Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/41A99261E0DB34F8D860D50382577C0E8FEB012F3B356116256B5B9E8A5DB088/0/323830363a3363663a3a2f33322d3634203d3e20323730313236.roa
File:                     323830363a3363663a3a2f33322d3634203d3e20323730313236.roa (raw, json)
Hash identifier:          E5/epUa2QTAYln9qflIrpppLxCTmZZoppkK63bdKVlQ=
Subject key identifier:   F2:2E:FA:10:75:23:03:E0:0B:A6:73:62:27:EA:29:D6:E0:4C:DE:58
Certificate issuer:       /CN=24C97FF6B05F228A504E569D3FD7367E01EE2FCD
Certificate serial:       37E1E79F5C216C0812BD10B6AD44F020A8CAC190
Authority key identifier: 24:C9:7F:F6:B0:5F:22:8A:50:4E:56:9D:3F:D7:36:7E:01:EE:2F:CD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24C97FF6B05F228A504E569D3FD7367E01EE2FCD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/41A99261E0DB34F8D860D50382577C0E8FEB012F3B356116256B5B9E8A5DB088/0/323830363a3363663a3a2f33322d3634203d3e20323730313236.roa
Signing time:             Tue 04 Feb 2025 18:03:42 +0000
ROA not before:           Tue 04 Feb 2025 17:58:42 +0000
ROA not after:            Tue 03 Feb 2026 18:03:42 +0000
asID:                     270126
IP address blocks:        2806:3cf::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/41A99261E0DB34F8D860D50382577C0E8FEB012F3B356116256B5B9E8A5DB088/0/24C97FF6B05F228A504E569D3FD7367E01EE2FCD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/41A99261E0DB34F8D860D50382577C0E8FEB012F3B356116256B5B9E8A5DB088/0/24C97FF6B05F228A504E569D3FD7367E01EE2FCD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24C97FF6B05F228A504E569D3FD7367E01EE2FCD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:e1:e7:9f:5c:21:6c:08:12:bd:10:b6:ad:44:f0:20:a8:ca:c1:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24C97FF6B05F228A504E569D3FD7367E01EE2FCD
        Validity
            Not Before: Feb  4 17:58:42 2025 GMT
            Not After : Feb  3 18:03:42 2026 GMT
        Subject: CN=F22EFA10752303E00BA6736227EA29D6E04CDE58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:b1:b0:fe:82:14:8d:a3:94:36:d2:9a:c1:75:
                    5e:33:4b:31:02:e2:5c:2a:3a:4f:12:a2:1a:f0:dc:
                    7a:75:93:61:9e:cc:dc:f1:05:0f:d3:d2:6b:48:5f:
                    ee:6a:0f:30:a3:de:d9:5d:17:c7:ad:94:13:33:45:
                    3c:57:73:32:02:e0:4f:e1:06:ca:85:2a:b2:d1:c7:
                    db:44:ee:74:72:72:3b:ac:d5:12:b2:ee:55:47:16:
                    90:26:7f:86:43:a6:0a:bf:e2:96:3e:62:42:7c:4b:
                    4d:59:ff:77:4a:70:be:d5:fd:89:88:c7:b7:ae:4c:
                    e7:3e:de:82:cf:e9:71:48:74:55:40:5a:cd:f7:82:
                    fc:64:26:61:20:5e:29:3a:1b:9d:c0:cf:12:7a:49:
                    00:95:af:84:62:e7:24:3c:94:81:fd:24:7b:d0:d0:
                    33:da:92:a6:72:e8:6c:34:30:64:6d:5c:79:d5:a1:
                    af:23:ce:3d:04:30:e8:45:20:99:9a:c8:86:ea:f8:
                    1d:19:09:ca:ac:f8:fc:55:12:a2:fd:d2:44:29:b2:
                    bf:e3:1a:86:04:3a:23:f7:d9:f1:18:be:0f:90:c5:
                    2c:0c:61:b0:fb:12:b7:cd:2d:38:1f:26:c5:fb:28:
                    7e:6e:2e:07:dc:13:b7:4c:0c:bd:37:13:45:a2:8c:
                    37:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:2E:FA:10:75:23:03:E0:0B:A6:73:62:27:EA:29:D6:E0:4C:DE:58
            X509v3 Authority Key Identifier:
                keyid:24:C9:7F:F6:B0:5F:22:8A:50:4E:56:9D:3F:D7:36:7E:01:EE:2F:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/41A99261E0DB34F8D860D50382577C0E8FEB012F3B356116256B5B9E8A5DB088/0/24C97FF6B05F228A504E569D3FD7367E01EE2FCD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24C97FF6B05F228A504E569D3FD7367E01EE2FCD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/41A99261E0DB34F8D860D50382577C0E8FEB012F3B356116256B5B9E8A5DB088/0/323830363a3363663a3a2f33322d3634203d3e20323730313236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:3cf::/32

    Signature Algorithm: sha256WithRSAEncryption
         4d:53:f2:67:5b:94:57:ee:06:92:40:ea:1d:25:8b:01:11:42:
         8f:fe:81:dd:d8:3a:4b:1d:71:af:55:b2:84:59:9c:28:95:61:
         04:a0:f2:7f:79:f4:97:0e:3a:c7:22:aa:cf:0b:03:47:a7:da:
         63:fe:e4:2c:f2:c7:ff:e5:d8:4f:84:63:fb:75:4d:13:ee:ad:
         ff:7f:7b:f6:1c:4e:42:f0:b6:c2:f8:d7:11:1d:f9:8a:a2:52:
         30:c1:0a:05:1e:62:d9:01:70:c5:75:fa:79:e1:cd:a9:9d:59:
         6e:09:94:6f:09:9c:b5:7f:10:a5:72:a2:f9:f6:51:3d:f9:2c:
         dc:30:11:e2:32:07:68:48:0f:70:fe:68:27:db:0a:9f:b2:f0:
         ae:43:7e:55:01:0b:b1:46:0b:a9:ec:13:1b:7a:25:78:65:17:
         7a:c2:6b:ea:a3:68:5b:e7:93:06:aa:e7:fa:51:ee:3b:70:24:
         29:7b:60:a4:e7:a9:1d:d3:67:45:af:ce:01:d8:8a:4c:c9:82:
         31:1d:79:92:d4:13:25:74:75:02:5a:ab:5e:49:25:5f:09:f4:
         99:91:bb:aa:b8:53:c2:ce:d0:89:65:f6:05:6d:96:5a:ff:ce:
         2c:7f:f1:ac:6a:97:49:3d:1e:8e:a5:da:4f:28:17:0a:97:9f:
         5f:2b:d7:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:42:41 2025 by rpki-client