Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/04C4499C13871C01CC13C4D3273A8ACF11671F0713002939882EDADDDDC575D5/0/323830363a3231343a3a2f33322d3332203d3e203238343332.roa
File:                     323830363a3231343a3a2f33322d3332203d3e203238343332.roa (raw, json)
Hash identifier:          PUWiigERe1Z4nQGfGTTUdik0Hv/l3o2qP/m7l40Iano=
Subject key identifier:   7E:10:D3:7F:42:73:D9:C5:90:94:E4:00:7E:1F:06:BD:70:5E:79:F9
Certificate issuer:       /CN=19BF355A38263DAC0C4F3D824F2A42E88B78A1B6
Certificate serial:       321FAA9EE47A0612C832A272A8CE593F792EE8B3
Authority key identifier: 19:BF:35:5A:38:26:3D:AC:0C:4F:3D:82:4F:2A:42:E8:8B:78:A1:B6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/19BF355A38263DAC0C4F3D824F2A42E88B78A1B6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/04C4499C13871C01CC13C4D3273A8ACF11671F0713002939882EDADDDDC575D5/0/323830363a3231343a3a2f33322d3332203d3e203238343332.roa
Signing time:             Tue 04 Feb 2025 18:25:51 +0000
ROA not before:           Tue 04 Feb 2025 18:20:51 +0000
ROA not after:            Tue 03 Feb 2026 18:25:51 +0000
asID:                     28432
IP address blocks:        2806:214::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/04C4499C13871C01CC13C4D3273A8ACF11671F0713002939882EDADDDDC575D5/0/19BF355A38263DAC0C4F3D824F2A42E88B78A1B6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/04C4499C13871C01CC13C4D3273A8ACF11671F0713002939882EDADDDDC575D5/0/19BF355A38263DAC0C4F3D824F2A42E88B78A1B6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/19BF355A38263DAC0C4F3D824F2A42E88B78A1B6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:1f:aa:9e:e4:7a:06:12:c8:32:a2:72:a8:ce:59:3f:79:2e:e8:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19BF355A38263DAC0C4F3D824F2A42E88B78A1B6
        Validity
            Not Before: Feb  4 18:20:51 2025 GMT
            Not After : Feb  3 18:25:51 2026 GMT
        Subject: CN=7E10D37F4273D9C59094E4007E1F06BD705E79F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:99:ab:9f:cc:59:ea:06:81:b5:a9:ea:fd:67:
                    58:6e:f5:35:f0:65:93:20:67:95:80:be:43:5b:9e:
                    6b:15:f5:3b:3f:04:c0:0e:7f:80:1f:07:bc:28:74:
                    ec:72:a7:f2:6e:d8:a9:27:52:b2:5c:21:43:be:41:
                    e1:1a:56:21:23:0e:f2:2e:bf:3b:eb:cc:96:7c:ae:
                    8a:37:83:c9:54:d9:9f:47:ee:a4:3d:1f:ef:1a:26:
                    6a:6e:33:95:f7:2c:8d:05:8b:61:50:02:f7:a1:5c:
                    58:3d:b1:34:fb:31:c0:c7:24:b8:c6:6a:76:61:8c:
                    d7:b9:31:53:24:c8:a3:00:25:92:2b:d9:78:5b:bc:
                    72:6c:fa:f7:09:e1:fb:c0:98:83:fc:6b:61:f1:60:
                    ec:b7:bd:4b:3c:f7:32:2c:38:58:19:ff:8a:b3:3d:
                    9d:67:21:17:f0:88:4f:09:c7:d6:d7:22:fa:fd:62:
                    8c:4e:b5:77:1c:4e:97:01:40:09:cd:68:d9:d0:f5:
                    4c:65:f7:3b:a8:26:5f:45:49:71:06:48:37:d7:a1:
                    ac:15:c3:13:9e:44:9d:8f:05:32:ea:92:a5:a4:34:
                    c0:cc:e5:3d:f3:3b:f1:bd:ca:e3:c6:31:5a:07:6f:
                    11:42:6f:b6:84:9f:c2:2e:a2:2d:3e:e0:fa:af:78:
                    eb:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:10:D3:7F:42:73:D9:C5:90:94:E4:00:7E:1F:06:BD:70:5E:79:F9
            X509v3 Authority Key Identifier:
                keyid:19:BF:35:5A:38:26:3D:AC:0C:4F:3D:82:4F:2A:42:E8:8B:78:A1:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/04C4499C13871C01CC13C4D3273A8ACF11671F0713002939882EDADDDDC575D5/0/19BF355A38263DAC0C4F3D824F2A42E88B78A1B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/19BF355A38263DAC0C4F3D824F2A42E88B78A1B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/04C4499C13871C01CC13C4D3273A8ACF11671F0713002939882EDADDDDC575D5/0/323830363a3231343a3a2f33322d3332203d3e203238343332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:214::/32

    Signature Algorithm: sha256WithRSAEncryption
         ae:b9:23:61:fc:5b:24:a7:48:c4:26:24:45:b0:be:2e:a7:8a:
         b5:d6:fb:b8:02:41:0b:5b:41:d7:67:eb:ab:9c:6f:c5:a1:cb:
         5d:c3:ef:d7:41:cb:da:c4:9e:3d:8e:6a:e8:8c:c1:08:ae:e6:
         d1:87:52:d7:4f:ce:6e:ac:2d:22:d3:89:09:2b:4c:88:67:44:
         99:6e:f3:c9:00:1e:b6:57:77:f2:77:e9:80:90:67:0d:b6:29:
         b9:b7:d9:7b:53:b9:6d:39:47:86:b8:89:3e:ad:d2:5d:23:d0:
         0b:df:1a:a7:c8:26:50:43:4e:89:e6:45:c1:ee:5f:fd:6e:5b:
         52:21:bb:18:6f:38:dc:fb:e1:7f:14:0f:88:ee:18:50:0e:6b:
         0b:62:30:ec:af:29:f1:a8:b3:68:e4:3f:30:da:77:a4:e5:73:
         57:85:92:34:80:12:31:fa:34:c6:2c:56:d7:66:65:72:99:41:
         d3:04:18:e1:62:e4:97:8b:fb:39:35:0b:61:38:dc:82:bb:c4:
         10:16:79:bd:52:c2:d5:4e:67:d5:b2:d9:70:fc:4e:b9:89:bf:
         39:35:8e:fc:e2:02:2f:ff:96:e2:07:b5:b8:8d:21:9f:b0:c8:
         b5:89:cd:a0:bf:4e:98:e4:33:4d:87:17:d3:14:ff:bb:ad:99:
         0a:b1:2c:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:02:34 2025 by rpki-client