Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3083C1D8CEB92DD6AF7338B44D4FBB4295E1574DBC7C0AC6348FCC680B48B5F2/0/323830363a3364633a3a2f33322d3438203d3e20323730313431.roa
File:                     323830363a3364633a3a2f33322d3438203d3e20323730313431.roa (raw, json)
Hash identifier:          ed/et/aK9CrXd/tumkFd1rKMMCZIq4R4QMqxah1+Aes=
Subject key identifier:   07:A6:C4:3E:B5:67:D5:33:72:38:F9:7B:75:3A:F8:16:17:8E:E0:9F
Certificate issuer:       /CN=569E389D6F3ED2F3682633053A92816DFAE6BFE6
Certificate serial:       6CCD7B5B8EA8EB173243C6EB0AB30EF8FF425275
Authority key identifier: 56:9E:38:9D:6F:3E:D2:F3:68:26:33:05:3A:92:81:6D:FA:E6:BF:E6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/569E389D6F3ED2F3682633053A92816DFAE6BFE6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3083C1D8CEB92DD6AF7338B44D4FBB4295E1574DBC7C0AC6348FCC680B48B5F2/0/323830363a3364633a3a2f33322d3438203d3e20323730313431.roa
Signing time:             Tue 04 Feb 2025 18:34:54 +0000
ROA not before:           Tue 04 Feb 2025 18:29:54 +0000
ROA not after:            Tue 03 Feb 2026 18:34:54 +0000
asID:                     270141
IP address blocks:        2806:3dc::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3083C1D8CEB92DD6AF7338B44D4FBB4295E1574DBC7C0AC6348FCC680B48B5F2/0/569E389D6F3ED2F3682633053A92816DFAE6BFE6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3083C1D8CEB92DD6AF7338B44D4FBB4295E1574DBC7C0AC6348FCC680B48B5F2/0/569E389D6F3ED2F3682633053A92816DFAE6BFE6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/569E389D6F3ED2F3682633053A92816DFAE6BFE6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:cd:7b:5b:8e:a8:eb:17:32:43:c6:eb:0a:b3:0e:f8:ff:42:52:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=569E389D6F3ED2F3682633053A92816DFAE6BFE6
        Validity
            Not Before: Feb  4 18:29:54 2025 GMT
            Not After : Feb  3 18:34:54 2026 GMT
        Subject: CN=07A6C43EB567D5337238F97B753AF816178EE09F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:66:0a:63:22:01:55:ae:fd:53:52:15:e1:d5:
                    ce:9f:79:75:2e:dd:af:8d:01:5f:67:86:cb:26:9b:
                    af:81:14:c8:04:ef:bf:cb:40:2f:61:cd:d0:19:0d:
                    20:a7:af:69:b8:63:a9:1b:1d:5c:6b:b6:47:ee:17:
                    bf:23:6d:1c:18:59:bb:eb:a4:0a:85:f5:96:dd:31:
                    01:67:97:b5:97:27:7d:bb:e1:6e:5b:99:5a:f6:84:
                    ec:36:15:db:36:31:5c:f6:08:97:ed:1d:c3:f2:86:
                    70:08:8b:05:8a:dc:2e:5c:ad:60:5e:05:d7:90:ee:
                    60:f0:b5:c2:e1:c4:0f:43:c5:cd:37:ed:8f:13:32:
                    d9:20:b8:e1:84:19:2a:20:33:5c:3c:02:cc:ed:af:
                    aa:db:00:6a:44:cb:69:a9:43:19:bd:89:4e:88:a7:
                    7e:c4:a5:d6:ac:6d:ea:df:d8:04:94:1a:51:dc:88:
                    75:83:c8:0f:fb:1d:9e:df:1f:66:26:df:67:2f:12:
                    5d:c3:d2:b6:e2:8c:64:9a:92:2d:be:2e:4a:98:6a:
                    c9:a7:ba:c9:1c:2d:33:f8:cd:c9:9d:f3:68:f3:da:
                    14:0c:15:cd:d6:e1:ec:22:7d:0c:44:fc:19:5c:4e:
                    19:c6:eb:61:06:40:d9:96:d0:df:95:9a:88:b6:f4:
                    18:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:A6:C4:3E:B5:67:D5:33:72:38:F9:7B:75:3A:F8:16:17:8E:E0:9F
            X509v3 Authority Key Identifier:
                keyid:56:9E:38:9D:6F:3E:D2:F3:68:26:33:05:3A:92:81:6D:FA:E6:BF:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3083C1D8CEB92DD6AF7338B44D4FBB4295E1574DBC7C0AC6348FCC680B48B5F2/0/569E389D6F3ED2F3682633053A92816DFAE6BFE6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/569E389D6F3ED2F3682633053A92816DFAE6BFE6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3083C1D8CEB92DD6AF7338B44D4FBB4295E1574DBC7C0AC6348FCC680B48B5F2/0/323830363a3364633a3a2f33322d3438203d3e20323730313431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:3dc::/32

    Signature Algorithm: sha256WithRSAEncryption
         58:52:e4:ce:3e:f3:c5:8c:be:38:76:e7:fa:39:e5:25:ed:4d:
         79:9f:26:18:96:42:fa:3b:17:bb:48:af:49:48:aa:9d:fa:1c:
         3b:ee:71:ef:f1:a0:c2:18:0f:ed:8a:bc:c6:a9:59:ac:27:ab:
         06:69:a9:d2:b3:44:36:be:f2:a1:12:ae:a3:cb:d3:21:0d:a3:
         18:3a:08:06:e3:a7:58:84:23:60:92:f3:7e:a8:22:66:97:7c:
         55:04:f0:14:8b:96:64:d1:46:b8:b8:c3:af:f4:f9:c9:58:1d:
         88:a0:4e:33:0e:86:04:51:f9:2d:29:da:98:b3:b4:3d:6c:d4:
         a2:c4:06:99:e0:ef:15:94:0f:89:5b:33:7d:23:7c:2a:f6:2e:
         b9:07:07:75:8d:a7:b4:de:20:42:2a:6e:70:e0:c5:39:0d:57:
         12:39:c4:94:b2:e1:28:a0:41:29:73:cc:fc:1c:c0:05:02:f7:
         d3:69:ef:54:58:20:1e:42:44:ca:f1:f0:45:26:e6:a5:30:b6:
         ae:78:af:19:88:63:e3:db:62:6b:4e:b3:e9:b1:14:6f:d1:c9:
         f2:81:dd:83:31:64:93:bd:21:13:7a:cb:5d:46:d4:e1:6d:b2:
         1c:3c:0f:16:44:c1:ff:8f:c1:d2:6a:5e:34:44:8c:58:df:43:
         78:8b:f0:bd
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUbM17W46o6xcyQ8brCrMO+P9CUnUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTY5RTM4OUQ2RjNFRDJGMzY4MjYzMzA1M0E5MjgxNkRG
QUU2QkZFNjAeFw0yNTAyMDQxODI5NTRaFw0yNjAyMDMxODM0NTRaMDMxMTAvBgNV
BAMTKDA3QTZDNDNFQjU2N0Q1MzM3MjM4Rjk3Qjc1M0FGODE2MTc4RUUwOUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBZgpjIgFVrv1TUhXh1c6feXUu
3a+NAV9nhssmm6+BFMgE77/LQC9hzdAZDSCnr2m4Y6kbHVxrtkfuF78jbRwYWbvr
pAqF9ZbdMQFnl7WXJ3274W5bmVr2hOw2Fds2MVz2CJftHcPyhnAIiwWK3C5crWBe
BdeQ7mDwtcLhxA9Dxc037Y8TMtkguOGEGSogM1w8Asztr6rbAGpEy2mpQxm9iU6I
p37Epdasberf2ASUGlHciHWDyA/7HZ7fH2Ym32cvEl3D0rbijGSaki2+LkqYasmn
uskcLTP4zcmd82jz2hQMFc3W4ewifQxE/BlcThnG62EGQNmW0N+Vmoi29BipAgMB
AAGjggLHMIICwzAdBgNVHQ4EFgQUB6bEPrVn1TNyOPl7dTr4FheO4J8wHwYDVR0j
BBgwFoAUVp44nW8+0vNoJjMFOpKBbfrmv+YwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zMDgzQzFEOENFQjkyREQ2QUY3MzM4QjQ0RDRGQkI0Mjk1
RTE1NzREQkM3QzBBQzYzNDhGQ0M2ODBCNDhCNUYyLzAvNTY5RTM4OUQ2RjNFRDJG
MzY4MjYzMzA1M0E5MjgxNkRGQUU2QkZFNi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81NjlFMzg5RDZGM0VEMkYzNjgy
NjMzMDUzQTkyODE2REZBRTZCRkU2LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMzA4M0MxRDhDRUI5MkRENkFGNzMzOEI0NEQ0RkJCNDI5NUUxNTc0REJD
N0MwQUM2MzQ4RkNDNjgwQjQ4QjVGMi8wLzMyMzgzMDM2M2EzMzY0NjMzYTNhMmYz
MzMyMmQzNDM4MjAzZDNlMjAzMjM3MzAzMTM0MzEucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoBgPcMA0G
CSqGSIb3DQEBCwUAA4IBAQBYUuTOPvPFjL44duf6OeUl7U15nyYYlkL6Oxe7SK9J
SKqd+hw77nHv8aDCGA/tirzGqVmsJ6sGaanSs0Q2vvKhEq6jy9MhDaMYOggG46dY
hCNgkvN+qCJml3xVBPAUi5Zk0Ua4uMOv9PnJWB2IoE4zDoYEUfktKdqYs7Q9bNSi
xAaZ4O8VlA+JWzN9I3wq9i65Bwd1jae03iBCKm5w4MU5DVcSOcSUsuEooEEpc8z8
HMAFAvfTae9UWCAeQkTK8fBFJualMLaueK8ZiGPj22JrTrPpsRRv0cnygd2DMWST
vSETestdRtThbbIcPA8WRMH/j8HSal40RIxY30N4i/C9
-----END CERTIFICATE-----
Generated at Sat Apr 5 08:17:11 2025 by rpki-client