Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FC9B0DC05AFAB7ECB3A379DDC6D51C548D3A711D9C10462F2B6ABC1E75E1019/0/323830363a3230393a3a2f33322d3634203d3e20323635353031.roa
File:                     323830363a3230393a3a2f33322d3634203d3e20323635353031.roa (raw, json)
Hash identifier:          nS1OJQh7flpXAeDVq3QSsIPGwMJxKtKknh6/2e/vaZQ=
Subject key identifier:   09:6D:ED:24:0F:AD:CC:87:92:18:84:01:E7:F8:82:77:5F:CA:78:73
Certificate issuer:       /CN=35D619733A3D3A776B2D5FB84305186B942E249A
Certificate serial:       51FEB6E4E856C606CB7702A9DE7977EAAABC16D4
Authority key identifier: 35:D6:19:73:3A:3D:3A:77:6B:2D:5F:B8:43:05:18:6B:94:2E:24:9A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35D619733A3D3A776B2D5FB84305186B942E249A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1FC9B0DC05AFAB7ECB3A379DDC6D51C548D3A711D9C10462F2B6ABC1E75E1019/0/323830363a3230393a3a2f33322d3634203d3e20323635353031.roa
Signing time:             Tue 04 Feb 2025 18:18:29 +0000
ROA not before:           Tue 04 Feb 2025 18:13:29 +0000
ROA not after:            Tue 03 Feb 2026 18:18:29 +0000
asID:                     265501
IP address blocks:        2806:209::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1FC9B0DC05AFAB7ECB3A379DDC6D51C548D3A711D9C10462F2B6ABC1E75E1019/0/35D619733A3D3A776B2D5FB84305186B942E249A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1FC9B0DC05AFAB7ECB3A379DDC6D51C548D3A711D9C10462F2B6ABC1E75E1019/0/35D619733A3D3A776B2D5FB84305186B942E249A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35D619733A3D3A776B2D5FB84305186B942E249A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:fe:b6:e4:e8:56:c6:06:cb:77:02:a9:de:79:77:ea:aa:bc:16:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35D619733A3D3A776B2D5FB84305186B942E249A
        Validity
            Not Before: Feb  4 18:13:29 2025 GMT
            Not After : Feb  3 18:18:29 2026 GMT
        Subject: CN=096DED240FADCC8792188401E7F882775FCA7873
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:d6:85:12:18:41:65:08:5a:ca:31:5d:59:f3:
                    78:d3:8f:90:80:50:b8:85:17:57:3f:bb:14:0d:15:
                    eb:1e:1f:2c:04:a2:24:7d:e3:b2:56:04:82:a9:bf:
                    84:c9:d6:91:0e:dd:fc:ac:ea:e5:84:56:3f:6c:59:
                    42:ce:22:36:65:c8:49:5a:8f:8b:d2:72:fe:2a:e5:
                    dc:45:a5:a1:ea:8d:d0:36:f2:2a:cf:fd:d4:97:a8:
                    fb:8c:a3:ea:97:c0:49:94:2b:ea:37:83:b9:22:3c:
                    20:6b:52:50:5c:ac:e8:22:e3:aa:bf:25:1b:bd:85:
                    2e:7c:b0:1d:0c:8c:f2:2c:8a:2a:85:02:90:83:ce:
                    33:d0:0d:de:6f:78:4c:2c:9f:eb:7c:5e:7f:0c:49:
                    b7:1d:43:b4:9b:90:87:16:3f:3c:db:6d:95:f4:7c:
                    97:c6:a8:b7:79:9b:6a:ff:8a:49:2c:4c:76:14:91:
                    54:6e:85:61:31:44:d5:76:4a:a9:5b:19:24:70:7b:
                    03:ae:72:10:de:32:d6:b5:a7:d0:ed:5c:a6:c0:dc:
                    0f:a3:39:ef:c3:05:d9:85:8d:48:a2:67:1a:71:bd:
                    8b:3a:dc:6d:00:2d:e6:c9:24:53:5a:5a:df:4d:29:
                    90:95:68:5e:8c:20:ea:c6:3b:0e:3a:ed:43:9e:db:
                    f4:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:6D:ED:24:0F:AD:CC:87:92:18:84:01:E7:F8:82:77:5F:CA:78:73
            X509v3 Authority Key Identifier:
                keyid:35:D6:19:73:3A:3D:3A:77:6B:2D:5F:B8:43:05:18:6B:94:2E:24:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1FC9B0DC05AFAB7ECB3A379DDC6D51C548D3A711D9C10462F2B6ABC1E75E1019/0/35D619733A3D3A776B2D5FB84305186B942E249A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35D619733A3D3A776B2D5FB84305186B942E249A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FC9B0DC05AFAB7ECB3A379DDC6D51C548D3A711D9C10462F2B6ABC1E75E1019/0/323830363a3230393a3a2f33322d3634203d3e20323635353031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:209::/32

    Signature Algorithm: sha256WithRSAEncryption
         8d:59:0a:0c:29:ff:4c:b2:08:4c:40:77:8b:b3:c4:b5:86:b4:
         e5:99:35:cc:75:56:3d:b9:49:ae:40:17:f1:10:bd:7f:ce:b8:
         df:15:77:d1:80:b0:db:0f:e0:e5:2b:16:f8:db:1e:e9:58:ea:
         20:ae:18:7e:d5:f4:58:dd:2c:d8:67:31:d7:0f:80:54:26:39:
         a2:d8:ef:87:e9:f5:08:f6:d6:9d:ca:0e:c9:33:83:28:3f:8c:
         7e:75:00:ff:8c:19:8e:ba:45:67:2b:d3:61:1b:2c:e3:f9:7d:
         e4:8a:1c:3d:7d:23:ef:7e:36:b6:c2:d6:c2:a7:5f:2b:aa:bc:
         7c:5b:de:86:b6:60:88:36:8d:9d:3f:b2:74:40:a5:fb:ec:d5:
         bd:44:20:a5:7e:19:62:d1:08:24:aa:82:78:a9:94:17:5c:91:
         1a:b7:46:8c:3a:0e:ed:d9:32:6f:ee:9b:3c:12:74:cf:02:76:
         64:8c:64:c7:d0:03:6e:34:fb:92:8f:70:ae:12:74:67:2e:82:
         59:ac:94:5d:d1:35:36:b0:c1:a5:fc:1e:29:f7:dd:f4:c9:7e:
         80:a8:58:bb:ab:a5:79:bd:83:31:26:81:fb:1d:33:1f:33:4a:
         4b:95:1b:60:cd:67:d0:c2:5b:3f:85:26:72:a0:3f:0b:1c:7b:
         1c:9e:47:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:28:25 2025 by rpki-client