Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3D8A7AE4A0639A999ECFE2B8AB19580924F2AB8F8F32A860DD8D6D5F79BB2815/0/323830333a633535303a3a2f33332d3333203d3e20323733383437.roa
File:                     323830333a633535303a3a2f33332d3333203d3e20323733383437.roa (raw, json)
Hash identifier:          9ZAbTdHPMqohpqDufU4nGotBMDI/Yjl81mXUi4CN9Cc=
Subject key identifier:   14:D3:03:15:44:7B:60:90:2B:26:61:36:68:27:68:0E:B2:15:9B:43
Certificate issuer:       /CN=E4FA559F63807E8DD19FFF7624CD06DD42F2B765
Certificate serial:       66DEC1467AACCD3C82F8687C27311D25CDBFF32F
Authority key identifier: E4:FA:55:9F:63:80:7E:8D:D1:9F:FF:76:24:CD:06:DD:42:F2:B7:65
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E4FA559F63807E8DD19FFF7624CD06DD42F2B765.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3D8A7AE4A0639A999ECFE2B8AB19580924F2AB8F8F32A860DD8D6D5F79BB2815/0/323830333a633535303a3a2f33332d3333203d3e20323733383437.roa
Signing time:             Fri 09 May 2025 16:18:13 +0000
ROA not before:           Fri 09 May 2025 16:13:13 +0000
ROA not after:            Fri 08 May 2026 16:18:13 +0000
asID:                     273847
IP address blocks:        2803:c550::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3D8A7AE4A0639A999ECFE2B8AB19580924F2AB8F8F32A860DD8D6D5F79BB2815/0/E4FA559F63807E8DD19FFF7624CD06DD42F2B765.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3D8A7AE4A0639A999ECFE2B8AB19580924F2AB8F8F32A860DD8D6D5F79BB2815/0/E4FA559F63807E8DD19FFF7624CD06DD42F2B765.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E4FA559F63807E8DD19FFF7624CD06DD42F2B765.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 26 Jun 2025 20:14:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:de:c1:46:7a:ac:cd:3c:82:f8:68:7c:27:31:1d:25:cd:bf:f3:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4FA559F63807E8DD19FFF7624CD06DD42F2B765
        Validity
            Not Before: May  9 16:13:13 2025 GMT
            Not After : May  8 16:18:13 2026 GMT
        Subject: CN=14D30315447B60902B2661366827680EB2159B43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:1a:b5:8c:ab:45:8b:95:b0:44:9a:ba:bc:1d:
                    ac:40:89:61:dd:b3:cc:e5:48:01:5d:78:2c:51:53:
                    79:99:28:a1:a0:e8:d8:b9:58:8a:a1:0e:89:95:55:
                    72:6d:79:a3:62:ac:8a:6f:73:18:62:48:6a:99:b4:
                    84:66:30:d4:dd:d6:fc:b2:d9:56:3d:e6:b4:ef:31:
                    fe:fd:e7:d2:e3:7f:41:c5:e3:af:c9:d4:51:01:28:
                    1d:8e:d9:b1:6f:61:96:5a:39:08:6f:36:57:8d:e8:
                    4c:58:16:24:c3:85:72:35:47:9c:21:ca:88:cd:60:
                    37:0c:c1:22:2e:a9:fe:41:b7:48:40:07:5b:53:5e:
                    5a:eb:96:6b:cb:dc:7c:7f:52:b1:14:d7:ff:65:ea:
                    f0:c4:b1:39:4b:5f:58:4a:c1:5a:e4:39:2a:82:41:
                    36:e8:2a:e3:09:6f:3f:9d:9c:c4:68:5d:ca:00:61:
                    4c:0a:56:59:e9:e6:bd:fa:d7:8e:14:e5:18:58:fa:
                    f1:c4:5a:39:67:b8:ec:34:47:cc:c1:2d:ae:d2:24:
                    f0:57:a8:ff:63:7b:9f:70:1c:3a:77:88:66:90:5e:
                    17:92:70:a6:25:77:65:0e:37:13:74:f7:25:00:6c:
                    31:11:f7:8c:be:40:05:9c:78:54:eb:64:1c:da:76:
                    ba:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:D3:03:15:44:7B:60:90:2B:26:61:36:68:27:68:0E:B2:15:9B:43
            X509v3 Authority Key Identifier:
                keyid:E4:FA:55:9F:63:80:7E:8D:D1:9F:FF:76:24:CD:06:DD:42:F2:B7:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3D8A7AE4A0639A999ECFE2B8AB19580924F2AB8F8F32A860DD8D6D5F79BB2815/0/E4FA559F63807E8DD19FFF7624CD06DD42F2B765.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E4FA559F63807E8DD19FFF7624CD06DD42F2B765.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3D8A7AE4A0639A999ECFE2B8AB19580924F2AB8F8F32A860DD8D6D5F79BB2815/0/323830333a633535303a3a2f33332d3333203d3e20323733383437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c550::/33

    Signature Algorithm: sha256WithRSAEncryption
         6b:22:eb:ca:f6:6f:cd:6d:62:b6:e3:91:80:86:98:c5:0f:d3:
         da:cb:2f:bf:7d:4f:03:72:86:b0:ed:50:6f:8a:87:df:02:5c:
         8f:a7:9c:69:3f:85:f7:6d:90:46:7e:53:97:a8:af:b3:25:c0:
         8c:4e:85:c2:2e:fb:f5:2b:1d:21:6a:3e:3c:65:cf:0a:9c:da:
         28:9d:d9:3a:e1:67:54:0e:17:4c:0a:e0:0e:90:9b:a6:08:b0:
         bd:3c:bc:6e:c5:b6:e2:dd:59:96:24:98:f3:e8:9a:d0:00:e4:
         29:5b:0f:0b:ab:fe:da:8e:15:45:20:2b:92:ca:6b:a1:b6:37:
         ca:54:af:bc:53:6a:f7:4f:39:23:ec:3a:27:62:00:13:7e:3f:
         8c:3d:6b:fc:13:4f:1f:7e:63:e1:db:5b:37:14:dd:67:17:33:
         aa:e9:83:f4:a6:31:0b:74:a4:6e:31:18:7b:34:d2:98:aa:56:
         27:17:79:a1:6e:36:40:62:ae:3d:ea:b1:0a:93:45:6d:09:4d:
         23:2f:cb:de:89:7f:11:74:82:bf:f6:3a:76:e4:72:f1:5a:f4:
         3b:02:c8:8c:cb:80:02:75:51:9c:99:b4:ee:18:fd:d5:db:6c:
         32:6d:fc:be:d4:8a:e1:af:b2:92:3b:e7:23:02:c8:54:65:88:
         33:44:53:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 23 05:07:08 2025 by rpki-client