Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/323830333a663038303a383065303a3a2f34332d3634203d3e203634313230.roa
File:                     323830333a663038303a383065303a3a2f34332d3634203d3e203634313230.roa (raw, json)
Hash identifier:          s7oU0/b3xQ1AjDDhWU2zE4c5b7StB1bCk8HnIgoEmcA=
Subject key identifier:   89:1F:AF:C2:93:3E:E6:9D:99:75:61:0C:67:2F:78:C0:5E:1B:B9:CE
Certificate issuer:       /CN=D6017AACFB785EAB7EA56D24337CDCD724EAC2AD
Certificate serial:       6CEDA0A7CC4F67A525CD548458AACA91FEC86736
Authority key identifier: D6:01:7A:AC:FB:78:5E:AB:7E:A5:6D:24:33:7C:DC:D7:24:EA:C2:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/323830333a663038303a383065303a3a2f34332d3634203d3e203634313230.roa
Signing time:             Tue 29 Apr 2025 03:17:05 +0000
ROA not before:           Tue 29 Apr 2025 03:12:05 +0000
ROA not after:            Tue 28 Apr 2026 03:17:05 +0000
asID:                     64120
IP address blocks:        2803:f080:80e0::/43 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 05 May 2025 11:23:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:ed:a0:a7:cc:4f:67:a5:25:cd:54:84:58:aa:ca:91:fe:c8:67:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6017AACFB785EAB7EA56D24337CDCD724EAC2AD
        Validity
            Not Before: Apr 29 03:12:05 2025 GMT
            Not After : Apr 28 03:17:05 2026 GMT
        Subject: CN=891FAFC2933EE69D9975610C672F78C05E1BB9CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:47:08:5e:a9:ce:d4:89:cc:1f:b6:3e:4d:98:
                    14:a8:ad:01:19:e5:9f:0a:ba:45:5b:aa:77:d2:53:
                    bf:81:d0:cb:ee:11:58:2e:ed:8d:26:74:ba:39:b2:
                    5c:ab:2d:5a:06:d8:db:23:f6:ba:76:e1:12:64:f5:
                    cf:7f:f1:17:50:3d:ae:ed:5f:5a:93:66:a0:f3:dc:
                    39:14:03:db:16:cb:6a:70:1e:55:56:70:54:8f:e5:
                    75:d9:2b:c0:fb:13:e8:7f:b0:f5:09:d8:5e:fe:f8:
                    8a:d9:df:a2:67:fa:99:9c:77:4b:89:90:e7:4e:15:
                    84:a3:6a:13:7e:c1:b9:e2:ca:fc:37:9a:47:d5:06:
                    5f:f6:c1:23:f1:c8:a4:5c:c9:fd:e6:21:72:b0:ae:
                    d9:89:4e:b3:fe:4d:c5:9c:77:cd:43:8a:a1:a5:92:
                    c7:8e:85:6b:4f:c5:c6:b7:e5:3e:36:b2:22:cb:e8:
                    aa:c0:cb:4c:29:c9:0c:fc:66:3f:dd:74:97:0a:d2:
                    24:2d:2f:84:2d:8d:72:5c:9f:94:3f:fe:1a:e6:b1:
                    6a:61:45:b5:76:0e:21:29:e3:5f:f6:63:3d:1f:1e:
                    98:56:68:4e:cf:58:41:c8:fc:a7:de:c8:11:20:9d:
                    22:8d:5b:10:01:a4:2c:a2:bf:97:62:6b:9b:1d:6f:
                    05:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:1F:AF:C2:93:3E:E6:9D:99:75:61:0C:67:2F:78:C0:5E:1B:B9:CE
            X509v3 Authority Key Identifier:
                keyid:D6:01:7A:AC:FB:78:5E:AB:7E:A5:6D:24:33:7C:DC:D7:24:EA:C2:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/323830333a663038303a383065303a3a2f34332d3634203d3e203634313230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f080:80e0::/43

    Signature Algorithm: sha256WithRSAEncryption
         7a:ac:ea:19:c9:b9:f6:c0:b5:03:53:58:94:92:23:76:3e:5d:
         b1:05:2b:2f:1b:d4:44:00:fd:c3:f3:62:ee:53:a9:5d:32:59:
         31:35:36:03:10:1f:78:75:20:1a:82:17:70:b1:13:ed:0a:26:
         b4:f3:00:d1:d7:f5:30:b9:70:4b:6b:13:41:74:7e:7e:cc:9d:
         8d:5e:3d:da:f9:fd:84:1b:69:98:65:b5:37:78:44:e9:e5:1f:
         2b:9f:80:46:d4:68:d2:e1:e0:09:35:6c:c5:c6:f5:fc:73:14:
         b9:bf:2a:75:d6:b4:f8:0e:e7:5d:ab:1d:08:64:1d:89:b4:fb:
         ba:d5:26:21:43:83:c4:14:f5:6f:f1:35:29:f0:5b:91:aa:59:
         67:85:8e:09:09:25:f7:53:b7:73:52:3a:2c:c1:d9:4f:36:d8:
         8f:c3:69:56:ef:60:70:f9:05:b5:c3:ae:19:2a:34:0b:91:26:
         8c:93:14:0a:83:40:2d:d1:a9:17:5d:ec:21:09:83:af:b1:7c:
         f0:d1:e6:51:d2:3b:9e:48:33:9b:f2:be:d9:d6:81:37:33:7a:
         93:30:01:a4:f1:55:1d:52:dd:37:3b:0c:06:73:de:ed:f4:b6:
         05:93:1f:b5:c7:2d:33:a4:ee:88:02:e3:88:ef:83:fa:68:55:
         54:8c:65:19
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUbO2gp8xPZ6UlzVSEWKrKkf7IZzYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDYwMTdBQUNGQjc4NUVBQjdFQTU2RDI0MzM3Q0RDRDcy
NEVBQzJBRDAeFw0yNTA0MjkwMzEyMDVaFw0yNjA0MjgwMzE3MDVaMDMxMTAvBgNV
BAMTKDg5MUZBRkMyOTMzRUU2OUQ5OTc1NjEwQzY3MkY3OEMwNUUxQkI5Q0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2Rwheqc7Uicwftj5NmBSorQEZ
5Z8KukVbqnfSU7+B0MvuEVgu7Y0mdLo5slyrLVoG2Nsj9rp24RJk9c9/8RdQPa7t
X1qTZqDz3DkUA9sWy2pwHlVWcFSP5XXZK8D7E+h/sPUJ2F7++IrZ36Jn+pmcd0uJ
kOdOFYSjahN+wbniyvw3mkfVBl/2wSPxyKRcyf3mIXKwrtmJTrP+TcWcd81DiqGl
kseOhWtPxca35T42siLL6KrAy0wpyQz8Zj/ddJcK0iQtL4QtjXJcn5Q//hrmsWph
RbV2DiEp41/2Yz0fHphWaE7PWEHI/KfeyBEgnSKNWxABpCyiv5dia5sdbwWTAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUiR+vwpM+5p2ZdWEMZy94wF4buc4wHwYDVR0j
BBgwFoAU1gF6rPt4Xqt+pW0kM3zc1yTqwq0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BQzIxREZEOTYxODhGRjAzMTg3NDA5M0JFRjc4QjdGQzdF
NUUzQ0M0MEYyMzkyMkQ5Q0RFNTlDRDExNjU4Qzg0LzAvRDYwMTdBQUNGQjc4NUVB
QjdFQTU2RDI0MzM3Q0RDRDcyNEVBQzJBRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9ENjAxN0FBQ0ZCNzg1RUFCN0VB
NTZEMjQzMzdDRENENzI0RUFDMkFELmNlcjCBzwYIKwYBBQUHAQsEgcIwgb8wgbwG
CCsGAQUFBzALhoGvcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQUMyMURGRDk2MTg4RkYwMzE4NzQwOTNCRUY3OEI3RkM3RTVFM0NDNDBG
MjM5MjJEOUNERTU5Q0QxMTY1OEM4NC8wLzMyMzgzMDMzM2E2NjMwMzgzMDNhMzgz
MDY1MzAzYTNhMmYzNDMzMmQzNjM0MjAzZDNlMjAzNjM0MzEzMjMwLnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJ
AwcFKAPwgIDgMA0GCSqGSIb3DQEBCwUAA4IBAQB6rOoZybn2wLUDU1iUkiN2Pl2x
BSsvG9REAP3D82LuU6ldMlkxNTYDEB94dSAaghdwsRPtCia08wDR1/UwuXBLaxNB
dH5+zJ2NXj3a+f2EG2mYZbU3eETp5R8rn4BG1GjS4eAJNWzFxvX8cxS5vyp11rT4
Duddqx0IZB2JtPu61SYhQ4PEFPVv8TUp8FuRqllnhY4JCSX3U7dzUjoswdlPNtiP
w2lW72Bw+QW1w64ZKjQLkSaMkxQKg0At0akXXewhCYOvsXzw0eZR0jueSDOb8r7Z
1oE3M3qTMAGk8VUdUt03OwwGc97t9LYFkx+1xy0zpO6IAuOI74P6aFVUjGUZ
-----END CERTIFICATE-----
Generated at Thu May 1 22:56:49 2025 by rpki-client