Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/46A4E245CBB6370AF16DB9F4974F0814BEE0E4809254BEFA48855BD042AA87CD/0/323830363a3334363a3a2f33322d3332203d3e20323635353233.roa
File:                     323830363a3334363a3a2f33322d3332203d3e20323635353233.roa (raw, json)
Hash identifier:          q6PfVj9438STxINYTLRhK+pvHNxcwDqXTOmtVP9CDvA=
Subject key identifier:   3B:48:CE:F2:AB:F2:30:D4:A2:FE:8B:E5:DF:3C:C1:5D:6B:22:77:70
Certificate issuer:       /CN=27CE53490C8AFAC28B7A6430889E88978245BBC6
Certificate serial:       0DD9A06B8DA824CFF5084CDAB2AF1B8C9D0851A6
Authority key identifier: 27:CE:53:49:0C:8A:FA:C2:8B:7A:64:30:88:9E:88:97:82:45:BB:C6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/27CE53490C8AFAC28B7A6430889E88978245BBC6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/46A4E245CBB6370AF16DB9F4974F0814BEE0E4809254BEFA48855BD042AA87CD/0/323830363a3334363a3a2f33322d3332203d3e20323635353233.roa
Signing time:             Tue 04 Feb 2025 18:11:42 +0000
ROA not before:           Tue 04 Feb 2025 18:06:42 +0000
ROA not after:            Tue 03 Feb 2026 18:11:42 +0000
asID:                     265523
IP address blocks:        2806:346::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/46A4E245CBB6370AF16DB9F4974F0814BEE0E4809254BEFA48855BD042AA87CD/0/27CE53490C8AFAC28B7A6430889E88978245BBC6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/46A4E245CBB6370AF16DB9F4974F0814BEE0E4809254BEFA48855BD042AA87CD/0/27CE53490C8AFAC28B7A6430889E88978245BBC6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/27CE53490C8AFAC28B7A6430889E88978245BBC6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Apr 2025 11:56:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:d9:a0:6b:8d:a8:24:cf:f5:08:4c:da:b2:af:1b:8c:9d:08:51:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27CE53490C8AFAC28B7A6430889E88978245BBC6
        Validity
            Not Before: Feb  4 18:06:42 2025 GMT
            Not After : Feb  3 18:11:42 2026 GMT
        Subject: CN=3B48CEF2ABF230D4A2FE8BE5DF3CC15D6B227770
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fd:cd:f2:c2:87:09:38:b2:c5:b6:12:b5:2e:22:
                    0c:16:10:17:82:cd:80:98:4c:4e:e9:c8:73:93:91:
                    fe:67:ea:b2:58:be:12:c7:ee:bd:88:02:9a:cf:15:
                    58:13:34:d9:10:d0:91:45:5d:a6:b6:b0:ae:5f:1b:
                    04:8b:74:f6:85:8c:7b:f1:91:a9:1d:d6:56:7a:bc:
                    cc:ba:51:cb:ae:ce:94:e0:3c:ef:4a:74:0d:5d:2b:
                    36:35:32:e0:c7:ba:b8:5b:78:c4:28:ae:ba:ad:b9:
                    b5:f9:18:ad:eb:94:80:60:04:1e:56:67:ba:e0:2c:
                    9a:a6:5c:ff:d7:88:38:13:77:08:85:fa:37:55:ee:
                    80:9b:66:7a:9a:c5:69:31:4e:f5:89:de:f7:45:37:
                    d0:d3:a7:1f:86:37:8b:5b:f6:fe:17:43:58:52:85:
                    60:78:66:46:d9:44:9b:ef:f2:a9:8a:86:7f:99:74:
                    69:57:cd:f9:bd:b8:88:f9:65:c0:e2:a6:d8:bd:c3:
                    f0:26:f9:86:20:3c:58:d0:ec:e3:6c:c8:54:c0:e2:
                    76:80:f3:16:ec:45:59:5d:b7:09:55:c5:1c:4e:7c:
                    c5:90:37:f6:5a:cc:48:65:83:ea:e2:33:1a:34:77:
                    cb:20:50:64:9e:8b:f2:48:46:c0:05:1f:57:c5:8e:
                    e3:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:48:CE:F2:AB:F2:30:D4:A2:FE:8B:E5:DF:3C:C1:5D:6B:22:77:70
            X509v3 Authority Key Identifier:
                keyid:27:CE:53:49:0C:8A:FA:C2:8B:7A:64:30:88:9E:88:97:82:45:BB:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/46A4E245CBB6370AF16DB9F4974F0814BEE0E4809254BEFA48855BD042AA87CD/0/27CE53490C8AFAC28B7A6430889E88978245BBC6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/27CE53490C8AFAC28B7A6430889E88978245BBC6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/46A4E245CBB6370AF16DB9F4974F0814BEE0E4809254BEFA48855BD042AA87CD/0/323830363a3334363a3a2f33322d3332203d3e20323635353233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:346::/32

    Signature Algorithm: sha256WithRSAEncryption
         43:db:82:fc:05:7c:fd:0d:cf:c4:8d:de:36:97:2a:26:d0:e4:
         da:48:b6:de:5f:97:1f:a7:ad:3d:f1:37:d0:8e:af:52:77:0b:
         59:ff:ca:ca:60:04:a6:41:d5:1f:53:8e:b7:d3:0c:ca:10:ee:
         ed:d6:5e:ce:f4:65:87:18:b2:a1:af:42:03:5c:bd:f9:89:fc:
         88:e4:4d:76:a6:dc:6c:53:86:16:bf:5e:e2:fa:ad:b7:a0:c7:
         b2:99:35:8e:1c:4a:93:71:e1:b1:57:2f:c9:61:3e:ee:9a:d5:
         77:f6:38:c3:74:f6:96:df:5f:c1:7f:88:ed:ef:36:f6:01:34:
         10:7b:6d:93:a5:bf:b5:7b:ca:59:81:ec:a9:a6:47:d5:f2:5d:
         64:bf:54:37:3c:d7:ca:1b:24:68:a2:a4:9b:64:d4:6e:37:2c:
         77:b5:fa:7a:81:47:7b:34:d7:a4:29:ff:f2:0a:90:1f:f9:b0:
         a0:cf:b3:a9:ac:c7:f2:58:bf:0f:a7:aa:4b:e5:8d:c8:fe:89:
         15:2e:5d:88:cf:13:57:76:31:cf:bb:bf:f7:c0:70:e3:66:62:
         42:51:30:fd:fd:88:e5:86:c6:63:72:c2:13:e4:2a:b6:6b:ad:
         f5:41:00:7f:0d:a8:a8:e8:cf:c6:54:30:77:91:37:5d:2e:4c:
         9b:cf:dd:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 21:03:47 2025 by rpki-client