Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A799CC9E3583D4E8E794A0ABEEC59F9B172E6489CBCBFA2E66491362C3C5964F/0/323830333a623739303a3630303a3a2f34302d3430203d3e20323733303638.roa
File:                     323830333a623739303a3630303a3a2f34302d3430203d3e20323733303638.roa (raw, json)
Hash identifier:          MYCv5UI0gPXh4t50whTuTv81oCg5wsgn7QQIXXKw5Ik=
Subject key identifier:   E5:D7:F8:76:B8:BF:EF:A3:29:67:0F:AF:A5:E8:49:AB:52:9F:93:57
Certificate issuer:       /CN=0DFF2DC79EE538393460BA53D01DC71916150D41
Certificate serial:       28B2F39E57582E7D816415E416D4D2476F755C7D
Authority key identifier: 0D:FF:2D:C7:9E:E5:38:39:34:60:BA:53:D0:1D:C7:19:16:15:0D:41
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0DFF2DC79EE538393460BA53D01DC71916150D41.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A799CC9E3583D4E8E794A0ABEEC59F9B172E6489CBCBFA2E66491362C3C5964F/0/323830333a623739303a3630303a3a2f34302d3430203d3e20323733303638.roa
Signing time:             Thu 05 Jun 2025 20:21:06 +0000
ROA not before:           Thu 05 Jun 2025 20:16:06 +0000
ROA not after:            Thu 04 Jun 2026 20:21:06 +0000
asID:                     273068
IP address blocks:        2803:b790:600::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A799CC9E3583D4E8E794A0ABEEC59F9B172E6489CBCBFA2E66491362C3C5964F/0/0DFF2DC79EE538393460BA53D01DC71916150D41.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A799CC9E3583D4E8E794A0ABEEC59F9B172E6489CBCBFA2E66491362C3C5964F/0/0DFF2DC79EE538393460BA53D01DC71916150D41.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0DFF2DC79EE538393460BA53D01DC71916150D41.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 25 Jun 2025 23:28:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:b2:f3:9e:57:58:2e:7d:81:64:15:e4:16:d4:d2:47:6f:75:5c:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0DFF2DC79EE538393460BA53D01DC71916150D41
        Validity
            Not Before: Jun  5 20:16:06 2025 GMT
            Not After : Jun  4 20:21:06 2026 GMT
        Subject: CN=E5D7F876B8BFEFA329670FAFA5E849AB529F9357
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:c8:02:36:fb:30:96:23:05:dc:64:7d:03:5f:
                    38:ca:b4:ac:16:b3:9d:27:2e:f2:8a:f9:c7:02:61:
                    f5:b7:68:b1:c8:18:1a:43:83:93:da:41:4b:63:ca:
                    f3:a8:e8:a9:9c:42:1e:87:78:89:24:3e:1c:72:73:
                    85:3a:cb:61:ce:c3:d8:63:60:e4:33:f3:8a:e5:c5:
                    a0:6a:41:99:72:82:97:a3:bb:ab:9e:bd:23:26:2b:
                    d1:e9:24:79:d5:ea:63:35:40:d0:67:3f:95:e6:fe:
                    3d:b3:39:85:ae:b2:86:e0:81:ce:1f:5a:49:1d:86:
                    a5:ad:10:96:2d:1c:dc:9b:1f:a2:81:a3:1c:54:48:
                    1b:e2:37:f6:bf:c0:8e:cf:4a:40:18:99:d9:02:d8:
                    ba:f2:fc:f0:0f:d8:93:d1:27:f4:cb:5f:91:77:ae:
                    95:b5:99:f3:64:f4:23:8e:5a:ac:7b:50:f0:43:5c:
                    1e:0a:b4:58:1d:6f:c6:73:c7:3a:33:15:ae:49:dd:
                    2d:7e:05:13:35:95:6e:b8:dd:ef:7b:ef:0a:bd:ca:
                    6f:89:b3:b7:9e:b0:ea:fd:81:18:12:8c:41:4f:3d:
                    5e:0b:0b:10:33:12:86:5b:58:ec:57:9e:20:1e:03:
                    5a:94:2e:96:6f:7e:88:d9:28:ad:b7:e9:a6:a9:7b:
                    73:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:D7:F8:76:B8:BF:EF:A3:29:67:0F:AF:A5:E8:49:AB:52:9F:93:57
            X509v3 Authority Key Identifier:
                keyid:0D:FF:2D:C7:9E:E5:38:39:34:60:BA:53:D0:1D:C7:19:16:15:0D:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A799CC9E3583D4E8E794A0ABEEC59F9B172E6489CBCBFA2E66491362C3C5964F/0/0DFF2DC79EE538393460BA53D01DC71916150D41.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0DFF2DC79EE538393460BA53D01DC71916150D41.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A799CC9E3583D4E8E794A0ABEEC59F9B172E6489CBCBFA2E66491362C3C5964F/0/323830333a623739303a3630303a3a2f34302d3430203d3e20323733303638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b790:600::/40

    Signature Algorithm: sha256WithRSAEncryption
         7d:18:dd:b7:b9:23:c0:d8:50:d7:6b:59:1c:9f:ce:28:bd:ec:
         9c:ca:f3:65:bd:53:3c:03:ab:25:dd:d2:35:4e:7b:5b:8a:78:
         5e:42:12:5f:0f:b9:9b:48:19:7a:69:4e:91:3d:6b:48:d3:b2:
         56:a5:d1:ea:52:5a:9d:d9:a6:17:81:e5:31:d1:cd:82:85:f8:
         04:f0:e0:c0:64:46:87:5a:24:bf:35:f7:5f:d8:b4:8b:6f:97:
         ba:2b:fa:9b:f2:46:8d:91:db:aa:b8:f2:e6:33:0f:c4:c0:dc:
         48:a2:29:c7:ca:99:78:82:14:fe:2a:f6:17:ae:e6:7e:55:83:
         93:07:57:7f:9b:bb:f1:45:fb:af:cf:50:6e:db:ea:15:bd:cb:
         9c:a6:84:e4:f4:b4:d0:af:66:a1:d2:07:4e:94:cb:f4:a5:fc:
         27:13:ec:c7:57:15:02:a3:39:be:c9:68:af:66:14:bf:8d:78:
         ff:d3:8b:de:03:06:b5:2d:06:88:fd:b1:1a:bf:e6:86:4b:f2:
         fe:d7:49:25:09:81:59:48:b9:5d:fc:6d:76:7a:6b:f1:2f:cc:
         d1:b9:08:01:c4:70:09:90:5b:8b:89:28:f5:dc:c1:c9:99:38:
         5b:0b:4f:5a:94:84:58:b2:e9:6c:9c:01:b7:df:2b:c5:b2:31:
         df:1e:15:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 19:28:32 2025 by rpki-client