Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/11ECB110B91860A0913CF170F5CFB709DE98DF7D0391B8F3DEC5531F64337675/0/323830363a3231653a3a2f33322d3332203d3e203238343039.roa
File:                     323830363a3231653a3a2f33322d3332203d3e203238343039.roa (raw, json)
Hash identifier:          QnLdpZSkZeQP14JNPgROv4w0vSq6b6oAtCd/KnbxJgI=
Subject key identifier:   0F:9E:14:9E:78:78:4B:28:5C:2D:7B:30:5D:39:51:1D:DB:03:4D:75
Certificate issuer:       /CN=913C600205F778BCEADE53F31FD3D65A46D53467
Certificate serial:       7E00F014D2DA8E95BFBF1183773E477352EA265A
Authority key identifier: 91:3C:60:02:05:F7:78:BC:EA:DE:53:F3:1F:D3:D6:5A:46:D5:34:67
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/913C600205F778BCEADE53F31FD3D65A46D53467.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/11ECB110B91860A0913CF170F5CFB709DE98DF7D0391B8F3DEC5531F64337675/0/323830363a3231653a3a2f33322d3332203d3e203238343039.roa
Signing time:             Tue 04 Feb 2025 18:31:29 +0000
ROA not before:           Tue 04 Feb 2025 18:26:29 +0000
ROA not after:            Tue 03 Feb 2026 18:31:29 +0000
asID:                     28409
IP address blocks:        2806:21e::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/11ECB110B91860A0913CF170F5CFB709DE98DF7D0391B8F3DEC5531F64337675/0/913C600205F778BCEADE53F31FD3D65A46D53467.crl
                          rsync://repository.lacnic.net/rpki/lacnic/11ECB110B91860A0913CF170F5CFB709DE98DF7D0391B8F3DEC5531F64337675/0/913C600205F778BCEADE53F31FD3D65A46D53467.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/913C600205F778BCEADE53F31FD3D65A46D53467.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 06:59:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:00:f0:14:d2:da:8e:95:bf:bf:11:83:77:3e:47:73:52:ea:26:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=913C600205F778BCEADE53F31FD3D65A46D53467
        Validity
            Not Before: Feb  4 18:26:29 2025 GMT
            Not After : Feb  3 18:31:29 2026 GMT
        Subject: CN=0F9E149E78784B285C2D7B305D39511DDB034D75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:71:1a:ac:08:88:06:c3:c9:c9:d8:a3:ef:27:
                    a2:19:60:15:25:d1:d2:63:1e:04:2f:fd:fb:c4:fe:
                    cb:f1:72:7e:c0:a9:75:51:c8:c2:23:3c:6c:c0:cc:
                    18:cc:dd:f4:28:a7:5c:94:88:2a:0a:28:5e:bf:70:
                    3c:68:83:50:a9:48:8d:da:71:86:96:bf:df:fc:78:
                    87:3c:84:90:ef:2d:cd:83:13:97:18:a0:bf:ab:48:
                    1d:87:4b:d9:30:6c:6b:97:39:f8:8b:78:15:20:24:
                    53:e3:be:ae:4d:8e:15:d5:3a:61:1a:ec:ec:5a:d4:
                    c3:f1:a3:88:79:30:fa:80:df:92:0c:d0:d7:19:c9:
                    57:1e:b3:a8:49:11:84:e5:90:9f:38:46:e3:75:c6:
                    86:51:82:74:49:f6:8d:a1:d3:6b:4f:9e:62:98:4e:
                    53:bd:8b:6e:3a:67:16:65:4b:4b:57:09:96:da:70:
                    e3:5e:18:da:1d:5e:2b:f6:b5:d2:6b:dd:3d:43:ad:
                    1d:aa:e8:05:ac:47:60:91:79:31:a1:80:be:eb:ac:
                    7a:07:b1:36:03:7c:a1:38:e2:99:6b:02:a9:79:34:
                    94:59:1a:0f:39:bf:5a:fe:89:a5:05:4a:75:07:bd:
                    f2:93:da:f4:c9:47:91:90:9a:2d:d7:be:db:85:65:
                    5b:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:9E:14:9E:78:78:4B:28:5C:2D:7B:30:5D:39:51:1D:DB:03:4D:75
            X509v3 Authority Key Identifier:
                keyid:91:3C:60:02:05:F7:78:BC:EA:DE:53:F3:1F:D3:D6:5A:46:D5:34:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/11ECB110B91860A0913CF170F5CFB709DE98DF7D0391B8F3DEC5531F64337675/0/913C600205F778BCEADE53F31FD3D65A46D53467.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/913C600205F778BCEADE53F31FD3D65A46D53467.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/11ECB110B91860A0913CF170F5CFB709DE98DF7D0391B8F3DEC5531F64337675/0/323830363a3231653a3a2f33322d3332203d3e203238343039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:21e::/32

    Signature Algorithm: sha256WithRSAEncryption
         54:cd:62:46:ad:50:e7:67:dd:c0:0e:30:f5:28:ea:67:4f:d4:
         d0:dc:c5:14:58:85:a1:7e:ec:00:a4:60:f1:f7:32:c6:08:99:
         12:8a:d0:6b:3b:f6:b3:1e:ca:cc:c7:e6:88:05:8f:40:a8:6a:
         8f:7c:ce:0a:8f:0f:6b:b6:36:93:e3:6e:fa:4a:cb:12:cc:bf:
         bb:96:79:9f:42:36:3e:f5:3c:9f:09:e7:4f:58:16:cc:e8:aa:
         8d:40:f0:32:e4:d8:ad:05:f1:c0:bd:3d:6b:e7:7c:3b:c3:4a:
         7b:51:6d:c7:b5:85:c1:f0:17:de:2f:01:4b:91:dc:f5:78:e6:
         d8:a6:98:c6:a9:d7:c6:a1:c8:0a:29:40:17:5d:84:e7:90:f0:
         60:20:af:4b:47:29:78:d2:b1:60:ea:62:ac:bd:05:33:8d:84:
         4e:ee:65:1f:84:ef:17:8c:a4:bc:c3:73:46:4e:b3:cd:6e:a2:
         6c:3f:6b:6d:ca:9a:37:eb:c6:7e:65:e6:4f:97:43:cf:45:b3:
         59:a6:c3:c5:6a:f8:e4:d6:12:1b:54:be:f9:dc:a2:c4:e1:d6:
         41:08:45:be:68:d4:04:7e:11:92:fe:27:ea:fd:c4:f3:8c:d9:
         69:3b:1d:f4:14:17:c3:25:91:05:84:4a:0d:2f:03:ce:e1:96:
         6c:65:a8:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 19:13:48 2025 by rpki-client