Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/43A21AA959DB6B1A026FD8134C5739D2C52E118C743382AB657E576518C987BE/0/323830363a3334383a3a2f33322d3634203d3e20323635353938.roa
File:                     323830363a3334383a3a2f33322d3634203d3e20323635353938.roa (raw, json)
Hash identifier:          mBKhXxYsc1vM9qDvar5UCFnx02/AKC+zK1K7wPk+Ot0=
Subject key identifier:   50:91:EC:BC:D5:D5:6C:86:4E:3F:C9:70:C8:19:03:2F:BC:CB:4E:B6
Certificate issuer:       /CN=D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9
Certificate serial:       4EE0A0C551AF552F9E00EF5271385B61CC566381
Authority key identifier: D8:6F:0C:0B:DF:DA:71:AF:B4:F7:57:47:F7:6A:9A:F7:F3:59:FA:D9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/43A21AA959DB6B1A026FD8134C5739D2C52E118C743382AB657E576518C987BE/0/323830363a3334383a3a2f33322d3634203d3e20323635353938.roa
Signing time:             Tue 04 Feb 2025 18:27:45 +0000
ROA not before:           Tue 04 Feb 2025 18:22:45 +0000
ROA not after:            Tue 03 Feb 2026 18:27:45 +0000
asID:                     265598
IP address blocks:        2806:348::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/43A21AA959DB6B1A026FD8134C5739D2C52E118C743382AB657E576518C987BE/0/D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/43A21AA959DB6B1A026FD8134C5739D2C52E118C743382AB657E576518C987BE/0/D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 20:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:e0:a0:c5:51:af:55:2f:9e:00:ef:52:71:38:5b:61:cc:56:63:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9
        Validity
            Not Before: Feb  4 18:22:45 2025 GMT
            Not After : Feb  3 18:27:45 2026 GMT
        Subject: CN=5091ECBCD5D56C864E3FC970C819032FBCCB4EB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:b4:4b:6e:3e:e0:71:09:94:64:83:e0:ea:34:
                    0b:27:a5:17:0c:27:84:ae:2d:d2:a4:19:58:65:cb:
                    db:57:2d:9a:ed:0c:32:37:fb:bd:7a:c1:16:89:03:
                    f9:32:ee:ce:af:0f:85:a0:37:2f:e4:2a:9e:4d:30:
                    90:68:1f:fd:98:cb:4b:41:d8:65:f6:c0:87:c2:66:
                    26:01:8b:9f:99:63:01:3a:01:89:a8:08:3c:e7:65:
                    d9:39:21:1c:96:53:f1:1d:e1:3f:6f:d4:ad:d3:57:
                    33:77:c6:0e:2e:81:68:0f:99:b7:a4:1c:43:df:15:
                    ef:dd:84:ef:cb:b8:cf:4c:f6:b8:24:1e:a1:ea:4d:
                    71:c3:65:6f:c2:50:94:92:8e:fd:41:23:38:b7:23:
                    01:4a:4f:9e:59:59:f5:fe:f5:27:d0:f4:a6:88:18:
                    71:bb:94:be:12:61:fa:d8:1c:2d:98:96:28:1e:9c:
                    63:fe:62:a8:fc:e0:cf:e6:39:2b:fa:98:44:18:bb:
                    cd:8a:fa:09:cc:fb:4a:66:5a:52:20:b1:d8:e8:ef:
                    91:a0:9a:3c:95:a6:b9:df:d7:ec:71:5e:77:1c:b8:
                    57:9d:b6:39:54:68:22:4f:69:7a:7b:21:55:29:5b:
                    79:57:a8:f5:94:36:53:8a:5c:5f:c8:54:3d:cf:b9:
                    83:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:91:EC:BC:D5:D5:6C:86:4E:3F:C9:70:C8:19:03:2F:BC:CB:4E:B6
            X509v3 Authority Key Identifier:
                keyid:D8:6F:0C:0B:DF:DA:71:AF:B4:F7:57:47:F7:6A:9A:F7:F3:59:FA:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/43A21AA959DB6B1A026FD8134C5739D2C52E118C743382AB657E576518C987BE/0/D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/43A21AA959DB6B1A026FD8134C5739D2C52E118C743382AB657E576518C987BE/0/323830363a3334383a3a2f33322d3634203d3e20323635353938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:348::/32

    Signature Algorithm: sha256WithRSAEncryption
         0b:dd:16:bb:11:17:87:6c:fd:b0:d1:ed:12:35:8e:1f:31:cf:
         e0:b6:b1:d3:30:12:4b:3e:18:7f:31:79:d6:76:6f:f2:08:97:
         c4:e2:f1:eb:a5:b1:b4:42:45:d7:33:a7:c9:b6:1b:0d:03:f3:
         4d:f4:be:d3:43:b3:ae:b1:b8:f9:b9:20:fd:22:75:30:6d:72:
         52:97:25:8d:85:6e:71:5d:95:5f:88:8d:38:b9:7c:2c:17:53:
         bc:f4:33:c5:20:db:d1:2e:a6:97:dc:ac:fd:07:62:33:a1:98:
         f7:04:fc:0c:d7:f4:d8:f1:7c:8f:c1:1b:25:1d:12:7a:fc:76:
         cf:63:b2:eb:74:57:89:06:27:e1:0e:8f:7e:a6:bf:c0:b2:94:
         55:e6:ad:b9:67:6d:64:6c:e6:2a:56:4d:7a:7a:15:60:72:c0:
         90:86:69:2a:f7:4c:bc:20:bf:ad:73:56:e6:15:11:03:5f:a7:
         24:81:4d:66:21:86:7b:f9:b2:1f:8e:eb:fc:5a:fc:2a:5a:6b:
         33:4f:0f:1b:ea:80:3b:dc:54:df:9d:3e:d4:c6:27:61:fa:2a:
         6a:a0:5a:a0:79:ec:8d:ad:7a:ff:f1:1f:24:97:d2:f8:1f:07:
         cc:90:91:51:bf:4c:78:b4:f3:60:55:52:ce:70:30:95:0c:9e:
         0b:df:ea:d0
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUTuCgxVGvVS+eAO9ScThbYcxWY4EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDg2RjBDMEJERkRBNzFBRkI0Rjc1NzQ3Rjc2QTlBRjdG
MzU5RkFEOTAeFw0yNTAyMDQxODIyNDVaFw0yNjAyMDMxODI3NDVaMDMxMTAvBgNV
BAMTKDUwOTFFQ0JDRDVENTZDODY0RTNGQzk3MEM4MTkwMzJGQkNDQjRFQjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCktEtuPuBxCZRkg+DqNAsnpRcM
J4SuLdKkGVhly9tXLZrtDDI3+716wRaJA/ky7s6vD4WgNy/kKp5NMJBoH/2Yy0tB
2GX2wIfCZiYBi5+ZYwE6AYmoCDznZdk5IRyWU/Ed4T9v1K3TVzN3xg4ugWgPmbek
HEPfFe/dhO/LuM9M9rgkHqHqTXHDZW/CUJSSjv1BIzi3IwFKT55ZWfX+9SfQ9KaI
GHG7lL4SYfrYHC2YligenGP+Yqj84M/mOSv6mEQYu82K+gnM+0pmWlIgsdjo75Gg
mjyVprnf1+xxXnccuFedtjlUaCJPaXp7IVUpW3lXqPWUNlOKXF/IVD3PuYPzAgMB
AAGjggLHMIICwzAdBgNVHQ4EFgQUUJHsvNXVbIZOP8lwyBkDL7zLTrYwHwYDVR0j
BBgwFoAU2G8MC9/aca+091dH92qa9/NZ+tkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80M0EyMUFBOTU5REI2QjFBMDI2RkQ4MTM0QzU3MzlEMkM1
MkUxMThDNzQzMzgyQUI2NTdFNTc2NTE4Qzk4N0JFLzAvRDg2RjBDMEJERkRBNzFB
RkI0Rjc1NzQ3Rjc2QTlBRjdGMzU5RkFEOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EODZGMEMwQkRGREE3MUFGQjRG
NzU3NDdGNzZBOUFGN0YzNTlGQUQ5LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDNBMjFBQTk1OURCNkIxQTAyNkZEODEzNEM1NzM5RDJDNTJFMTE4Qzc0
MzM4MkFCNjU3RTU3NjUxOEM5ODdCRS8wLzMyMzgzMDM2M2EzMzM0MzgzYTNhMmYz
MzMyMmQzNjM0MjAzZDNlMjAzMjM2MzUzNTM5Mzgucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoBgNIMA0G
CSqGSIb3DQEBCwUAA4IBAQAL3Ra7EReHbP2w0e0SNY4fMc/gtrHTMBJLPhh/MXnW
dm/yCJfE4vHrpbG0QkXXM6fJthsNA/NN9L7TQ7Ousbj5uSD9InUwbXJSlyWNhW5x
XZVfiI04uXwsF1O89DPFINvRLqaX3Kz9B2IzoZj3BPwM1/TY8XyPwRslHRJ6/HbP
Y7LrdFeJBifhDo9+pr/AspRV5q25Z21kbOYqVk16ehVgcsCQhmkq90y8IL+tc1bm
FREDX6ckgU1mIYZ7+bIfjuv8WvwqWmszTw8b6oA73FTfnT7Uxidh+ipqoFqgeeyN
rXr/8R8kl9L4HwfMkJFRv0x4tPNgVVLOcDCVDJ4L3+rQ
-----END CERTIFICATE-----
Generated at Fri Apr 18 23:48:39 2025 by rpki-client