Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/79D190189965DA1AAD867063CB6533400487A68736EC971F50F34C22524FC0FF/0/323830363a3363303a3a2f33322d3332203d3e20323635353233.roa
File:                     323830363a3363303a3a2f33322d3332203d3e20323635353233.roa (raw, json)
Hash identifier:          xNEheoQ7Eju9cbHTPDU2kysDJLRlFUorSa3dPia/xuM=
Subject key identifier:   93:39:6D:5D:9B:A4:A4:4D:98:41:48:15:6C:0D:1A:96:1D:44:08:BB
Certificate issuer:       /CN=21FD9011B33FD9996D9085D654F9943A95C37269
Certificate serial:       6407CEA2A1EBAAFAD9FBFD5FDDF1FE1BCFC157B9
Authority key identifier: 21:FD:90:11:B3:3F:D9:99:6D:90:85:D6:54:F9:94:3A:95:C3:72:69
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21FD9011B33FD9996D9085D654F9943A95C37269.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/79D190189965DA1AAD867063CB6533400487A68736EC971F50F34C22524FC0FF/0/323830363a3363303a3a2f33322d3332203d3e20323635353233.roa
Signing time:             Tue 04 Feb 2025 18:51:18 +0000
ROA not before:           Tue 04 Feb 2025 18:46:18 +0000
ROA not after:            Tue 03 Feb 2026 18:51:18 +0000
asID:                     265523
IP address blocks:        2806:3c0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/79D190189965DA1AAD867063CB6533400487A68736EC971F50F34C22524FC0FF/0/21FD9011B33FD9996D9085D654F9943A95C37269.crl
                          rsync://repository.lacnic.net/rpki/lacnic/79D190189965DA1AAD867063CB6533400487A68736EC971F50F34C22524FC0FF/0/21FD9011B33FD9996D9085D654F9943A95C37269.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21FD9011B33FD9996D9085D654F9943A95C37269.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Apr 2025 06:23:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:07:ce:a2:a1:eb:aa:fa:d9:fb:fd:5f:dd:f1:fe:1b:cf:c1:57:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21FD9011B33FD9996D9085D654F9943A95C37269
        Validity
            Not Before: Feb  4 18:46:18 2025 GMT
            Not After : Feb  3 18:51:18 2026 GMT
        Subject: CN=93396D5D9BA4A44D984148156C0D1A961D4408BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:06:cb:de:72:67:f1:7f:eb:c9:96:fa:c6:40:
                    22:52:24:e6:6d:32:f1:51:70:1f:14:87:76:a7:ad:
                    3a:ed:6f:60:74:98:5b:0d:8d:10:36:d5:52:3b:7d:
                    37:89:83:e8:92:4d:c1:9d:0a:fd:88:54:70:74:67:
                    32:19:ee:da:87:fd:cc:07:9d:65:f1:38:b4:b2:76:
                    c2:d5:25:27:b0:b5:b9:10:9a:a3:40:e9:94:6e:fa:
                    7c:10:46:8f:91:94:79:e9:d4:d9:ef:22:c5:af:b8:
                    18:07:44:34:8b:80:b3:f2:cf:bb:c9:c2:07:b0:c0:
                    4a:9a:02:54:79:ba:e7:9b:34:5f:15:85:ad:4f:54:
                    ce:46:e5:6b:65:46:57:39:e9:97:52:dd:46:09:64:
                    39:e8:8d:70:6c:59:a0:f4:a6:8c:3f:e8:43:35:ea:
                    37:5c:58:35:4a:3d:47:08:c0:95:fe:f8:b0:a5:f7:
                    25:a6:6c:b3:f0:95:dd:26:af:ba:e7:d3:d2:42:31:
                    a0:22:31:52:6f:fa:8a:9d:ad:12:dd:7c:24:2d:25:
                    03:72:d9:1d:c5:56:76:29:be:7e:7f:2d:33:e6:fd:
                    a6:c6:b6:9d:b7:81:98:1d:08:41:1f:d5:c0:d2:34:
                    ad:8e:f3:55:27:a9:08:8f:6d:04:d3:f5:92:3f:46:
                    0b:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:39:6D:5D:9B:A4:A4:4D:98:41:48:15:6C:0D:1A:96:1D:44:08:BB
            X509v3 Authority Key Identifier:
                keyid:21:FD:90:11:B3:3F:D9:99:6D:90:85:D6:54:F9:94:3A:95:C3:72:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/79D190189965DA1AAD867063CB6533400487A68736EC971F50F34C22524FC0FF/0/21FD9011B33FD9996D9085D654F9943A95C37269.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21FD9011B33FD9996D9085D654F9943A95C37269.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/79D190189965DA1AAD867063CB6533400487A68736EC971F50F34C22524FC0FF/0/323830363a3363303a3a2f33322d3332203d3e20323635353233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:3c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         85:53:ef:16:39:40:ab:bc:27:72:6f:74:57:86:59:0d:75:f1:
         49:15:97:50:9b:9b:ff:c3:ff:4a:dc:a6:c7:66:93:98:ae:78:
         fe:6c:6b:b2:c1:a6:20:00:1c:53:21:3c:6d:99:d2:b8:5c:a0:
         c1:be:fa:90:b9:4e:c6:2a:48:3e:ba:e2:5c:7d:d8:f0:59:0a:
         04:be:65:78:71:8a:0e:8f:e4:76:53:c5:da:eb:0b:10:22:ed:
         34:fc:29:da:96:0f:a9:be:8a:57:84:71:87:7b:71:09:43:0c:
         d7:9d:77:be:3d:93:0a:17:39:ed:f0:bb:ba:76:a8:3c:36:7f:
         e1:a7:a8:3b:40:ff:3a:df:a3:ae:6e:66:c2:ec:e8:4e:0a:2b:
         4a:1c:87:78:22:05:b4:b5:b9:b9:bb:5e:2f:2e:15:1a:0e:e1:
         a7:41:04:1b:37:30:71:1f:2c:22:ba:49:bd:f1:45:03:d8:57:
         c3:6c:5b:02:58:e8:92:d7:af:2e:12:57:c6:0f:ff:b4:85:c7:
         ef:50:05:d3:8c:37:74:bd:c9:54:49:45:ef:a2:67:d3:71:4f:
         7c:3a:2f:9f:16:12:4d:d0:d5:1e:f6:c6:e2:a6:39:02:4c:85:
         ae:a5:45:94:ff:95:08:61:44:90:1f:99:80:ea:a6:e6:e9:11:
         15:d8:7a:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 21:05:33 2025 by rpki-client