Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D688DEEEB6EE470E2F40641231B2C389CC65C0AFA5BA6CB5A6E5229D3A463479/0/323830333a353138303a373030303a3a2f33362d3336203d3e20323633373632.roa
File:                     323830333a353138303a373030303a3a2f33362d3336203d3e20323633373632.roa (raw, json)
Hash identifier:          wH7W33vW0C4VmfogVUWhEhEDq8Xlx/ZxZfs2UoTmX7U=
Subject key identifier:   0E:E8:8D:E0:BC:1E:5C:5F:C7:8C:61:31:4D:2A:7B:99:0F:3A:51:53
Certificate issuer:       /CN=F560245552ABA4019972F9F5D1842354FC2CDB48
Certificate serial:       60C838BEF9668E3AC694F4343E2B76C983158B3A
Authority key identifier: F5:60:24:55:52:AB:A4:01:99:72:F9:F5:D1:84:23:54:FC:2C:DB:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F560245552ABA4019972F9F5D1842354FC2CDB48.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D688DEEEB6EE470E2F40641231B2C389CC65C0AFA5BA6CB5A6E5229D3A463479/0/323830333a353138303a373030303a3a2f33362d3336203d3e20323633373632.roa
Signing time:             Tue 04 Feb 2025 18:52:29 +0000
ROA not before:           Tue 04 Feb 2025 18:47:29 +0000
ROA not after:            Tue 03 Feb 2026 18:52:29 +0000
asID:                     263762
IP address blocks:        2803:5180:7000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D688DEEEB6EE470E2F40641231B2C389CC65C0AFA5BA6CB5A6E5229D3A463479/0/F560245552ABA4019972F9F5D1842354FC2CDB48.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D688DEEEB6EE470E2F40641231B2C389CC65C0AFA5BA6CB5A6E5229D3A463479/0/F560245552ABA4019972F9F5D1842354FC2CDB48.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F560245552ABA4019972F9F5D1842354FC2CDB48.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:c8:38:be:f9:66:8e:3a:c6:94:f4:34:3e:2b:76:c9:83:15:8b:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F560245552ABA4019972F9F5D1842354FC2CDB48
        Validity
            Not Before: Feb  4 18:47:29 2025 GMT
            Not After : Feb  3 18:52:29 2026 GMT
        Subject: CN=0EE88DE0BC1E5C5FC78C61314D2A7B990F3A5153
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:51:27:a1:1f:51:b8:28:aa:49:77:f4:76:87:
                    6a:69:b1:2b:39:8f:d4:dc:74:88:b8:da:39:5c:15:
                    b3:5d:79:77:6c:08:dd:6e:9f:c7:67:61:4f:a2:e1:
                    58:69:ce:2b:71:e2:db:03:b3:8e:99:d4:f7:a2:1e:
                    30:a1:30:c1:2c:50:d2:a0:60:e4:c7:2d:cd:f8:57:
                    53:02:e8:9f:a8:fa:ed:72:48:f3:ed:d3:75:3e:c2:
                    26:58:14:44:22:d7:30:58:b2:e0:64:3a:a6:13:79:
                    95:aa:2a:90:aa:a4:d6:f8:0d:50:ba:7c:cd:a9:44:
                    6d:cc:51:62:20:a7:da:42:07:65:56:30:49:73:2a:
                    30:0c:2b:cd:61:a4:c1:ef:08:8e:cd:a6:b5:d1:82:
                    6f:32:4f:62:dd:3c:0b:37:b3:2a:9a:5c:a6:2d:3f:
                    e5:2b:29:ed:9f:cb:0d:0c:1b:e8:d3:1c:23:28:f3:
                    30:e5:2d:1e:01:f8:ec:ae:25:0a:ec:7b:94:ad:2d:
                    83:38:70:5f:8d:45:28:24:8b:2a:09:f2:fe:21:cd:
                    a3:01:c4:df:3f:b5:fc:12:4c:33:ae:2e:85:6f:5d:
                    5d:5a:b2:65:ef:43:62:a9:31:97:2e:0c:35:4f:da:
                    e9:45:c4:24:57:e1:e9:02:f0:e8:94:31:fd:e8:0e:
                    92:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:E8:8D:E0:BC:1E:5C:5F:C7:8C:61:31:4D:2A:7B:99:0F:3A:51:53
            X509v3 Authority Key Identifier:
                keyid:F5:60:24:55:52:AB:A4:01:99:72:F9:F5:D1:84:23:54:FC:2C:DB:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D688DEEEB6EE470E2F40641231B2C389CC65C0AFA5BA6CB5A6E5229D3A463479/0/F560245552ABA4019972F9F5D1842354FC2CDB48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F560245552ABA4019972F9F5D1842354FC2CDB48.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D688DEEEB6EE470E2F40641231B2C389CC65C0AFA5BA6CB5A6E5229D3A463479/0/323830333a353138303a373030303a3a2f33362d3336203d3e20323633373632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5180:7000::/36

    Signature Algorithm: sha256WithRSAEncryption
         3a:6f:28:cb:b8:7a:62:92:cb:9c:d0:a8:48:93:dc:dd:04:be:
         94:4c:76:77:df:17:3b:ae:e3:18:62:dc:01:24:1a:4c:4e:c0:
         c7:3d:25:bc:57:1f:9a:1a:51:51:73:20:09:77:7d:9e:10:d9:
         b5:8d:c1:74:3c:22:44:cc:fa:78:23:8f:5e:27:e9:29:54:89:
         42:df:f2:d4:7f:b5:74:51:58:90:d2:7a:d6:19:73:ff:df:1c:
         76:68:aa:cc:ab:31:82:75:21:b7:69:91:99:ea:b1:b2:5e:6e:
         28:38:7f:15:ff:6d:d1:fc:e1:7e:a7:ff:50:2b:77:a5:92:89:
         1f:2a:3b:61:15:85:22:55:94:ec:a0:88:53:4e:df:20:16:e9:
         19:6b:ee:82:83:08:d7:25:c4:42:cf:7d:06:43:ed:4f:c9:82:
         b7:b9:43:34:13:28:21:ad:05:75:ab:a2:ab:fb:dd:7c:19:c1:
         cf:da:09:51:60:87:b4:70:64:6b:37:77:b2:37:c4:18:06:d0:
         82:3c:9e:80:8b:f2:0d:20:26:a3:18:84:de:cb:59:86:e9:1a:
         61:de:c9:8e:f4:81:da:92:fa:66:b1:b0:a6:08:8c:75:43:c4:
         bb:9e:4b:ba:2f:8d:b7:38:9c:12:ef:19:10:9f:58:8a:6e:7e:
         2a:e1:1c:ce
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Apr 6 01:32:56 2025 by rpki-client