Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/323830303a3635303a3130343a3a2f34382d3438203d3e20323632353839.roa
File:                     323830303a3635303a3130343a3a2f34382d3438203d3e20323632353839.roa (raw, json)
Hash identifier:          CPTe3Icw98nsxFS6CF6QPhcveXh1uD85CXCXwepaIXo=
Subject key identifier:   72:C1:55:93:0B:29:7B:46:59:E1:4D:89:5C:5A:8A:49:78:94:27:30
Certificate issuer:       /CN=8E9E896ADF8041E07AB6735225935260B837E74D
Certificate serial:       75E590E437CD8825705EFB12BF98FFEEA7D632D1
Authority key identifier: 8E:9E:89:6A:DF:80:41:E0:7A:B6:73:52:25:93:52:60:B8:37:E7:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E9E896ADF8041E07AB6735225935260B837E74D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/323830303a3635303a3130343a3a2f34382d3438203d3e20323632353839.roa
Signing time:             Wed 18 Jun 2025 14:22:42 +0000
ROA not before:           Wed 18 Jun 2025 14:17:42 +0000
ROA not after:            Wed 17 Jun 2026 14:22:42 +0000
asID:                     262589
IP address blocks:        2800:650:104::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/8E9E896ADF8041E07AB6735225935260B837E74D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/8E9E896ADF8041E07AB6735225935260B837E74D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E9E896ADF8041E07AB6735225935260B837E74D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 25 Jun 2025 11:30:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:e5:90:e4:37:cd:88:25:70:5e:fb:12:bf:98:ff:ee:a7:d6:32:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E9E896ADF8041E07AB6735225935260B837E74D
        Validity
            Not Before: Jun 18 14:17:42 2025 GMT
            Not After : Jun 17 14:22:42 2026 GMT
        Subject: CN=72C155930B297B4659E14D895C5A8A4978942730
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:60:8f:1f:1d:7a:93:8f:7a:9a:77:40:85:0c:
                    78:98:ca:03:87:10:19:67:85:89:a0:f5:c0:ba:d5:
                    f2:66:76:bc:ed:3c:86:d4:a1:52:89:fe:97:8f:b7:
                    97:eb:3f:4c:cd:01:36:f5:77:c6:70:a1:56:74:e1:
                    f7:89:ba:47:c1:6a:fa:a4:12:73:ee:a8:ac:7c:70:
                    57:33:1e:6c:1d:30:d3:44:f2:ae:85:a2:e7:39:e1:
                    fb:b1:a2:44:bb:61:4e:ba:e4:ea:a9:74:51:a6:c8:
                    18:53:25:ad:62:8d:66:9b:bf:6b:57:b3:43:aa:d0:
                    17:1e:a9:e1:5e:b4:1f:41:55:18:fe:b5:b9:da:64:
                    cc:e5:72:32:ff:0e:b4:a6:25:43:ca:e3:c7:39:bd:
                    03:e7:c8:1c:3b:7b:53:7a:6f:85:11:42:c3:a0:f0:
                    9d:45:29:43:4c:39:92:35:89:2f:e4:9b:a7:81:b7:
                    4b:82:c7:cd:35:95:b3:c8:87:07:46:6a:b7:6e:a6:
                    a6:24:10:16:97:c0:8a:86:d2:3c:4e:2b:bd:4a:76:
                    bb:59:20:46:ab:eb:00:65:c4:44:7c:87:51:22:0a:
                    d1:aa:6a:da:67:be:13:ad:c1:b1:c0:85:a2:de:84:
                    94:b8:3d:7f:0c:52:73:4a:f4:a8:22:63:4d:eb:01:
                    d5:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:C1:55:93:0B:29:7B:46:59:E1:4D:89:5C:5A:8A:49:78:94:27:30
            X509v3 Authority Key Identifier:
                keyid:8E:9E:89:6A:DF:80:41:E0:7A:B6:73:52:25:93:52:60:B8:37:E7:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/8E9E896ADF8041E07AB6735225935260B837E74D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E9E896ADF8041E07AB6735225935260B837E74D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/323830303a3635303a3130343a3a2f34382d3438203d3e20323632353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:650:104::/48

    Signature Algorithm: sha256WithRSAEncryption
         35:88:0e:89:57:3c:c8:4d:35:f6:38:60:5f:60:f0:ad:1a:40:
         bf:32:87:4d:e4:c0:88:34:ec:fb:87:65:4c:6d:16:0c:bb:cb:
         42:16:fa:3b:ca:0a:17:92:01:54:22:8b:09:d2:19:80:81:39:
         25:4f:c0:64:b0:a9:86:e1:2e:99:04:c9:a2:45:41:51:87:f9:
         34:eb:3e:91:e6:9d:96:5e:43:61:88:ff:03:1e:c5:c0:70:c0:
         e4:8d:31:29:32:d5:91:22:17:46:f8:ed:18:ee:96:d5:ad:60:
         0b:99:84:24:0d:c7:74:2d:4c:30:3e:ce:b4:70:dd:ac:be:dc:
         2a:66:6a:9a:0a:54:b2:27:47:ad:55:8d:5e:7e:dc:6c:f8:23:
         18:62:4d:0e:47:4d:f0:97:24:06:bf:a8:1e:d3:02:c9:f9:d8:
         b8:5b:9a:47:4b:7f:3b:b7:eb:b4:02:65:ec:d9:11:cb:9d:d0:
         a6:0e:4e:f5:52:1c:6e:c2:d7:08:bf:6b:d0:2e:08:af:76:ba:
         4f:18:3b:d1:b1:de:3b:3d:7e:4f:bf:ca:0d:a3:e1:7f:a2:45:
         bd:0c:6e:bf:0a:76:38:7d:64:c1:a0:f1:bb:da:c4:18:c5:8e:
         09:28:5a:16:e7:74:16:6c:b4:fe:cb:b5:3a:83:a2:4a:52:85:
         a9:4a:17:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 07:38:50 2025 by rpki-client