Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/086D08F080C910C63925836D1D583A1AA9DD8338C378A0CB1EC151E9CBE67607/0/323830363a3365363a3a2f33322d3634203d3e20323730313539.roa
File:                     323830363a3365363a3a2f33322d3634203d3e20323730313539.roa (raw, json)
Hash identifier:          NMIFDXHClU0Zs0XGBR01Mbz02RERukxvmWn190+R9gk=
Subject key identifier:   6F:7A:40:8A:8E:8E:FB:BD:D7:E0:5B:DD:20:BC:6F:B3:C4:46:D5:F4
Certificate issuer:       /CN=03C012BF937B42653C39221C7A9AA7F87567EC7A
Certificate serial:       357CE9519D8606B6B197751A8A455D0599BDFC22
Authority key identifier: 03:C0:12:BF:93:7B:42:65:3C:39:22:1C:7A:9A:A7:F8:75:67:EC:7A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/03C012BF937B42653C39221C7A9AA7F87567EC7A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/086D08F080C910C63925836D1D583A1AA9DD8338C378A0CB1EC151E9CBE67607/0/323830363a3365363a3a2f33322d3634203d3e20323730313539.roa
Signing time:             Tue 04 Feb 2025 18:41:13 +0000
ROA not before:           Tue 04 Feb 2025 18:36:13 +0000
ROA not after:            Tue 03 Feb 2026 18:41:13 +0000
asID:                     270159
IP address blocks:        2806:3e6::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/086D08F080C910C63925836D1D583A1AA9DD8338C378A0CB1EC151E9CBE67607/0/03C012BF937B42653C39221C7A9AA7F87567EC7A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/086D08F080C910C63925836D1D583A1AA9DD8338C378A0CB1EC151E9CBE67607/0/03C012BF937B42653C39221C7A9AA7F87567EC7A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/03C012BF937B42653C39221C7A9AA7F87567EC7A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:7c:e9:51:9d:86:06:b6:b1:97:75:1a:8a:45:5d:05:99:bd:fc:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03C012BF937B42653C39221C7A9AA7F87567EC7A
        Validity
            Not Before: Feb  4 18:36:13 2025 GMT
            Not After : Feb  3 18:41:13 2026 GMT
        Subject: CN=6F7A408A8E8EFBBDD7E05BDD20BC6FB3C446D5F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:9f:54:8a:e1:c1:98:12:2a:6f:3a:ab:dd:a4:
                    53:ec:1d:4f:d1:03:df:2b:05:0c:0f:4f:31:1c:e9:
                    4d:b2:24:c3:b7:ca:af:b0:e1:fd:7c:07:fe:7a:04:
                    b2:4c:13:cd:0a:cc:bf:3e:a7:df:94:09:77:32:df:
                    c2:54:5c:86:f0:81:2b:23:1c:a2:5b:0d:46:ca:66:
                    64:fe:d5:40:fb:89:0b:03:72:d1:06:ef:9d:e5:3b:
                    38:7c:cb:8d:49:5a:5b:70:4f:07:10:12:6f:2a:e0:
                    34:96:26:73:c6:ee:ef:dd:20:cd:8c:85:0d:c8:2f:
                    cb:53:48:a2:30:02:91:e7:f8:ce:eb:07:0f:35:11:
                    16:57:ac:22:19:18:c0:7c:d7:7f:4d:1b:b4:ec:6c:
                    1a:b8:49:2a:28:6d:b6:de:f6:ea:d8:20:e3:62:ac:
                    fd:1c:ad:b5:b1:16:f2:9f:80:58:56:fc:d0:7d:5c:
                    8f:42:d5:b7:b2:d8:f4:04:11:e9:3d:97:5f:9e:bc:
                    c8:a6:13:b2:56:12:f9:67:90:94:d7:c3:2d:88:d3:
                    df:c6:d8:06:18:8c:a0:52:10:79:2b:7f:7f:a1:f0:
                    c0:c3:d7:39:50:b4:95:bf:04:9b:97:ce:12:00:91:
                    a5:a1:39:89:ec:da:ca:a8:f0:07:78:64:34:8b:75:
                    e4:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:7A:40:8A:8E:8E:FB:BD:D7:E0:5B:DD:20:BC:6F:B3:C4:46:D5:F4
            X509v3 Authority Key Identifier:
                keyid:03:C0:12:BF:93:7B:42:65:3C:39:22:1C:7A:9A:A7:F8:75:67:EC:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/086D08F080C910C63925836D1D583A1AA9DD8338C378A0CB1EC151E9CBE67607/0/03C012BF937B42653C39221C7A9AA7F87567EC7A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/03C012BF937B42653C39221C7A9AA7F87567EC7A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/086D08F080C910C63925836D1D583A1AA9DD8338C378A0CB1EC151E9CBE67607/0/323830363a3365363a3a2f33322d3634203d3e20323730313539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:3e6::/32

    Signature Algorithm: sha256WithRSAEncryption
         06:ad:8a:c1:02:7e:51:fd:b5:37:d0:6f:9e:aa:95:77:e4:f7:
         07:ba:09:4f:b1:f2:1c:95:75:7f:f9:08:e3:12:91:37:be:74:
         97:29:84:a3:37:65:09:0d:a2:b1:6c:b9:a3:05:d7:44:3e:08:
         ee:8d:64:36:15:af:9a:db:cd:59:a2:9c:8f:7d:cf:54:b1:fc:
         66:d3:59:b5:d9:d4:4f:7a:fd:36:a0:cf:15:63:44:4d:7f:ed:
         ff:d2:d6:c2:b7:23:3d:4b:69:9e:db:fb:63:92:86:20:a7:28:
         9e:c8:4c:ba:6a:01:ef:96:d9:d4:d2:cf:8a:64:a2:f3:af:76:
         e0:75:4a:bc:73:8d:37:e3:f7:08:03:f4:ee:e1:cd:bf:f7:fb:
         02:a8:3b:16:32:0f:60:12:70:b5:15:79:86:a8:94:07:08:d6:
         af:97:6f:67:08:e7:a6:7e:85:4b:a9:cf:b4:07:86:d6:e0:28:
         8e:5a:bb:93:b2:4b:b6:b6:2b:c4:25:24:22:c0:98:43:c0:1b:
         5e:35:c7:75:bf:fb:ef:63:ee:15:e8:9d:9d:c4:17:2f:7d:06:
         64:ee:13:97:01:90:fd:1b:aa:2b:d3:ef:e3:c1:5f:6e:c0:94:
         53:7b:c9:f2:2c:5a:ef:24:11:5d:06:b6:f6:97:44:d8:11:f3:
         ce:fd:ef:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:59:53 2025 by rpki-client