Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8A132E6697C4E8AF8F3FE65A97E190959707B0C0EB79900AD2C8CBD615BF4B66/0/323830333a333535303a3430303a3a2f34302d3430203d3e20323733383538.roa
File:                     323830333a333535303a3430303a3a2f34302d3430203d3e20323733383538.roa (raw, json)
Hash identifier:          cwwEmCtwtJ6yq8d1h38b/xo3shUTRWkJHz9mVxeZQYk=
Subject key identifier:   84:E4:2E:6A:40:BE:31:1D:F8:3E:43:D1:2F:2C:17:D8:F4:53:2A:A3
Certificate issuer:       /CN=5EC3FC6FA5D9D0343AB937E30A4D6EDAA5C87D5C
Certificate serial:       7A4AAC45B80942F201B867ABCF283B7178E64A
Authority key identifier: 5E:C3:FC:6F:A5:D9:D0:34:3A:B9:37:E3:0A:4D:6E:DA:A5:C8:7D:5C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5EC3FC6FA5D9D0343AB937E30A4D6EDAA5C87D5C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8A132E6697C4E8AF8F3FE65A97E190959707B0C0EB79900AD2C8CBD615BF4B66/0/323830333a333535303a3430303a3a2f34302d3430203d3e20323733383538.roa
Signing time:             Thu 29 May 2025 04:20:16 +0000
ROA not before:           Thu 29 May 2025 04:15:16 +0000
ROA not after:            Thu 28 May 2026 04:20:16 +0000
asID:                     273858
IP address blocks:        2803:3550:400::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8A132E6697C4E8AF8F3FE65A97E190959707B0C0EB79900AD2C8CBD615BF4B66/0/5EC3FC6FA5D9D0343AB937E30A4D6EDAA5C87D5C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8A132E6697C4E8AF8F3FE65A97E190959707B0C0EB79900AD2C8CBD615BF4B66/0/5EC3FC6FA5D9D0343AB937E30A4D6EDAA5C87D5C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5EC3FC6FA5D9D0343AB937E30A4D6EDAA5C87D5C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 25 Jun 2025 11:30:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:4a:ac:45:b8:09:42:f2:01:b8:67:ab:cf:28:3b:71:78:e6:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5EC3FC6FA5D9D0343AB937E30A4D6EDAA5C87D5C
        Validity
            Not Before: May 29 04:15:16 2025 GMT
            Not After : May 28 04:20:16 2026 GMT
        Subject: CN=84E42E6A40BE311DF83E43D12F2C17D8F4532AA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:a7:7b:38:3f:1f:0b:79:50:c6:a3:3f:81:c3:
                    35:8f:d5:00:2a:e7:9e:47:49:f9:53:7f:d6:e4:82:
                    dd:b0:b3:c5:de:f1:6f:b1:9d:19:b6:cb:0f:66:c2:
                    99:17:3c:72:40:91:44:70:79:f5:6c:1f:3a:54:19:
                    66:64:a5:96:99:8e:14:9e:a0:34:3a:dc:e0:41:bc:
                    ef:c7:d4:1e:f4:b0:60:7b:71:a2:de:3f:1c:ef:84:
                    e0:8a:8b:be:58:dd:83:8e:91:01:11:33:b5:69:58:
                    47:58:a4:e0:34:2b:29:40:2a:60:af:d4:6c:50:60:
                    74:05:d8:b4:69:bc:13:f7:59:83:a1:bc:34:33:7c:
                    4d:66:3f:f6:bc:36:b4:a3:8c:17:0a:60:83:5e:35:
                    bd:9d:8d:32:ce:5a:7b:e6:f6:5b:e9:3f:b4:1a:d7:
                    08:f1:3f:36:93:71:ac:ec:7d:29:4a:21:38:af:dd:
                    24:ba:f7:99:03:f3:99:ae:61:e7:7a:e6:a8:38:39:
                    0c:a6:b7:d1:d0:a4:c9:34:f5:6b:3d:6a:a1:9d:b0:
                    3a:46:27:1f:7b:d6:fa:c9:fa:fd:e9:c0:26:75:31:
                    8b:74:80:57:da:1f:25:4b:5f:eb:30:57:37:45:c7:
                    9a:b9:ec:0f:06:3c:45:bd:11:ae:ea:a3:bd:0f:f9:
                    6d:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:E4:2E:6A:40:BE:31:1D:F8:3E:43:D1:2F:2C:17:D8:F4:53:2A:A3
            X509v3 Authority Key Identifier:
                keyid:5E:C3:FC:6F:A5:D9:D0:34:3A:B9:37:E3:0A:4D:6E:DA:A5:C8:7D:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8A132E6697C4E8AF8F3FE65A97E190959707B0C0EB79900AD2C8CBD615BF4B66/0/5EC3FC6FA5D9D0343AB937E30A4D6EDAA5C87D5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5EC3FC6FA5D9D0343AB937E30A4D6EDAA5C87D5C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8A132E6697C4E8AF8F3FE65A97E190959707B0C0EB79900AD2C8CBD615BF4B66/0/323830333a333535303a3430303a3a2f34302d3430203d3e20323733383538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3550:400::/40

    Signature Algorithm: sha256WithRSAEncryption
         33:c5:ce:b0:1c:e1:83:e5:80:2b:6e:be:97:a2:0f:1b:b7:e8:
         51:6f:90:d5:e0:17:2b:26:26:8f:1c:87:a7:32:22:31:5e:73:
         84:37:28:b0:c8:91:ca:d7:4f:3d:a3:16:d0:42:43:de:1d:b0:
         dd:aa:50:e1:d5:de:9d:f8:e3:95:3f:5a:23:b0:c9:88:91:89:
         6c:a1:c7:e4:f8:b0:31:24:b6:0a:cb:68:46:ec:05:03:64:ae:
         7d:16:d4:65:6e:00:d5:81:10:cf:a8:b5:b7:e2:ef:90:6c:c8:
         9a:39:8a:93:7d:b6:03:1d:2f:5c:17:e5:bf:ac:c0:d5:db:06:
         09:34:00:b0:7d:f6:f6:19:3b:d7:8a:ff:0c:cd:13:ef:b7:f5:
         0b:b1:90:32:8e:f1:15:e7:f6:58:4e:97:3b:fd:27:20:28:e4:
         13:af:f3:fe:31:1f:43:be:03:2b:ec:81:2f:0a:b2:93:ef:9a:
         69:90:23:c1:ef:7c:eb:57:b5:cb:f4:74:ef:90:e5:77:30:8b:
         be:ce:2f:25:68:32:e9:2a:e1:6d:bb:b0:fa:58:06:03:a6:03:
         4b:54:93:75:57:f1:47:2c:01:44:14:d1:d5:08:6a:86:56:93:
         c1:2a:62:96:86:e9:e4:74:30:19:34:a3:49:85:73:b4:c3:93:
         02:74:6c:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 05:05:35 2025 by rpki-client