Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/66D359949D44AB5BDBBF902207D0F118C53AD6B1A063328FB714FC3849B0B3E8/0/323830313a3138643a3a2f34382d3438203d3e203634313634.roa
File:                     323830313a3138643a3a2f34382d3438203d3e203634313634.roa (raw, json)
Hash identifier:          j755Z1nCnrlaWg+W8G2wvbcY3YXXTEx018BSnfLrAxI=
Subject key identifier:   A6:86:01:CB:05:33:06:46:CC:5D:80:65:4D:2F:11:E9:D4:28:76:08
Certificate issuer:       /CN=73D7EB8DCC9C933755647BF8E5EED5AAEE26EA30
Certificate serial:       14546E0DDA168E47D8B67747867FE773F9D67147
Authority key identifier: 73:D7:EB:8D:CC:9C:93:37:55:64:7B:F8:E5:EE:D5:AA:EE:26:EA:30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/73D7EB8DCC9C933755647BF8E5EED5AAEE26EA30.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/66D359949D44AB5BDBBF902207D0F118C53AD6B1A063328FB714FC3849B0B3E8/0/323830313a3138643a3a2f34382d3438203d3e203634313634.roa
Signing time:             Tue 01 Jul 2025 04:24:12 +0000
ROA not before:           Tue 01 Jul 2025 04:19:12 +0000
ROA not after:            Tue 30 Jun 2026 04:24:12 +0000
asID:                     64164
IP address blocks:        2801:18d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/66D359949D44AB5BDBBF902207D0F118C53AD6B1A063328FB714FC3849B0B3E8/0/73D7EB8DCC9C933755647BF8E5EED5AAEE26EA30.crl
                          rsync://repository.lacnic.net/rpki/lacnic/66D359949D44AB5BDBBF902207D0F118C53AD6B1A063328FB714FC3849B0B3E8/0/73D7EB8DCC9C933755647BF8E5EED5AAEE26EA30.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/73D7EB8DCC9C933755647BF8E5EED5AAEE26EA30.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Jul 2025 23:26:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:54:6e:0d:da:16:8e:47:d8:b6:77:47:86:7f:e7:73:f9:d6:71:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73D7EB8DCC9C933755647BF8E5EED5AAEE26EA30
        Validity
            Not Before: Jul  1 04:19:12 2025 GMT
            Not After : Jun 30 04:24:12 2026 GMT
        Subject: CN=A68601CB05330646CC5D80654D2F11E9D4287608
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:0c:b1:f4:12:d4:77:b4:23:1d:f6:ce:67:c0:
                    8a:da:2a:b9:4a:c9:70:dc:30:e6:8b:f9:20:fc:ad:
                    d7:ba:b1:87:1c:a9:34:3f:e6:06:42:19:61:c9:f1:
                    38:c0:e0:a6:96:3f:8f:a4:9e:7b:ae:5f:75:ad:7f:
                    9d:a6:2d:8f:57:c9:04:9a:f5:1b:46:9b:02:41:2a:
                    86:0c:60:e5:aa:0d:83:c7:90:cc:56:a3:50:60:c7:
                    bd:53:69:b1:70:4c:ba:f4:cc:d5:57:8c:8f:90:c9:
                    70:5b:f6:c3:4b:b8:84:5f:47:28:1f:87:b2:76:52:
                    60:0b:07:e5:ca:b0:4a:1c:2b:34:ff:a8:06:7d:1e:
                    0f:c8:cb:a2:5b:95:f4:f9:96:68:46:3e:35:94:04:
                    d3:29:87:4d:28:7c:97:c2:dd:7c:ab:0f:96:70:4d:
                    cd:ea:98:60:45:ec:9e:e4:dd:a5:11:bf:9a:7e:63:
                    47:b1:b9:33:9a:a9:e2:b1:b5:87:30:d9:7a:f5:72:
                    96:f6:ec:f0:11:6e:e0:07:70:88:dd:6f:bc:ac:20:
                    8d:d6:23:b7:e8:4e:a0:88:3e:13:fb:c0:22:8d:6d:
                    ed:4f:c8:1e:7b:41:df:02:59:02:fb:54:45:53:15:
                    83:0b:0b:f2:1f:52:92:e4:e5:9f:c5:08:28:95:a8:
                    6e:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:86:01:CB:05:33:06:46:CC:5D:80:65:4D:2F:11:E9:D4:28:76:08
            X509v3 Authority Key Identifier:
                keyid:73:D7:EB:8D:CC:9C:93:37:55:64:7B:F8:E5:EE:D5:AA:EE:26:EA:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/66D359949D44AB5BDBBF902207D0F118C53AD6B1A063328FB714FC3849B0B3E8/0/73D7EB8DCC9C933755647BF8E5EED5AAEE26EA30.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/73D7EB8DCC9C933755647BF8E5EED5AAEE26EA30.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/66D359949D44AB5BDBBF902207D0F118C53AD6B1A063328FB714FC3849B0B3E8/0/323830313a3138643a3a2f34382d3438203d3e203634313634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:18d::/48

    Signature Algorithm: sha256WithRSAEncryption
         78:92:58:95:4a:bc:4b:c2:9c:0e:df:9c:8c:cd:f3:38:e4:8e:
         b5:8c:0e:98:ec:84:60:ce:4c:f0:8a:94:0e:af:4e:3b:a5:b1:
         41:02:f9:9d:c8:6d:f4:c4:14:ce:25:a9:f3:08:32:3a:ff:09:
         be:38:9e:62:5c:f3:87:40:85:db:d2:5c:cc:ff:c2:1b:1d:32:
         d1:0e:ad:0c:db:4f:fb:31:97:42:9a:9f:9d:57:03:36:e2:04:
         29:62:5d:86:81:15:1c:ec:f9:de:f5:0d:7d:cb:99:a0:85:9a:
         83:80:7a:c7:aa:3c:2b:9b:a0:d0:4c:18:f8:67:ed:35:25:91:
         e6:ea:2b:59:b9:26:f3:12:0d:dd:d3:97:f8:11:34:48:fb:c9:
         95:99:ad:84:2f:d1:1e:10:60:31:4d:51:46:a6:82:fa:ef:4e:
         5b:b2:21:e4:5c:44:45:37:c6:7f:35:ba:32:ed:78:03:d2:f5:
         fc:54:80:b8:91:16:a0:fc:d1:f3:3b:96:d9:b7:2e:3b:c9:fc:
         6a:bc:44:5d:51:c7:d5:51:16:00:80:9d:94:65:e6:9c:02:af:
         cb:62:a3:a9:33:87:2b:ab:59:dc:ac:3f:0a:d8:af:8f:15:1c:
         a8:7e:63:9f:73:fc:c8:bd:31:de:89:1a:f0:86:51:4c:a2:d4:
         e3:db:50:6d
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUFFRuDdoWjkfYtndHhn/nc/nWcUcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzNEN0VCOERDQzlDOTMzNzU1NjQ3QkY4RTVFRUQ1QUFF
RTI2RUEzMDAeFw0yNTA3MDEwNDE5MTJaFw0yNjA2MzAwNDI0MTJaMDMxMTAvBgNV
BAMTKEE2ODYwMUNCMDUzMzA2NDZDQzVEODA2NTREMkYxMUU5RDQyODc2MDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8DLH0EtR3tCMd9s5nwIraKrlK
yXDcMOaL+SD8rde6sYccqTQ/5gZCGWHJ8TjA4KaWP4+knnuuX3Wtf52mLY9XyQSa
9RtGmwJBKoYMYOWqDYPHkMxWo1Bgx71TabFwTLr0zNVXjI+QyXBb9sNLuIRfRygf
h7J2UmALB+XKsEocKzT/qAZ9Hg/Iy6JblfT5lmhGPjWUBNMph00ofJfC3XyrD5Zw
Tc3qmGBF7J7k3aURv5p+Y0exuTOaqeKxtYcw2Xr1cpb27PARbuAHcIjdb7ysII3W
I7foTqCIPhP7wCKNbe1PyB57Qd8CWQL7VEVTFYMLC/IfUpLk5Z/FCCiVqG6zAgMB
AAGjggLHMIICwzAdBgNVHQ4EFgQUpoYBywUzBkbMXYBlTS8R6dQodggwHwYDVR0j
BBgwFoAUc9frjcyckzdVZHv45e7Vqu4m6jAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82NkQzNTk5NDlENDRBQjVCREJCRjkwMjIwN0QwRjExOEM1
M0FENkIxQTA2MzMyOEZCNzE0RkMzODQ5QjBCM0U4LzAvNzNEN0VCOERDQzlDOTMz
NzU1NjQ3QkY4RTVFRUQ1QUFFRTI2RUEzMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83M0Q3RUI4RENDOUM5MzM3NTU2
NDdCRjhFNUVFRDVBQUVFMjZFQTMwLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNjZEMzU5OTQ5RDQ0QUI1QkRCQkY5MDIyMDdEMEYxMThDNTNBRDZCMUEw
NjMzMjhGQjcxNEZDMzg0OUIwQjNFOC8wLzMyMzgzMDMxM2EzMTM4NjQzYTNhMmYz
NDM4MmQzNDM4MjAzZDNlMjAzNjM0MzEzNjM0LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKAEBjQAAMA0G
CSqGSIb3DQEBCwUAA4IBAQB4kliVSrxLwpwO35yMzfM45I61jA6Y7IRgzkzwipQO
r047pbFBAvmdyG30xBTOJanzCDI6/wm+OJ5iXPOHQIXb0lzM/8IbHTLRDq0M20/7
MZdCmp+dVwM24gQpYl2GgRUc7Pne9Q19y5mghZqDgHrHqjwrm6DQTBj4Z+01JZHm
6itZuSbzEg3d05f4ETRI+8mVma2EL9EeEGAxTVFGpoL6705bsiHkXERFN8Z/Nboy
7XgD0vX8VIC4kRag/NHzO5bZty47yfxqvERdUcfVURYAgJ2UZeacAq/LYqOpM4cr
q1ncrD8K2K+PFRyofmOfc/zIvTHeiRrwhlFMotTj21Bt
-----END CERTIFICATE-----
Generated at Sat Jul 5 12:03:17 2025 by rpki-client