Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6E1DE3A03E0D54B52887C15D97800F42C5F0B25B6D8A9503545447CFF191530E/0/323830363a3330313a3a2f33322d3332203d3e20323635353233.roa
File:                     323830363a3330313a3a2f33322d3332203d3e20323635353233.roa (raw, json)
Hash identifier:          sqcBwltOTqfINc7hIa7p/qhsnvJXxy3P4up8LpLkzqA=
Subject key identifier:   F0:F2:6E:FB:EE:A5:35:94:8C:D8:F0:A3:EF:E4:00:50:64:0F:EC:17
Certificate issuer:       /CN=E72389DB363677115A40632E0F358D0066C2BC82
Certificate serial:       7E6226B2D000A6A37F3E082BC4D3ECCB2D03B039
Authority key identifier: E7:23:89:DB:36:36:77:11:5A:40:63:2E:0F:35:8D:00:66:C2:BC:82
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E72389DB363677115A40632E0F358D0066C2BC82.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6E1DE3A03E0D54B52887C15D97800F42C5F0B25B6D8A9503545447CFF191530E/0/323830363a3330313a3a2f33322d3332203d3e20323635353233.roa
Signing time:             Tue 04 Feb 2025 18:39:04 +0000
ROA not before:           Tue 04 Feb 2025 18:34:04 +0000
ROA not after:            Tue 03 Feb 2026 18:39:04 +0000
asID:                     265523
IP address blocks:        2806:301::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6E1DE3A03E0D54B52887C15D97800F42C5F0B25B6D8A9503545447CFF191530E/0/E72389DB363677115A40632E0F358D0066C2BC82.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6E1DE3A03E0D54B52887C15D97800F42C5F0B25B6D8A9503545447CFF191530E/0/E72389DB363677115A40632E0F358D0066C2BC82.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E72389DB363677115A40632E0F358D0066C2BC82.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Apr 2025 11:56:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:62:26:b2:d0:00:a6:a3:7f:3e:08:2b:c4:d3:ec:cb:2d:03:b0:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E72389DB363677115A40632E0F358D0066C2BC82
        Validity
            Not Before: Feb  4 18:34:04 2025 GMT
            Not After : Feb  3 18:39:04 2026 GMT
        Subject: CN=F0F26EFBEEA535948CD8F0A3EFE40050640FEC17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:6c:14:bc:8b:35:74:9f:cd:d6:9e:48:f1:af:
                    34:7c:f8:38:9f:5c:60:33:2a:cb:1a:f8:22:45:29:
                    da:fe:c2:53:6c:d1:26:b2:4d:1c:05:a1:a8:9a:a1:
                    03:18:7c:5f:a3:7f:a2:01:5c:f8:cd:c9:79:4b:b1:
                    af:aa:65:43:71:7b:95:2e:9c:cd:9f:2b:0b:39:98:
                    3e:88:64:a7:30:3d:02:3d:9a:b7:43:bc:ec:89:41:
                    00:d0:16:89:2d:a5:57:12:a7:2b:bc:af:1f:72:40:
                    84:07:0d:30:98:56:d8:c3:e4:59:a6:54:d3:a9:6e:
                    9e:c0:e6:94:3b:11:1c:9f:e5:cd:be:b3:d1:04:af:
                    ed:2c:29:a3:36:1f:6d:fa:3b:c4:a9:f9:c2:a8:f7:
                    3e:fa:5c:37:37:cf:04:9e:57:fe:ba:f0:69:76:5c:
                    f0:85:e6:63:5f:5b:7f:54:64:13:c6:e3:1c:0d:69:
                    5f:e1:4e:5e:4c:13:30:f3:c7:5a:78:59:c7:9f:20:
                    46:c6:26:38:90:e7:bd:c2:a7:fb:35:58:e7:9e:84:
                    36:e8:d3:ac:a1:83:4f:1f:bf:79:29:06:53:1a:55:
                    4f:65:30:a7:8c:cc:5f:4b:9b:12:4a:52:c3:8a:20:
                    56:65:a1:a0:1c:0e:69:d4:e8:8e:a7:5c:6b:6c:5f:
                    2e:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:F2:6E:FB:EE:A5:35:94:8C:D8:F0:A3:EF:E4:00:50:64:0F:EC:17
            X509v3 Authority Key Identifier:
                keyid:E7:23:89:DB:36:36:77:11:5A:40:63:2E:0F:35:8D:00:66:C2:BC:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6E1DE3A03E0D54B52887C15D97800F42C5F0B25B6D8A9503545447CFF191530E/0/E72389DB363677115A40632E0F358D0066C2BC82.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E72389DB363677115A40632E0F358D0066C2BC82.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6E1DE3A03E0D54B52887C15D97800F42C5F0B25B6D8A9503545447CFF191530E/0/323830363a3330313a3a2f33322d3332203d3e20323635353233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:301::/32

    Signature Algorithm: sha256WithRSAEncryption
         60:5c:41:bb:13:26:0f:2f:87:70:0e:87:ca:f3:6c:5b:07:dc:
         b5:ae:04:33:dc:4a:f3:14:cf:a8:8b:59:49:8f:dc:0d:c0:eb:
         14:b3:46:f6:3b:ea:92:09:19:82:59:e3:3d:f4:72:9c:ed:37:
         6f:e0:98:4a:d1:28:6e:e6:35:52:ff:fb:61:70:fe:ec:22:47:
         94:d2:cd:62:09:32:03:b5:c1:af:aa:67:1f:d0:08:c9:74:b4:
         cb:6f:47:7b:9b:cd:7f:c2:5b:a4:44:34:ee:94:7b:3a:b6:b3:
         12:eb:6f:5e:f4:32:e4:5a:a0:4f:11:63:3a:f2:de:b6:fa:4a:
         9d:0f:34:f4:7c:0d:fe:04:6a:e8:62:a2:db:a1:f1:68:0b:f2:
         c6:3c:87:b3:65:0a:3e:8e:a1:46:f1:d6:35:e4:0e:44:7c:be:
         62:52:fa:3b:85:7c:73:88:0a:ca:f7:cd:9b:fc:a6:94:fe:24:
         e9:82:03:0b:42:9d:15:b1:2c:62:3e:78:bd:97:0b:f0:f3:78:
         f9:88:10:2f:93:bb:32:9c:81:e0:c9:d9:f6:e7:eb:29:97:37:
         7b:a8:10:a1:97:87:75:39:65:cd:72:bb:14:7e:d0:f8:cf:28:
         2b:6a:ae:d5:e5:f9:6b:63:01:56:77:4a:94:a2:e5:71:e9:d4:
         35:82:1f:3f
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUfmImstAApqN/PggrxNPsyy0DsDkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTcyMzg5REIzNjM2NzcxMTVBNDA2MzJFMEYzNThEMDA2
NkMyQkM4MjAeFw0yNTAyMDQxODM0MDRaFw0yNjAyMDMxODM5MDRaMDMxMTAvBgNV
BAMTKEYwRjI2RUZCRUVBNTM1OTQ4Q0Q4RjBBM0VGRTQwMDUwNjQwRkVDMTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxbBS8izV0n83WnkjxrzR8+Dif
XGAzKssa+CJFKdr+wlNs0SayTRwFoaiaoQMYfF+jf6IBXPjNyXlLsa+qZUNxe5Uu
nM2fKws5mD6IZKcwPQI9mrdDvOyJQQDQFoktpVcSpyu8rx9yQIQHDTCYVtjD5Fmm
VNOpbp7A5pQ7ERyf5c2+s9EEr+0sKaM2H236O8Sp+cKo9z76XDc3zwSeV/668Gl2
XPCF5mNfW39UZBPG4xwNaV/hTl5MEzDzx1p4WcefIEbGJjiQ573Cp/s1WOeehDbo
06yhg08fv3kpBlMaVU9lMKeMzF9LmxJKUsOKIFZloaAcDmnU6I6nXGtsXy47AgMB
AAGjggLHMIICwzAdBgNVHQ4EFgQU8PJu++6lNZSM2PCj7+QAUGQP7BcwHwYDVR0j
BBgwFoAU5yOJ2zY2dxFaQGMuDzWNAGbCvIIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82RTFERTNBMDNFMEQ1NEI1Mjg4N0MxNUQ5NzgwMEY0MkM1
RjBCMjVCNkQ4QTk1MDM1NDU0NDdDRkYxOTE1MzBFLzAvRTcyMzg5REIzNjM2Nzcx
MTVBNDA2MzJFMEYzNThEMDA2NkMyQkM4Mi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FNzIzODlEQjM2MzY3NzExNUE0
MDYzMkUwRjM1OEQwMDY2QzJCQzgyLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNkUxREUzQTAzRTBENTRCNTI4ODdDMTVEOTc4MDBGNDJDNUYwQjI1QjZE
OEE5NTAzNTQ1NDQ3Q0ZGMTkxNTMwRS8wLzMyMzgzMDM2M2EzMzMwMzEzYTNhMmYz
MzMyMmQzMzMyMjAzZDNlMjAzMjM2MzUzNTMyMzMucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoBgMBMA0G
CSqGSIb3DQEBCwUAA4IBAQBgXEG7EyYPL4dwDofK82xbB9y1rgQz3ErzFM+oi1lJ
j9wNwOsUs0b2O+qSCRmCWeM99HKc7Tdv4JhK0Shu5jVS//thcP7sIkeU0s1iCTID
tcGvqmcf0AjJdLTLb0d7m81/wlukRDTulHs6trMS629e9DLkWqBPEWM68t62+kqd
DzT0fA3+BGroYqLbofFoC/LGPIezZQo+jqFG8dY15A5EfL5iUvo7hXxziArK982b
/KaU/iTpggMLQp0VsSxiPni9lwvw83j5iBAvk7synIHgydn25+splzd7qBChl4d1
OWXNcrsUftD4zygraq7V5flrYwFWd0qUouVx6dQ1gh8/
-----END CERTIFICATE-----
Generated at Thu Apr 17 21:08:30 2025 by rpki-client