Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/323830303a3630303a3a2f33322d3438203d3e203532333233.roa
File:                     323830303a3630303a3a2f33322d3438203d3e203532333233.roa (raw, json)
Hash identifier:          l7rA6wnUFoYv2duEKo0bKeYopagTk8XV3X2HlZySJ6A=
Subject key identifier:   2E:DC:98:F4:AF:86:CD:3F:7F:B4:15:B8:1B:81:F2:F4:5D:86:B2:00
Certificate issuer:       /CN=8E6B5F56BFBE69F74CE7B0133EBE918800D55662
Certificate serial:       56851144CE1DC6A9C9FE13055D3B832B66910666
Authority key identifier: 8E:6B:5F:56:BF:BE:69:F7:4C:E7:B0:13:3E:BE:91:88:00:D5:56:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/323830303a3630303a3a2f33322d3438203d3e203532333233.roa
Signing time:             Tue 04 Feb 2025 18:37:47 +0000
ROA not before:           Tue 04 Feb 2025 18:32:47 +0000
ROA not after:            Tue 03 Feb 2026 18:37:47 +0000
asID:                     52323
IP address blocks:        2800:600::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:85:11:44:ce:1d:c6:a9:c9:fe:13:05:5d:3b:83:2b:66:91:06:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E6B5F56BFBE69F74CE7B0133EBE918800D55662
        Validity
            Not Before: Feb  4 18:32:47 2025 GMT
            Not After : Feb  3 18:37:47 2026 GMT
        Subject: CN=2EDC98F4AF86CD3F7FB415B81B81F2F45D86B200
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:e7:3b:c9:91:d3:ee:79:36:6d:1a:fe:dc:0f:
                    52:a9:91:11:6d:96:9e:9d:76:57:68:f2:aa:92:ff:
                    29:b1:64:26:0f:6b:f3:b3:49:43:18:d2:00:ab:a3:
                    01:00:fc:1a:87:66:0b:32:75:f0:e9:25:93:0f:0d:
                    d9:a6:f4:eb:d7:0c:9a:a2:f3:63:f4:08:52:91:35:
                    96:3b:6b:fe:35:d5:6f:0e:6d:03:f8:ec:fe:80:a9:
                    7c:64:8d:ba:a4:43:49:d4:00:5f:eb:44:34:cf:08:
                    50:dd:ba:bc:7b:a7:db:cd:10:0e:0e:c9:0b:e9:1e:
                    89:c2:fa:41:23:85:77:e4:14:fd:e4:cb:20:eb:8a:
                    1b:4b:6b:67:74:f3:b3:fe:55:fb:73:e3:f5:76:e2:
                    36:1d:73:c6:28:09:6d:53:9d:45:8f:86:9f:d2:97:
                    e4:3b:fd:80:c4:72:05:e7:56:19:0f:b4:f0:92:ff:
                    9c:8a:a8:17:a0:85:8d:20:11:9e:73:71:83:58:3e:
                    ba:b1:b5:7c:a4:23:9b:94:4f:19:75:36:10:fd:6c:
                    57:61:08:37:0a:8a:63:21:a7:0e:30:51:62:40:e0:
                    bd:f7:27:42:41:cc:88:db:c7:61:0d:a3:d6:9a:ec:
                    6b:d8:d8:22:64:ca:ac:b8:0f:a7:00:7f:c8:ed:bb:
                    9d:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:DC:98:F4:AF:86:CD:3F:7F:B4:15:B8:1B:81:F2:F4:5D:86:B2:00
            X509v3 Authority Key Identifier:
                keyid:8E:6B:5F:56:BF:BE:69:F7:4C:E7:B0:13:3E:BE:91:88:00:D5:56:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/323830303a3630303a3a2f33322d3438203d3e203532333233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:600::/32

    Signature Algorithm: sha256WithRSAEncryption
         49:d1:61:d0:71:52:76:01:49:58:65:99:38:7e:64:3b:b7:4c:
         0c:d9:18:8f:c6:29:7b:76:73:cb:23:3a:8a:c7:c4:f7:bc:10:
         ea:bb:9b:99:d8:89:6e:93:e5:07:c3:6c:41:8f:15:b9:3e:96:
         1a:94:bb:1f:05:06:d4:f4:6d:02:4f:06:fc:48:2a:8a:43:dd:
         0e:06:e6:0e:61:ec:0f:92:90:fe:95:40:8d:c9:e8:b7:b2:43:
         cb:ec:1e:99:a9:10:49:af:e4:a3:a0:a5:35:f8:ef:eb:3e:70:
         ba:c1:a1:ff:3c:4e:8d:1a:2d:99:bf:1f:df:62:64:ca:4c:01:
         ab:e1:54:85:b5:41:3c:d7:5d:07:e1:a1:98:7d:07:37:82:02:
         22:9d:93:78:3f:5d:0c:b2:e4:c7:0b:32:ae:29:13:c8:5a:92:
         6b:49:39:f9:19:6c:11:9f:45:ea:db:f5:8d:99:ea:c7:b8:0e:
         00:e5:70:ec:01:00:f4:69:54:69:83:d9:53:38:85:be:80:50:
         0a:b1:62:14:ab:9c:8d:bb:32:99:09:69:77:38:20:6d:b6:fd:
         54:fc:11:56:6d:bb:ac:d8:5e:d4:5d:45:27:e8:a1:fc:0a:b4:
         ac:e9:80:16:54:9a:10:54:f9:a9:c3:ec:fd:8b:e6:cb:1c:cb:
         0f:a7:14:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:10:38 2025 by rpki-client