Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A3355ECD6AC1B0A9AAC52A56AD0AF34B4536C2AC7FAD525C02EF230341BC06AE/0/323030313a313230373a666663303a3a2f34322d3432203d3e203238343539.roa
File:                     323030313a313230373a666663303a3a2f34322d3432203d3e203238343539.roa (raw, json)
Hash identifier:          qkyZxltVVFUxcd48BM3ODxVwLPXAJM95O5CCVBZvOSU=
Subject key identifier:   0D:DA:1F:18:49:65:D9:E3:49:D0:73:AE:17:2E:6E:D8:BD:FF:21:56
Certificate issuer:       /CN=88F33C2FEA58249E83B8947F7C6DED538B91B18B
Certificate serial:       5D51EFE6AE3ADECFEE209EFBD754EC6DA8E0F4F8
Authority key identifier: 88:F3:3C:2F:EA:58:24:9E:83:B8:94:7F:7C:6D:ED:53:8B:91:B1:8B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/88F33C2FEA58249E83B8947F7C6DED538B91B18B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A3355ECD6AC1B0A9AAC52A56AD0AF34B4536C2AC7FAD525C02EF230341BC06AE/0/323030313a313230373a666663303a3a2f34322d3432203d3e203238343539.roa
Signing time:             Tue 03 Jun 2025 01:20:53 +0000
ROA not before:           Tue 03 Jun 2025 01:15:53 +0000
ROA not after:            Tue 02 Jun 2026 01:20:53 +0000
asID:                     28459
IP address blocks:        2001:1207:ffc0::/42 maxlen: 42
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A3355ECD6AC1B0A9AAC52A56AD0AF34B4536C2AC7FAD525C02EF230341BC06AE/0/88F33C2FEA58249E83B8947F7C6DED538B91B18B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A3355ECD6AC1B0A9AAC52A56AD0AF34B4536C2AC7FAD525C02EF230341BC06AE/0/88F33C2FEA58249E83B8947F7C6DED538B91B18B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/88F33C2FEA58249E83B8947F7C6DED538B91B18B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 25 Jun 2025 01:31:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:51:ef:e6:ae:3a:de:cf:ee:20:9e:fb:d7:54:ec:6d:a8:e0:f4:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88F33C2FEA58249E83B8947F7C6DED538B91B18B
        Validity
            Not Before: Jun  3 01:15:53 2025 GMT
            Not After : Jun  2 01:20:53 2026 GMT
        Subject: CN=0DDA1F184965D9E349D073AE172E6ED8BDFF2156
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:c1:ca:ae:e8:db:61:04:b4:af:88:06:36:cf:
                    4f:5c:25:b9:a2:33:70:a8:15:19:ed:95:bb:18:d1:
                    35:8b:c5:a0:d5:70:b2:51:bf:11:df:80:7b:cf:96:
                    e6:bf:9d:79:ea:a7:b6:f7:60:03:09:0f:f6:a9:11:
                    04:05:d4:b4:23:1a:92:4b:08:09:ff:f7:04:7b:8b:
                    94:12:65:20:40:2c:86:34:e2:ce:b1:24:30:34:9a:
                    98:10:d3:ae:6d:61:a6:2a:e5:9f:11:13:19:19:5f:
                    25:50:27:92:a6:10:9f:d5:94:20:f2:21:77:68:f8:
                    ab:52:36:d4:0f:49:e5:1b:7d:84:03:6d:3d:90:bf:
                    ce:64:26:94:ee:46:83:a9:97:ac:0c:0c:7c:5d:07:
                    0c:6a:1a:ad:d8:26:90:61:ff:e4:ac:1e:a8:7f:b5:
                    04:ea:76:c6:bd:5a:97:0b:df:84:4d:76:2b:5d:56:
                    a4:0c:d5:c1:55:51:52:44:00:8a:e1:2d:fc:7e:0e:
                    1e:a0:1a:03:18:2e:94:ca:b8:d9:12:53:bd:a8:c8:
                    13:7d:12:cb:0c:2e:ee:6d:8f:27:42:96:ea:a3:1f:
                    f7:9a:98:8a:3f:46:18:fc:f3:eb:f5:c3:f2:23:2f:
                    05:6f:9a:be:1e:1d:98:b8:0c:ff:4c:da:64:a1:67:
                    87:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:DA:1F:18:49:65:D9:E3:49:D0:73:AE:17:2E:6E:D8:BD:FF:21:56
            X509v3 Authority Key Identifier:
                keyid:88:F3:3C:2F:EA:58:24:9E:83:B8:94:7F:7C:6D:ED:53:8B:91:B1:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A3355ECD6AC1B0A9AAC52A56AD0AF34B4536C2AC7FAD525C02EF230341BC06AE/0/88F33C2FEA58249E83B8947F7C6DED538B91B18B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/88F33C2FEA58249E83B8947F7C6DED538B91B18B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A3355ECD6AC1B0A9AAC52A56AD0AF34B4536C2AC7FAD525C02EF230341BC06AE/0/323030313a313230373a666663303a3a2f34322d3432203d3e203238343539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1207:ffc0::/42

    Signature Algorithm: sha256WithRSAEncryption
         6c:86:a2:a3:01:39:80:43:9d:3c:55:40:65:28:29:e1:ff:7e:
         3a:4b:1b:84:14:66:bc:c2:3e:3b:64:ca:52:d1:d5:28:1d:e4:
         af:25:6b:ec:d8:71:95:98:cb:2a:65:01:c7:91:e8:bc:22:83:
         e9:0a:3e:e7:53:59:b8:99:d2:26:9b:56:ca:f3:1c:82:58:b2:
         17:af:e1:dd:6b:8d:e9:ea:39:8c:a4:73:70:46:64:60:2c:c5:
         2b:a8:77:b1:6f:e5:f5:3b:d2:df:3a:d3:c1:12:ef:08:a3:e3:
         74:0b:5a:af:e4:f1:e7:b5:57:ad:f3:e9:ab:54:5b:1e:0c:85:
         c9:8e:b9:b3:05:d7:5d:8a:56:b5:d3:1e:91:16:a2:7c:26:d7:
         71:86:25:12:80:96:af:e0:08:f2:b2:4e:d1:c7:10:9f:e5:9f:
         76:4a:5c:15:52:e0:c1:0a:4a:06:b9:a1:09:74:a3:4c:10:95:
         96:ae:02:55:33:a2:c1:37:4e:3f:2c:ac:9e:90:25:1a:b0:e7:
         87:c4:ff:21:3f:b5:0c:dd:95:5b:a2:95:5c:2a:db:a9:c7:03:
         64:40:74:8d:b9:ba:d8:72:c5:23:9d:f8:43:0b:9d:f2:ce:90:
         98:ff:bd:c9:d5:1e:d8:15:f0:d6:ef:7c:75:2e:34:ec:b0:4c:
         f9:a0:49:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 11:19:50 2025 by rpki-client