Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4DAD3318A534D8ABB80195FF3669CE16A04A07F4B8F25636BD2ABF36C837AD7D/0/323830333a633365303a343030303a3a2f33362d3336203d3e20323730303735.roa
File:                     323830333a633365303a343030303a3a2f33362d3336203d3e20323730303735.roa (raw, json)
Hash identifier:          mhJX6gpzYU9wSGXFZCQXigdFx/9NYHRB8+weCr5IXNs=
Subject key identifier:   5D:00:02:B0:D0:16:12:FD:1B:87:8C:34:A4:20:33:B7:C5:8E:B8:06
Certificate issuer:       /CN=304D8AC906FC4A87A162240815C8C2D4224130CB
Certificate serial:       65F97D24CCB8AEA3F05352C87958E70653D4258C
Authority key identifier: 30:4D:8A:C9:06:FC:4A:87:A1:62:24:08:15:C8:C2:D4:22:41:30:CB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/304D8AC906FC4A87A162240815C8C2D4224130CB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4DAD3318A534D8ABB80195FF3669CE16A04A07F4B8F25636BD2ABF36C837AD7D/0/323830333a633365303a343030303a3a2f33362d3336203d3e20323730303735.roa
Signing time:             Tue 01 Jul 2025 19:20:00 +0000
ROA not before:           Tue 01 Jul 2025 19:15:00 +0000
ROA not after:            Tue 30 Jun 2026 19:20:00 +0000
asID:                     270075
IP address blocks:        2803:c3e0:4000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4DAD3318A534D8ABB80195FF3669CE16A04A07F4B8F25636BD2ABF36C837AD7D/0/304D8AC906FC4A87A162240815C8C2D4224130CB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4DAD3318A534D8ABB80195FF3669CE16A04A07F4B8F25636BD2ABF36C837AD7D/0/304D8AC906FC4A87A162240815C8C2D4224130CB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/304D8AC906FC4A87A162240815C8C2D4224130CB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 09:16:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:f9:7d:24:cc:b8:ae:a3:f0:53:52:c8:79:58:e7:06:53:d4:25:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=304D8AC906FC4A87A162240815C8C2D4224130CB
        Validity
            Not Before: Jul  1 19:15:00 2025 GMT
            Not After : Jun 30 19:20:00 2026 GMT
        Subject: CN=5D0002B0D01612FD1B878C34A42033B7C58EB806
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:f4:9c:c7:b1:ee:fb:96:a4:f4:93:82:55:d4:
                    ac:78:87:6b:e9:40:5b:ac:46:04:a1:c0:25:39:27:
                    1d:45:07:98:98:a1:95:05:ee:61:b8:02:ca:7f:f7:
                    ef:2c:e2:23:21:fa:c3:da:81:49:6b:da:8a:7f:77:
                    86:e6:02:5e:2b:7a:94:42:e7:7e:12:7e:df:8a:90:
                    b2:74:be:27:8f:58:28:d9:9f:28:2d:6e:03:27:c0:
                    a4:bb:d2:91:63:f4:1e:71:44:86:de:4d:12:98:a4:
                    1b:46:35:51:a0:8d:41:8e:a4:b8:9d:c2:d8:b9:bc:
                    9f:20:2f:fe:c2:ba:4a:a3:1f:46:6d:c7:bd:81:17:
                    2e:c7:30:82:48:16:e9:7d:35:9a:22:91:f8:06:fc:
                    cd:d3:73:1c:8b:3c:a9:2d:01:8d:c0:d5:d9:8d:d5:
                    e4:ee:cc:2e:eb:40:f3:92:52:63:5b:ec:f3:9c:d9:
                    dc:bd:c0:5a:a1:87:bf:e5:7d:fa:ba:22:a6:7f:ab:
                    40:cc:a0:f7:9c:e5:61:2a:a8:b2:54:c3:22:28:a9:
                    a4:ed:94:5d:29:ca:99:82:36:00:5d:0f:99:24:34:
                    aa:4f:81:ba:0d:34:9c:6e:e3:27:2c:6a:70:fd:49:
                    cd:e9:0d:7a:42:09:32:1f:5b:96:9f:97:3c:99:19:
                    87:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:00:02:B0:D0:16:12:FD:1B:87:8C:34:A4:20:33:B7:C5:8E:B8:06
            X509v3 Authority Key Identifier:
                keyid:30:4D:8A:C9:06:FC:4A:87:A1:62:24:08:15:C8:C2:D4:22:41:30:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4DAD3318A534D8ABB80195FF3669CE16A04A07F4B8F25636BD2ABF36C837AD7D/0/304D8AC906FC4A87A162240815C8C2D4224130CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/304D8AC906FC4A87A162240815C8C2D4224130CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4DAD3318A534D8ABB80195FF3669CE16A04A07F4B8F25636BD2ABF36C837AD7D/0/323830333a633365303a343030303a3a2f33362d3336203d3e20323730303735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c3e0:4000::/36

    Signature Algorithm: sha256WithRSAEncryption
         8c:d1:9e:9f:68:9b:2f:7d:b1:b3:82:46:24:91:cc:3d:08:4a:
         45:75:f2:e7:26:db:c5:5a:3c:75:7a:86:5b:0d:43:73:95:0e:
         de:2d:5e:21:4b:8e:fc:4f:f8:ec:78:1f:d2:5d:f7:b0:c9:aa:
         3c:53:9c:22:3d:f0:0a:32:c2:55:ee:ac:57:da:ee:d0:0b:4c:
         e3:10:31:a0:19:f4:f0:df:57:1f:a4:ea:f3:56:81:13:06:cc:
         82:c7:72:11:62:b8:01:29:c4:3e:b9:ff:6b:04:69:f7:06:5e:
         41:ca:ed:7e:a3:76:84:f3:82:f4:19:d9:0e:bf:71:9b:05:51:
         77:4c:f3:62:e9:50:a5:be:49:b9:90:71:59:6e:75:d1:6b:9a:
         dc:2d:49:bb:35:a3:15:4f:b4:68:b5:72:ad:b0:f4:10:f9:23:
         dd:93:50:7b:0c:d8:da:d5:f9:8a:42:5b:ba:92:1b:f3:57:21:
         9c:c8:bf:84:7d:bd:d4:d7:d2:7a:b9:3a:66:19:a6:8d:53:9f:
         54:8a:08:05:c4:13:a3:94:ea:cb:7b:ea:28:f7:c9:70:fd:7d:
         8f:4c:6b:9c:51:63:1f:9e:5a:27:36:bf:e9:ee:27:7b:3f:32:
         1d:ce:d3:ca:46:1c:53:ef:bb:01:9a:05:49:23:d4:86:c3:8f:
         12:c7:b3:74
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jul 4 08:22:28 2025 by rpki-client