4SfBmSZpCWO1nvlzIORJo=
Subject key identifier:   8A:A6:AA:41:87:50:22:A5:4F:6F:EF:C7:10:24:03:18:9D:C9:26:5C
Certificate issuer:       /CN=ACF001143928ED105048A1EE877591E821D8006F
Certificate serial:       3D57E80701BF8C53DA8BB04FB0E3985C0A793031
Authority key identifier: AC:F0:01:14:39:28:ED:10:50:48:A1:EE:87:75:91:E8:21:D8:00:6F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ACF001143928ED105048A1EE877591E821D8006F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0B0A0A5FB5D274CC3A2312017898B85F188FB9C0831C6112C82A20F45903BE7/0/323830363a3430323a3a2f33342d3438203d3e20323730313739.roa
Signing time:             Tue 04 Feb 2025 18:20:00 +0000
ROA not before:           Tue 04 Feb 2025 18:15:00 +0000
ROA not after:            Tue 03 Feb 2026 18:20:00 +0000
asID:                     270179
IP address blocks:        2806:402::/34 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D0B0A0A5FB5D274CC3A2312017898B85F188FB9C0831C6112C82A20F45903BE7/0/ACF001143928ED105048A1EE877591E821D8006F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D0B0A0A5FB5D274CC3A2312017898B85F188FB9C0831C6112C82A20F45903BE7/0/ACF001143928ED105048A1EE877591E821D8006F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ACF001143928ED105048A1EE877591E821D8006F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 10:26:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:57:e8:07:01:bf:8c:53:da:8b:b0:4f:b0:e3:98:5c:0a:79:30:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ACF001143928ED105048A1EE877591E821D8006F
        Validity
            Not Before: Feb  4 18:15:00 2025 GMT
            Not After : Feb  3 18:20:00 2026 GMT
        Subject: CN=8AA6AA41875022A54F6FEFC7102403189DC9265C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:a2:83:c6:68:10:5e:e2:18:9d:d8:ee:1d:34:
                    96:40:ee:fa:50:d6:6c:ca:f1:f2:61:1c:8e:84:f0:
                    f5:c1:e7:94:49:66:a5:df:9f:21:a1:c8:db:b3:0b:
                    3f:db:c7:5e:e4:45:36:46:7e:00:0c:5a:6a:f1:47:
                    d6:ad:77:29:dd:6e:c7:fd:24:bd:3d:54:77:c6:fd:
                    22:e2:a7:1b:ee:69:d0:3a:a6:77:be:87:90:fa:fb:
                    b7:db:a5:14:b0:37:b4:07:a5:17:35:8b:ba:ab:dc:
                    3b:64:72:29:46:3e:9e:d5:cc:7c:b1:cd:0a:14:bd:
                    77:57:31:b3:75:9b:05:a3:a9:16:47:a8:49:8c:71:
                    97:a4:de:3e:a0:bf:c4:76:e1:df:4d:f2:f6:ed:ec:
                    c4:15:4a:4f:a4:03:49:0f:c6:22:02:35:e3:35:b6:
                    c8:10:81:5c:c3:7c:75:7d:58:87:9d:9f:fb:7a:42:
                    cd:ed:bc:11:b3:07:7f:4d:65:5e:06:f3:44:86:42:
                    27:ab:d6:8a:c8:66:55:6f:98:f4:56:13:13:1b:c0:
                    a3:74:23:51:80:d7:cc:3e:78:db:90:be:3b:ba:e2:
                    71:56:f4:41:d9:b5:4d:b5:42:39:6d:95:62:f7:29:
                    3a:25:4d:bf:34:cb:b8:c5:61:15:ed:6e:4c:57:19:
                    53:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:A6:AA:41:87:50:22:A5:4F:6F:EF:C7:10:24:03:18:9D:C9:26:5C
            X509v3 Authority Key Identifier:
                keyid:AC:F0:01:14:39:28:ED:10:50:48:A1:EE:87:75:91:E8:21:D8:00:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0B0A0A5FB5D274CC3A2312017898B85F188FB9C0831C6112C82A20F45903BE7/0/ACF001143928ED105048A1EE877591E821D8006F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ACF001143928ED105048A1EE877591E821D8006F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0B0A0A5FB5D274CC3A2312017898B85F188FB9C0831C6112C82A20F45903BE7/0/323830363a3430323a3a2f33342d3438203d3e20323730313739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:402::/34

    Signature Algorithm: sha256WithRSAEncryption
         97:98:5d:20:59:c7:3e:55:64:7d:d3:a5:8d:a1:be:e2:36:96:
         2c:5e:b7:24:1b:e6:7c:9e:93:94:3a:cc:d5:b2:b6:0f:ff:aa:
         1a:a7:cb:5f:af:a4:9e:5d:05:4f:80:09:8e:34:65:d7:61:10:
         94:0a:19:d0:c9:9b:47:49:bc:fd:25:f3:2d:19:66:90:10:9d:
         43:fd:9b:1e:d1:fe:11:88:2e:e5:a7:c5:67:11:10:c2:d3:a9:
         0e:64:0d:9d:36:de:f5:d6:5d:df:07:c8:26:5f:50:ed:ab:c7:
         f0:61:dd:64:08:33:0c:f3:c5:fd:ff:0e:97:83:a7:b7:0d:12:
         dc:f6:fe:b9:36:0f:55:ae:52:da:9b:45:11:ca:97:69:05:2a:
         df:05:05:fd:8a:5d:ef:80:3e:01:58:a9:5d:da:cf:52:0c:a9:
         22:ea:1e:1f:82:31:6f:c4:50:82:d5:d9:6c:6d:0b:ca:10:c6:
         51:c3:f9:c3:5c:a6:16:38:30:86:39:aa:19:e7:0f:43:35:3b:
         a8:62:94:ce:53:1f:00:4b:dd:a8:25:4b:58:c4:bd:79:e6:ea:
         27:8b:53:c6:5f:ba:c9:cf:44:8e:e2:d6:f7:1b:b2:80:4e:48:
         d5:a1:d4:55:a9:85:98:09:fb:64:8a:a3:c3:2f:35:e9:fe:6a:
         db:56:2f:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 04:38:20 2025 by rpki-client