Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F5D70459C94144150FEC616E53F671374DC8CA04DF5B96CF680492BB45F6E74D/0/323830333a343839303a3a2f33322d3332203d3e20323732313536.roa
File:                     323830333a343839303a3a2f33322d3332203d3e20323732313536.roa (raw, json)
Hash identifier:          Lh6MgUA+PRPcGmpVjDmKJx0LdoC0E+NheabslCYMWaA=
Subject key identifier:   F9:F3:A9:DF:AE:35:46:34:A9:BB:C6:64:DD:DE:E8:61:DE:DF:D8:47
Certificate issuer:       /CN=69A22062FEA656EAA1AEE03349A885226BB40E90
Certificate serial:       5FF1E0701C5AFB7EC8D938DAC9B8A1360DFBA3E0
Authority key identifier: 69:A2:20:62:FE:A6:56:EA:A1:AE:E0:33:49:A8:85:22:6B:B4:0E:90
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/69A22062FEA656EAA1AEE03349A885226BB40E90.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F5D70459C94144150FEC616E53F671374DC8CA04DF5B96CF680492BB45F6E74D/0/323830333a343839303a3a2f33322d3332203d3e20323732313536.roa
Signing time:             Tue 04 Feb 2025 18:23:46 +0000
ROA not before:           Tue 04 Feb 2025 18:18:46 +0000
ROA not after:            Tue 03 Feb 2026 18:23:46 +0000
asID:                     272156
IP address blocks:        2803:4890::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F5D70459C94144150FEC616E53F671374DC8CA04DF5B96CF680492BB45F6E74D/0/69A22062FEA656EAA1AEE03349A885226BB40E90.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F5D70459C94144150FEC616E53F671374DC8CA04DF5B96CF680492BB45F6E74D/0/69A22062FEA656EAA1AEE03349A885226BB40E90.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/69A22062FEA656EAA1AEE03349A885226BB40E90.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:f1:e0:70:1c:5a:fb:7e:c8:d9:38:da:c9:b8:a1:36:0d:fb:a3:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69A22062FEA656EAA1AEE03349A885226BB40E90
        Validity
            Not Before: Feb  4 18:18:46 2025 GMT
            Not After : Feb  3 18:23:46 2026 GMT
        Subject: CN=F9F3A9DFAE354634A9BBC664DDDEE861DEDFD847
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:c1:b4:07:c0:9a:6b:2f:53:da:f0:e5:fa:6e:
                    c9:6f:29:ea:d6:0c:a6:d0:00:53:30:f2:1d:82:2b:
                    ff:11:c6:d7:1d:51:4b:a1:4b:2c:3e:12:a9:cc:58:
                    d4:ff:a4:fc:35:c8:85:f0:be:93:b9:ca:35:41:3c:
                    9a:d3:fe:08:ba:40:2f:27:3b:d9:b4:3b:09:61:ec:
                    49:bd:d5:d9:9d:dc:ea:b7:dc:ea:3b:a6:26:b8:7b:
                    4b:37:be:31:9b:17:87:1d:6f:65:61:6f:fa:37:41:
                    70:ff:cc:2f:7e:7e:6b:eb:b6:39:3a:33:1e:cb:77:
                    66:c4:04:18:e3:6a:1b:67:9d:83:84:35:8a:c7:79:
                    2c:af:75:29:92:bd:42:70:e6:31:82:7e:09:30:e9:
                    f8:45:c2:f0:99:d2:27:a8:05:63:13:b4:80:89:e2:
                    b0:01:ae:4f:8a:f8:fa:ca:43:50:3e:cc:3a:15:2e:
                    c6:7b:bb:63:f9:7b:fb:e1:bc:a8:e9:33:4d:43:c3:
                    48:14:af:b6:85:61:8f:34:17:fe:b2:fa:d4:8c:ee:
                    c4:87:82:fa:2e:6b:ff:b5:f5:81:86:7e:0c:7b:c0:
                    53:cc:89:95:77:e5:c3:b1:06:d8:9d:8f:28:f6:05:
                    2a:9d:d4:48:78:3d:3b:dc:30:6d:2e:68:3d:fe:12:
                    b7:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:F3:A9:DF:AE:35:46:34:A9:BB:C6:64:DD:DE:E8:61:DE:DF:D8:47
            X509v3 Authority Key Identifier:
                keyid:69:A2:20:62:FE:A6:56:EA:A1:AE:E0:33:49:A8:85:22:6B:B4:0E:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F5D70459C94144150FEC616E53F671374DC8CA04DF5B96CF680492BB45F6E74D/0/69A22062FEA656EAA1AEE03349A885226BB40E90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/69A22062FEA656EAA1AEE03349A885226BB40E90.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F5D70459C94144150FEC616E53F671374DC8CA04DF5B96CF680492BB45F6E74D/0/323830333a343839303a3a2f33322d3332203d3e20323732313536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4890::/32

    Signature Algorithm: sha256WithRSAEncryption
         2e:fb:fe:39:43:04:55:3e:f7:1d:2b:29:6d:3c:bc:54:e7:1b:
         b8:8c:17:0c:24:08:31:aa:6c:4f:3a:d1:57:63:e1:32:30:4e:
         8d:72:2a:f0:79:01:d8:c4:7c:fd:66:d2:50:82:6b:a8:08:27:
         81:08:11:1d:60:1c:60:97:06:a9:ef:ef:69:c3:5e:b0:5f:9a:
         30:ef:55:5b:27:1c:1c:93:08:4c:36:e1:51:d2:8a:00:c1:fa:
         4e:58:a9:a5:9d:0d:39:5c:c9:70:17:2a:fd:3a:0a:84:6d:8e:
         ab:14:98:11:3c:78:b1:e8:7e:42:3b:68:3b:32:87:65:00:db:
         4c:18:c2:c1:d0:40:77:f7:54:13:46:68:33:fa:8f:6a:ec:21:
         b1:5e:e9:8a:22:ac:e2:90:0f:d0:92:42:1b:12:7e:93:95:a7:
         a2:f8:40:5b:db:9b:eb:93:f2:c3:5c:2b:7f:67:a1:e8:3d:f7:
         4d:49:e1:bc:ae:e0:5e:c1:f8:27:96:11:ed:4a:d5:38:29:e3:
         df:79:d9:3f:57:b2:2c:c6:aa:12:1e:12:01:9e:a1:6a:34:96:
         1d:4c:43:81:a7:f4:5b:6c:8d:83:1f:db:ea:a5:3e:cc:4c:96:
         da:90:3c:cf:02:26:e3:02:39:a6:16:8b:d3:75:1e:48:f4:1c:
         0a:42:e1:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:37:50 2025 by rpki-client on console.sobornost.net