Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8A132E6697C4E8AF8F3FE65A97E190959707B0C0EB79900AD2C8CBD615BF4B66/0/323830333a333535303a3830303a3a2f34302d3430203d3e20323733383538.roa
File:                     323830333a333535303a3830303a3a2f34302d3430203d3e20323733383538.roa (raw, json)
Hash identifier:          q7RNGFG5zimjkTk8GDveXei+lXiTzS/fGF3o3fBsS5M=
Subject key identifier:   7C:9E:CA:D8:09:CC:F0:17:98:19:77:C4:9D:BD:D4:59:B6:22:A0:C3
Certificate issuer:       /CN=5EC3FC6FA5D9D0343AB937E30A4D6EDAA5C87D5C
Certificate serial:       6E98F2708DE65BFF5ABC4F1BCDAD943C29C7CB0C
Authority key identifier: 5E:C3:FC:6F:A5:D9:D0:34:3A:B9:37:E3:0A:4D:6E:DA:A5:C8:7D:5C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5EC3FC6FA5D9D0343AB937E30A4D6EDAA5C87D5C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8A132E6697C4E8AF8F3FE65A97E190959707B0C0EB79900AD2C8CBD615BF4B66/0/323830333a333535303a3830303a3a2f34302d3430203d3e20323733383538.roa
Signing time:             Thu 29 May 2025 04:20:16 +0000
ROA not before:           Thu 29 May 2025 04:15:16 +0000
ROA not after:            Thu 28 May 2026 04:20:16 +0000
asID:                     273858
IP address blocks:        2803:3550:800::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8A132E6697C4E8AF8F3FE65A97E190959707B0C0EB79900AD2C8CBD615BF4B66/0/5EC3FC6FA5D9D0343AB937E30A4D6EDAA5C87D5C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8A132E6697C4E8AF8F3FE65A97E190959707B0C0EB79900AD2C8CBD615BF4B66/0/5EC3FC6FA5D9D0343AB937E30A4D6EDAA5C87D5C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5EC3FC6FA5D9D0343AB937E30A4D6EDAA5C87D5C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 25 Jun 2025 11:30:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:98:f2:70:8d:e6:5b:ff:5a:bc:4f:1b:cd:ad:94:3c:29:c7:cb:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5EC3FC6FA5D9D0343AB937E30A4D6EDAA5C87D5C
        Validity
            Not Before: May 29 04:15:16 2025 GMT
            Not After : May 28 04:20:16 2026 GMT
        Subject: CN=7C9ECAD809CCF017981977C49DBDD459B622A0C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ff:69:84:62:39:b0:d5:e6:17:7c:c7:6f:29:
                    26:9f:03:3e:ed:3e:f1:29:24:24:99:8f:12:3b:6a:
                    69:39:48:9e:38:01:a9:07:0d:5c:9f:76:b4:02:26:
                    03:bd:b7:3c:62:7a:06:99:46:ee:f6:71:f7:f5:fb:
                    47:4b:4c:d7:c8:20:90:ac:c5:66:3b:42:61:4d:e0:
                    df:ce:2c:2c:0b:d0:84:fe:a1:4d:d8:65:c1:bc:fe:
                    7d:ce:a3:f1:77:5f:56:9d:b4:8b:30:d5:30:a9:b3:
                    53:c7:22:73:3f:bf:1e:7d:60:50:5c:cf:4c:ed:73:
                    28:2d:f0:21:4b:05:61:29:1e:1a:53:50:bf:e8:9a:
                    79:a7:87:61:cb:16:9c:df:22:94:cc:65:82:5a:cc:
                    6b:ef:58:39:90:0d:63:73:64:24:7d:26:28:31:c9:
                    74:fd:ea:a5:f0:06:84:3f:5c:87:5d:6a:f0:e6:be:
                    1e:7b:e4:70:9a:35:1f:ae:6c:cf:b6:f2:2d:b5:1e:
                    db:cd:0a:65:1e:e3:2f:25:77:42:17:42:dd:1f:7d:
                    cb:bb:e1:2d:81:21:e3:9f:e4:37:b6:79:7c:a5:2c:
                    0c:f0:1d:24:e2:f0:6c:3c:88:0d:f6:65:fd:52:7a:
                    1c:24:82:4a:6c:67:b5:56:93:c5:71:9a:96:4a:e9:
                    d4:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:9E:CA:D8:09:CC:F0:17:98:19:77:C4:9D:BD:D4:59:B6:22:A0:C3
            X509v3 Authority Key Identifier:
                keyid:5E:C3:FC:6F:A5:D9:D0:34:3A:B9:37:E3:0A:4D:6E:DA:A5:C8:7D:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8A132E6697C4E8AF8F3FE65A97E190959707B0C0EB79900AD2C8CBD615BF4B66/0/5EC3FC6FA5D9D0343AB937E30A4D6EDAA5C87D5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5EC3FC6FA5D9D0343AB937E30A4D6EDAA5C87D5C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8A132E6697C4E8AF8F3FE65A97E190959707B0C0EB79900AD2C8CBD615BF4B66/0/323830333a333535303a3830303a3a2f34302d3430203d3e20323733383538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3550:800::/40

    Signature Algorithm: sha256WithRSAEncryption
         71:d7:9e:4f:a6:cf:b5:8a:52:76:0d:8a:6b:bc:08:7d:ec:01:
         fc:2a:54:70:3b:0a:46:21:86:89:cf:b2:8d:04:24:e2:27:4d:
         f2:48:74:41:4a:67:1d:c8:5a:8c:5d:7f:59:20:e0:0b:53:f2:
         c7:97:c2:62:07:e9:2c:a0:81:56:94:86:2d:51:15:6a:39:ec:
         bf:08:c3:b1:1e:4b:e2:71:89:d3:27:93:6e:ae:ed:32:5d:a7:
         17:71:19:91:32:bb:16:15:74:d7:91:25:b9:cf:4c:24:22:56:
         9d:91:87:b6:d7:33:94:4c:41:f0:2c:d8:cf:bc:8b:69:b6:46:
         ee:e8:34:d7:1b:b5:58:94:3e:76:be:af:bd:81:a0:e7:bd:c1:
         8e:16:83:d6:5a:a7:49:22:73:c2:07:69:8a:12:39:4e:ca:4c:
         49:48:6a:a7:e0:1c:42:63:1e:f5:da:97:00:98:f5:b0:67:9a:
         37:b4:c4:89:16:66:1b:1d:aa:01:a9:9a:df:df:41:57:90:22:
         4e:b5:68:1b:b0:90:66:c1:05:f8:f7:dc:b2:75:cc:8b:a1:4c:
         9a:b4:b4:b2:3a:54:57:91:5b:b0:08:8e:0f:b7:8e:22:dc:a4:
         2e:cc:00:20:b2:a3:b6:d0:80:87:20:de:8a:a1:15:42:63:f7:
         e4:bf:21:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 05:09:15 2025 by rpki-client