Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2957B424D8208B1EBEEFD3B0679AD762B783E1076B8CCEBCAF61C8740E36C26F/0/323830363a3365653a3a2f33322d3438203d3e20323730313734.roa
File:                     323830363a3365653a3a2f33322d3438203d3e20323730313734.roa (raw, json)
Hash identifier:          GYErCRCLdU0q/F49m0WtM0R686kQap82sAZFiGhvwaw=
Subject key identifier:   9F:FF:80:C6:B8:3B:4F:AD:26:EF:1D:40:3F:53:ED:C3:2C:FA:57:C8
Certificate issuer:       /CN=5562ACA50E5F7263782A622F5FA3929390EAC355
Certificate serial:       3CE202B4A0A8E9E694730E4295A40AF82821B4FA
Authority key identifier: 55:62:AC:A5:0E:5F:72:63:78:2A:62:2F:5F:A3:92:93:90:EA:C3:55
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5562ACA50E5F7263782A622F5FA3929390EAC355.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2957B424D8208B1EBEEFD3B0679AD762B783E1076B8CCEBCAF61C8740E36C26F/0/323830363a3365653a3a2f33322d3438203d3e20323730313734.roa
Signing time:             Tue 04 Feb 2025 18:46:42 +0000
ROA not before:           Tue 04 Feb 2025 18:41:42 +0000
ROA not after:            Tue 03 Feb 2026 18:46:42 +0000
asID:                     270174
IP address blocks:        2806:3ee::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2957B424D8208B1EBEEFD3B0679AD762B783E1076B8CCEBCAF61C8740E36C26F/0/5562ACA50E5F7263782A622F5FA3929390EAC355.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2957B424D8208B1EBEEFD3B0679AD762B783E1076B8CCEBCAF61C8740E36C26F/0/5562ACA50E5F7263782A622F5FA3929390EAC355.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5562ACA50E5F7263782A622F5FA3929390EAC355.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 03:31:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:e2:02:b4:a0:a8:e9:e6:94:73:0e:42:95:a4:0a:f8:28:21:b4:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5562ACA50E5F7263782A622F5FA3929390EAC355
        Validity
            Not Before: Feb  4 18:41:42 2025 GMT
            Not After : Feb  3 18:46:42 2026 GMT
        Subject: CN=9FFF80C6B83B4FAD26EF1D403F53EDC32CFA57C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:98:9d:21:ec:4b:4c:de:38:b6:fd:13:5d:56:
                    0d:ca:37:3f:ce:83:e7:ad:c8:20:00:ce:86:fd:62:
                    80:08:89:4a:c6:52:72:9d:92:c2:29:72:df:4d:26:
                    98:0a:e5:b6:d2:30:a6:06:0c:44:f0:82:5c:39:49:
                    b9:8a:85:92:d5:d7:ad:88:60:66:78:11:e7:b0:e6:
                    ca:7d:1e:a3:cb:60:ba:11:89:59:e8:2e:b7:15:39:
                    f8:bb:19:7f:e3:64:fe:91:bb:35:67:a3:f8:67:f3:
                    8a:b6:0c:aa:08:49:5b:ff:6c:41:d0:8b:7c:7a:ea:
                    ad:e3:80:26:49:07:0e:98:69:84:bd:a4:7b:f1:9c:
                    46:c7:5d:a5:36:4d:d7:3e:da:66:0c:3f:a4:40:ad:
                    b5:c8:17:e2:0a:5b:4f:03:56:17:e8:6d:5d:05:da:
                    9c:1c:4b:54:dc:fb:34:ab:19:e9:ab:4f:62:dd:39:
                    84:7a:a4:ad:15:aa:99:f1:7b:1b:f0:fe:0b:ba:62:
                    3b:92:8e:1d:fb:ed:b8:4b:69:59:5b:c7:27:cc:3e:
                    19:a1:30:0f:99:9c:9e:87:20:3b:4a:13:b1:f3:86:
                    60:0c:9f:d8:00:d0:09:1a:61:92:85:72:ee:f6:22:
                    6a:62:2e:26:c5:0d:a3:e8:08:2e:88:9d:8d:02:47:
                    38:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:FF:80:C6:B8:3B:4F:AD:26:EF:1D:40:3F:53:ED:C3:2C:FA:57:C8
            X509v3 Authority Key Identifier:
                keyid:55:62:AC:A5:0E:5F:72:63:78:2A:62:2F:5F:A3:92:93:90:EA:C3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2957B424D8208B1EBEEFD3B0679AD762B783E1076B8CCEBCAF61C8740E36C26F/0/5562ACA50E5F7263782A622F5FA3929390EAC355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5562ACA50E5F7263782A622F5FA3929390EAC355.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2957B424D8208B1EBEEFD3B0679AD762B783E1076B8CCEBCAF61C8740E36C26F/0/323830363a3365653a3a2f33322d3438203d3e20323730313734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:3ee::/32

    Signature Algorithm: sha256WithRSAEncryption
         72:c0:58:b6:f0:26:91:a3:26:0c:81:0d:95:e4:69:17:2d:e1:
         30:3d:82:ac:7d:41:53:36:b2:9c:bf:15:0d:9b:43:34:2a:5a:
         ae:e7:08:62:1e:6c:35:01:ec:0d:67:a4:d6:5c:d1:45:c5:68:
         9a:93:b3:4d:a2:44:6f:6c:6e:bd:89:af:ce:b2:4e:dc:93:13:
         57:9d:bf:2b:14:7d:6e:6e:65:e5:76:07:07:6d:86:24:ab:58:
         95:2b:b3:ed:de:d9:63:7a:82:14:84:c8:a6:29:94:55:c3:f6:
         e5:fc:0c:bd:ac:88:cc:b7:a2:34:0e:51:7b:85:56:6a:d6:56:
         75:d5:40:5c:64:9b:77:f0:c2:af:38:2e:a3:4f:dd:d2:c4:ab:
         39:43:23:8b:9d:6f:b0:0d:1f:ef:59:51:c6:c2:d2:ea:2c:e0:
         c7:d9:70:55:77:60:2a:38:6a:16:82:f7:07:ec:1a:aa:bd:fb:
         6a:84:e2:b0:a9:1e:b3:fe:11:fb:5a:a9:a9:16:6c:a4:45:22:
         05:2c:d9:aa:f8:9c:05:11:00:4f:ed:93:c1:57:cb:35:35:c0:
         d0:12:ef:5e:91:6d:c8:b2:89:a6:59:be:03:65:ae:80:28:f2:
         c7:73:ba:29:19:4d:b7:28:7b:1e:07:05:6e:dc:5a:df:0a:bb:
         70:56:f9:e9
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUPOICtKCo6eaUcw5ClaQK+CghtPowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTU2MkFDQTUwRTVGNzI2Mzc4MkE2MjJGNUZBMzkyOTM5
MEVBQzM1NTAeFw0yNTAyMDQxODQxNDJaFw0yNjAyMDMxODQ2NDJaMDMxMTAvBgNV
BAMTKDlGRkY4MEM2QjgzQjRGQUQyNkVGMUQ0MDNGNTNFREMzMkNGQTU3QzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcmJ0h7EtM3ji2/RNdVg3KNz/O
g+etyCAAzob9YoAIiUrGUnKdksIpct9NJpgK5bbSMKYGDETwglw5SbmKhZLV162I
YGZ4Eeew5sp9HqPLYLoRiVnoLrcVOfi7GX/jZP6RuzVno/hn84q2DKoISVv/bEHQ
i3x66q3jgCZJBw6YaYS9pHvxnEbHXaU2Tdc+2mYMP6RArbXIF+IKW08DVhfobV0F
2pwcS1Tc+zSrGemrT2LdOYR6pK0Vqpnxexvw/gu6YjuSjh377bhLaVlbxyfMPhmh
MA+ZnJ6HIDtKE7HzhmAMn9gA0AkaYZKFcu72ImpiLibFDaPoCC6InY0CRzg9AgMB
AAGjggLHMIICwzAdBgNVHQ4EFgQUn/+Axrg7T60m7x1AP1Ptwyz6V8gwHwYDVR0j
BBgwFoAUVWKspQ5fcmN4KmIvX6OSk5Dqw1UwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yOTU3QjQyNEQ4MjA4QjFFQkVFRkQzQjA2NzlBRDc2MkI3
ODNFMTA3NkI4Q0NFQkNBRjYxQzg3NDBFMzZDMjZGLzAvNTU2MkFDQTUwRTVGNzI2
Mzc4MkE2MjJGNUZBMzkyOTM5MEVBQzM1NS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81NTYyQUNBNTBFNUY3MjYzNzgy
QTYyMkY1RkEzOTI5MzkwRUFDMzU1LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjk1N0I0MjREODIwOEIxRUJFRUZEM0IwNjc5QUQ3NjJCNzgzRTEwNzZC
OENDRUJDQUY2MUM4NzQwRTM2QzI2Ri8wLzMyMzgzMDM2M2EzMzY1NjUzYTNhMmYz
MzMyMmQzNDM4MjAzZDNlMjAzMjM3MzAzMTM3MzQucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoBgPuMA0G
CSqGSIb3DQEBCwUAA4IBAQBywFi28CaRoyYMgQ2V5GkXLeEwPYKsfUFTNrKcvxUN
m0M0Klqu5whiHmw1AewNZ6TWXNFFxWiak7NNokRvbG69ia/Osk7ckxNXnb8rFH1u
bmXldgcHbYYkq1iVK7Pt3tljeoIUhMimKZRVw/bl/Ay9rIjMt6I0DlF7hVZq1lZ1
1UBcZJt38MKvOC6jT93SxKs5QyOLnW+wDR/vWVHGwtLqLODH2XBVd2AqOGoWgvcH
7BqqvftqhOKwqR6z/hH7WqmpFmykRSIFLNmq+JwFEQBP7ZPBV8s1NcDQEu9ekW3I
sommWb4DZa6AKPLHc7opGU23KHseBwVu3FrfCrtwVvnp
-----END CERTIFICATE-----
Generated at Sat Apr 5 14:00:12 2025 by rpki-client