Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0C729A3AB4123D9953BF1E820716250233C030F64B8F77CA8C9EF3F5E1979048/0/323830363a3430393a3a2f33322d3438203d3e20323730313930.roa
File:                     323830363a3430393a3a2f33322d3438203d3e20323730313930.roa (raw, json)
Hash identifier:          bSciICIzi4Vj83iopg6TSfAQZN3sAKQDEQteG0Q/iBs=
Subject key identifier:   9C:67:11:69:2F:6F:45:27:B5:B6:64:15:19:9C:AE:32:1D:57:34:BA
Certificate issuer:       /CN=189839EAD50054334B1E36E7BFD30CB8FD644F89
Certificate serial:       7B0AC33867BE8482C09F2AB8FB5A5F167DAC9C5E
Authority key identifier: 18:98:39:EA:D5:00:54:33:4B:1E:36:E7:BF:D3:0C:B8:FD:64:4F:89
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/189839EAD50054334B1E36E7BFD30CB8FD644F89.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0C729A3AB4123D9953BF1E820716250233C030F64B8F77CA8C9EF3F5E1979048/0/323830363a3430393a3a2f33322d3438203d3e20323730313930.roa
Signing time:             Tue 04 Feb 2025 18:35:49 +0000
ROA not before:           Tue 04 Feb 2025 18:30:49 +0000
ROA not after:            Tue 03 Feb 2026 18:35:49 +0000
asID:                     270190
IP address blocks:        2806:409::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0C729A3AB4123D9953BF1E820716250233C030F64B8F77CA8C9EF3F5E1979048/0/189839EAD50054334B1E36E7BFD30CB8FD644F89.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0C729A3AB4123D9953BF1E820716250233C030F64B8F77CA8C9EF3F5E1979048/0/189839EAD50054334B1E36E7BFD30CB8FD644F89.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/189839EAD50054334B1E36E7BFD30CB8FD644F89.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 23:03:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:0a:c3:38:67:be:84:82:c0:9f:2a:b8:fb:5a:5f:16:7d:ac:9c:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=189839EAD50054334B1E36E7BFD30CB8FD644F89
        Validity
            Not Before: Feb  4 18:30:49 2025 GMT
            Not After : Feb  3 18:35:49 2026 GMT
        Subject: CN=9C6711692F6F4527B5B66415199CAE321D5734BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:dd:7c:ad:0f:f1:ff:31:6e:20:64:03:d9:a6:
                    b9:e7:f3:c3:70:3e:bd:2e:44:c0:5d:64:dd:57:c5:
                    40:74:92:45:f0:f0:e9:7f:38:b5:76:02:b8:c4:50:
                    f7:ae:37:9f:1d:fb:2c:28:2a:08:5d:40:8d:8d:a3:
                    0e:a3:07:aa:53:8a:d9:30:35:ec:a1:12:8f:2f:db:
                    87:1f:65:bf:6d:e9:79:fb:42:0c:c7:01:0b:48:c8:
                    18:f1:8d:09:de:93:7b:dc:eb:d3:91:bc:f3:1a:c4:
                    81:ca:11:78:74:e3:0f:02:a4:f0:6f:32:99:d9:1b:
                    bd:62:8b:64:48:93:7c:cb:9a:ca:77:3d:b1:ba:e9:
                    93:18:ee:c8:fc:d2:88:57:14:33:c2:6c:c8:71:90:
                    53:70:f1:66:69:e8:52:11:11:a6:0e:2e:af:2c:42:
                    c7:cc:ef:12:67:83:3d:f7:9b:1a:07:59:90:71:fe:
                    2a:3b:3e:37:ff:d4:63:7c:7f:c1:54:0b:0e:b6:b5:
                    1d:c9:53:dd:87:6d:3d:4f:b7:15:a0:30:4e:2a:82:
                    2d:ee:b2:e1:22:e2:54:d1:86:e4:e8:80:e9:b2:46:
                    58:64:b4:12:6a:f4:59:e7:ba:80:ff:40:58:8d:46:
                    b3:02:d6:e9:fc:8c:42:b9:14:de:7c:7f:a7:90:c3:
                    c5:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:67:11:69:2F:6F:45:27:B5:B6:64:15:19:9C:AE:32:1D:57:34:BA
            X509v3 Authority Key Identifier:
                keyid:18:98:39:EA:D5:00:54:33:4B:1E:36:E7:BF:D3:0C:B8:FD:64:4F:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0C729A3AB4123D9953BF1E820716250233C030F64B8F77CA8C9EF3F5E1979048/0/189839EAD50054334B1E36E7BFD30CB8FD644F89.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/189839EAD50054334B1E36E7BFD30CB8FD644F89.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0C729A3AB4123D9953BF1E820716250233C030F64B8F77CA8C9EF3F5E1979048/0/323830363a3430393a3a2f33322d3438203d3e20323730313930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:409::/32

    Signature Algorithm: sha256WithRSAEncryption
         c2:08:94:51:21:c1:bd:70:92:7b:58:0b:05:7c:59:7b:f4:f8:
         11:85:5e:e5:3b:cc:89:75:e4:b2:90:7d:91:31:5a:ee:ce:de:
         8c:f3:ae:63:c5:c7:62:a7:f6:b2:71:6b:ce:4e:b9:31:0b:0c:
         6d:2a:9c:98:02:b6:08:e8:5e:aa:a3:9d:80:55:aa:28:1f:47:
         50:fa:9d:03:5c:77:9c:9b:80:1d:bf:ed:c9:a1:f2:20:9f:bd:
         3b:37:20:8b:dc:5e:26:8c:3a:3a:30:cf:5b:fe:cd:bb:a2:ae:
         35:b7:91:9b:a7:8e:06:e7:8a:9e:63:c6:0c:1a:11:b1:fe:c2:
         bd:fd:88:9d:77:7a:07:22:f5:e4:fa:74:7c:88:e0:51:6a:ee:
         aa:10:da:49:5e:d6:96:5f:cb:da:e5:ca:dc:ac:5d:69:cd:54:
         8a:5c:20:eb:5f:57:41:04:73:e9:d7:4a:71:2f:d7:71:e6:9c:
         83:5a:a6:35:a1:1a:77:24:f4:6a:12:f4:54:ff:f3:c1:31:f6:
         91:eb:92:71:bc:46:02:ac:73:ac:d3:41:6a:d4:a4:de:ec:96:
         26:c6:1d:19:26:40:10:51:68:ce:03:27:b1:30:98:4b:fa:8f:
         1a:e1:55:96:1e:a0:6e:e6:8d:fb:91:04:8c:8f:5a:02:af:0f:
         9a:0a:4a:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:30:39 2025 by rpki-client