Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D496E4A8BEEAA21CB4421C89FE250F91B1743A09AE9C425DDFA579DFD21D8F42/0/323830313a31373a373830303a3a2f35362d3536203d3e20333939393730.roa
File:                     323830313a31373a373830303a3a2f35362d3536203d3e20333939393730.roa (raw, json)
Hash identifier:          +yKd53H3R7l/IWpDo2pKcfrglsYMw5XXSRz4QVT9MB8=
Subject key identifier:   E9:02:6F:39:6C:BB:4D:CB:5C:DA:67:21:8D:D8:0E:37:D5:14:9A:63
Certificate issuer:       /CN=DD284B15EC8E065D133B2F9315470527232784D4
Certificate serial:       2A2A6F6BF9320BAEA68A769F3B57F04B53AA96A4
Authority key identifier: DD:28:4B:15:EC:8E:06:5D:13:3B:2F:93:15:47:05:27:23:27:84:D4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DD284B15EC8E065D133B2F9315470527232784D4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D496E4A8BEEAA21CB4421C89FE250F91B1743A09AE9C425DDFA579DFD21D8F42/0/323830313a31373a373830303a3a2f35362d3536203d3e20333939393730.roa
Signing time:             Tue 17 Jun 2025 23:15:00 +0000
ROA not before:           Tue 17 Jun 2025 23:10:00 +0000
ROA not after:            Tue 16 Jun 2026 23:15:00 +0000
asID:                     399970
IP address blocks:        2801:17:7800::/56 maxlen: 56
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D496E4A8BEEAA21CB4421C89FE250F91B1743A09AE9C425DDFA579DFD21D8F42/0/DD284B15EC8E065D133B2F9315470527232784D4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D496E4A8BEEAA21CB4421C89FE250F91B1743A09AE9C425DDFA579DFD21D8F42/0/DD284B15EC8E065D133B2F9315470527232784D4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DD284B15EC8E065D133B2F9315470527232784D4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 25 Jun 2025 23:28:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:2a:6f:6b:f9:32:0b:ae:a6:8a:76:9f:3b:57:f0:4b:53:aa:96:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DD284B15EC8E065D133B2F9315470527232784D4
        Validity
            Not Before: Jun 17 23:10:00 2025 GMT
            Not After : Jun 16 23:15:00 2026 GMT
        Subject: CN=E9026F396CBB4DCB5CDA67218DD80E37D5149A63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ac:59:1e:02:9c:7c:da:b1:46:06:dd:46:ad:
                    09:57:12:62:7e:b3:21:d3:37:bc:c0:41:43:4a:13:
                    f1:e1:09:e6:3d:39:a2:0e:f6:b3:54:ee:b9:f1:f3:
                    f1:83:db:5e:68:27:26:d8:06:91:42:15:3f:10:61:
                    cb:ac:36:f0:a2:e0:9d:cc:75:2a:1c:7c:31:92:28:
                    91:8c:2a:30:d4:d9:b2:5f:db:47:bf:5f:fb:d9:98:
                    f8:e5:be:28:cf:ca:da:25:a2:59:97:02:eb:66:95:
                    52:2d:d7:ab:fd:c1:30:74:df:a2:45:8d:f8:30:a4:
                    f9:4b:40:66:27:5d:b5:98:78:85:b2:48:e9:c7:83:
                    a9:7a:32:5b:19:5d:f4:4e:26:e4:cb:92:b1:4a:0e:
                    98:55:11:75:8b:80:83:26:c6:c7:2d:ca:5b:e2:91:
                    e6:64:81:b2:7e:df:f5:53:6c:2d:20:15:76:29:bf:
                    51:4d:8e:97:89:1e:0a:a2:bc:3f:06:83:ed:cf:c9:
                    3a:19:6f:ef:49:a3:00:6a:85:fb:a8:4a:ce:0d:d5:
                    64:4e:6f:93:61:52:fb:f2:46:b0:d4:8a:f2:39:65:
                    b6:46:ad:34:b5:57:11:11:e7:a5:b4:b7:92:df:5a:
                    a6:fd:20:1d:7b:bd:7a:86:b5:d9:22:76:b1:36:63:
                    3b:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:02:6F:39:6C:BB:4D:CB:5C:DA:67:21:8D:D8:0E:37:D5:14:9A:63
            X509v3 Authority Key Identifier:
                keyid:DD:28:4B:15:EC:8E:06:5D:13:3B:2F:93:15:47:05:27:23:27:84:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D496E4A8BEEAA21CB4421C89FE250F91B1743A09AE9C425DDFA579DFD21D8F42/0/DD284B15EC8E065D133B2F9315470527232784D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DD284B15EC8E065D133B2F9315470527232784D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D496E4A8BEEAA21CB4421C89FE250F91B1743A09AE9C425DDFA579DFD21D8F42/0/323830313a31373a373830303a3a2f35362d3536203d3e20333939393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:17:7800::/56

    Signature Algorithm: sha256WithRSAEncryption
         70:7e:9c:99:8b:33:72:e8:fb:37:a7:22:4e:16:c2:bb:09:a2:
         d3:52:0f:61:e7:46:a9:55:c2:dc:27:aa:b9:81:94:63:df:1e:
         10:08:8c:77:b2:91:0f:2a:99:b5:52:1a:cf:e5:44:af:6f:d5:
         b2:e6:42:6b:56:2d:30:be:69:01:2c:75:ff:9f:6c:3a:d6:cb:
         69:7c:b3:15:16:17:41:7f:4b:1e:ee:52:da:ec:26:51:6e:8d:
         8a:18:05:e6:10:bc:c5:77:cc:2b:b8:f8:33:b6:2e:89:1a:0a:
         ec:6c:28:6f:c8:cd:41:7d:88:98:2c:84:ec:29:5e:2f:db:4e:
         99:e4:b9:5b:19:7b:5a:c2:bb:0a:8d:a5:03:8e:da:2c:b9:57:
         a7:16:24:45:2a:cb:56:af:43:cd:f1:35:77:13:4c:ae:f4:87:
         0e:ee:ac:c3:e5:3b:b7:7c:dd:77:e1:12:23:7e:29:8c:1a:11:
         d8:34:01:31:2d:51:85:1c:e7:c3:7a:e0:ef:3a:c6:58:21:c9:
         f7:4c:e2:e7:5a:2d:ce:c2:32:f9:16:a0:65:15:47:09:f7:f8:
         73:2f:b7:03:2b:96:4d:e9:5a:5d:86:c3:ef:82:7f:0a:af:83:
         50:54:8b:76:79:1e:df:0f:b1:dd:18:1a:bf:06:6a:e7:99:49:
         d6:43:a7:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 17:31:01 2025 by rpki-client