Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1700DC2BCC12F3D28D94114FFF1C807B757714EAAB2CC7F010ED0AB7205C14EF/0/323830333a626336303a3a2f33322d3438203d3e20323634373733.roa
File:                     323830333a626336303a3a2f33322d3438203d3e20323634373733.roa (raw, json)
Hash identifier:          Zsl7muYxcZ67isD4Zg7u1qDtM/Ls31dJ2jj3C1DNnrU=
Subject key identifier:   7E:84:67:19:DC:3A:CD:5B:87:C4:15:BD:00:45:D7:5E:69:F1:64:E8
Certificate issuer:       /CN=2FDAA3ACC9CA4BFC9219FB65CB464C9B9C4B94D0
Certificate serial:       16FB423D3D01FBE1C110E7BB1A4DE24EE81B5A6B
Authority key identifier: 2F:DA:A3:AC:C9:CA:4B:FC:92:19:FB:65:CB:46:4C:9B:9C:4B:94:D0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FDAA3ACC9CA4BFC9219FB65CB464C9B9C4B94D0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1700DC2BCC12F3D28D94114FFF1C807B757714EAAB2CC7F010ED0AB7205C14EF/0/323830333a626336303a3a2f33322d3438203d3e20323634373733.roa
Signing time:             Wed 25 Jun 2025 22:23:42 +0000
ROA not before:           Wed 25 Jun 2025 22:18:42 +0000
ROA not after:            Wed 24 Jun 2026 22:23:42 +0000
asID:                     264773
IP address blocks:        2803:bc60::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1700DC2BCC12F3D28D94114FFF1C807B757714EAAB2CC7F010ED0AB7205C14EF/0/2FDAA3ACC9CA4BFC9219FB65CB464C9B9C4B94D0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1700DC2BCC12F3D28D94114FFF1C807B757714EAAB2CC7F010ED0AB7205C14EF/0/2FDAA3ACC9CA4BFC9219FB65CB464C9B9C4B94D0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FDAA3ACC9CA4BFC9219FB65CB464C9B9C4B94D0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Jul 2025 02:44:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:fb:42:3d:3d:01:fb:e1:c1:10:e7:bb:1a:4d:e2:4e:e8:1b:5a:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FDAA3ACC9CA4BFC9219FB65CB464C9B9C4B94D0
        Validity
            Not Before: Jun 25 22:18:42 2025 GMT
            Not After : Jun 24 22:23:42 2026 GMT
        Subject: CN=7E846719DC3ACD5B87C415BD0045D75E69F164E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f5:e5:6a:84:0b:e8:ba:a1:e6:06:17:25:e4:
                    78:99:75:6f:5d:f8:4a:00:be:5b:fe:c3:5e:a0:ae:
                    68:8a:a3:b7:1e:21:4e:1c:3b:28:a0:0c:0c:60:31:
                    cd:a6:ae:b1:7a:a3:66:c9:44:d9:22:83:a6:3a:56:
                    52:3c:9d:2f:e0:fb:2c:b3:66:c0:20:fe:ee:04:bf:
                    55:ac:11:d0:d2:ca:ce:cc:04:d8:09:42:8c:74:06:
                    a8:4e:58:06:86:79:ae:40:fe:bb:b9:b5:07:f7:ce:
                    8d:ab:85:ed:21:d0:2e:29:4a:75:ee:9c:18:c7:fe:
                    a3:0b:7b:d3:29:2a:dc:3a:ef:70:e1:4d:10:19:2c:
                    e7:f5:11:52:e5:2b:e2:f2:0b:27:28:13:48:90:3c:
                    ac:d6:5c:33:7a:87:dc:88:02:79:6d:d9:ee:4b:ab:
                    27:9e:c0:81:f2:ef:00:35:1d:9f:ac:66:52:35:89:
                    18:13:de:6a:dd:44:de:40:8d:2a:32:f6:e5:d8:f4:
                    97:c2:79:91:25:cd:c9:e9:ec:c3:fe:bb:7a:e0:d6:
                    d3:94:bb:56:f6:be:9a:02:6e:d9:e2:20:9a:e9:54:
                    26:0a:36:d1:ca:95:01:29:ae:4e:8e:68:8e:c5:37:
                    c0:97:b2:2a:3b:ed:1e:8b:8f:55:c7:56:98:5f:83:
                    f8:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:84:67:19:DC:3A:CD:5B:87:C4:15:BD:00:45:D7:5E:69:F1:64:E8
            X509v3 Authority Key Identifier:
                keyid:2F:DA:A3:AC:C9:CA:4B:FC:92:19:FB:65:CB:46:4C:9B:9C:4B:94:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1700DC2BCC12F3D28D94114FFF1C807B757714EAAB2CC7F010ED0AB7205C14EF/0/2FDAA3ACC9CA4BFC9219FB65CB464C9B9C4B94D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FDAA3ACC9CA4BFC9219FB65CB464C9B9C4B94D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1700DC2BCC12F3D28D94114FFF1C807B757714EAAB2CC7F010ED0AB7205C14EF/0/323830333a626336303a3a2f33322d3438203d3e20323634373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:bc60::/32

    Signature Algorithm: sha256WithRSAEncryption
         62:6d:0b:43:23:12:db:ac:10:62:05:c1:ad:13:ea:08:e8:ef:
         da:a9:34:44:01:e1:c0:fd:51:20:83:6f:31:1d:70:98:d2:87:
         e6:32:12:eb:29:e0:c4:fb:da:d8:74:a3:97:02:41:82:46:e5:
         31:c6:40:7e:4b:55:71:b0:3f:e9:8d:35:45:23:15:f1:75:88:
         fc:75:e6:93:10:ba:b9:f1:93:86:e5:41:6a:d8:dd:a2:f4:e4:
         d7:fe:ea:6a:29:dd:2f:1d:a1:ab:41:1f:3e:64:4f:d8:b2:db:
         69:3a:c4:99:99:d8:8e:34:a9:46:0e:ea:5e:60:e6:b7:a3:c1:
         b2:d5:06:b8:2e:1e:3f:57:dc:20:3f:8d:82:cf:b9:c7:54:57:
         db:10:d5:20:9d:0c:8c:18:f4:b9:d4:ce:ee:d1:a0:73:63:90:
         85:60:22:0e:f4:2e:bc:2c:fe:b9:33:fd:c5:75:8a:e3:79:3d:
         e5:3d:01:9f:14:28:f6:38:20:0a:65:f2:f3:04:72:66:0e:07:
         01:4b:00:7a:62:e8:49:3e:21:82:b9:92:d2:39:ed:8d:6a:50:
         73:53:8d:f9:92:9a:6d:09:f3:c1:28:e8:9d:7a:bf:f8:93:14:
         06:a0:44:5d:9c:79:db:2b:4a:88:56:d4:ac:82:50:4c:52:a2:
         5c:dd:49:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 00:29:03 2025 by rpki-client