Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A3BA7D2E104D271ED801DC143FD1C47E9FAAD8CA286339D67F685DFC03A5A7B/0/323830363a3363333a3a2f33322d3438203d3e20323730323232.roa
File:                     323830363a3363333a3a2f33322d3438203d3e20323730323232.roa (raw, json)
Hash identifier:          byaPpY+RlZp6buODyjWLwz38WuwTkgncj8KMr1Pwnbk=
Subject key identifier:   85:35:D1:5F:B6:39:78:0C:03:F1:89:4F:C6:A1:E4:28:FA:E6:B3:45
Certificate issuer:       /CN=12E10688952241783849ADC1F70B3E3EA7C252A2
Certificate serial:       058D1455671124C911AEA2C8273FEA5302939919
Authority key identifier: 12:E1:06:88:95:22:41:78:38:49:AD:C1:F7:0B:3E:3E:A7:C2:52:A2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/12E10688952241783849ADC1F70B3E3EA7C252A2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3A3BA7D2E104D271ED801DC143FD1C47E9FAAD8CA286339D67F685DFC03A5A7B/0/323830363a3363333a3a2f33322d3438203d3e20323730323232.roa
Signing time:             Tue 04 Feb 2025 18:43:56 +0000
ROA not before:           Tue 04 Feb 2025 18:38:56 +0000
ROA not after:            Tue 03 Feb 2026 18:43:56 +0000
asID:                     270222
IP address blocks:        2806:3c3::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3A3BA7D2E104D271ED801DC143FD1C47E9FAAD8CA286339D67F685DFC03A5A7B/0/12E10688952241783849ADC1F70B3E3EA7C252A2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3A3BA7D2E104D271ED801DC143FD1C47E9FAAD8CA286339D67F685DFC03A5A7B/0/12E10688952241783849ADC1F70B3E3EA7C252A2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/12E10688952241783849ADC1F70B3E3EA7C252A2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 20:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:8d:14:55:67:11:24:c9:11:ae:a2:c8:27:3f:ea:53:02:93:99:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12E10688952241783849ADC1F70B3E3EA7C252A2
        Validity
            Not Before: Feb  4 18:38:56 2025 GMT
            Not After : Feb  3 18:43:56 2026 GMT
        Subject: CN=8535D15FB639780C03F1894FC6A1E428FAE6B345
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:8f:69:94:46:d3:60:b4:77:bd:4e:09:e5:39:
                    06:37:73:f7:4b:a7:d4:70:55:c8:e6:71:34:87:c3:
                    3e:02:d7:90:d9:f0:6c:99:89:99:77:e5:95:ae:88:
                    c1:97:b7:27:13:74:66:45:fd:60:d7:4f:77:65:57:
                    05:ab:72:34:d7:4f:00:21:63:33:ba:97:03:82:2c:
                    0a:a3:b6:0c:4b:f0:22:24:24:0e:32:1b:60:94:d4:
                    7c:8e:fb:65:59:94:f5:10:3f:8f:33:2c:e8:00:43:
                    dc:e3:e1:b1:a6:7d:6f:00:7c:0d:0e:e4:69:72:7f:
                    32:69:f4:b1:d8:13:76:c7:ac:dd:0d:c0:c6:db:5e:
                    c0:82:20:2c:63:6a:9b:35:68:30:4f:47:18:56:a9:
                    50:52:71:d3:6a:b4:9e:79:14:cb:c3:54:f8:8b:d7:
                    8a:81:de:0b:55:43:83:18:71:ed:41:2c:7d:7a:bc:
                    50:03:6f:29:0e:b8:85:b0:9d:61:72:f0:4b:ac:8b:
                    18:a4:ef:87:4b:17:28:2d:5a:20:63:97:20:9d:92:
                    17:31:dc:47:0f:18:2c:b6:01:4c:54:c0:22:fb:c4:
                    95:3d:8c:e5:29:4d:02:30:30:12:93:65:fc:9b:a1:
                    fa:9b:e5:c8:97:40:0a:8d:1b:34:39:56:99:4d:c6:
                    f8:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:35:D1:5F:B6:39:78:0C:03:F1:89:4F:C6:A1:E4:28:FA:E6:B3:45
            X509v3 Authority Key Identifier:
                keyid:12:E1:06:88:95:22:41:78:38:49:AD:C1:F7:0B:3E:3E:A7:C2:52:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3A3BA7D2E104D271ED801DC143FD1C47E9FAAD8CA286339D67F685DFC03A5A7B/0/12E10688952241783849ADC1F70B3E3EA7C252A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/12E10688952241783849ADC1F70B3E3EA7C252A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A3BA7D2E104D271ED801DC143FD1C47E9FAAD8CA286339D67F685DFC03A5A7B/0/323830363a3363333a3a2f33322d3438203d3e20323730323232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:3c3::/32

    Signature Algorithm: sha256WithRSAEncryption
         93:81:5a:7d:e5:69:6f:e5:f1:98:e4:3c:b9:c0:6f:7d:2e:cb:
         76:36:7d:e0:05:86:c1:34:74:68:a7:17:aa:4e:75:5b:f4:c4:
         50:0c:62:59:48:83:4a:75:af:bc:40:3a:89:0e:55:ff:8e:4d:
         40:4c:c2:8b:4c:82:9e:16:e4:49:86:0a:09:6a:06:39:24:52:
         c3:01:43:8c:a7:92:8b:e2:41:63:db:1b:90:9a:7e:f6:a6:fe:
         25:b6:10:dc:af:9f:2c:9c:9f:1a:36:22:09:c0:3a:8e:8f:5b:
         8d:2e:08:a0:7b:20:73:aa:16:72:04:e1:24:81:6b:d1:8e:9c:
         f4:77:62:77:db:9b:82:d5:8a:e3:21:21:5e:90:8f:0b:72:a6:
         0f:2e:41:3a:78:63:18:c1:81:0d:9b:2f:3d:10:a0:5f:b8:2d:
         27:d9:1f:74:ac:c5:ef:d1:42:a1:61:41:bd:02:ca:85:5e:d4:
         e8:85:99:d4:2c:05:40:6f:2d:cb:c0:06:dd:71:93:64:a0:d4:
         6b:68:c4:70:3f:44:fa:1d:c3:88:8d:b9:35:66:9c:53:a0:a6:
         65:a7:16:dd:3f:1c:69:6e:11:79:8c:0b:eb:e9:dc:56:09:6c:
         e6:7e:2c:b7:e8:35:f0:72:05:e7:fd:56:8a:83:dd:15:d0:07:
         9e:cc:c9:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 21:57:08 2025 by rpki-client