Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/112D51081C3D0FF680742BBEBAAA66A46F02C5841E24516D0D7CDFFD22B3720A/0/323830363a3365383a3a2f33322d3335203d3e20323730313632.roa
File:                     323830363a3365383a3a2f33322d3335203d3e20323730313632.roa (raw, json)
Hash identifier:          A7Bhh4k2iaHP44OLi2mDBcLsmMs3brjs1NSidFlmZMA=
Subject key identifier:   7D:04:07:AD:C0:B7:3C:6F:D6:E4:F5:1B:56:E7:93:50:BD:F6:0A:96
Certificate issuer:       /CN=EF37818874083DA94149A04C0F74F543044C43C0
Certificate serial:       7983B985C0A9D0935D5B45D74AB0673277FE200F
Authority key identifier: EF:37:81:88:74:08:3D:A9:41:49:A0:4C:0F:74:F5:43:04:4C:43:C0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EF37818874083DA94149A04C0F74F543044C43C0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/112D51081C3D0FF680742BBEBAAA66A46F02C5841E24516D0D7CDFFD22B3720A/0/323830363a3365383a3a2f33322d3335203d3e20323730313632.roa
Signing time:             Tue 04 Feb 2025 18:00:08 +0000
ROA not before:           Tue 04 Feb 2025 17:55:08 +0000
ROA not after:            Tue 03 Feb 2026 18:00:08 +0000
asID:                     270162
IP address blocks:        2806:3e8::/32 maxlen: 35
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/112D51081C3D0FF680742BBEBAAA66A46F02C5841E24516D0D7CDFFD22B3720A/0/EF37818874083DA94149A04C0F74F543044C43C0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/112D51081C3D0FF680742BBEBAAA66A46F02C5841E24516D0D7CDFFD22B3720A/0/EF37818874083DA94149A04C0F74F543044C43C0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EF37818874083DA94149A04C0F74F543044C43C0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Apr 2025 21:20:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:83:b9:85:c0:a9:d0:93:5d:5b:45:d7:4a:b0:67:32:77:fe:20:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF37818874083DA94149A04C0F74F543044C43C0
        Validity
            Not Before: Feb  4 17:55:08 2025 GMT
            Not After : Feb  3 18:00:08 2026 GMT
        Subject: CN=7D0407ADC0B73C6FD6E4F51B56E79350BDF60A96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:a4:7d:e9:5e:0a:6d:16:2a:bd:57:35:0e:ce:
                    9f:96:62:44:53:36:91:f4:bc:0e:98:d6:b5:fa:39:
                    8c:76:11:ac:a5:10:4d:d8:6d:ab:dd:90:71:47:ab:
                    a3:4b:7a:53:5a:73:5f:e5:79:4f:d4:c1:56:5c:cd:
                    8c:c3:f6:92:8c:48:84:a1:79:7c:59:01:45:b3:77:
                    30:0d:85:02:c6:5a:b6:72:b7:c2:5b:c1:c8:1d:ba:
                    b5:06:52:0e:f5:ab:e3:8e:ec:8e:8e:8d:0b:a0:b1:
                    dd:57:ec:50:a3:1e:3e:e1:c9:09:7b:4b:2c:73:1b:
                    66:09:5e:09:56:0e:70:7f:29:db:2c:bd:fd:d0:3f:
                    1a:fe:20:96:f6:26:a7:fe:1d:e0:39:61:c3:7a:b9:
                    44:5e:c1:19:f2:cb:23:bc:7c:0a:7e:c2:ae:17:01:
                    db:9a:20:53:80:c1:1f:dd:e6:46:e4:7b:dc:c9:1d:
                    2a:cc:09:92:41:86:3c:b6:ce:ae:dc:24:28:5d:d5:
                    d9:63:e8:14:e0:72:ff:1b:ce:66:da:e2:70:b9:17:
                    fc:ba:70:16:2e:c2:65:80:bd:dc:07:34:38:f3:b4:
                    ac:c8:c6:05:9d:23:75:a1:05:83:45:4b:7a:61:6c:
                    15:02:bb:d4:c5:c4:86:c0:0c:50:a5:73:c0:0d:3e:
                    59:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:04:07:AD:C0:B7:3C:6F:D6:E4:F5:1B:56:E7:93:50:BD:F6:0A:96
            X509v3 Authority Key Identifier:
                keyid:EF:37:81:88:74:08:3D:A9:41:49:A0:4C:0F:74:F5:43:04:4C:43:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/112D51081C3D0FF680742BBEBAAA66A46F02C5841E24516D0D7CDFFD22B3720A/0/EF37818874083DA94149A04C0F74F543044C43C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EF37818874083DA94149A04C0F74F543044C43C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/112D51081C3D0FF680742BBEBAAA66A46F02C5841E24516D0D7CDFFD22B3720A/0/323830363a3365383a3a2f33322d3335203d3e20323730313632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:3e8::/32

    Signature Algorithm: sha256WithRSAEncryption
         02:fa:0c:c6:4c:94:44:22:08:8a:6c:cf:62:41:f3:c9:88:98:
         86:8e:32:e0:a1:cb:1b:62:8e:5a:2a:c0:0b:91:c7:76:ee:9b:
         53:ec:eb:42:ca:20:e7:42:61:5f:36:dc:64:6d:e6:de:b2:dc:
         67:26:71:49:37:2d:6a:87:56:7c:63:6c:78:eb:eb:9d:e3:c5:
         c6:22:c2:8b:52:9b:0c:1e:d1:00:15:2c:ed:e6:18:8e:25:bf:
         19:5a:61:0a:8e:52:92:2b:16:e4:19:eb:0f:d7:70:f8:63:17:
         c4:ab:0e:fe:15:c8:f5:44:2b:f6:3e:f8:d6:96:3b:f7:37:87:
         c2:9c:6f:02:92:1f:15:83:83:4a:2f:c1:f9:b9:22:9a:27:1a:
         5e:01:34:71:48:ec:f5:5c:aa:5d:9f:0b:cf:2f:80:5b:78:96:
         4c:a4:89:9c:17:63:60:f6:18:4e:91:9f:55:74:73:27:d8:cc:
         2e:0e:20:49:46:ef:a0:92:8a:3d:80:aa:8d:b6:1a:09:6c:05:
         39:00:2b:bc:3d:e9:e6:9d:11:69:d4:16:b4:4e:b0:b4:b4:da:
         91:8a:3d:c3:10:82:e2:28:75:5b:03:ff:14:7c:6e:76:76:32:
         16:65:92:8a:a4:d2:00:2b:d6:44:35:e2:c6:c1:09:a6:62:cd:
         df:82:5a:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 21:52:32 2025 by rpki-client